Josh Avant da34f81ce2 fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728) ...

* fix(secrets): scope message runtime resolution and harden doctor/status

* docs: align message/doctor/status SecretRef behavior notes

* test(cli): accept scoped targetIds wiring in secret-resolution coverage

* fix(secrets): keep scoped allowedPaths isolation and tighten coverage gate

* fix(secrets): avoid default-account coercion in scoped target selection

* test(doctor): cover inactive telegram secretref inspect path

* docs

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>

* changelog

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>

---------

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>

2026-03-17 00:01:34 -05:00

..

acp.md

Gateway: fail closed unresolved local auth SecretRefs (#42672)

2026-03-10 21:41:56 -05:00

agent.md

Models: enforce source-managed SecretRef markers in models.json (#43759)

2026-03-12 02:22:52 -05:00

agents.md

Agents: add account-scoped bind and routing commands (#27195)

2026-02-26 02:36:56 -05:00

approvals.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

backup.md

feat: add local backup CLI (#40163)

2026-03-08 16:21:20 -04:00

browser.md

Browser: support non-Chrome existing-session profiles via userDataDir (#48170)

2026-03-16 14:21:22 +01:00

channels.md

feat: add nostr setup and unify channel setup discovery

2026-03-15 19:58:22 -07:00

clawbot.md

docs: align CLI docs and help surface

2026-02-22 20:05:01 +01:00

completion.md

docs: align CLI docs and help surface

2026-02-22 20:05:01 +01:00

config.md

feat(config): add openclaw config validate and improve startup error messages (#31220)

2026-03-02 00:45:51 -05:00

configure.md

Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails (#35094)

2026-03-05 12:53:56 -06:00

cron.md

Cron: enforce cron-owned delivery contract (#40998)

2026-03-09 20:12:37 +01:00

daemon.md

secrets: harden read-only SecretRef command paths and diagnostics (#47794)

2026-03-15 21:55:24 -05:00

dashboard.md

Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails (#35094)

2026-03-05 12:53:56 -06:00

devices.md

fix(gateway): harden token fallback/reconnect behavior and docs (#42507)

2026-03-10 17:05:57 -05:00

directory.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

dns.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

docs.md

!refactor(browser): remove Chrome extension path and add MCP doctor migration (#47893)

2026-03-15 23:56:08 -07:00

doctor.md

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

gateway.md

secrets: harden read-only SecretRef command paths and diagnostics (#47794)

2026-03-15 21:55:24 -05:00

health.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

hooks.md

Infra: require explicit opt-in for prerelease npm installs (#38117)

2026-03-06 11:13:30 -05:00

index.md

docs: rename onboarding user-facing wizard copy

2026-03-16 19:50:31 -05:00

logs.md

fix(cli): drop logs --localTime alias noise

2026-02-11 08:35:49 -05:00

memory.md

docs(cli): improve memory command examples (#31803)

2026-03-07 19:03:23 +03:00

message.md

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

models.md

Secrets: harden SecretRef-safe models.json persistence (#38955)

2026-03-07 11:28:39 -06:00

node.md

Gateway: fail closed unresolved local auth SecretRefs (#42672)

2026-03-10 21:41:56 -05:00

nodes.md

fix(gateway): clarify pairing and node auth guidance

2026-02-22 19:50:29 +01:00

onboard.md

docs: rename onboarding user-facing wizard copy

2026-03-16 19:50:31 -05:00

pairing.md

docs: refresh CLI and trusted-proxy docs

2026-02-25 02:40:12 +00:00

plugins.md

Docs: use placeholders for marketplace plugin examples

2026-03-16 02:09:20 -07:00

qr.md

fix: switch pairing setup codes to bootstrap tokens

2026-03-12 22:23:07 +00:00

reset.md

feat: add local backup CLI (#40163)

2026-03-08 16:21:20 -04:00

sandbox.md

test: expand ssh sandbox coverage and docs

2026-03-15 21:38:22 -07:00

secrets.md

Secrets: harden SecretRef-safe models.json persistence (#38955)

2026-03-07 11:28:39 -06:00

security.md

secrets: harden read-only SecretRef command paths and diagnostics (#47794)

2026-03-15 21:55:24 -05:00

sessions.md

docs: fix session key :dm: → :direct (#26506)

2026-03-13 14:28:33 +05:30

setup.md

docs: rename onboarding user-facing wizard copy

2026-03-16 19:50:31 -05:00

skills.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

status.md

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

system.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

tui.md

feat(tui): infer workspace agent when launching TUI (#39591)

2026-03-08 13:31:11 +03:00

uninstall.md

feat: add local backup CLI (#40163)

2026-03-08 16:21:20 -04:00

update.md

CLI: support package-manager installs from GitHub main (#47630)

2026-03-15 14:18:12 -07:00

voicecall.md

docs: fix voicecall expose disable example

2026-02-22 20:58:28 +01:00

webhooks.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00