Josh Avant 81b777c768 fix(config): harden SecretRef round-trip handling in Control UI and RPC writes (#58044) ...

* Config: harden SecretRef round-trip handling

* Gateway: test SecretRef preflight on config writes

* Agents: align skill loader with upstream Skill type

* Docs: align SecretRef write semantics with Control UI and RPC behavior

* Config: add UI and gateway regression evidence for SecretRef hardening

* Config: add token SecretRef restore regression and skill sourceInfo compat

* UI: scope structured-value lockout to SecretRef fields

* Agents: remove out-of-scope skill loader compat edits

* UI: reduce app-render churn to rawAvailable-only changes

* Gateway: scope SecretRef preflight to submitted config

* Docs: clarify config write SecretRef preflight scope

* changelog

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>

---------

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>

2026-03-30 23:55:03 -05:00

..

security

fix(ci): restore skill fixtures and security doc anchors

2026-03-30 11:41:08 +09:00

authentication.md

docs: explain anthropic claude cli migration

2026-03-26 23:04:47 +00:00

background-process.md

Exec/ACP: inject OPENCLAW_SHELL into child shell env (#31271)

2026-03-01 20:31:06 -08:00

bonjour.md

docs: fix curly quotes, non-breaking hyphens, and remaining apostrophes in headings

2026-03-18 01:31:38 -07:00

bridge-protocol.md

fix(security): harden discovery routing and TLS pins

2026-02-14 17:18:14 +01:00

cli-backends.md

fix: auto-load bundled plugin capabilities from config refs

2026-03-26 19:15:56 +00:00

configuration-examples.md

docs: remove stale MiniMax M2.5 refs and add image generation docs

2026-03-29 17:26:02 +09:00

configuration-reference.md

fix: add requireAgentId to block sessions_spawn without explicit agen… (#29380)

2026-03-30 23:06:59 -04:00

configuration.md

docs: refresh channel delivery examples

2026-03-30 22:33:44 -04:00

discovery.md

docs: fix curly quotes, non-breaking hyphens, and remaining apostrophes in headings

2026-03-18 01:31:38 -07:00

doctor.md

fix(tts): restore 3.28 schema compatibility and fallback observability (#57953)

2026-03-30 22:05:03 -05:00

gateway-lock.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

health.md

fix(ci): config drift found and documented

2026-03-15 10:43:03 -07:00

heartbeat.md

docs: refresh channel delivery examples

2026-03-30 22:33:44 -04:00

index.md

refactor(config): pin runtime snapshot and drop ttl cache

2026-03-29 22:57:31 +01:00

local-models.md

docs: remove stale MiniMax M2.5 refs and add image generation docs

2026-03-29 17:26:02 +09:00

logging.md

fix(docs): deduplicate titles across 9 pages

2026-03-22 16:02:28 -07:00

multiple-gateways.md

docs: restore onboard docs references

2026-03-16 05:50:57 +00:00

network-model.md

docs: add missing H1 headings and fix HEARTBEAT template

2026-03-18 12:27:07 -07:00

openai-http-api.md

test: add Open WebUI docker smoke

2026-03-25 05:28:51 -07:00

openresponses-http-api.md

feat(gateway): make openai compatibility agent-first

2026-03-24 18:06:24 -07:00

openshell.md

docs: fix tools nav A-Z, split plugin page, consolidate sandbox docs, add OpenShell page (#50055)

2026-03-18 15:44:08 -07:00

pairing.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

protocol.md

fix(exec): harden async approval followup delivery in webchat-only sessions (#57359)

2026-03-29 20:54:13 -05:00

remote-gateway-readme.md

refactor: replace bot.molt identifiers with ai.openclaw

2026-02-25 05:03:24 +00:00

remote.md

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

sandbox-vs-tool-policy-vs-elevated.md

docs: fix tools nav A-Z, split plugin page, consolidate sandbox docs, add OpenShell page (#50055)

2026-03-18 15:44:08 -07:00

sandboxing.md

docs: fix Browserless and broken doc links (#55881)

2026-03-27 17:11:57 +01:00

secrets-plan-contract.md

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

secrets.md

fix(config): harden SecretRef round-trip handling in Control UI and RPC writes (#58044)

2026-03-30 23:55:03 -05:00

tailscale.md

fix(gateway): scope tailscale tokenless auth to websocket

2026-02-21 13:03:13 +01:00

tools-invoke-http-api.md

docs: clarify tools invoke operator boundary

2026-03-22 09:14:42 -07:00

troubleshooting.md

docs: clarify browser allowlist troubleshooting

2026-03-29 22:19:22 +09:00

trusted-proxy-auth.md

docs: add missing title, remove stale description fields from frontmatter

2026-03-19 15:26:26 -07:00