openclaw

Files

T

Josh Avant 81b777c768 fix(config): harden SecretRef round-trip handling in Control UI and RPC writes (#58044 )

* Config: harden SecretRef round-trip handling

* Gateway: test SecretRef preflight on config writes

* Agents: align skill loader with upstream Skill type

* Docs: align SecretRef write semantics with Control UI and RPC behavior

* Config: add UI and gateway regression evidence for SecretRef hardening

* Config: add token SecretRef restore regression and skill sourceInfo compat

* UI: scope structured-value lockout to SecretRef fields

* Agents: remove out-of-scope skill loader compat edits

* UI: reduce app-render churn to rawAvailable-only changes

* Gateway: scope SecretRef preflight to submitted config

* Docs: clarify config write SecretRef preflight scope

* changelog

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>

---------

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>

2026-03-30 23:55:03 -05:00

sessions

feat(matrix): thread-isolated sessions and per-chat-type threadReplies (#57995 )

2026-03-30 22:45:32 -04:00

agent-dirs.test.ts

…

agent-dirs.ts

…

agent-limits.ts

…

allowed-values.test.ts

…

allowed-values.ts

…

backup-rotation.ts

…

bindings.ts

ACP: harden startup and move configured routing behind plugin seams (#48197 )

2026-03-17 17:27:52 +01:00

bundled-channel-config-metadata.generated.ts

feat(matrix): add group chat history context for agent triggers (#57022 )

2026-03-30 15:10:43 -04:00

bundled-channel-config-runtime.test.ts

fix: stabilize ci and serial test gate

2026-03-30 00:43:01 +01:00

bundled-channel-config-runtime.ts

fix(plugins): keep built cli metadata scans lightweight

2026-03-29 17:55:17 +09:00

byte-size.ts

…

cache-utils.test.ts

refactor: extract shared expiring cache

2026-03-22 22:10:48 +00:00

cache-utils.ts

refactor: extract shared expiring cache

2026-03-22 22:10:48 +00:00

channel-capabilities.test.ts

Slack: add opt-in interactive reply directives (#44607 )

2026-03-13 14:08:04 -07:00

channel-capabilities.ts

Slack: add opt-in interactive reply directives (#44607 )

2026-03-13 14:08:04 -07:00

channel-config-metadata.ts

refactor: move channel config metadata into plugin-owned manifests

2026-03-27 01:59:30 +00:00

channel-config-surface.ts

refactor: move channel config metadata into plugin-owned manifests

2026-03-27 01:59:30 +00:00

channel-configured.ts

refactor: use main sdk barrels for model and whatsapp helpers

2026-03-28 01:10:44 +00:00

commands.test.ts

…

commands.ts

Config: keep native command defaults off heavy channel registry

2026-03-15 22:55:27 -07:00

config-env-vars.ts

refactor: split durable service env helpers

2026-03-22 22:05:56 -07:00

config-misc.test.ts

fix(tts): restore 3.28 schema compatibility and fallback observability (#57953 )

2026-03-30 22:05:03 -05:00

config-paths.ts

…

config.acp-binding-cutover.test.ts

feat(feishu): add ACP and subagent session binding (#46819 )

2026-03-15 10:33:49 -05:00

config.agent-concurrency-defaults.test.ts

…

config.allowlist-requires-allowfrom.test.ts

test: dedupe config and utility suites

2026-03-28 00:46:53 +00:00

config.backup-rotation.test-helpers.ts

…

config.backup-rotation.test.ts

…

config.compaction-settings.test.ts

fix: stabilize ci and serial test gate

2026-03-30 00:43:01 +01:00

config.discord-agent-components.test.ts

…

config.discord-presence.test.ts

test: dedupe config and utility suites

2026-03-28 00:46:53 +00:00

config.discord.test.ts

fix(discord): add missing autoThread to DiscordGuildChannelConfig type (#35608 )

2026-03-11 21:54:49 +03:00

config.dm-policy-alias.test.ts

…

config.env-vars.test.ts

refactor: split durable service env helpers

2026-03-22 22:05:56 -07:00

config.gateway-tailscale-bind.test.ts

…

config.hooks-module-paths.test.ts

fix(config): allow plugin channels in hooks mappings

2026-03-28 19:00:05 -07:00

config.identity-avatar.test.ts

…

config.identity-defaults.test.ts

fix: stabilize ci and serial test gate

2026-03-30 00:43:01 +01:00

config.irc.test.ts

…

config.legacy-config-detection.accepts-imessage-dmpolicy.test.ts

refactor(config): drop stale legacy migrations

2026-03-27 02:29:08 +00:00

config.legacy-config-detection.rejects-routing-allowfrom.test.ts

fix: stabilize ci and serial test gate

2026-03-30 00:43:01 +01:00

config.meta-timestamp-coercion.test.ts

…

config.msteams.test.ts

…

config.multi-agent-agentdir-validation.test.ts

…

config.nix-integration-u3-u5-u9.test.ts

Gateway: harden Compose-style gateway port parsing

2026-03-24 16:51:36 -07:00

config.plugin-validation.test.ts

fix(tts): restore 3.28 schema compatibility and fallback observability (#57953 )

2026-03-30 22:05:03 -05:00

config.pruning-defaults.test.ts

fix: stabilize ci and serial test gate

2026-03-30 00:43:01 +01:00

config.sandbox-docker.test.ts

…

config.schema-regressions.test.ts

fix(discovery): add missing domain to wideArea Zod config schema (#35615 )

2026-03-13 15:52:54 +03:00

config.secrets-schema.test.ts

test: update codex test fixtures to gpt-5.4

2026-03-23 02:14:00 -07:00

config.skills-entries-config.test.ts

…

config.talk-api-key-fallback.test.ts

…

config.talk-validation.test.ts

refactor(config): pin runtime snapshot and drop ttl cache

2026-03-29 22:57:31 +01:00

config.telegram-audio-preflight.test.ts

…

config.telegram-custom-commands.test.ts

…

config.telegram-topic-agentid.test.ts

…

config.tools-alsoAllow.test.ts

…

config.ts

refactor(config): centralize runtime config state

2026-03-30 00:17:23 +01:00

config.web-search-provider.test.ts

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

dangerous-name-matching.test.ts

refactor: centralize synology dangerous name matching

2026-03-22 23:32:21 -07:00

dangerous-name-matching.ts

refactor: centralize synology dangerous name matching

2026-03-22 23:32:21 -07:00

defaults.ts

refactor: require legacy config migration on read

2026-03-26 23:23:47 +00:00

discord-preview-streaming.test.ts

fix(doctor): explain discord streaming opt-in (#52450 )

2026-03-22 12:37:03 -07:00

discord-preview-streaming.ts

fix(doctor): explain discord streaming opt-in (#52450 )

2026-03-22 12:37:03 -07:00

doc-baseline.integration.test.ts

fix: stabilize matrix and teams ci assertions

2026-03-24 05:29:05 +00:00

doc-baseline.test.ts

fix(config): split config doc baseline coverage

2026-03-20 00:06:12 -07:00

doc-baseline.ts

refactor: move channel config metadata into plugin-owned manifests

2026-03-27 01:59:30 +00:00

env-preserve-io.test.ts

refactor(config): pin runtime snapshot and drop ttl cache

2026-03-29 22:57:31 +01:00

env-preserve.test.ts

…

env-preserve.ts

…

env-substitution.test.ts

…

env-substitution.ts

…

env-vars.ts

refactor: split durable service env helpers

2026-03-22 22:05:56 -07:00

gateway-control-ui-origins.ts

…

group-policy.test.ts

…

group-policy.ts

…

home-env.test-harness.ts

…

includes-scan.ts

…

includes.test.ts

test: dedupe utility and config suites

2026-03-28 00:26:55 +00:00

includes.ts

…

io.compat.test.ts

test: dedupe config compatibility fixtures

2026-03-26 15:45:14 +00:00

io.eacces.test.ts

…

io.observe-config.test.ts

fix(config): recover clobbered config and isolate test paths

2026-03-30 00:05:36 +01:00

io.owner-display-secret.test.ts

docs: add beta blocker contributor guidance (#55199 )

2026-03-26 09:31:59 -05:00

io.runtime-snapshot-load.test.ts

refactor(config): pin runtime snapshot and drop ttl cache

2026-03-29 22:57:31 +01:00

io.runtime-snapshot-write.test.ts

fix: stabilize ci and serial test gate

2026-03-30 00:43:01 +01:00

io.ts

fix: stabilize config default-leak landing tests (#56834 ) (thanks @openperf)

2026-03-30 09:19:17 +05:30

io.validation-fails-closed.test.ts

refactor(config): pin runtime snapshot and drop ttl cache

2026-03-29 22:57:31 +01:00

io.write-config.test.ts

fix: stabilize config default-leak landing tests (#56834 ) (thanks @openperf)

2026-03-30 09:19:17 +05:30

issue-format.test.ts

…

issue-format.ts

…

legacy-migrate.test-helpers.ts

…

legacy-migrate.test.ts

fix(tts): restore 3.28 schema compatibility and fallback observability (#57953 )

2026-03-30 22:05:03 -05:00

legacy-migrate.ts

…

legacy-web-search.test.ts

refactor: move provider model helpers into plugins

2026-03-27 20:20:31 +00:00

legacy-web-search.ts

Config: skip nonexistent Tavily web-search migration

2026-03-27 20:45:59 +00:00

legacy.migrations.audio.ts

refactor(config): dedupe legacy migration metadata

2026-03-27 02:37:47 +00:00

legacy.migrations.channels.ts

refactor(config): dedupe legacy migration metadata

2026-03-27 02:37:47 +00:00

legacy.migrations.runtime.ts

fix(tts): restore 3.28 schema compatibility and fallback observability (#57953 )

2026-03-30 22:05:03 -05:00

legacy.migrations.ts

refactor(config): dedupe legacy migration metadata

2026-03-27 02:37:47 +00:00

legacy.rules.ts

refactor(config): dedupe legacy migration metadata

2026-03-27 02:37:47 +00:00

legacy.shared.test.ts

…

legacy.shared.ts

refactor(config): dedupe legacy migration metadata

2026-03-27 02:37:47 +00:00

legacy.ts

…

load-channel-config-surface.test.ts

Fallback to Jiti when bun is unavailable

2026-03-27 15:16:19 -05:00

logging-max-file-bytes.test.ts

…

logging.test.ts

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

logging.ts

…

markdown-tables.test.ts

fix(slack): restore table block mode seam (#57591 )

2026-03-30 19:25:01 +09:00

markdown-tables.ts

fix(slack): restore table block mode seam (#57591 )

2026-03-30 19:25:01 +09:00

materialize.ts

refactor(config): centralize runtime config state

2026-03-30 00:17:23 +01:00

mcp-config.test.ts

fix: harden MCP SSE config redaction (#50396 ) (thanks @dhananjai1729)

2026-03-30 04:23:47 +09:00

mcp-config.ts

refactor(config): use source snapshots for config writes

2026-03-30 00:39:39 +01:00

media-audio-field-metadata.ts

…

merge-config.ts

…

merge-patch.proto-pollution.test.ts

…

merge-patch.test.ts

…

merge-patch.ts

…

model-alias-defaults.test.ts

fix(mistral): repair max-token defaults and doctor migration (#53054 )

2026-03-23 10:57:56 -07:00

model-input.ts

…

mutate.test.ts

test(config): align snapshot fixtures and isolation

2026-03-30 00:17:23 +01:00

mutate.ts

refactor(config): centralize runtime config state

2026-03-30 00:17:23 +01:00

normalize-exec-safe-bin.ts

…

normalize-paths.test.ts

…

normalize-paths.ts

…

paths.test.ts

test: trim stale legacy coverage and repair mocks

2026-03-29 22:00:56 +01:00

paths.ts

refactor(config): drop obsolete legacy config aliases

2026-03-29 22:00:56 +01:00

plugin-auto-enable.test.ts

fix: stabilize serial test suite

2026-03-30 04:46:04 +09:00

plugin-auto-enable.ts

fix: stabilize serial test suite

2026-03-30 04:46:04 +09:00

plugins-allowlist.ts

…

plugins-runtime-boundary.test.ts

…

port-defaults.ts

…

prototype-keys.ts

…

redact-snapshot.raw.ts

…

redact-snapshot.restore.test.ts

fix(config): harden SecretRef round-trip handling in Control UI and RPC writes (#58044 )

2026-03-30 23:55:03 -05:00

redact-snapshot.schema.test.ts

test: share redact and approval fixtures

2026-03-26 15:23:12 +00:00

redact-snapshot.secret-ref.ts

…

redact-snapshot.test-helpers.ts

test(config): align snapshot fixtures and isolation

2026-03-30 00:17:23 +01:00

redact-snapshot.test-hints.ts

perf: reduce runtime and test startup overhead

2026-03-21 20:18:16 +00:00

redact-snapshot.test.ts

fix(config): harden SecretRef round-trip handling in Control UI and RPC writes (#58044 )

2026-03-30 23:55:03 -05:00

redact-snapshot.ts

fix(config): harden SecretRef round-trip handling in Control UI and RPC writes (#58044 )

2026-03-30 23:55:03 -05:00

runtime-group-policy.test.ts

…

runtime-group-policy.ts

…

runtime-overrides.test.ts

…

runtime-overrides.ts

…

runtime-schema.test.ts

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

runtime-schema.ts

refactor: move channel config metadata into plugin-owned manifests

2026-03-27 01:59:30 +00:00

schema-base.ts

refactor: unify sensitive URL config hints

2026-03-29 22:21:29 +01:00

schema.base.generated.test.ts

refactor: unify sensitive URL config hints

2026-03-29 22:21:29 +01:00

schema.base.generated.ts

fix: add requireAgentId to block sessions_spawn without explicit agen… (#29380 )

2026-03-30 23:06:59 -04:00

schema.help.quality.test.ts

fix(memory): add qmd mcporter search tool override (#57363 )

2026-03-30 12:07:32 +09:00

schema.help.ts

fix(memory): add qmd mcporter search tool override (#57363 )

2026-03-30 12:07:32 +09:00

schema.hints.test.ts

refactor: unify sensitive URL config hints

2026-03-29 22:21:29 +01:00

schema.hints.ts

refactor: unify sensitive URL config hints

2026-03-29 22:21:29 +01:00

schema.labels.ts

fix(memory): add qmd mcporter search tool override (#57363 )

2026-03-30 12:07:32 +09:00

schema.shared.test.ts

refactor: bundle lazy runtime surfaces

2026-03-17 00:00:45 -07:00

schema.shared.ts

refactor: share browser and sandbox helpers

2026-03-26 18:43:57 +00:00

schema.tags.ts

refactor: unify sensitive URL config hints

2026-03-29 22:21:29 +01:00

schema.test.ts

test: align schema and redaction assertions

2026-03-29 22:21:29 +01:00

schema.ts

refactor: unify sensitive URL config hints

2026-03-29 22:21:29 +01:00

sessions.cache.test.ts

perf: reduce runtime and test startup overhead

2026-03-21 20:18:16 +00:00

sessions.store.imports.test.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

sessions.test.ts

…

sessions.ts

perf: reduce status json startup memory

2026-03-16 21:51:24 +05:30

slack-http-config.test.ts

…

slack-token-validation.test.ts

…

state-dir-dotenv.ts

refactor: split durable service env helpers

2026-03-22 22:05:56 -07:00

talk-defaults.test.ts

Docs: add config drift baseline statefile (#45891 )

2026-03-14 14:23:30 -07:00

talk-defaults.ts

…

talk.normalize.test.ts

refactor: require legacy config migration on read

2026-03-26 23:23:47 +00:00

talk.ts

refactor: require legacy config migration on read

2026-03-26 23:23:47 +00:00

telegram-actions-poll.test.ts

…

telegram-custom-commands.ts

…

telegram-webhook-port.test.ts

…

telegram-webhook-secret.test.ts

test: dedupe config and utility suites

2026-03-28 00:46:53 +00:00

test-helpers.ts

test(config): align snapshot fixtures and isolation

2026-03-30 00:17:23 +01:00

thread-bindings-config-keys.test.ts

…

types.acp.ts

…

types.agent-defaults.ts

fix: add requireAgentId to block sessions_spawn without explicit agen… (#29380 )

2026-03-30 23:06:59 -04:00

types.agents-shared.ts

feat: move ssh sandboxing into core

2026-03-15 21:35:30 -07:00

types.agents.ts

fix: add requireAgentId to block sessions_spawn without explicit agen… (#29380 )

2026-03-30 23:06:59 -04:00

types.approvals.ts

feat(hooks): add async requireApproval to before_tool_call (#55339 )

2026-03-27 09:06:40 -07:00

types.auth.ts

refactor(auth): separate profile ids from email metadata

2026-03-25 04:24:46 -07:00

types.base.ts

fix(slack): restore table block mode seam (#57591 )

2026-03-30 19:25:01 +09:00

types.browser.ts

Browser: support non-Chrome existing-session profiles via userDataDir (#48170 )

2026-03-16 14:21:22 +01:00

types.channel-messaging-common.ts

feat(gateway): make health monitor stale threshold and max restarts configurable (openclaw#42107)

2026-03-14 21:21:56 -05:00

types.channels.ts

refactor: collapse bundled channel metadata into plugin manifests

2026-03-27 02:29:19 +00:00

types.cli.ts

…

types.cron.ts

…

types.discord.ts

fix: stabilize exec approval approver routing

2026-03-30 06:25:03 +09:00

types.gateway.ts

fix: resume orphaned subagent sessions after SIGUSR1 reload

2026-03-15 22:32:36 -07:00

types.googlechat.ts

refactor: collapse bundled channel metadata into plugin manifests

2026-03-27 02:29:19 +00:00

types.hooks.ts

fix(config): allow plugin channels in hooks mappings

2026-03-28 19:00:05 -07:00

types.imessage.ts

refactor: collapse bundled channel metadata into plugin manifests

2026-03-27 02:29:19 +00:00

types.installs.ts

feat: add native clawhub install flows

2026-03-22 17:03:49 +00:00

types.irc.ts

refactor: collapse bundled channel metadata into plugin manifests

2026-03-27 02:29:19 +00:00

types.mcp.ts

docs(mcp): add CHANGELOG entries and MCP transport/namespacing docs

2026-03-30 07:22:36 +09:00

types.memory.ts

fix(memory): add qmd mcporter search tool override (#57363 )

2026-03-30 12:07:32 +09:00

types.messages.ts

Commands: add /plugins chat command (#48765 )

2026-03-16 22:57:44 -07:00

types.models.ts

fix: use azure-openai-responses for Azure custom providers (#50851 ) (thanks @kunalk16)

2026-03-30 16:17:03 +05:30

types.msteams.ts

fix(msteams): add blockStreaming config and progressive delivery (#56134 )

2026-03-27 23:53:24 -05:00

types.node-host.ts

fix(browser): enforce node browser proxy allowProfiles

2026-03-23 00:56:44 -07:00

types.openclaw.ts

refactor(config): centralize runtime config state

2026-03-30 00:17:23 +01:00

types.plugins.ts

fix(plugins): forward plugin subagent overrides (#48277 )

2026-03-17 07:20:27 -07:00

types.queue.ts

…

types.sandbox.ts

feat: move ssh sandboxing into core

2026-03-15 21:35:30 -07:00

types.secrets.ts

…

types.signal.ts

refactor: collapse bundled channel metadata into plugin manifests

2026-03-27 02:29:19 +00:00

types.skills.ts

…

types.slack.ts

refactor: collapse bundled channel metadata into plugin manifests

2026-03-27 02:29:19 +00:00

types.telegram.ts

fix: stabilize exec approval approver routing

2026-03-30 06:25:03 +09:00

types.tools.ts

fix(exec): default implicit target to auto

2026-03-30 06:03:08 +09:00

types.ts

Agents: run bundle MCP tools in embedded Pi (#48611 )

2026-03-16 21:46:05 -07:00

types.tts.ts

refactor: require legacy config migration on read

2026-03-26 23:23:47 +00:00

types.whatsapp.ts

refactor: collapse bundled channel metadata into plugin manifests

2026-03-27 02:29:19 +00:00

validation.allowed-values.test.ts

…

validation.channel-metadata.test.ts

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

validation.ts

fix: support multi-kind plugins for dual slot ownership (#57507 ) (thanks @fuller-stack-dev)

2026-03-31 10:06:48 +05:30

version.test.ts

fix(config): ignore same-base correction publish warnings

2026-03-25 04:58:44 -07:00

version.ts

fix(config): ignore same-base correction publish warnings

2026-03-25 04:58:44 -07:00

zod-schema.agent-defaults.test.ts

Session management improvements and dashboard API (#50101 )

2026-03-19 12:12:30 +09:00

zod-schema.agent-defaults.ts

fix: add requireAgentId to block sessions_spawn without explicit agen… (#29380 )

2026-03-30 23:06:59 -04:00

zod-schema.agent-model.ts

…

zod-schema.agent-runtime.ts

fix: add requireAgentId to block sessions_spawn without explicit agen… (#29380 )

2026-03-30 23:06:59 -04:00

zod-schema.agents.ts

feat(feishu): add ACP and subagent session binding (#46819 )

2026-03-15 10:33:49 -05:00

zod-schema.allowdeny.ts

…

zod-schema.approvals.ts

feat(hooks): add async requireApproval to before_tool_call (#55339 )

2026-03-27 09:06:40 -07:00

zod-schema.channels.ts

feat(gateway): make health monitor stale threshold and max restarts configurable (openclaw#42107)

2026-03-14 21:21:56 -05:00

zod-schema.core.ts

fix(slack): restore table block mode seam (#57591 )

2026-03-30 19:25:01 +09:00

zod-schema.cron-retention.test.ts

…

zod-schema.hooks.ts

fix(config): allow plugin channels in hooks mappings

2026-03-28 19:00:05 -07:00

zod-schema.installs.ts

feat: add native clawhub install flows

2026-03-22 17:03:49 +00:00

zod-schema.logging-levels.test.ts

…

zod-schema.markdown-tables.test.ts

fix(slack): restore table block mode seam (#57591 )

2026-03-30 19:25:01 +09:00

zod-schema.providers-core.ts

fix(msteams): add blockStreaming config and progressive delivery (#56134 )

2026-03-27 23:53:24 -05:00

zod-schema.providers-whatsapp.ts

feat(gateway): make health monitor stale threshold and max restarts configurable (openclaw#42107)

2026-03-14 21:21:56 -05:00

zod-schema.providers.ts

fix: slim provider sdk surfaces

2026-03-28 09:35:42 +00:00

zod-schema.secret-input-validation.ts

…

zod-schema.sensitive.ts

…

zod-schema.session-maintenance-extensions.test.ts

…

zod-schema.session.ts

Commands: add /plugins chat command (#48765 )

2026-03-16 22:57:44 -07:00

zod-schema.signal-groups.test.ts

fix(signal): add groups config to Signal channel schema (#27199 )

2026-03-13 15:14:30 +03:00

zod-schema.talk.test.ts

…

zod-schema.ts

fix(memory): add qmd mcporter search tool override (#57363 )

2026-03-30 12:07:32 +09:00

zod-schema.tts.test.ts

refactor: genericize speech provider config surface

2026-03-26 22:48:57 +00:00

zod-schema.typing-mode.test.ts

…