Peter Steinberger 4bf70be01a feat(secrets): egress-time credential injection with process-local sentinels (#102009) ... * feat(secrets): resolve SecretRef model credentials at egress via process-local sentinels SecretRef-managed model-provider credentials now travel as opaque oc-sent-v1 sentinels through auth storage, stream options, and SDK config; the guarded model fetch injects real values into headers and URLs immediately before the SSRF-guarded send and fails closed on unknown sentinels. packages/ai adapters converge on the host guarded fetch where the SDK supports custom fetch and unwrap at construction where it does not. Resolved values (and their percent-encoded forms) register for exact-value log redaction. Kill switch: OPENCLAW_SECRET_SENTINELS=off. Also fixes a pre-existing unhandled rejection race in capNonOkResponseBodyLazily (pipeThrough writer leak). * test(plugin-sdk): update public surface budget		2026-07-08 12:56:41 +01:00
..
.generated	chore(plugin-sdk): refresh API baseline hash	2026-07-08 02:27:34 +02:00
.i18n	feat: correlate native search outcomes in audit history (#98704)	2026-07-06 12:30:12 +01:00
announcements	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
assets	docs: update mobile app release messaging (#98843)	2026-07-01 21:11:56 -05:00
automation	feat(cron): event triggers — polled condition-watcher scripts via code mode (#101195)	2026-07-07 19:12:38 +01:00
channels	Improve iMessage imsg setup and skill ownership (#101407)	2026-07-07 14:13:37 -07:00
clawhub	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
cli	feat(crestodian): guide providerless model setup (#101887)	2026-07-07 19:24:54 -06:00
concepts	fix(agents): keep exec visible for lean local models (#101607)	2026-07-07 12:46:26 +01:00
debug	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
diagnostics	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
gateway	feat(secrets): egress-time credential injection with process-local sentinels (#102009)	2026-07-08 12:56:41 +01:00
help	fix(onboard): keep the wizard alive through provider auth failures and polish standalone install UX (#100632)	2026-07-07 04:11:23 +01:00
images	chore: remove unused tracked assets	2026-05-26 02:21:58 +01:00
install	fix(installer): complete first-run onboarding (#101901)	2026-07-07 18:23:56 -06:00
maturity	docs: update mobile app release messaging (#98843)	2026-07-01 21:11:56 -05:00
nodes	docs(talk): format realtime model table	2026-07-06 23:22:33 -07:00
plan	Policy: add sandbox posture conformance checks (#85572)	2026-05-28 21:00:24 -07:00
platforms	feat(macos): redesign chat window as native shell with sessions sidebar, toolbar pickers, slash commands, and context usage (#101103)	2026-07-07 02:06:10 +01:00
plugins	fix(voice-call): preserve per-call agent routing (#77763)	2026-07-08 07:06:35 +01:00
providers	docs(openai): note realtime 2.1 mini override	2026-07-06 23:22:33 -07:00
refactor	fix: migrate QQBot credential backups to SQLite KV (#89597)	2026-07-01 20:03:59 +01:00
reference	feat(android): publish signed APKs with stable releases (#101212)	2026-07-07 00:39:59 +01:00
releases	docs: publish release notes for v2026.6.11 (#98319)	2026-06-30 19:42:12 -06:00
security	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
snippets/plugin-publish	docs: restore source-backed contract details (#100182)	2026-07-05 01:26:25 -04:00
specs	docs: fix docs metadata spellcheck (#93502)	2026-06-22 17:17:35 +00:00
start	fix(onboard): keep the wizard alive through provider auth failures and polish standalone install UX (#100632)	2026-07-07 04:11:23 +01:00
tools	Harden jq safe-bin semantics (#102032)	2026-07-08 15:43:37 +05:30
web	fix(ui): stop flashing the login gate on dashboard load when credentials are stored (#101849)	2026-07-07 19:40:30 +01:00
agent-runtime-architecture.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
AGENTS.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
auth-credential-semantics.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
brave-search.md
ci.md	perf(ci): raise Node shard parallelism to 28 (#101174)	2026-07-06 21:59:22 -07:00
CLAUDE.md
date-time.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
docs.json	feat(cli): add openclaw promos to discover and claim ClawHub promotional model offers (#100236)	2026-07-07 01:10:42 -06:00
docs_map.md	feat(secrets): egress-time credential injection with process-local sentinels (#102009)	2026-07-08 12:56:41 +01:00
index.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
logging.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
nav-tabs-underline.js	docs: document repo support scripts	2026-06-04 08:01:15 -04:00
network.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
openclaw-agent-runtime.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
perplexity.md
prose.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
style.css	docs: clarify maturity scorecard scoring (#96594)	2026-06-24 17:32:08 -07:00
tts.md
vps.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
whatsapp-openclaw.jpg