openclaw/docs/gateway
Peter Steinberger 4bf70be01a
feat(secrets): egress-time credential injection with process-local sentinels (#102009)
* feat(secrets): resolve SecretRef model credentials at egress via process-local sentinels

SecretRef-managed model-provider credentials now travel as opaque
oc-sent-v1 sentinels through auth storage, stream options, and SDK
config; the guarded model fetch injects real values into headers and
URLs immediately before the SSRF-guarded send and fails closed on
unknown sentinels. packages/ai adapters converge on the host guarded
fetch where the SDK supports custom fetch and unwrap at construction
where it does not. Resolved values (and their percent-encoded forms)
register for exact-value log redaction. Kill switch:
OPENCLAW_SECRET_SENTINELS=off. Also fixes a pre-existing unhandled
rejection race in capNonOkResponseBodyLazily (pipeThrough writer leak).

* test(plugin-sdk): update public surface budget
2026-07-08 12:56:41 +01:00
..
security refactor: extract reusable AI runtime package (#99059) 2026-07-05 01:56:40 -04:00
authentication.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
background-process.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
bonjour.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
bridge-protocol.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
cli-backends.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
config-agents.md docs(openai): refresh realtime 2.1 examples 2026-07-06 23:22:33 -07:00
config-channels.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
config-tools.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
configuration-examples.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
configuration-reference.md feat(update): notify extended-stable availability (#100438) 2026-07-06 19:57:03 -07:00
configuration.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
diagnostics.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
discovery.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
doctor.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
external-apps.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
gateway-lock.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
health.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
heartbeat.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
index.md feat(gateway): add persisted crash-loop breaker and fatal-config exit contract 2026-07-06 06:45:55 +00:00
local-model-services.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
local-models.md fix(agents): keep exec visible for lean local models (#101607) 2026-07-07 12:46:26 +01:00
logging.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
multiple-gateways.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
network-model.md docs: consolidate moved docs pages 2026-05-05 17:38:21 +01:00
openai-http-api.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
openresponses-http-api.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
openshell.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
opentelemetry.md fix: show exported tool results in trace viewers (#101371) 2026-07-07 17:14:30 +10:00
operator-scopes.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
pairing.md fix: device pairing floods stacked approval alerts for a retrying device and stale approvals no-op (#100976) 2026-07-06 17:20:06 +01:00
prometheus.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
protocol.md fix(gateway): keep N-1 nodes manageable during upgrades (#101109) 2026-07-06 20:01:20 +01:00
remote-gateway-readme.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
remote.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
sandbox-vs-tool-policy-vs-elevated.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
sandboxing.md fix: land ten small reliability fixes (#100483) 2026-07-06 00:08:51 +01:00
secrets-plan-contract.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
secrets.md feat(secrets): egress-time credential injection with process-local sentinels (#102009) 2026-07-08 12:56:41 +01:00
tailscale.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
tools-invoke-http-api.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
troubleshooting.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00
trusted-proxy-auth.md docs: rewrite published docs grounded in current source (#100142) 2026-07-05 00:32:47 -04:00