Coy Geek 3509f7613e fix: audit and repair hooks token reuse with Gateway auth ...

Keep startup non-breaking for existing installs when hooks.token reuses Gateway auth, but surface a startup warning, critical security audit finding, and doctor --fix repair that rotates persisted hooks.token.

Closes #87376.

Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>

2026-06-02 08:58:40 -04:00

..

security

docs: add shrinkwrap and release performance report

2026-05-28 22:00:55 +01:00

authentication.md

fix(auth): add force re-login recovery and fallback auth skips

2026-05-31 19:01:51 +01:00

background-process.md

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

bonjour.md

fix(gateway): honor minimal discovery mode for wide-area DNS-SD [AI] (#80903)

2026-05-12 16:03:50 +05:30

bridge-protocol.md

fix: stop denied exec followups (#85194)

2026-05-22 08:48:19 +01:00

cli-backends.md

refactor(agents): trim native compaction ownership follow-up

2026-06-02 14:39:35 +05:30

config-agents.md

fix: raise bootstrap file default limit

2026-06-01 04:02:51 +01:00

config-channels.md

docs(imessage): document SSH wrapper TCC send failure (#88758)

2026-05-31 23:00:08 -04:00

config-tools.md

fix: hide sessions_spawn timeout overrides

2026-06-02 06:09:02 -04:00

configuration-examples.md

refactor: unify OpenAI provider identity

2026-05-30 11:48:41 +02:00

configuration-reference.md

fix: audit and repair hooks token reuse with Gateway auth

2026-06-02 08:58:40 -04:00

configuration.md

Move cron persistence to SQLite (#88285)

2026-05-30 21:03:41 +01:00

diagnostics.md

fix(gateway): capture opt-in memory pressure snapshots (#82674)

2026-05-16 21:52:09 +01:00

discovery.md

docs: typography hygiene + 2 in-body H1 removals across 5 pages

2026-05-05 21:01:44 -07:00

doctor.md

fix: remove webchat config surface

2026-05-31 12:49:18 -04:00

gateway-lock.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

health.md

fix(gateway): capture opt-in memory pressure snapshots (#82674)

2026-05-16 21:52:09 +01:00

heartbeat.md

fix: bound default heartbeat run timeout (#88133)

2026-05-29 22:56:13 +02:00

index.md

fix(webchat): show manual compaction progress

2026-05-16 13:58:44 +01:00

local-model-services.md

docs: add ds4 provider guide

2026-05-13 14:45:34 +01:00

local-models.md

fix: clarify provider timeout ceiling

2026-05-16 01:08:07 +01:00

logging.md

refactor: unify OpenAI provider identity

2026-05-30 11:48:41 +02:00

multiple-gateways.md

docs: full-page sentence-case sweep across 5 worst-offender pages

2026-04-26 23:58:35 -07:00

network-model.md

docs: consolidate moved docs pages

2026-05-05 17:38:21 +01:00

openai-http-api.md

fix(gateway): enforce OpenAI tool_choice contracts

2026-05-31 15:02:29 +01:00

openresponses-http-api.md

fix(gateway): enforce OpenAI tool_choice contracts

2026-05-31 15:02:29 +01:00

openshell.md

build: externalize slack openshell vertex plugins

2026-05-14 07:46:58 +01:00

opentelemetry.md

fix(agents): count stream deltas incrementally

2026-05-31 18:13:58 +01:00

operator-scopes.md

fix(gateway): require admin for device role approvals (#87146)

2026-05-27 08:08:51 -07:00

pairing.md

fix(gateway): allow trusted-proxy local-direct password fallback (#82953)

2026-05-17 01:35:59 -05:00

prometheus.md

fix(diagnostics): expose missing telemetry signals (#86682)

2026-05-26 01:10:59 +01:00

protocol.md

fix(webchat): fetch full sidebar content for truncated history

2026-05-31 01:33:52 +01:00

remote-gateway-readme.md

docs: sentence-case sweep across 4 more pages

2026-04-27 00:01:52 -07:00

remote.md

feat: add native mac dashboard window

2026-05-16 23:49:18 +01:00

sandbox-vs-tool-policy-vs-elevated.md

fix(agents): audit tool policy blocks (#85673)

2026-05-23 16:43:29 +08:00

sandboxing.md

fix: harden codex sandbox execution

2026-05-21 23:47:32 +01:00

secrets-plan-contract.md

docs: document secrets provider plan fields

2026-05-22 17:59:05 +01:00

secrets.md

Add plugin manifest contract for SecretRef provider integrations (#82326)

2026-05-29 18:20:45 -04:00

tailscale.md

feat(gateway): support Tailscale Serve service names

2026-05-31 20:05:02 +01:00

tools-invoke-http-api.md

fix(gateway): allow trusted-proxy local-direct password fallback (#82953)

2026-05-17 01:35:59 -05:00

troubleshooting.md

docs: add macOS gateway sleep troubleshooting

2026-05-27 19:52:56 +01:00

trusted-proxy-auth.md

docs: absorb docs sweep

2026-05-22 21:52:01 +01:00