…r valid anchor

…arding-overview, features, and openclaw pages

…arted, windows, and onboarding-overview

… hierarchy, better hosting cards

…ing note

…ces, add next-steps sections

…note, frontmatter

…osting titles, move dev channels to Maintenance

…ines) for readability

… improved readability

…ion, add Steps

Merged via squash.

Prepared head SHA: 10d9770
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras

…law#50772)

Merged via squash.

Prepared head SHA: 095e645
Co-authored-by: Jaaneek <25470423+Jaaneek@users.noreply.github.com>
Co-authored-by: huntharo <5617868+huntharo@users.noreply.github.com>
Reviewed-by: @huntharo

…50935)

Merged via squash.

Prepared head SHA: e1c7d72
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras

…claw#50523)

* security: add SSRF guard tests for URL credential bypass vectors

* test(security): strengthen SSRF redirect guard coverage

---------

Co-authored-by: Vincent Koc <vincentkoc@ieee.org>

Implements a Zulip channel plugin with:
- Long-polling event monitor for real-time messages
- DM and stream message support with topic threading
- Pairing flow for DM access control
- Health check/probe functionality
- Account configuration with multi-account support

Backported from SEKSBot/seksbot (f8459359) with branding
updated from seksbot to openclaw.

Port broker integration from SEKSBot/seksbot to openclaw:
- Add src/seks/ with broker client, types, and exports
- Add seks.broker config section to OpenClawConfig
- Integrate broker auth into model-auth provider resolution
- Add async Discord token resolution via broker
- Add 'broker' to DiscordTokenSource union type

Broker provides centralized credential management — agents
authenticate with a single agent token, broker injects API
keys and channel tokens at runtime.

When seks-broker is configured, auth resolution now returns mode 'broker'
instead of pretending to be 'api-key'. This makes the auth semantics
explicit — the broker token is a proxy credential, not a provider API key.

No functional change: the broker token is still passed as the API key to
the provider SDK, which sends it to the broker proxy URL where it gets
swapped for the real credential. But now code inspecting the auth mode
can distinguish broker-proxied auth from direct API key auth.

- broker-client.ts: [botster-broker-client] prefix on all errors
- model-auth.ts: [botster-auth] prefix, rename SEKS references to botster
- discord/token.ts: [botster-auth] prefix, rename SEKS references to botster

* docs: add actuator routing status report and port implementation plan

* docs: reframe actuator port plan as compatibility specification

---------

Co-authored-by: FootGun <footgun@FootGuns-Mac-Studio.local>

When BOTSTER_EXEC_VIA_SPINE=1 is set (along with SEKS_BROKER_URL and
SEKS_BROKER_TOKEN), tool calls route through the broker to a remote
actuator via POST /v1/command instead of executing locally.

New files:
- src/seks/spine-client.ts: HTTP client for broker command endpoint
- src/seks/spine-exec-intercept.ts: Tool wrappers that intercept and
  route exec/process/read/write/edit through the spine

Modified:
- src/agents/pi-tools.ts: Wire up spine wrappers at tool assembly time

Design: wrapper pattern — zero code paths change when spine is off.
Brain sends sync HTTP to broker, broker relays via WS to actuator.

…raint)

Codex used AgentTool<unknown, unknown> but unknown doesn't satisfy
the TSchema constraint. Changed to AgentTool<any, any> to match
codebase conventions (AgentState.tools uses AgentTool<any>).
Added eslint-disable for the file since every function signature needs it.
Added review notes in REVIEW.md.

…AL=1

- Invert BOTSTER_EXEC_VIA_SPINE opt-in to BOTSTER_EXEC_NORMAL opt-out
- Remove SEKS_BROKER_TOKEN requirement (superego proxy injects real token)
- Only SEKS_BROKER_URL needed for spine routing to activate

… type