- Create analyze.py (profile, describe, groupby, pivot, filter)
- Create excel.py (read, write, list-sheets, merge/VLOOKUP)
- Create visualize.py (bar, line, scatter, heatmap, histogram, pie, box)
- Update SKILL.md with venv instructions
- Mark openclaw#14 Blogwatcher RESOLVED (installed)
- Mark openclaw#15 Data Analytics RESOLVED
- Mark openclaw#17 Calendar CANCELLED (using GOG)
- Mark openclaw#18 Edison PAUSED
- Mark openclaw#23 Network Fallback PAUSED

feat(ui): add skeleton loading screens for overseer and cron views

…t entrypoint script

Tasks completed: 2/2
- Port PR/issue guides + Install sharpening (commits #15, #17, #23)
- Port PR sign-off + guide revisions + markdownlint fixes (commits #24, #26, #35)

SUMMARY: .planning/phases/17-docs/17-03-SUMMARY.md

…openclaw#23)

The database service's environment block used ${DATABASE_PASSWORD:-postgres}
which is interpolated by docker compose from the host shell — where the var
is never set, so it always defaults to 'postgres'. The backend reads .env.prod
and gets the real password, causing a mismatch.

Fix: remove the environment block from the database service and pass
POSTGRES_DB, POSTGRES_USER, POSTGRES_PASSWORD directly via .env.prod.
The deploy workflow now writes these vars into .env.prod alongside the
existing DATABASE_* vars.

…claw#22, openclaw#23)

Issue openclaw#22 — QR Code Pairing:
- QRPairModal component: generates QR with encoded gateway URL + invite code + role
- Nodes page: QR Pair button in header toolbar
- SetupWizard: detects ?qr= URL parameter, auto-fills gateway URL and invite code
- Uses invite.create RPC to generate one-time invite codes (falls back if unavailable)
- QR codes auto-expire after 5 minutes with regenerate prompt

Issue openclaw#23 — LAN Auto-Approve:
- Added gateway.security.lanAutoApprove config option (default: false)
- Added gateway.security.lanAutoApproveRole config option (default: 'operator')
- Config types (GatewaySecurityConfig) and zod schema validation
- Message handler checks isPrivateOrLoopbackAddress for LAN clients
- LAN auto-approved devices get securityRole from config
- Audit logged as device.pair.lan-auto-approve
- approveReason field added to PairedDevice type
- Nodes page shows 'LAN auto-approved' badge on auto-approved devices

Also includes invite/pairing code validation in connect handshake.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Config changes (openclaw#33):
- Switch primary model to anthropic/claude-sonnet-4-5 (Claude Sonnet 4.6)
- Add model to deploy.sh post-deploy config, update fallback chain

Nginx changes (openclaw#32, openclaw#21):
- Increase /line/ proxy_read_timeout from 120s to 300s for complex agent responses

Docker build (openclaw#39):
- Enable OPENCLAW_INSTALL_BROWSER=1 build-arg to include Chromium in image

Deploy pipeline fix:
- deploy-vps.yml now actually applies nginx config (was only staging to .new)
- Added backup + rollback safety for nginx config changes
- Removed broken nginx path from deploy.sh (was referencing wrong VPS path)

Issues addressed: openclaw#9, openclaw#20, openclaw#21, openclaw#22, openclaw#23, openclaw#32, openclaw#33, openclaw#37, openclaw#39, openclaw#42, openclaw#45, openclaw#46

MOYENS (16):
- openclaw#1 generateReactiveFollowUp maxLength string vs number — aligne sur string
- openclaw#2 Multi-threading mort — filtre sur mappedLeads (avec score) au lieu de result.leads
- openclaw#3 _checkEmailSpecificity null safety — (prospectIntel || '').match()
- openclaw#4 totalContacts pre-dedup — utilise addedCount
- openclaw#5 Bounces tous hard_bounce — distinction soft/hard, soft = retry pas blacklist
- openclaw#8 _isSystemEmail includes() trop large — exact match + prefix patterns
- openclaw#10 sendBatch bypass warmup — recordSend dans domain-manager apres chaque envoi
- openclaw#11 Domain manager parsing ':' dans password — split limite a 4 segments
- openclaw#12 prospectDomains jamais nettoye — cleanup LRU max 2000 entries
- openclaw#13 trackNicheEvent('clicked') ignore — ajout compteur clicked
- openclaw#14 apStorage.getLeads() inexistant — utilise automailer storage.getEmails()
- openclaw#25 Interval HITL drafts jamais cleared — clearInterval dans gracefulShutdown

FAIBLES (9):
- openclaw#17 Retry skip prompt 25-35 mots → aligne sur 50-65 mots 4-blocs
- openclaw#18 _scoreAndFilter gate 60 mots → 80 mots (coherent avec prompts)
- openclaw#19 "curieux d'avoir ton retour" autorise dans follow-ups → remplace
- openclaw#20 seniorities priorite inversee → brain > config
- openclaw#21 data.growth jamais active → detecte via employee count + multi-country
- openclaw#23 Fallback plan non-pondere → utilise icp-loader.getNicheForCycle()
- campaign-engine: double updateEmailStatus pour opened → supprime appel redondant

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Release: footer contact email + waitlist email improvements