docs: remove arrow annotations; strengthen screenshot redactions

README.md

@@ -22,24 +22,32 @@ git pull --ff-only
 ```
 
 Open [http://localhost:3333](http://localhost:3333) in your browser. For remote access, use `bash start.sh --host 0.0.0.0`.
+## Docs
+
+- English guide: docs/USAGE_GUIDE.en.md
+- 中文使用说明: docs/USAGE_GUIDE.zh-CN.md
+- FAQ: docs/FAQ.md
+- Security notes: docs/SECURITY.md
+- Changelog: docs/CHANGELOG.md
+
 
 ## Features
 
 **Screenshots** — Redacted UI walkthrough (no personal paths, no Telegram IDs):
 
-![](docs/annotated-screenshots/dashboard.jpg)
+![](docs/redacted-screenshots/dashboard.jpg)
 
-![](docs/annotated-screenshots/agents.jpg)
+![](docs/redacted-screenshots/agents.jpg)
 
-![](docs/annotated-screenshots/channels.jpg)
+![](docs/redacted-screenshots/channels.jpg)
 
-![](docs/annotated-screenshots/models.jpg)
+![](docs/redacted-screenshots/models.jpg)
 
-![](docs/annotated-screenshots/auth.jpg)
+![](docs/redacted-screenshots/auth.jpg)
 
-![](docs/annotated-screenshots/stats.jpg)
+![](docs/redacted-screenshots/stats.jpg)
 
-![](docs/annotated-screenshots/cron.jpg)
+![](docs/redacted-screenshots/cron.jpg)
 
 
 **Agent Management** — Add main agents and sub-agents through a guided setup flow. View all agents in a tree structure with model selection, workspace browsing, and inline configuration.
@@ -50,7 +58,7 @@ Open [http://localhost:3333](http://localhost:3333) in your browser. For remote
 
 **Built-in CLI** — Run any OpenClaw CLI command with real-time streaming output. Includes tab completion and saved favorites.
 
-![](docs/annotated-screenshots/cli.jpg)
+![](docs/redacted-screenshots/cli.jpg)
 
 **Ops Panel** — Restart gateway, view logs, run health checks, manage backups (local + NAS via SFTP/rsync), and handle cron tasks.
 

docs/CHANGELOG.md

@@ -0,0 +1,26 @@
+# Changelog
+
+This is a user-facing summary derived from `DEVLOG.md`.
+
+## v0.7.6
+- Docs: annotated screenshots with arrows for key UI controls.
+
+## v0.7.5
+- Docs: built-in CLI terminal instructions + screenshot (tab completion, favorites, streaming output).
+
+## v0.7.4
+- Docs: English + Chinese usage guides with redacted screenshots.
+
+## v0.7.1
+- Dashboard guidance block for Telegram-first workflow + safety checklist.
+- Model dropdown options sourced from `openclaw models list`.
+
+## v0.7.0
+- Dashboard redesign with circular CPU/RAM/DISK gauges and auto-refresh.
+- Sub-agent creation flow rewritten (BotFather → group → group id → form) including allowlist helper.
+
+## v0.6.6
+- Fix: sub-agents correctly grouped under main for older config formats.
+
+## v0.6.5
+- New Dashboard tab + cache-busting headers and version checks.

docs/FAQ.md

@@ -0,0 +1,53 @@
+# OCM FAQ
+
+## Q: Telegram 群里经常显示 typing，但不回消息？
+
+Most common cause is **BotFather Group Privacy** being ON.
+
+Fix:
+- BotFather → Your bot → Bot Settings → **Group Privacy** → **Turn off**
+
+Also check:
+- `openclaw status` (gateway healthy?)
+- provider auth/rate limits (OCM → Auth page, and gateway logs)
+
+## Q: 如何获取 Telegram Group ID（Peer ID / -100...）？
+
+Typical workflow:
+
+```bash
+openclaw gateway logs --follow
+```
+
+Send a message in the target group; the gateway logs usually contain the peer id.
+
+## Q: 模型下拉列表为什么没有我想要的模型？
+
+OCM sources model options from the real CLI output:
+
+```bash
+openclaw models list
+```
+
+So if it doesn't show up in OCM, make sure it's registered/available in your OpenClaw environment.
+
+## Q: Dashboard 里 Gateway HTTP Ping 显示 Unreachable？
+
+Common reasons:
+- Gateway not running
+- Gateway binds to a different interface/port than OCM expects
+- Local firewall/proxy interference
+
+Try:
+- `openclaw status`
+- `openclaw gateway restart`
+
+## Q: OCM 会把我的 token/个人信息上传出去吗？
+
+OCM is designed as a **local** dashboard.
+
+That said, your local OpenClaw config contains sensitive information. Follow the safety guidance:
+- keep agent Telegram groups private
+- don't share raw screenshots without redaction
+
+See: `docs/SECURITY.md`.

docs/SECURITY.md

@@ -0,0 +1,30 @@
+# Security Notes
+
+OCM is a **local web UI** for managing OpenClaw. Security depends heavily on how you run OpenClaw and how you use Telegram.
+
+## Recommended defaults
+
+- **Run locally** and restrict host binding unless you intentionally expose it.
+- Treat OpenClaw config as secrets: tokens, provider keys, account ids.
+- Prefer separate workspaces for each agent/sub-agent.
+
+## Telegram safety
+
+Strongly recommended:
+
+- **One Telegram group = one agent boundary** (context + purpose + workspace)
+- Keep each agent group **private**: only you + the bot (and optionally your second account)
+- Do **not** invite other people (cost + security risk)
+
+Critical BotFather settings:
+- Allow Groups = ON
+- Group Privacy = OFF
+
+## Sharing screenshots
+
+If you share screenshots publicly:
+- blur personal paths (e.g. `/Users/<name>/...`)
+- blur Telegram group/peer IDs (e.g. `-100xxxxxxxxxx`)
+- blur any tokens/keys if visible
+
+This repo contains **redacted + annotated** screenshots under `docs/annotated-screenshots/`.

docs/USAGE_GUIDE.en.md

@@ -88,7 +88,7 @@ The Dashboard is your “sanity check”:
 
 Screenshot:
 
-![](annotated-screenshots/dashboard.jpg)
+![](redacted-screenshots/dashboard.jpg)
 
 ---
 
@@ -119,7 +119,7 @@ If group privacy is ON, the bot can’t see normal group messages. The symptom o
 
 Go to **Agents**:
 
-![](annotated-screenshots/agents.jpg)
+![](redacted-screenshots/agents.jpg)
 
 Click `+ Add Agent` and fill:
 
@@ -176,7 +176,7 @@ If you use `channels.telegram.allowFrom`, OCM can take “Your Telegram User ID
 
 Go to **Channels**:
 
-![](annotated-screenshots/channels.jpg)
+![](redacted-screenshots/channels.jpg)
 
 Here you can quickly validate:
 - which agent is bound to which Telegram peer
@@ -188,7 +188,7 @@ Here you can quickly validate:
 
 Go to **Models**:
 
-![](annotated-screenshots/models.jpg)
+![](redacted-screenshots/models.jpg)
 
 Key idea:
 - OCM uses the real CLI model list (`openclaw models list`) for dropdowns.
@@ -200,7 +200,7 @@ Key idea:
 
 Go to **Auth**:
 
-![](annotated-screenshots/auth.jpg)
+![](redacted-screenshots/auth.jpg)
 
 Use this page to:
 - see which provider profiles exist
@@ -212,7 +212,7 @@ Use this page to:
 
 Go to **Stats**:
 
-![](annotated-screenshots/stats.jpg)
+![](redacted-screenshots/stats.jpg)
 
 You can break down usage by:
 - model
@@ -227,7 +227,7 @@ OCM parses usage from OpenClaw session JSONL files.
 
 Go to **Cron**:
 
-![](annotated-screenshots/cron.jpg)
+![](redacted-screenshots/cron.jpg)
 
 You can:
 - see scheduled tasks (backup / update / health)
@@ -250,7 +250,7 @@ Highlights:
 
 Screenshot:
 
-![](annotated-screenshots/cli.jpg)
+![](redacted-screenshots/cli.jpg)
 
 ## 11) Fast troubleshooting
 
@@ -272,4 +272,4 @@ Check (in order):
 ## Notes about screenshots
 
 All screenshots in this guide are **redacted** (no personal paths, no Telegram IDs).
-They live under `docs/annotated-screenshots/`.
+They live under `docs/redacted-screenshots/`.

docs/USAGE_GUIDE.zh-CN.md

@@ -77,7 +77,7 @@ bash start.sh
 
 截图示例：
 
-![](annotated-screenshots/dashboard.jpg)
+![](redacted-screenshots/dashboard.jpg)
 
 ---
 
@@ -105,7 +105,7 @@ bash start.sh
 
 进入 **Agents** 页面：
 
-![](annotated-screenshots/agents.jpg)
+![](redacted-screenshots/agents.jpg)
 
 点击 `+ Add Agent`，按表单填写：
 - Agent id / name
@@ -159,7 +159,7 @@ OCM 的表单里可以填 “Your Telegram User ID”，让它自动把你的 us
 
 进入 **Channels**：
 
-![](annotated-screenshots/channels.jpg)
+![](redacted-screenshots/channels.jpg)
 
 这里能一眼看到：
 - 哪个 agent 绑定了哪个 Telegram peer（群）
@@ -173,7 +173,7 @@ OCM 的表单里可以填 “Your Telegram User ID”，让它自动把你的 us
 
 进入 **模型**：
 
-![](annotated-screenshots/models.jpg)
+![](redacted-screenshots/models.jpg)
 
 关键点：
 - 主模型（primary）和 fallback 链
@@ -185,7 +185,7 @@ OCM 的表单里可以填 “Your Telegram User ID”，让它自动把你的 us
 
 进入 **认证**：
 
-![](annotated-screenshots/auth.jpg)
+![](redacted-screenshots/auth.jpg)
 
 这里主要用来：
 - 看当前有哪些 provider profile
@@ -197,7 +197,7 @@ OCM 的表单里可以填 “Your Telegram User ID”，让它自动把你的 us
 
 进入 **Stats**：
 
-![](annotated-screenshots/stats.jpg)
+![](redacted-screenshots/stats.jpg)
 
 你可以按：
 - 按模型聚合
@@ -222,13 +222,13 @@ OCM 内置一个 CLI 面板，用来直接运行 OpenClaw 命令（例如：`ope
 
 截图示例：
 
-![](annotated-screenshots/cli.jpg)
+![](redacted-screenshots/cli.jpg)
 
 ## 9) Cron（定时任务）
 
 进入 **Cron**：
 
-![](annotated-screenshots/cron.jpg)
+![](redacted-screenshots/cron.jpg)
 
 用途：
 - 查看有哪些健康检查/更新/备份任务
@@ -264,4 +264,4 @@ OCM 内置一个 CLI 面板，用来直接运行 OpenClaw 命令（例如：`ope
 
 ## 附：截图说明
 
-本文截图来自 `docs/annotated-screenshots/`，已做脱敏（路径用户名、Telegram 绑定 ID 等均已模糊处理）。
+本文截图来自 `docs/redacted-screenshots/`，已做脱敏（路径用户名、Telegram 绑定 ID 等均已模糊处理）。