Val Alexander
36df0d93b9
fix: repair iOS LAN pairing
...
Fix iOS LAN/setup-code pairing policy for #47887 .
- Allow explicit private LAN and .local plaintext ws:// setup/manual connects where policy allows it.
- Keep public hosts, .ts.net, and Tailscale CGNAT plaintext fail-closed.
- Prefer explicit passwords over stale bootstrap tokens in Swift and TypeScript gateway clients.
- Update setup-code/device-pair coverage, docs, and changelog with source credit for #65185 .
Verification:
- pnpm install
- git diff --check origin/main..HEAD
- pnpm exec oxfmt --check --threads=1 src/gateway/client.ts src/gateway/client.test.ts src/pairing/setup-code.ts src/pairing/setup-code.test.ts extensions/device-pair/index.ts extensions/device-pair/index.test.ts
- pnpm format:docs:check
- pnpm test src/gateway/client.test.ts src/pairing/setup-code.test.ts extensions/device-pair/index.test.ts
- cd apps/shared/OpenClawKit && swift test --filter 'DeepLinksSecurityTests|GatewayNodeSessionTests'
- pnpm lint:swift passes with the existing TalkModeRuntime.swift type-body-length warning
Blocked locally:
- iOS app-target xcodebuild tests require unavailable watchOS 26.4 runtime here.
- Testbox check:changed previously failed because the image lacks swiftlint; local swiftlint passes.
2026-05-05 21:07:19 -05:00
Peter Steinberger
538605ff44
[codex] Extract filesystem safety primitives ( #77918 )
...
* refactor: extract filesystem safety primitives
* refactor: use fs-safe for file access helpers
* refactor: reuse fs-safe for media reads
* refactor: use fs-safe for image reads
* refactor: reuse fs-safe in qqbot media opener
* refactor: reuse fs-safe for local media checks
* refactor: consume cleaner fs-safe api
* refactor: align fs-safe json option names
* fix: preserve fs-safe migration contracts
* refactor: use fs-safe primitive subpaths
* refactor: use grouped fs-safe subpaths
* refactor: align fs-safe api usage
* refactor: adapt private state store api
* chore: refresh proof gate
* refactor: follow fs-safe json api split
* refactor: follow reduced fs-safe surface
* build: default fs-safe python helper off
* fix: preserve fs-safe plugin sdk aliases
* refactor: consolidate fs-safe usage
* refactor: unify fs-safe store usage
* refactor: trim fs-safe temp workspace usage
* refactor: hide low-level fs-safe primitives
* build: use published fs-safe package
* fix: preserve outbound recovery durability after rebase
* chore: refresh pr checks
2026-05-06 02:15:17 +01:00
Pavan Kumar Gondhi
37c0520a0b
fix(device-pair): require pairing scope for pair command [AI] ( #76377 )
...
* fix: restrict device pairing command access
* addressing review-skill
* addressing review-skill
* addressing codex review
* address codex review feedback
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* docs: add changelog entry for PR merge
2026-05-04 22:12:06 +05:30
Val Alexander
b2efd19648
fix(ios): harden gateway pairing setup
...
Harden iOS gateway setup-code pairing by rejecting non-loopback plaintext ws:// setup URLs before bootstrap token issuance, consolidating iOS setup parsing, and adding QR scan support from Settings.
Verification:
- pnpm test extensions/device-pair/index.test.ts
- swift test --package-path apps/shared/OpenClawKit --filter DeepLinksSecurityTests
- XcodeBuildMCP OpenClawLogicTests/DeepLinkParserTests
- targeted SwiftLint for touched iOS/OpenClawKit files
- pnpm exec oxfmt --check --threads=1 extensions/device-pair/index.ts extensions/device-pair/index.test.ts
- git diff --check origin/main...HEAD
- GitHub PR checks green on 58e5e60a5c
2026-05-04 02:11:47 -05:00
Peter Steinberger
86fc9e3279
perf: trim gateway startup plugin imports
2026-05-04 07:32:37 +01:00
Peter Steinberger
0f5648bf0d
refactor: trim secret contract type imports
2026-05-01 20:34:18 +01:00
Peter Steinberger
38839adaca
refactor: trim workshop helper exports
2026-05-01 20:02:23 +01:00
clawsweeper[bot]
7c51cd2baf
fix(device-pair): reject invalid remote setup URLs
...
Fail setup-code generation when gateway.remote.url is configured but malformed, instead of falling back to a bind-derived URL and issuing a bootstrap token.
2026-04-29 20:45:33 +01:00
Simone
dabf76b3de
fix(device-pair): validate public setup urls ( #74538 )
...
* fix(device-pair): validate public setup urls
* test(cli): cover invalid qr override urls
---------
Co-authored-by: Lucenx9 <185146821+Lucenx9@users.noreply.github.com >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-04-29 19:47:35 +01:00
Shakker
f1aaa2cd91
feat: declare startup plugin imports explicitly
2026-04-28 04:33:47 +01:00
Peter Steinberger
90b6665ded
refactor: move plugin api test helper to sdk
2026-04-28 00:24:54 +01:00
Vincent Koc
1daa552d5f
refactor(qr): share PNG data URL helpers ( #70784 )
2026-04-23 15:41:45 -07:00
Val Alexander
43a941b51c
fix(pair): render /pair qr as media ( #70047 )
...
* fix(pair): render pair qr as media
* fix(gateway): preserve media reply threading
* fix(gateway): harden webchat media replies
* fix(plugin-sdk): keep trustedLocalMedia internal
* docs(changelog): note pair qr media fix
* Update CHANGELOG with recent fixes and enhancements
Updated changelog to include recent fixes and enhancements.
2026-04-22 03:31:09 -05:00
Peter Steinberger
f1a544ef6d
perf: avoid sort-for-single selection
2026-04-20 23:20:31 +01:00
Peter Steinberger
99a896797f
test: share device pair approval fixtures
2026-04-20 18:20:43 +01:00
Ayaan Zaidi
5c1d6feb33
test(plugins): fix sync register call sites
2026-04-17 10:14:00 +05:30
Tak Hoffman
562025f8dc
fix: disambiguate device-pair notify subscribers
2026-04-10 19:46:23 -05:00
Tak Hoffman
1bb2807aca
fix: normalize device-pair notify thread ids
2026-04-10 19:13:00 -05:00
Peter Steinberger
7b99a6eaa7
refactor: simplify device-pair error formatting
2026-04-11 00:05:45 +01:00
Peter Steinberger
18db265ef3
refactor: remove redundant device pair conversions
2026-04-10 22:50:29 +01:00
Peter Steinberger
dfe4c2d16d
chore: enable no-floating-promises
2026-04-10 20:14:49 +01:00
Peter Steinberger
beaff3c553
fix: clarify plugin command alias diagnostics ( #64242 ) (thanks @feiskyer)
2026-04-10 14:56:12 +01:00
Peter Steinberger
6c82a91d3d
refactor: tighten device pairing approval types
2026-04-10 10:22:00 +01:00
Peter Steinberger
a93a94788a
refactor: dedupe tlon and voice-call lowercase helpers
2026-04-07 13:44:42 +01:00
Peter Steinberger
775fa78b1e
refactor: dedupe device pair readers
2026-04-07 06:42:34 +01:00
Peter Steinberger
af62a2c2e4
style: fix extension lint violations
2026-04-06 14:53:55 +01:00
Peter Steinberger
05da802e1c
refactor: split device-pair command helpers
2026-04-04 19:55:04 +09:00
Peter Steinberger
20a7b1a9dc
fix: finalize device-pair scope hardening ( #55996 ) (thanks @coygeek)
2026-04-04 19:44:43 +09:00
Coy Geek
9dcef6df02
fix: scope pairing guard to internal gateway callers
2026-04-04 19:44:43 +09:00
Coy Geek
05ca581ed0
fix: fail closed when pairing scopes are missing
2026-04-04 19:44:43 +09:00
Coy Geek
353d93613c
fix: enforce pairing approval scopes
2026-04-04 19:44:43 +09:00
Agustin Rivera
cb0b15a195
fix(pair): guard setup fallback subcommands
2026-04-04 16:24:10 +09:00
Agustin Rivera
9bb97b54fe
fix(pair): fail fast before qr setup lookup
2026-04-04 16:24:10 +09:00
Agustin Rivera
83e5fe5e8b
fix(pair): enforce pairing scope for setup commands
2026-04-04 16:24:10 +09:00
Peter Steinberger
63cbc097b5
refactor(channels): route core through registered plugin capabilities
2026-03-30 01:03:42 +01:00
Peter Steinberger
8e0ab35b0e
refactor(plugins): decouple bundled plugin runtime loading
2026-03-29 09:10:38 +01:00
Tak Hoffman
85cf23a9d6
fix(regression): allow external device pair approvals
2026-03-27 16:07:54 -05:00
Jacob Tomlinson
4ee4960de2
Pairing: forward caller scopes during approval ( #55950 )
...
* Pairing: require caller scopes on approvals
* Gateway: reject forbidden silent pairing results
2026-03-27 18:55:33 +00:00
Peter Steinberger
ef1784d264
refactor: move bundled plugin policy into manifests
2026-03-27 16:40:27 +00:00
Peter Steinberger
410c2dba65
test: collapse provider plugin suites
2026-03-25 04:25:02 +00:00
Peter Steinberger
3a1b517581
fix: repair CI regression checks
2026-03-25 00:20:24 +00:00
Kwanghee Park (hugh.k)
ac7ca52090
Gateway: harden Compose-style gateway port parsing
2026-03-24 16:51:36 -07:00
Peter Steinberger
6f6468027a
refactor: dedupe test and runtime seams
2026-03-24 23:33:30 +00:00
Peter Steinberger
04c69ea3a0
refactor: reuse canonical setup bootstrap profile
2026-03-23 00:15:55 -07:00
Peter Steinberger
a600c72ed7
fix: bind bootstrap setup codes to node profile
2026-03-22 23:57:15 -07:00
Peter Steinberger
6b9915a106
refactor!: drop legacy CLAWDBOT env compatibility
2026-03-22 22:13:39 -07:00
Josh Lehman
3fe96c7b9e
device-pair: align internal command checks
2026-03-22 17:56:33 -07:00
Peter Steinberger
090ac8831f
test: tighten pairing and phone control assertions
2026-03-22 17:07:20 +00:00
Val Alexander
2fd372836e
iOS: improve QR pairing flow ( #51359 )
...
- improve QR pairing UX and bootstrap token handling
- preserve repeated optimistic user messages during refresh
- add regression coverage for refresh reconciliation
Thanks @ImLukeF
2026-03-21 01:10:29 -05:00
Peter Steinberger
f6948ce405
refactor: shrink sdk helper surfaces
2026-03-20 15:43:14 +00:00
