Val Alexander
36df0d93b9
fix: repair iOS LAN pairing
...
Fix iOS LAN/setup-code pairing policy for #47887 .
- Allow explicit private LAN and .local plaintext ws:// setup/manual connects where policy allows it.
- Keep public hosts, .ts.net, and Tailscale CGNAT plaintext fail-closed.
- Prefer explicit passwords over stale bootstrap tokens in Swift and TypeScript gateway clients.
- Update setup-code/device-pair coverage, docs, and changelog with source credit for #65185 .
Verification:
- pnpm install
- git diff --check origin/main..HEAD
- pnpm exec oxfmt --check --threads=1 src/gateway/client.ts src/gateway/client.test.ts src/pairing/setup-code.ts src/pairing/setup-code.test.ts extensions/device-pair/index.ts extensions/device-pair/index.test.ts
- pnpm format:docs:check
- pnpm test src/gateway/client.test.ts src/pairing/setup-code.test.ts extensions/device-pair/index.test.ts
- cd apps/shared/OpenClawKit && swift test --filter 'DeepLinksSecurityTests|GatewayNodeSessionTests'
- pnpm lint:swift passes with the existing TalkModeRuntime.swift type-body-length warning
Blocked locally:
- iOS app-target xcodebuild tests require unavailable watchOS 26.4 runtime here.
- Testbox check:changed previously failed because the image lacks swiftlint; local swiftlint passes.
2026-05-05 21:07:19 -05:00
Pavan Kumar Gondhi
37c0520a0b
fix(device-pair): require pairing scope for pair command [AI] ( #76377 )
...
* fix: restrict device pairing command access
* addressing review-skill
* addressing review-skill
* addressing codex review
* address codex review feedback
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* docs: add changelog entry for PR merge
2026-05-04 22:12:06 +05:30
Val Alexander
b2efd19648
fix(ios): harden gateway pairing setup
...
Harden iOS gateway setup-code pairing by rejecting non-loopback plaintext ws:// setup URLs before bootstrap token issuance, consolidating iOS setup parsing, and adding QR scan support from Settings.
Verification:
- pnpm test extensions/device-pair/index.test.ts
- swift test --package-path apps/shared/OpenClawKit --filter DeepLinksSecurityTests
- XcodeBuildMCP OpenClawLogicTests/DeepLinkParserTests
- targeted SwiftLint for touched iOS/OpenClawKit files
- pnpm exec oxfmt --check --threads=1 extensions/device-pair/index.ts extensions/device-pair/index.test.ts
- git diff --check origin/main...HEAD
- GitHub PR checks green on 58e5e60a5c
2026-05-04 02:11:47 -05:00
Peter Steinberger
0f5648bf0d
refactor: trim secret contract type imports
2026-05-01 20:34:18 +01:00
clawsweeper[bot]
7c51cd2baf
fix(device-pair): reject invalid remote setup URLs
...
Fail setup-code generation when gateway.remote.url is configured but malformed, instead of falling back to a bind-derived URL and issuing a bootstrap token.
2026-04-29 20:45:33 +01:00
Simone
dabf76b3de
fix(device-pair): validate public setup urls ( #74538 )
...
* fix(device-pair): validate public setup urls
* test(cli): cover invalid qr override urls
---------
Co-authored-by: Lucenx9 <185146821+Lucenx9@users.noreply.github.com >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-04-29 19:47:35 +01:00
Peter Steinberger
90b6665ded
refactor: move plugin api test helper to sdk
2026-04-28 00:24:54 +01:00
Vincent Koc
1daa552d5f
refactor(qr): share PNG data URL helpers ( #70784 )
2026-04-23 15:41:45 -07:00
Val Alexander
43a941b51c
fix(pair): render /pair qr as media ( #70047 )
...
* fix(pair): render pair qr as media
* fix(gateway): preserve media reply threading
* fix(gateway): harden webchat media replies
* fix(plugin-sdk): keep trustedLocalMedia internal
* docs(changelog): note pair qr media fix
* Update CHANGELOG with recent fixes and enhancements
Updated changelog to include recent fixes and enhancements.
2026-04-22 03:31:09 -05:00
Peter Steinberger
99a896797f
test: share device pair approval fixtures
2026-04-20 18:20:43 +01:00
Ayaan Zaidi
5c1d6feb33
test(plugins): fix sync register call sites
2026-04-17 10:14:00 +05:30
Peter Steinberger
dfe4c2d16d
chore: enable no-floating-promises
2026-04-10 20:14:49 +01:00
Peter Steinberger
6c82a91d3d
refactor: tighten device pairing approval types
2026-04-10 10:22:00 +01:00
Peter Steinberger
af62a2c2e4
style: fix extension lint violations
2026-04-06 14:53:55 +01:00
Peter Steinberger
05da802e1c
refactor: split device-pair command helpers
2026-04-04 19:55:04 +09:00
Peter Steinberger
20a7b1a9dc
fix: finalize device-pair scope hardening ( #55996 ) (thanks @coygeek)
2026-04-04 19:44:43 +09:00
Coy Geek
9dcef6df02
fix: scope pairing guard to internal gateway callers
2026-04-04 19:44:43 +09:00
Coy Geek
05ca581ed0
fix: fail closed when pairing scopes are missing
2026-04-04 19:44:43 +09:00
Coy Geek
353d93613c
fix: enforce pairing approval scopes
2026-04-04 19:44:43 +09:00
Agustin Rivera
cb0b15a195
fix(pair): guard setup fallback subcommands
2026-04-04 16:24:10 +09:00
Agustin Rivera
83e5fe5e8b
fix(pair): enforce pairing scope for setup commands
2026-04-04 16:24:10 +09:00
Peter Steinberger
63cbc097b5
refactor(channels): route core through registered plugin capabilities
2026-03-30 01:03:42 +01:00
Peter Steinberger
8e0ab35b0e
refactor(plugins): decouple bundled plugin runtime loading
2026-03-29 09:10:38 +01:00
Tak Hoffman
85cf23a9d6
fix(regression): allow external device pair approvals
2026-03-27 16:07:54 -05:00
Jacob Tomlinson
4ee4960de2
Pairing: forward caller scopes during approval ( #55950 )
...
* Pairing: require caller scopes on approvals
* Gateway: reject forbidden silent pairing results
2026-03-27 18:55:33 +00:00
Peter Steinberger
410c2dba65
test: collapse provider plugin suites
2026-03-25 04:25:02 +00:00
Peter Steinberger
3a1b517581
fix: repair CI regression checks
2026-03-25 00:20:24 +00:00
Peter Steinberger
04c69ea3a0
refactor: reuse canonical setup bootstrap profile
2026-03-23 00:15:55 -07:00
Peter Steinberger
a600c72ed7
fix: bind bootstrap setup codes to node profile
2026-03-22 23:57:15 -07:00
Josh Lehman
3fe96c7b9e
device-pair: align internal command checks
2026-03-22 17:56:33 -07:00
Peter Steinberger
090ac8831f
test: tighten pairing and phone control assertions
2026-03-22 17:07:20 +00:00
Val Alexander
2fd372836e
iOS: improve QR pairing flow ( #51359 )
...
- improve QR pairing UX and bootstrap token handling
- preserve repeated optimistic user messages during refresh
- add regression coverage for refresh reconciliation
Thanks @ImLukeF
2026-03-21 01:10:29 -05:00
