Files
openclaw/apps
Peter Steinberger f8f68d1645 fix(android): move device identity key into encrypted storage (#110939)
* fix(android): move device identity key into encrypted storage

Migrates the plaintext openclaw/identity/device.json Ed25519 signing key
into EncryptedSharedPreferences with a verified one-time import (synchronous
write, readback check, then plaintext delete) and no fallback reader.
Persistence failures now fail closed instead of silently continuing.
Documents why the cleartext NSC base-config must stay: NSC domain rules
cannot express user-selected RFC1918 gateway endpoints and OkHttp enforces
the policy, so GatewayHostSecurity remains the cleartext gate.

* fix(android): suppress UseKtx on synchronous identity commit

KTX edit(commit = true) discards commit's Boolean; the identity migration
fails closed on that result.
2026-07-18 18:23:27 -07:00
..