Val Alexander 6a41a54212 fix(macos): harden direct gateway TLS pinning ...

Summary:
- Require macOS system trust before saving and accepting first-use direct `wss://` gateway TLS pins.
- Honor `gateway.remote.tlsFingerprint` in macOS direct node-mode TLS params.
- Add focused Swift coverage and update remote gateway docs/changelog.

Verification:
- Local: swiftformat --lint on touched Swift files.
- Local: git diff --check HEAD~1..HEAD.
- Local: swift test --package-path apps/shared/OpenClawKit --filter GatewayTLSPinningTests.
- Local: swift test --package-path apps/macos --filter 'MacNodeModeCoordinatorTests|GatewayEndpointStoreTests'.
- Local: PATH=/Users/buns/.nvm/versions/node/v24.13.0/bin:$PATH pnpm docs:list.
- CI: macos-node, macos-swift, check-docs, security-fast, security-scm-fast, security-dependency-audit, Opengrep OSS, and changed-path checks passed on PR head cf383fc047.

Fixes #50642.
Supersedes #50643.

2026-05-13 21:30:22 -05:00

..

.generated

docs: refresh config baseline hash

2026-05-13 20:59:11 +01:00

.i18n

docs: consolidate plugin install docs (#81167)

2026-05-13 13:17:39 -07:00

announcements

fix: add channel status filtering (#80706)

2026-05-11 18:44:54 +01:00

assets

Add browser and tool profile quick settings (#80609)

2026-05-11 10:06:00 +00:00

automation

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

channels

docs(channels): document bot loop protection

2026-05-13 14:59:47 +01:00

clawhub

docs: add ClawHub publishing page

2026-05-07 19:43:06 -07:00

cli

fix(codex): preserve user home for app-server launches

2026-05-13 16:37:03 -07:00

concepts

feat: steer mid-turn prompts by default (#77023)

2026-05-13 14:00:11 +01:00

debug

docs: typography hygiene across 6 pages (gateway/cli/debug)

2026-05-06 08:49:27 -07:00

diagnostics

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

gateway

fix(macos): harden direct gateway TLS pinning

2026-05-13 21:30:22 -05:00

help

test: add release qa docker lanes

2026-05-13 20:57:44 +01:00

images

feat: Streamline Feishu channel onboarding with QR code scan-to-create flow (#65680)

2026-04-13 18:03:44 +08:00

install

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

nodes

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

plan

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

platforms

fix(macos): harden direct gateway TLS pinning

2026-05-13 21:30:22 -05:00

plugins

fix(memory-lancedb): support cjk auto-capture triggers

2026-05-13 21:49:22 +01:00

providers

docs: add ds4 provider guide

2026-05-13 14:45:34 +01:00

refactor

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

reference

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

security

lint: classify raw socket callsites

2026-05-08 01:18:04 +10:00

snippets/plugin-publish

docs: show explicit startup activation in plugin examples

2026-04-28 03:13:20 +01:00

start

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

superpowers/specs

docs: complete source-backed docs sweep

2026-05-02 22:37:01 +01:00

tools

docs: consolidate plugin install docs (#81167)

2026-05-13 13:17:39 -07:00

web

feat(ui): add browser-local Control UI text size setting

2026-05-13 19:18:05 -05:00

AGENTS.md

docs: keep qa broker notes internal

2026-05-08 06:01:23 +01:00

auth-credential-semantics.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

brave-search.md

docs(brave): redirect legacy search page

2026-05-02 04:42:55 +01:00

ci.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

CLAUDE.md

docs(agents): split scoped workflow guidance (#65241)

2026-04-12 09:09:50 +01:00

date-time.md

docs: audit and fix 4 pages (pi version bump + 3 typography/H1)

2026-05-05 21:14:55 -07:00

docs.json

docs(clawhub): remove missing security route

2026-05-13 23:57:05 +01:00

index.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

logging.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

nav-tabs-underline.js

…

network.md

docs: audit and fix 4 pages (pi version bump + 3 typography/H1)

2026-05-05 21:14:55 -07:00

perplexity.md

docs: consolidate moved docs pages

2026-05-05 17:38:21 +01:00

pi-dev.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

pi.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

prose.md

docs: add Related sections to remaining platform, reference template, and misc pages

2026-04-23 20:40:15 -07:00

style.css

perf: optimize remaining core tests

2026-04-17 16:05:10 +01:00

tts.md

docs: add Related sections to remaining platform, reference template, and misc pages

2026-04-23 20:40:15 -07:00

vps.md

Docs: add VPS admin hardening note (#54685)

2026-04-29 14:36:33 -07:00

whatsapp-openclaw-ai-zh.jpg

…

whatsapp-openclaw.jpg

…