a395c757ab
Chat UI: guard compact retries
2026-03-24 10:58:09 -07:00
19093112ce
Chat UI: tighten compact transport handling
2026-03-24 10:58:09 -07:00
44e27c6092
Webchat: handle bare /compact as session compaction
2026-03-24 10:58:09 -07:00
a710366e9e
feat(ui): Control UI polish — skills revamp, markdown preview, agent workspace, macOS config tree ( #53411 ) thanks @BunsDev
...
Co-authored-by: BunsDev <68980965+BunsDev@users.noreply.github.com>
Co-authored-by: Nova <nova@openknot.ai>
2026-03-24 01:21:13 -05:00
5ab3782215
fix: add config clobber forensics
2026-03-24 04:50:30 +00:00
dc4d2ca263
build: prepare 2026.3.24
2026-03-23 21:05:59 -07:00
6c58277577
build: prepare 2026.3.23
2026-03-23 12:58:00 -07:00
870b0d216a
build: prepare 2026.3.23-beta.1
2026-03-23 11:54:49 -07:00
8b02ef1332
fix(android): gate canvas bridge to trusted pages ( #52722 )
...
* fix(android): gate canvas bridge to trusted pages
* fix(changelog): note android canvas bridge gating
* Update apps/android/app/src/main/java/ai/openclaw/app/node/CanvasActionTrust.kt
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
* fix(android): snapshot canvas URL on UI thread
---------
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-03-23 01:24:51 -07:00
4d50084c6e
fix(exec): escape invisible approval filler chars
2026-03-22 22:52:14 -07:00
412a3eb1ac
build: bump version to 2026.3.22
2026-03-22 11:58:33 -07:00
4113db7d78
fix(protocol): sync generated swift bindings
2026-03-22 11:58:25 -07:00
719bfb46ff
style: format macos sources for ci
2026-03-22 17:32:30 +00:00
d551d8b8f7
fix: make Android current-location callback cancellation-safe ( #52318 ) (thanks @Kaneki-x)
...
* Android: make current-location callback cancellation-safe
* fix: make Android current-location callback cancellation-safe (#52318 ) (thanks @Kaneki-x)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-22 22:40:45 +05:30
c7788773bf
fix: serialize TalkModeManager player cleanup ( #52310 ) (thanks @Kaneki-x)
...
* Android: fix MediaPlayer double-release race in TalkModeManager
* Android: guard currentPosition read against concurrent player release
* fix: serialize TalkModeManager player cleanup
* fix: serialize TalkModeManager player cleanup (#52310 ) (thanks @Kaneki-x)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-22 22:31:30 +05:30
a94ec3b79b
fix(security): harden exec approval boundaries
2026-03-22 09:35:25 -07:00
8790c54635
fix(android): use scheme default port for gateway setup URLs ( #43540 )
...
* fix(android): use scheme default port for gateway setup URLs
* test(android): cover gateway endpoint default ports
* fix(android): preserve direct gateway default port
* fix(android): preserve explicit cleartext port display
* fix: preserve Android gateway setup URL ports (#43540 ) (thanks @fmercurio)
---------
Co-authored-by: clawdia <clawdia@fmercurio.tech>
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-22 10:21:38 +05:30
e7e4c68caf
Android: update status bar appearance in OpenClawTheme ( #51098 )
...
* Android: update status bar appearance in OpenClawTheme
* fix: update Android status bar appearance (#51098 ) (thanks @goweii)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-22 09:33:24 +05:30
1e98dbcad3
Android: fix Bitmap memory leaks in PhotosHandler ( #41888 )
...
* Android: fix Bitmap memory leaks in PhotosHandler
Bitmaps created by decodeScaledBitmap and intermediate scaled copies
inside encodeJpegUnderBudget were never recycled, leaking native memory
on every photos.latest invocation (up to 20 bitmaps per call).
- latest(): wrap bitmap usage in try/finally to guarantee recycle
- decodeScaledBitmap(): recycle the decoded bitmap after scaling
- encodeJpegUnderBudget(): use try/finally to recycle intermediate
scaled bitmaps on all exit paths (success, compress failure, and
cannot-shrink-further early returns)
Made-with: Cursor
* Android: guard decodeScaledBitmap against scale() exceptions
* fix: note Android photos bitmap cleanup (#41888 ) (thanks @Kaneki-x)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-22 08:53:26 +05:30
2909d8cd12
Android: fix Bitmap memory leaks in CanvasController snapshots ( #41889 )
...
* Android: fix Bitmap memory leaks in CanvasController snapshots
snapshotPngBase64() and snapshotBase64() create bitmaps via
captureBitmap() and scaleForMaxWidth() but never recycle them,
leaking native memory on every canvas snapshot invocation.
Wrap both methods in nested try/finally blocks:
- outer: always recycles the captured bitmap
- inner: recycles the scaled bitmap only when it differs from the
captured one (scaleForMaxWidth returns `this` when no scaling needed)
Made-with: Cursor
* fix: note Android canvas snapshot bitmap leak in changelog (#41889 ) (thanks @Kaneki-x)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-22 08:50:42 +05:30
88da51d91b
Android: fix temp file leak in CameraHandler.handleClip ( #41890 )
...
* Android: fix temp file leak in CameraHandler.handleClip
When readBytes() throws (IOException, OOM, etc.), the recorded clip
file was never deleted because delete() only ran on the success path.
Move file.delete() into a finally block so the temp file is cleaned up
regardless of whether readBytes() succeeds or fails.
Made-with: Cursor
* fix: Android camera clip cleanup (#41890 ) (thanks @Kaneki-x)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-22 08:49:50 +05:30
f7866c1c15
Android: escape SQL LIKE wildcards in contacts search query
...
The contacts search passed user input directly into a LIKE pattern
without escaping % and _ characters, causing them to act as SQL
wildcards and return incorrect results.
Add an escapeLikePattern() helper that escapes \, %, and _ with a
backslash, and add ESCAPE '\' to the selection clause so SQLite
treats them as literal characters.
Made-with: Cursor
2026-03-22 08:48:29 +05:30
d38561acbe
Android: fix Bitmap memory leaks in CameraCaptureManager.snap
2026-03-22 08:44:06 +05:30
d6346aaf63
Android: fix sensor callback race condition in MotionHandler ( #43781 )
...
* Android: fix sensor callback race in MotionHandler using tryResume
* call completeResume before unregisterListener to avoid coroutine leak
* replace internal tryResume/completeResume with AtomicBoolean guard
* use CancellableContinuation.resume(value, onCancellation) for cancellation safety
* use non-deprecated resume overload for kotlinx.coroutines 1.10+
* fix: simplify Android motion continuation resume
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-22 08:41:02 +05:30
e7814f7ba0
Android: fix incomplete JS string escaping in A2UI action status ( #43784 )
...
* Android: fix incomplete JS string escaping in A2UI action status
* escape U+2028/U+2029 Unicode line terminators in JS strings
* refactor(android): serialize A2UI action status strings
* fix: serialize Android A2UI action status strings (#43784 ) (thanks @Kaneki-x)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-22 08:39:53 +05:30
b67baae1f6
fix: make permission rationale completion single-shot
2026-03-22 08:34:02 +05:30
6db72746fb
Android: keep permission dialog cleanup on the main thread
2026-03-22 08:34:02 +05:30
518d2dd6a9
Android: harden permission dialogs across activity teardown
2026-03-22 08:34:02 +05:30
2fd372836e
iOS: improve QR pairing flow ( #51359 )
...
- improve QR pairing UX and bootstrap token handling
- preserve repeated optimistic user messages during refresh
- add regression coverage for refresh reconciliation
Thanks @ImLukeF
2026-03-21 01:10:29 -05:00
7abfff756d
Exec: harden host env override handling across gateway and node ( #51207 )
...
* Exec: harden host env override enforcement and fail closed
* Node host: enforce env override diagnostics before shell filtering
* Env overrides: align Windows key handling and mac node rejection
2026-03-20 15:44:15 -05:00
4c60956d8e
build(android): update Gradle tooling
2026-03-20 17:12:10 +05:30
3bda64f75c
perf(android): reduce tab-switch CPU churn
2026-03-20 17:10:18 +05:30
0c2e6fe97f
ci(android): use explicit flavor debug tasks
2026-03-20 12:55:52 +05:30
f09f98532c
feat(android): hide restricted capabilities in play builds
2026-03-20 12:45:25 +05:30
ecec0d5b2c
build(android): add play and third-party release flavors
2026-03-20 12:45:25 +05:30
a73e517ae3
build(protocol): regenerate swift talk models
2026-03-20 11:12:53 +05:30
2afd65741c
fix: preserve talk provider and speaking state
2026-03-20 11:08:21 +05:30
47e412bd0b
fix(review): preserve talk directive overrides
2026-03-20 11:01:24 +05:30
4a0341ed03
fix(review): address talk cleanup feedback
2026-03-20 11:01:24 +05:30
4386a0ace8
refactor(android): remove legacy elevenlabs talk stack
2026-03-20 11:01:24 +05:30
e3afaca1a6
refactor(android): route talk playback through gateway
2026-03-20 11:01:24 +05:30
f7fe75a68b
refactor(android): simplify talk config parsing
2026-03-20 11:01:24 +05:30
bfe979dd5b
refactor: add Android LocationHandler test seam ( #50027 ) (thanks @xu-baolin)
2026-03-19 20:57:43 +05:30
c4a4050ce4
fix(macos): align exec command parity ( #50386 )
...
* fix(macos): align exec command parity
* fix(macos): address exec review follow-ups
2026-03-19 13:51:17 +02:00
040c43ae21
feat(android): benchmark script
2026-03-19 13:13:14 +05:30
0443ee82be
fix(android): auto-connect gateway on app open
2026-03-19 12:49:18 +05:30
608b9a9af2
fix(android): show copyable gateway diagnostics
2026-03-19 10:47:12 +05:30
19126033dd
build: regenerate protocol swift models
2026-03-19 03:38:35 +00:00
c86de678f3
feat(android): support android node sms.search ( #48299 )
...
* feat(android): support android node sms.search
* feat(android): support android node sms.search
* fix(android): split sms search permissions
* fix: document android sms.search landing (#48299 ) (thanks @lixuankai)
---------
Co-authored-by: lixuankai <lixuankai@oppo.com>
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-19 08:52:15 +05:30
089a43f5e8
fix(security): block build-tool and glibc env injection vectors in host exec sandbox ( #49702 )
...
Add GLIBC_TUNABLES, MAVEN_OPTS, SBT_OPTS, GRADLE_OPTS, ANT_OPTS,
DOTNET_ADDITIONAL_DEPS to blockedKeys and GRADLE_USER_HOME to
blockedOverrideKeys in the host exec security policy.
Closes #22681
2026-03-18 13:11:01 +01:00
scoootscooob
Val Alexander
Peter Steinberger
Vincent Koc
Kaneki
Felippe Mercurio
Goweii
Ayaan Zaidi
Josh Avant
xubaolin
Nimrod Gutman
lixuankai
Andrew Demczuk