romtuck/openclaw
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
01b5a757d9
openclaw/apps/android
History
ronitchidara 56926e73ec security: wire transformation phase audit fixes 
Fix all 7 issues identified in the ChatGPT audit of transformation work:

1. Android build break: Remove duplicate normalizeMainKey/isCanonicalMainSessionKey
   from NodeGatewaySync.kt (they're already in SessionKey.kt). Align both Android
   and iOS implementations to use "main" as canonical (case-insensitive match).

2. Rate limiting: Wire rateLimiter through GatewayRequestContext and enforce:
   - Auth failure backoff (recordAuthFailure on auth failure, clearAuthFailure on success)
   - Request rate limiting before handleGatewayRequest
   - Channel message rate limiting in send handler
   - Add TOO_MANY_REQUESTS error code

3. Injection defenses: Call sanitizeIncomingMessage in chat.send and chat.inject
   handlers to detect prompt injection attempts.

4. RBAC enforcement: Add canAccessAgent check in chat.send handler and
   canExecuteCommand check in node-host runner for exec commands.

5. WhatsApp encrypted backup restore: Update maybeRestoreCredsFromBackup to
   handle encrypted backup files (.bak.enc -> .json.enc restoration).

6. Exec blocklist bypass: Add evaluateBlocklist check in argv-only code path
   in runner.ts (previously only checked for rawCommand path).

7. iOS voice transcript: Fix line 329 in NodeAppModel.swift to use computed
   'key' variable instead of original 'sessionKey' parameter.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-28 17:01:41 +05:30
..
app security: wire transformation phase audit fixes 2026-01-28 17:01:41 +05:30
gradle/wrapper chore(android): update toolchain and deps 2025-12-14 02:37:47 +00:00
.gitignore feat(android): add Compose node app (bridge+canvas+chat+camera) 2025-12-14 01:55:40 +00:00
build.gradle.kts mobile: Phase 4 polish - refactoring, app store prep, and infrastructure 2026-01-28 17:01:20 +05:30
gradle.properties Android: add Voice Wake (foreground/always) 2025-12-18 02:08:57 +01:00
gradlew Android: add Voice Wake (foreground/always) 2025-12-18 02:08:57 +01:00
gradlew.bat Android: add Voice Wake (foreground/always) 2025-12-18 02:08:57 +01:00
README.md fix: shorten bonjour gateway service type 2026-01-20 15:10:06 +00:00
settings.gradle.kts refactor: rename clawdbot to moltbot with legacy compat 2026-01-27 12:21:02 +00:00

README.md

Clawdbot Node (Android) (internal)

Modern Android node app: connects to the Gateway WebSocket (_clawdbot-gw._tcp) and exposes Canvas + Chat + Camera.

Notes:

  • The node keeps the connection alive via a foreground service (persistent notification with a Disconnect action).
  • Chat always uses the shared session key main (same session across iOS/macOS/WebChat/Android).
  • Supports modern Android only (minSdk 31, Kotlin + Jetpack Compose).

Open in Android Studio

  • Open the folder apps/android.

Build / Run

cd apps/android
./gradlew :app:assembleDebug
./gradlew :app:installDebug
./gradlew :app:testDebugUnitTest

gradlew auto-detects the Android SDK at ~/Library/Android/sdk (macOS default) if ANDROID_SDK_ROOT / ANDROID_HOME are unset.

Connect / Pair

  1. Start the gateway (on your “master” machine):
pnpm clawdbot gateway --port 18789 --verbose
  1. In the Android app:
  • Open Settings
  • Either select a discovered gateway under Discovered Gateways, or use Advanced → Manual Gateway (host + port).
  1. Approve pairing (on the gateway machine):
clawdbot nodes pending
clawdbot nodes approve <requestId>

More details: docs/platforms/android.md.

Permissions

  • Discovery:
    • Android 13+ (API 33+): NEARBY_WIFI_DEVICES
    • Android 12 and below: ACCESS_FINE_LOCATION (required for NSD scanning)
  • Foreground service notification (Android 13+): POST_NOTIFICATIONS
  • Camera:
    • CAMERA for camera.snap and camera.clip
    • RECORD_AUDIO for camera.clip when includeAudio=true