feat(onboarding): WSL local gateway setup, onboarding wizard, and security hardening#274

Merged

shanselman merged 59 commits into

openclaw:masterfrom

indierawk2k2:feat/wsl-gateway-clean

May 8, 2026

Commits on May 4, 2026

feat(shared): port DeviceIdentity with role-specific operator/node tokens (Phase 1)

Mike Harsh
and
Copilot
committed
fix(shared): close Phase 1 punch list — scope persistence + role validation

Mike Harsh
and
Copilot
committed
feat(shared): port OpenClawGatewayClient — bootstrap + role-specific reconnect (Phase 2.1)

Mike Harsh
and
Copilot
committed
feat(shared): port WindowsNodeClient — auth.deviceToken reconnect (Phase 2.2)

Mike Harsh
and
Copilot
committed
feat(tray): port LocalGatewaySetup with loopback-only WSL setup

Mike Harsh
and
Copilot
committed
fix(tray): close Phase 3 punch list — strip worker vocabulary, gate distro override

Mike Harsh
and
Copilot
committed
feat(tray): wire setup engine + shared identity path in App startup (Phase 4)

Mike Harsh
and
Copilot
committed
feat(onboarding): add SetupWarning + LocalSetupProgress routes and SetupPath state (Phase 5.1)

Mike Harsh
and
Copilot
committed
feat(onboarding): SetupWarningPage with folded security notice (Phase 5.2)

Mike Harsh
and
Copilot
committed
feat(onboarding): LocalSetupProgressPage bound to LocalGatewaySetup engine (Phase 5.3)

Mike Harsh
and
Copilot
committed
chore(onboarding): remove WelcomePage (folded into SetupWarning) (Phase 5.4)

Mike Harsh
and
Copilot
committed
feat(scripts): port validate-wsl-gateway.ps1 - 4 scenarios, loopback-only, no rootfs (Phase 6)

Mike Harsh
and
Copilot
committed
feat(scripts): port reset-openclaw-wsl-validation-state.ps1 -- exact-target gated cleanup (Phase 7)

Aaron
and
Copilot
committed
fix(onboarding): drop time estimate + clean orphan Welcome resw entries (Phase 5 fast-follow)

Mattingly
and
Copilot
committed
docs(wsl): port wsl-owner-validation + wsl-owner-open-issues with Craig's answers (Phase 8)

Mike Harsh
and
Copilot
committed

Commits on May 5, 2026

feat(onboarding): localize SetupWarning + LocalSetupProgress strings (fr-fr/nl-nl/zh-cn/zh-tw)

Mike Harsh
and
Copilot
committed
feat(onboarding): nav-bar Next/Back policy on LocalSetupProgressPage per state (Phase 5 final)

Mike Harsh
and
Copilot
committed
fix(shared): bootstrap-token wire-format consistency between gateway mint and tray pair (Bug 1 from e2e drive)

Mike Harsh
and
Copilot
committed
fix(onboarding): LocalSetupProgressPage stage advancement + FailedRetryable rendering (Bug 2 from e2e drive)

Mike Harsh
and
Copilot
committed
fix(setup): operator-pair approval against CLI v2026.5.3-1 ensureExplicitGatewayAuth (Bug 1 residual)

Aaron
and
Copilot
committed
fix(setup): two-stage operator approve (preview + explicit requestId) against CLI v2026.5.3-1 (Bug 1 part 3)

Mike Harsh
and
Copilot
committed
fix(setup): retry stage-1 approve preview on first-call race + surface stderr in failure (Bug 1 part 4)

Mike Harsh
and
Copilot
committed
fix(setup): read gateway token in C# and interpolate as shell literal; surface stdout (Bug 1 part 5)

Mike Harsh
and
Copilot
committed
fix(setup): treat valid preview JSON as stage-1 success regardless of exit code (Bug 1 final)

Mike Harsh
and
Copilot
committed
fix(setup): wire pending-device approver into Phase 14 role-upgrade pairing (Bug 3)

Mike Harsh
and
Copilot
committed
fix(onboarding): keep Wizard in route for Local autopair + seed GatewayClient (Bug #1 from manual test)

Mike Harsh
and
Copilot
committed
fix(onboarding): suppress Pending toast during Phase 14 auto-approve (Bug #2 from manual test)

Mike Harsh
and
Copilot
committed
fix(quicksend): resolve gateway client per-send to avoid stale-snapshot clipboard toast (Bug #3 from manual test)

Mike Harsh
and
Copilot
committed
fix(app): broaden gateway client credential resolver -- Token -> BootstrapToken -> DeviceIdentity (Bug #4 from manual test)

Mike Harsh
and
Copilot
committed
chore(onboarding): add diagnostics around LocalSetupProgress→Wizard advance (Bug #5 instrumentation)

Mike Harsh
and
Copilot
committed
fix(tray): make UseEffect mount-once effects actually run (Bug #5)

Mike Harsh
and
Copilot
committed
fix(tray): standard local-loopback admin pair via deterministic CLI approve (Bug #6)

Mike Harsh
and
Copilot
committed
fix(tray): persist shared gateway token via existing settings pattern (Bug #6 root cause)

Mike Harsh
and
Copilot
committed

Commits on May 6, 2026

fix(tray): wizard channel-pairing hang recovery (mirror macOS pattern)

Mike Harsh
and
Copilot
committed
fix(tray): keep wizard recovery guard set after recovery failure (Mattingly)

Mike Harsh
and
Copilot
committed
fix(wizard): remove invented first-option selection and gate Continue on real input

Mike Harsh
and
Copilot
committed
fix(scripts,docs): align validation env-var + remove agent planning artifact

Mike Harsh
and
Copilot
committed
fix(security): pass gateway token via env not argv

Mike Harsh
and
Copilot
committed
chore(wizard): add Phase 1 diagnostic logging for radiobutton + recovery investigation

Mike Harsh
and
Copilot
committed
fix(wizard): cache option arrays + use wizard.next for recovery resume

Mike Harsh
and
Copilot
committed
fix(wizard): wait for gateway reconnect before wizard.next to prevent step-0 loopback

Mike Harsh
and
Copilot
committed
chore(dev): add reset+rebuild+launch script and skill for the dev loop

Mike Harsh
and
Copilot
committed

Commits on May 7, 2026

fix(onboarding): gate easy-button local setup behind existing-config detection (PR #274 must-fix #6)

Mike Harsh
and
Copilot
committed
chore(repo): untrack .squad/ agent coordination artifacts and add to .gitignore

Mike Harsh
and
Copilot
committed
fix(onboarding): align engine fail-closed to full existing-config guard + add CancellationToken to WaitForConnectionAsync

Mike Harsh
and
Copilot
committed
Merge branch 'master' into feat/wsl-gateway-clean

Mike Harsh
and
Copilot
committed
fix(tray): initialize tray icon BEFORE onboarding to survive fresh-box wizard exceptions

Mike Harsh
and
Copilot
committed
fix(onboarding): skip chat-preview step + auto-launch chat on Finished if model configured

Mike Harsh
and
Copilot
committed
Merge origin/master into feat/wsl-gateway-clean

Mike Harsh
and
Copilot
committed
Fix bugs 4, 5 from PR #274 smoke test

Mike Harsh
and
Copilot
committed
Fix bugs 1, 2, 3 from PR #274 smoke test

Mike Harsh
and
Copilot
committed
Wire BootstrapMessageInjector call site in App.ShowChatWindow

Mike Harsh
and
Copilot
committed

Commits on May 8, 2026

Fix "checking system" wizard hang on wsl.exe stdout drain

Mike Harsh
and
Copilot
committed
Actually fix onboarding finish and bootstrap

Mike Harsh
and
Copilot
committed
Fix quick chat credentials and pairing toast dedupe

Mike Harsh
and
Copilot
committed
Launch hub chat after onboarding

Mike Harsh
and
Copilot
committed
Harden onboarding hub chat launch

Mike Harsh
and
Copilot
committed
Merge remote-tracking branch 'origin/master' into feat/wsl-gateway-clean
Mike Harsh
committed
Fix WSL validation tray launch path

shanselman
and
Copilot
committed