Skip to content

v0.0.9

Choose a tag to compare

View all tags
@github-actions github-actions released this 22 Mar 19:27
· 309 commits to main since this release
v0.0.9
61032d9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

✨ What's New

  • 🆔 Device-scoped sessions with title sync — Sessions are now scoped by device ID, preventing cross-device session collisions. Task titles sync back to the server for a consistent view across reconnects. by @samzong in #119

🎨 UI Polish

  • 📐 Typography scale rework — Switched to a 16px root base with a consistent modular scale. Zoom level now persists across restarts. by @samzong in #129

🔒 Security Fixes

  • Fixed path traversal in extracted artifact filenames by @samzong in #120
  • Fixed symlink traversal in path validation and directory scanning by @samzong in #115
  • Blocked SSRF and unbounded memory in remote image auto-fetch by @samzong in #123
  • Added WebSocket frame shape validation before dispatching events by @samzong in #117
  • Eliminated TOCTOU race in artifact file naming via serialized git operations by @samzong in #112
  • Added file path validation in URL scheme handlers by @samzong in #114
  • Fixed path traversal, migration state corruption, and config credential exposure by @samzong in #111
  • Redacted pairing and bootstrap credentials in debug bundle export by @samzong in #125

🐛 Bug Fixes

  • Fixed Windows gateway connection failure — now trusts system root certificates by @samzong in #136
  • Replaced hardcoded main agent fallback with gateway catalog defaultId and added response timeout by @samzong in #134
  • Stabilized gateway sync and persisted tool-call state across reconnects by @samzong in #133
  • Eliminated message duplication caused by client-server timestamp mismatch in post-final sync by @samzong in #128
  • Prevented message duplication on startup via hydration serialization and DB unique index by @samzong in #126
  • Fixed database migration copy consistency — close DB before snapshot by @samzong in #121
  • Cleared stale stream state on reset and deferred user message persistence until send success by @samzong in #124
  • Reconciled partial history instead of skipping already-synced tasks by @samzong in #122
  • Reinitialized database on workspace setup to prevent stale connection by @samzong in #116
  • Fixed IPC listener leak — onArtifactSaved now returns a cleanup function by @samzong in #113
  • Added try/catch to ws:abort-chat handler to prevent main process crash by @samzong in #110

📥 Download

Platform File
🍎 macOS Universal ClawWork-0.0.9-mac-universal.dmg
🪟 Windows x64 ClawWork-0.0.9-win-x64.exe

macOS: App is signed and notarized — opens normally on first launch.

Windows: If SmartScreen warns "unrecognized app", click More info → Run anyway.

🙏 Contributors

We welcome more contributors — come help make ClawWork better → Contributing Guide

Full Changelog: v0.0.8...v0.0.9

Contributors

samzong
Assets 7
Loading