### Fixes

- iOS: restore first-use Contacts, Calendar, and Reminders permission prompts and add Privacy & Access status/actions in Settings. Thanks @BunsDev.

- Canvas: return not found for malformed percent-encoded Canvas/A2UI asset paths and keep decoded parent traversal blocked before path normalization.

- Agents: allow dot-dot-prefixed filenames such as `..note.txt` through sandbox FS bridge, remote sandbox reads, and apply_patch summaries without mistaking the name for parent traversal.

- CLI/migrate: humanize Codex conflict-status messaging across the migrate UI so selection prompts and plan/result rows say "Codex skill already installed in workspace" instead of surfacing internal `MIGRATION_REASON_*` codes. Thanks @sjf.

- CLI/migrate: render migrate result rows with distinct glyphs for manual-review (🔍) and archive (📖) items instead of the misleading "skipped" and "migrated" checkmarks, so users can see which entries still need attention versus which were filed away. Thanks @sjf.

it("rejects traversal paths", async () => {

await withCanvasTemp("openclaw-canvas-resolver-", async (root) => {

await fs.writeFile(path.join(root, "outside.txt"), "inside-root", "utf8");

await expect(resolveFileWithinRoot(root, "/../outside.txt")).resolves.toBeNull();

await expect(resolveFileWithinRoot(root, "/%2e%2e%2foutside.txt")).resolves.toBeNull();

});

});

it("rejects malformed URL encoding as a missing file", async () => {

await withCanvasTemp("openclaw-canvas-resolver-", async (root) => {

await expect(resolveFileWithinRoot(root, "/%E0%A4%A")).resolves.toBeNull();

});

});

return normalized.startsWith("/") ? normalized : `/${normalized}`;

}

function pathEscapesRoot(decodedPath: string): boolean {

let depth = 0;

for (const segment of decodedPath.split("/")) {

if (segment === "" || segment === ".") {

continue;

}

if (segment === "..") {

if (depth === 0) {

return true;

}

depth--;

continue;

}

depth++;

}

return false;

}

function tryNormalizeUrlPath(rawPath: string): string | null {

let decoded: string;

try {

decoded = decodeURIComponent(rawPath || "/");

} catch {

return null;

}

if (pathEscapesRoot(decoded)) {

return null;

}

const normalized = path.posix.normalize(decoded);

return normalized.startsWith("/") ? normalized : `/${normalized}`;

}

export async function resolveFileWithinRoot(

rootReal: string,

urlPath: string,

): Promise<CanvasOpenResult | null> {

const normalized = normalizeUrlPath(urlPath);

const normalized = tryNormalizeUrlPath(urlPath);

if (normalized === null) {

return null;

}

const rel = normalized.replace(/^\/+/, "");

if (rel.split("/").some((p) => p === "..")) {

return null;

expect(response.body).toContain("v1");

expect(response.body).toContain(CANVAS_WS_PATH);

const malformed = await captureHandlerResponse(handler, `${CANVAS_HOST_PATH}/%E0%A4%A`);

expect(malformed.status).toBe(404);

expect(malformed.body).toBe("not found");

const miss = await captureHandlerResponse(handler, "/");

expect(miss.handled).toBe(false);

const traversalRes = await captureA2uiResponse(`${A2UI_PATH}/%2e%2e%2fpackage.json`);

expect(traversalRes.status).toBe(404);

expect(traversalRes.body).toBe("not found");

const malformedRes = await captureA2uiResponse(`${A2UI_PATH}/%E0%A4%A`);

expect(malformedRes.status).toBe(404);

expect(malformedRes.body).toBe("not found");

const symlinkRes = await captureA2uiResponse(`${A2UI_PATH}/${linkName}`);

expect(symlinkRes.status).toBe(404);

expect(symlinkRes.body).toBe("not found");