Security harden webhooks, HTTP secrets, and cron shell jobs - #907

Add Telegram webhook secret configuration and enforce X-Telegram-Bot-Api-Secret-Token before webhook dispatch. Change Telegram gateway, Discord, and LINE allowlist handling so an empty allow_from denies inbound messages and only explicit '*' allows all.

Validation: docker run --rm -v /home/ubuntu/claws/nullclaw:/app -w /app nullclaw:test-builder sh -lc 'ZIG_GLOBAL_CACHE_DIR=/tmp/zig-global-cache zig build test --summary all'

Validation: docker run --rm -v /home/ubuntu/claws/nullclaw:/app -w /app nullclaw:test-builder sh -lc 'ZIG_GLOBAL_CACHE_DIR=/tmp/zig-global-cache zig build -Doptimize=ReleaseSmall'

Validate cron shell commands at create, update, CLI run, and scheduled execution time. Run shell jobs through the shared process runner with scrubbed environment, timeout, output limits, and improved descendant cleanup on Linux.

Validation: docker run --rm -v /home/ubuntu/claws/nullclaw:/app -w /app nullclaw:test-builder sh -lc 'ZIG_GLOBAL_CACHE_DIR=/tmp/zig-global-cache zig build test --summary all'

Validation: docker run --rm -v /home/ubuntu/claws/nullclaw:/app -w /app nullclaw:test-builder sh -lc 'ZIG_GLOBAL_CACHE_DIR=/tmp/zig-global-cache zig build -Doptimize=ReleaseSmall'

Add Makefile shortcuts and docker compose build configuration for local gateway/agent images. Vendor websocket and wasm3 during Docker builds and verify the pinned Zig 0.16.0 toolchain.

Validation: docker run --rm -v /home/ubuntu/claws/nullclaw:/app -w /app nullclaw:test-builder sh -lc 'ZIG_GLOBAL_CACHE_DIR=/tmp/zig-global-cache zig build test --summary all'

Validation: docker run --rm -v /home/ubuntu/claws/nullclaw:/app -w /app nullclaw:test-builder sh -lc 'ZIG_GLOBAL_CACHE_DIR=/tmp/zig-global-cache zig build -Doptimize=ReleaseSmall'

Document deny-empty allowlist behavior, Telegram webhook secret requirements, and gateway API authentication changes in English and Chinese docs. Add the 2026-05-10 security patch plan and validation checklist.

Validation: docs-only commit; code validation already passed in prior grouped commits.

Add NULLCLAW_PORT to the Makefile and use it for the compose gateway command, published port, and healthcheck. The local workflow now defaults to 127.0.0.1:3210.

Validation: docker compose --profile gateway config

Validation: git diff --check

Bind the compose gateway port on 0.0.0.0 so the NULLCLAW_PORT workflow is reachable from host interfaces instead of loopback only.

Validation: docker compose --profile gateway config

Validation: git diff --check

Add a Makefile config target that runs nullclaw onboard in the agent container, and make up depend on config before starting the gateway. Also bind the gateway process to 0.0.0.0 inside the container to match the published host interface.

Validation: docker compose --profile gateway config

Validation: make -n up

Validation: git diff --check

Point the compose healthcheck at 127.0.0.1 so it checks the IPv4 listener used by the gateway's 0.0.0.0 bind.

Validation: docker compose --profile gateway config

Validation: git diff --check

Document the Makefile-backed Docker Compose setup, including make config, make up, NULLCLAW_PORT=3210, host-interface publishing, and health checks.

Validation: make -n config

Validation: make -n up

Validation: git diff --check

Mount ./workspace at /nullclaw-data/workspace for init, agent, and gateway services so the runtime workspace lives under the current checkout. Ignore the local workspace directory because it contains runtime state.

Validation: docker compose --profile gateway config

Validation: git diff --check

Add make agent for interactive nullclaw agent chat and make status for nullclaw status via the compose agent service.

Validation: make -n agent

Validation: make -n status

Validation: git diff --check

Make configuration an explicit make config step instead of a dependency of make up, so make down preserves the existing config volume and restart does not rerun onboarding.

Validation: make -n up

Validation: make -n config

Validation: git diff --check

Install git in the release image and set SHELL=/bin/sh so the compose workflow satisfies doctor checks and supports documented git/tool usage.

Validation: docker compose run --rm agent doctor

Validation: docker compose run --rm agent status

Validation: docker compose --profile gateway config

Validation: git diff --check

Drop EXPOSE 3000 from the runtime image because compose publishes NULLCLAW_PORT explicitly. This avoids docker ps showing an unused 3000/tcp port while the gateway runs on 3210.

Validation: docker compose --profile gateway config

Validation: docker compose --profile gateway up -d --build gateway

Validation: docker compose ps

Validation: git diff --check

Mount ./config.json into /nullclaw-data/config.json for init, agent, and gateway services. Run compose services as the host UID/GID from the Makefile so bind-mounted config and workspace files remain host-editable.

Validation: docker compose --profile gateway config

Validation: make down

Validation: make up

Validation: docker compose ps

Validation: git diff --check

Run docker compose down with both agent and gateway profiles so profile-created containers are stopped and removed by make down.

Validation: make down

Validation: make up

Validation: curl -sS -i http://127.0.0.1:3210/health