@byokit/openclaw 0.3.0 → 0.3.1

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 ## Unreleased
 
+## 0.3.1 (2026-09-30)
+
+
+
+- FIX: `authSeal` no longer rejects retained-login migration when engine state contains symlinks or runtime entries. File symlinks whose fully resolved targets are regular files inside the isolated engine root are sealed and restored as regular files at the link paths; outside-root, dangling and directory symlinks (including loops), sockets, FIFOs and devices are skipped without reading their contents.
+- Depends on @byokit/ui-core 0.4.0.
+
 ## 0.3.0 (2026-09-30)
 
 

package/README.md

@@ -196,7 +196,9 @@ const server = new OpenClawKit({
 Without `authSeal`, engine credentials remain plaintext. With it, successful `prepare()` and `stop()` leave
 only a sealed snapshot, `auth-store.sealed`, for those directories. The adapter authenticates the snapshot
 before any restoration; a wrong key, tampering, or a missing adapter rejects. Files restored for the engine
-have mode 0600 and directories 0700. Symlinks and special files inside the sealed directories are refused.
+have mode 0600 and directories 0700. File symlinks are sealed only when their fully resolved targets are
+regular files inside the isolated engine root; they restore as regular files at the link paths. Outside-root,
+dangling and directory symlinks (including loops), sockets, FIFOs and devices are skipped.
 One kit owns the store at a time; a live owner or orphan gateway blocks preparation instead of racing its writes.
 Sealing copies the whole store through memory, so startup and stop cost grows with session history.
 

package/dist/auth-store.js

@@ -1,7 +1,7 @@
 // The pin persists OAuth JSON in both shared and agent SQLite. There is no public persistence hook.
 // Seal the complete isolated stores, including journals, only after their writer has exited.
-import { chmodSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync, closeSync, fsyncSync, openSync } from 'node:fs';
-import { dirname, join, relative, resolve } from 'node:path';
+import { chmodSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, writeFileSync, closeSync, fsyncSync, openSync } from 'node:fs';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
 const encoder = new TextEncoder();
 const archive = (name) => /^(auth-profiles|auth-state|auth|oauth)\.json\.(migrated-.+|sqlite-import\..+\.bak)$/.test(name)
     || name.endsWith('.moved-to-engine');
@@ -18,7 +18,7 @@ const live = (pid) => {
 };
 function regular(path) {
     if (!lstatSync(path).isFile())
-        throw new Error('credential store requires regular files');
+        throw new Error(`credential store requires regular files: ${path}`);
 }
 function syncDir(path) {
     if (process.platform === 'win32')
@@ -153,6 +153,7 @@ export class AuthStore {
     }
     collect() {
         const s = { v: 1, dirs: [], files: [] };
+        const root = realpathSync(this.o.root);
         const walk = (path) => {
             const name = relative(this.o.root, path).split('\\').join('/');
             const stat = lstatSync(path);
@@ -163,9 +164,27 @@ export class AuthStore {
                     walk(join(path, child));
                 return;
             }
-            regular(path);
-            chmodSync(path, 0o600);
-            s.files.push([name, readFileSync(path).toString('base64')]);
+            let file = path;
+            if (stat.isSymbolicLink()) {
+                try {
+                    file = realpathSync(path);
+                }
+                catch (error) {
+                    if (['ENOENT', 'ENOTDIR', 'ELOOP'].includes(error.code ?? ''))
+                        return;
+                    throw error;
+                }
+                const target = relative(root, file);
+                if (isAbsolute(target) || target === '..' || target.startsWith(`..${sep}`))
+                    return;
+                if (!lstatSync(file).isFile())
+                    return;
+            }
+            else if (!stat.isFile())
+                return;
+            // Read the checked target, but save the link's path: restore materializes a regular file there.
+            chmodSync(file, 0o600);
+            s.files.push([name, readFileSync(file).toString('base64')]);
         };
         for (const dir of ['state', 'home'])
             if (existsSync(join(this.o.root, dir)))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byokit/openclaw",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "The OpenClaw runtime kit: the pinned engine's full operator surface with plain-words helpers for members, sign-in, runs and approvals.",
   "license": "Apache-2.0",
   "type": "module",
@@ -61,7 +61,7 @@
     "ws": "8.21.3"
   },
   "devDependencies": {
-    "@byokit/ui-core": "0.3.0"
+    "@byokit/ui-core": "0.4.0"
   },
   "publishConfig": {
     "access": "public"