@byokit/openclaw 0.3.5 → 0.3.6

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 ## Unreleased
 
+## 0.3.6 (2026-10-01)
+
+- FIX: Live orphan gateways recover after the engine rewrites its process title. Recovery verifies the recorded launch pid and process start time with the executable and isolated store paths; ambiguous ownership preserves the saved sign-in state.
+
+- Dependency update: pins @byokit/ui-core 0.5.0.
+- Dependency update: pins @byokit/reach 0.5.0.
+- Dependency update: pins @byokit/relay 0.5.0.
+- Dependency update: pins @byokit/link 0.7.0.
+- SECURITY: (from @byokit/link 0.7.0) `Host.shortCode()` adds a machine-key commitment to typed pairing; `pairWithCode()` verifies it before disclosing device identity or asking for approval. Legacy codes remain compatible; use the full new code when relay lookup is untrusted.
+
 ## 0.3.5 (2026-10-01)
 
 

package/dist/engine.js

@@ -17,6 +17,14 @@ const putChanged = (path, data) => {
     if (!existsSync(path) || readFileSync(path, 'utf8') !== data)
         writeFileSync(path, data, { mode: 0o600 });
 };
+function processStartTime(pid) {
+    const stat = readFileSync(`/proc/${pid}/stat`, 'utf8');
+    // comm can contain spaces and parentheses; field 22 is index 19 after its final ')'.
+    const startTime = stat.slice(stat.lastIndexOf(')') + 2).split(' ')[19];
+    if (!startTime || !/^\d+$/.test(startTime))
+        throw new Error('unverifiable engine start time');
+    return startTime;
+}
 const supports = (list, value) => !list ||
     (!list.includes(`!${value}`) && (list.includes('any') || list.every(item => item.startsWith('!')) || list.includes(value)));
 function installMatches(dir) {
@@ -175,13 +183,14 @@ export class Engine {
             return false;
         try {
             const proc = `/proc/${pid}`;
-            const cmd = readFileSync(`${proc}/cmdline`, 'utf8').split('\0');
+            const identity = JSON.parse(readFileSync(join(this.root, 'gateway.identity'), 'utf8'));
             const env = readFileSync(`${proc}/environ`, 'utf8').split('\0');
             const home = join(this.root, 'home');
             const owner = join(this.root, 'auth-store.lock', 'pid');
             return statSync(proc).uid === process.getuid()
+                && Number(readFileSync(join(this.root, 'gateway.pid'), 'utf8')) === pid
+                && identity.pid === pid && identity.startTime === processStartTime(pid)
                 && realpathSync(`${proc}/exe`) === realpathSync(process.execPath)
-                && cmd.indexOf(this.entry) > 0 && cmd[cmd.indexOf(this.entry) + 1] === 'gateway'
                 && realpathSync(`${proc}/cwd`) === realpathSync(home)
                 && env.includes(`HOME=${home}`)
                 && env.includes(`OPENCLAW_STATE_DIR=${join(this.root, 'state')}`)
@@ -205,13 +214,9 @@ export class Engine {
         if (!this.verifiedOrphan(pid))
             throw occupied();
         // Verify a stable process identity again immediately before signalling this pid, never its group.
-        const identity = () => {
-            const stat = readFileSync(`/proc/${pid}/stat`, 'utf8');
-            return stat.slice(stat.lastIndexOf(')') + 2).split(' ')[19]; // starttime, not a reusable pid alone
-        };
         try {
-            const before = identity();
-            if (!before || !this.verifiedOrphan(pid) || before !== identity())
+            const before = processStartTime(pid);
+            if (!this.verifiedOrphan(pid) || before !== processStartTime(pid))
                 throw occupied();
         }
         catch {
@@ -301,6 +306,9 @@ export class Engine {
             this.state('failed', 'exited');
             throw new Error('engine spawn failed');
         }
+        if (process.platform === 'linux') {
+            writeFileSync(join(this.root, 'gateway.identity'), JSON.stringify({ pid: child.pid, startTime: processStartTime(child.pid) }), { mode: 0o600 });
+        }
         writeFileSync(join(this.root, 'gateway.pid'), String(child.pid), { mode: 0o600 });
         child.once('exit', (code) => {
             if (this.child !== child || this.stopping)
@@ -328,8 +336,10 @@ export class Engine {
     }
     removeOwnedPid(pid) {
         const path = join(this.root, 'gateway.pid');
-        if (pid && existsSync(path) && readFileSync(path, 'utf8') === String(pid))
+        if (pid && existsSync(path) && readFileSync(path, 'utf8') === String(pid)) {
             rmSync(path, { force: true });
+            rmSync(join(this.root, 'gateway.identity'), { force: true });
+        }
     }
     withAuthStore(task) { return this.authStore.offline(task); }
     async stop() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byokit/openclaw",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "description": "The OpenClaw runtime kit: the pinned engine's full operator surface with plain-words helpers for members, sign-in, runs and approvals.",
   "license": "Apache-2.0",
   "type": "module",
@@ -52,9 +52,9 @@
     "prepack": "tsc -b && node ../../scripts/fix-words-dts.cjs"
   },
   "dependencies": {
-    "@byokit/link": "0.6.0",
-    "@byokit/relay": "0.4.2",
-    "@byokit/reach": "0.4.0",
+    "@byokit/link": "0.7.0",
+    "@byokit/relay": "0.5.0",
+    "@byokit/reach": "0.5.0",
     "@byokit/seal": "0.2.0",
     "@byokit/secrets": "0.5.0",
     "@openclaw/gateway-client": "2026.8.1",
@@ -62,7 +62,7 @@
     "ws": "8.21.3"
   },
   "devDependencies": {
-    "@byokit/ui-core": "0.4.0"
+    "@byokit/ui-core": "0.5.0"
   },
   "publishConfig": {
     "access": "public"