@chrysb/alphaclaw 0.3.4 → 0.3.5-beta.1

package/lib/public/js/components/icons.js

@@ -119,6 +119,19 @@ export const Image2FillIcon = ({ className = "" }) => html`
   </svg>
 `;
 
+export const FileMusicLineIcon = ({ className = "" }) => html`
+  <svg
+    class=${className}
+    viewBox="0 0 24 24"
+    fill="currentColor"
+    aria-hidden="true"
+  >
+    <path
+      d="M16 8V10H13V14.5C13 15.8807 11.8807 17 10.5 17C9.11929 17 8 15.8807 8 14.5C8 13.1193 9.11929 12 10.5 12C10.6712 12 10.8384 12.0172 11 12.05V8H15V4H5V20H19V8H16ZM3 2.9918C3 2.44405 3.44749 2 3.9985 2H16L20.9997 7L21 20.9925C21 21.5489 20.5551 22 20.0066 22H3.9934C3.44476 22 3 21.5447 3 21.0082V2.9918Z"
+    />
+  </svg>
+`;
+
 export const TerminalFillIcon = ({ className = "" }) => html`
   <svg
     class=${className}
@@ -222,3 +235,16 @@ export const SaveFillIcon = ({ className = "" }) => html`
     />
   </svg>
 `;
+
+export const LockLineIcon = ({ className = "" }) => html`
+  <svg
+    class=${className}
+    viewBox="0 0 24 24"
+    fill="currentColor"
+    aria-hidden="true"
+  >
+    <path
+      d="M19 10H20C20.5523 10 21 10.4477 21 11V21C21 21.5523 20.5523 22 20 22H4C3.44772 22 3 21.5523 3 21V11C3 10.4477 3.44772 10 4 10H5V9C5 5.13401 8.13401 2 12 2C15.866 2 19 5.13401 19 9V10ZM5 12V20H19V12H5ZM11 14H13V18H11V14ZM17 10V9C17 6.23858 14.7614 4 12 4C9.23858 4 7 6.23858 7 9V10H17Z"
+    />
+  </svg>
+`;

package/lib/public/js/components/sidebar-git-panel.js

@@ -1,12 +1,16 @@
 import { h } from "https://esm.sh/preact";
 import { useEffect, useState } from "https://esm.sh/preact/hooks";
 import htm from "https://esm.sh/htm";
-import { fetchBrowseGitSummary } from "../lib/api.js";
+import { fetchBrowseGitSummary, syncBrowseChanges } from "../lib/api.js";
+import { ActionButton } from "./action-button.js";
 import { GitBranchLineIcon, GithubFillIcon } from "./icons.js";
 import { LoadingSpinner } from "./loading-spinner.js";
+import { showToast } from "./toast.js";
 
 const html = htm.bind(h);
 const kRefreshMs = 10000;
+const kSyncCommitFileNameLimit = 4;
+const kCommitHistoryLimit = 12;
 
 const formatCommitTime = (unixSeconds) => {
   if (!unixSeconds) return "";
@@ -25,8 +29,106 @@ const getRepoName = (summary) => {
   return segment || "repo";
 };
 
-export const SidebarGitPanel = () => {
+const getChangedFilePresentation = (changedFile) => {
+  const statusKind = String(changedFile?.statusKind || "M").toUpperCase();
+  if (statusKind === "U") {
+    return {
+      statusLabel: "U",
+      statusClass: "is-untracked",
+      rowClass: "is-clickable",
+      canOpen: true,
+    };
+  }
+  if (statusKind === "D") {
+    return {
+      statusLabel: "D",
+      statusClass: "is-deleted",
+      rowClass: "",
+      canOpen: false,
+    };
+  }
+  return {
+    statusLabel: "M",
+    statusClass: "is-modified",
+    rowClass: "is-clickable",
+    canOpen: true,
+  };
+};
+
+const formatDelta = (value, prefix) => {
+  if (value === null || value === undefined || value === "") return "";
+  const numericValue = Number(value);
+  if (!Number.isFinite(numericValue) || numericValue <= 0) return "";
+  return `${prefix}${numericValue}`;
+};
+
+const getRemoteSyncPresentation = (summary) => {
+  const safeState = String(summary?.syncState || "").trim();
+  const aheadCount = Number(summary?.aheadCount) || 0;
+  const behindCount = Number(summary?.behindCount) || 0;
+  if (safeState === "ahead") {
+    return {
+      label: "↑",
+      title: `Ahead by ${aheadCount}`,
+      className: "is-ahead",
+    };
+  }
+  if (safeState === "behind") {
+    return {
+      label: "↓",
+      title: `Behind by ${behindCount}`,
+      className: "is-behind",
+    };
+  }
+  if (safeState === "diverged") {
+    return {
+      label: "↕",
+      title: `Diverged (${aheadCount} ahead, ${behindCount} behind)`,
+      className: "is-diverged",
+    };
+  }
+  if (safeState === "upstream-gone") {
+    return {
+      label: "!",
+      title: "Upstream missing",
+      className: "is-upstream-gone",
+    };
+  }
+  if (safeState === "no-upstream" || !summary?.hasUpstream) {
+    return {
+      label: "!",
+      title: "Not linked",
+      className: "is-no-upstream",
+    };
+  }
+  return {
+    label: "",
+    title: "Up to date",
+    className: "is-up-to-date",
+  };
+};
+
+const buildSyncCommitMessage = (changedFiles) => {
+  const filePaths = Array.isArray(changedFiles)
+    ? changedFiles
+        .map((file) => String(file?.path || "").trim())
+        .filter(Boolean)
+    : [];
+  const totalCount = filePaths.length;
+  if (totalCount <= 0) return "sync changes";
+
+  const fileNames = filePaths.map((filePath) => filePath.split("/").filter(Boolean).pop() || filePath);
+  const uniqueFileNames = Array.from(new Set(fileNames));
+  const shownFileNames = uniqueFileNames.slice(0, kSyncCommitFileNameLimit);
+  const remainingCount = Math.max(0, uniqueFileNames.length - shownFileNames.length);
+  const noun = totalCount === 1 ? "file" : "files";
+  const suffix = remainingCount > 0 ? ` +${remainingCount} more` : "";
+  return `Edited ${totalCount} ${noun} - ${shownFileNames.join(", ")}${suffix}`;
+};
+
+export const SidebarGitPanel = ({ onSelectFile = () => {} }) => {
   const [loading, setLoading] = useState(true);
+  const [syncing, setSyncing] = useState(false);
   const [error, setError] = useState("");
   const [summary, setSummary] = useState(null);
 
@@ -84,6 +186,32 @@ export const SidebarGitPanel = () => {
     `;
   }
 
+  const hasUncommittedChanges = (summary.changedFiles || []).length > 0;
+  const aheadCount = Number(summary?.aheadCount) || 0;
+  const canSyncChanges = hasUncommittedChanges || aheadCount > 0;
+  const remoteSync = getRemoteSyncPresentation(summary);
+  const handleSyncChanges = async () => {
+    if (!canSyncChanges || syncing) return;
+    try {
+      setSyncing(true);
+      const commitMessage = buildSyncCommitMessage(summary?.changedFiles || []);
+      const syncResult = await syncBrowseChanges(commitMessage);
+      if (syncResult?.committed || syncResult?.pushed) {
+        window.dispatchEvent(new CustomEvent("alphaclaw:browse-git-synced"));
+        showToast(syncResult.message || "Changes synced", "success");
+      } else {
+        showToast(syncResult?.message || "No changes to sync", "info");
+      }
+      const nextSummary = await fetchBrowseGitSummary();
+      setSummary(nextSummary);
+      setError("");
+    } catch (syncError) {
+      showToast(syncError.message || "Could not sync changes", "error");
+    } finally {
+      setSyncing(false);
+    }
+  };
+
   return html`
     <div class="sidebar-git-panel">
       <div class="sidebar-git-bar">
@@ -112,38 +240,98 @@ export const SidebarGitPanel = () => {
           <${GitBranchLineIcon} className="sidebar-git-bar-icon" />
           <span class="sidebar-git-branch">${summary.branch || "unknown"}</span>
         </span>
-        <span class=${`sidebar-git-dirty ${summary.isDirty ? "is-dirty" : "is-clean"}`}>
-          ${summary.isDirty ? "dirty" : "clean"}
-        </span>
+        ${remoteSync.label
+          ? html`
+              <span
+                class=${`sidebar-git-sync-status ${remoteSync.className}`.trim()}
+                title=${remoteSync.title || ""}
+                aria-label=${remoteSync.title || ""}
+              >
+                ${remoteSync.label}
+              </span>
+            `
+          : null}
       </div>
-      ${(summary.commits || []).length > 0
-        ? html`
-            <ul class="sidebar-git-list">
-              ${(summary.commits || []).slice(0, 4).map(
-                (commit) => html`
-                  <li title=${formatCommitTime(commit.timestamp)}>
-                    ${commit.url
-                      ? html`
-                          <a
-                            class="sidebar-git-commit-link"
-                            href=${commit.url}
-                            target="_blank"
-                            rel="noopener noreferrer"
-                          >
+      <div class="sidebar-git-scroll">
+        ${(summary.changedFiles || []).length > 0
+          ? html`
+              <div class="sidebar-git-changes-label">
+                ${`Unsynced Changes (${summary.changedFilesCount || (summary.changedFiles || []).length})`}
+              </div>
+              <ul class="sidebar-git-changes-list">
+                ${(summary.changedFiles || []).map((changedFile) => {
+                  const presentation = getChangedFilePresentation(changedFile);
+                  const changedPath = String(changedFile?.path || "");
+                  const plusDelta = formatDelta(changedFile?.addedLines, "+");
+                  const minusDelta = formatDelta(changedFile?.deletedLines, "-");
+                  return html`
+                    <li
+                      class=${`sidebar-git-change-row ${presentation.statusClass} ${presentation.rowClass}`.trim()}
+                      title=${changedPath}
+                      onclick=${() => {
+                        if (!presentation.canOpen || !changedPath) return;
+                        onSelectFile(changedPath, { view: "diff" });
+                      }}
+                    >
+                      <span class="sidebar-git-change-path">${changedPath}</span>
+                      <span class="sidebar-git-change-meta">
+                        ${plusDelta
+                          ? html`<span class="sidebar-git-change-plus">${plusDelta}</span>`
+                          : null}
+                        ${minusDelta
+                          ? html`<span class="sidebar-git-change-minus">${minusDelta}</span>`
+                          : null}
+                        <span class="sidebar-git-change-status">${presentation.statusLabel}</span>
+                      </span>
+                    </li>
+                  `;
+                })}
+              </ul>
+              <div class="sidebar-git-actions">
+                <${ActionButton}
+                  onClick=${handleSyncChanges}
+                  disabled=${!canSyncChanges}
+                  loading=${syncing}
+                  loadingMode="inline"
+                  idleLabel="Sync Changes"
+                  loadingLabel="Syncing..."
+                  tone="primary"
+                  size="sm"
+                  className="sidebar-git-sync-button"
+                />
+              </div>
+            `
+          : null}
+        ${(summary.commits || []).length > 0
+          ? html`
+              <div class="sidebar-git-changes-label">commit history</div>
+              <ul class="sidebar-git-list">
+                ${(summary.commits || []).slice(0, kCommitHistoryLimit).map(
+                  (commit) => html`
+                    <li title=${formatCommitTime(commit.timestamp)}>
+                      ${commit.url
+                        ? html`
+                            <a
+                              class="sidebar-git-commit-link"
+                              href=${commit.url}
+                              target="_blank"
+                              rel="noopener noreferrer"
+                            >
+                              <span class="sidebar-git-hash">${commit.shortHash}</span>
+                              <span>${commit.message}</span>
+                            </a>
+                          `
+                        : html`
                             <span class="sidebar-git-hash">${commit.shortHash}</span>
                             <span>${commit.message}</span>
-                          </a>
-                        `
-                      : html`
-                          <span class="sidebar-git-hash">${commit.shortHash}</span>
-                          <span>${commit.message}</span>
-                        `}
-                  </li>
-                `,
-              )}
-            </ul>
-          `
-        : null}
+                          `}
+                    </li>
+                  `,
+                )}
+              </ul>
+            `
+          : null}
+      </div>
     </div>
   `;
 };

package/lib/public/js/components/sidebar.js

@@ -214,7 +214,7 @@ export const AppSidebar = ({
                 ref=${browseBottomPanelRef}
                 style=${{ height: `${browseBottomPanelHeightPx}px` }}
               >
-              <${SidebarGitPanel} />
+              <${SidebarGitPanel} onSelectFile=${onSelectBrowseFile} />
               ${acHasUpdate && acLatest && !acDismissed
                 ? html`
                     <${UpdateActionButton}

package/lib/public/js/components/usage-tab.js

@@ -122,7 +122,10 @@ const kUsageMetricUiSettingKey = "usageMetric";
 const SummaryCard = ({ title, tokens, cost }) => html`
   <div class="bg-surface border border-border rounded-xl p-4">
     <h3 class="card-label text-xs">${title}</h3>
-    <div class="text-lg font-semibold mt-1">${formatTokens(tokens)} tokens</div>
+    <div class="text-lg font-semibold mt-1">
+      ${formatTokens(tokens)}
+      <span class="text-xs text-[var(--text-muted)] ml-1">tokens</span>
+    </div>
     <div class="text-xs text-[var(--text-muted)] mt-1">${formatUsd(cost)}</div>
   </div>
 `;

package/lib/public/js/components/watchdog-tab.js

@@ -28,8 +28,6 @@ const formatBytes = (bytes) => {
 
 const barColor = (percent) => {
   if (percent == null) return "bg-gray-600";
-  if (percent >= 90) return "bg-red-500";
-  if (percent >= 70) return "bg-yellow-400";
   return "bg-cyan-400";
 };
 
@@ -139,6 +137,9 @@ export const WatchdogTab = ({
   restartingGateway = false,
   onRestartGateway,
   restartSignal = 0,
+  openclawUpdateInProgress = false,
+  onOpenclawVersionActionComplete = () => {},
+  onOpenclawUpdate,
 }) => {
   const eventsPoll = usePolling(() => fetchWatchdogEvents(20), 15000);
   const resourcesPoll = usePolling(() => fetchWatchdogResources(), 5000);
@@ -302,6 +303,9 @@ export const WatchdogTab = ({
         watchdogStatus=${currentWatchdogStatus}
         onRepair=${onRepair}
         repairing=${isRepairInProgress}
+        openclawUpdateInProgress=${openclawUpdateInProgress}
+        onOpenclawVersionActionComplete=${onOpenclawVersionActionComplete}
+        onOpenclawUpdate=${onOpenclawUpdate}
       />
 
       ${(() => {

package/lib/public/js/lib/api.js

@@ -393,3 +393,34 @@ export const fetchBrowseGitSummary = async () => {
   const res = await authFetch('/api/browse/git-summary');
   return parseJsonOrThrow(res, 'Could not load git summary');
 };
+
+export const fetchBrowseFileDiff = async (filePath) => {
+  const params = new URLSearchParams({ path: String(filePath || "") });
+  const res = await authFetch(`/api/browse/git-diff?${params.toString()}`);
+  return parseJsonOrThrow(res, 'Could not load file diff');
+};
+
+export const fetchBrowseSqliteTable = async ({
+  filePath,
+  table,
+  limit = 50,
+  offset = 0,
+}) => {
+  const params = new URLSearchParams({
+    path: String(filePath || ""),
+    table: String(table || ""),
+    limit: String(limit),
+    offset: String(offset),
+  });
+  const res = await authFetch(`/api/browse/sqlite-table?${params.toString()}`);
+  return parseJsonOrThrow(res, "Could not load sqlite table data");
+};
+
+export const syncBrowseChanges = async (message = "") => {
+  const res = await authFetch('/api/browse/git-sync', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ message: String(message || "") }),
+  });
+  return parseJsonOrThrow(res, 'Could not sync changes');
+};

package/lib/public/js/lib/browse-file-policies.js

@@ -0,0 +1,34 @@
+export const kProtectedBrowsePaths = new Set([
+  "openclaw.json",
+  "devices/paired.json",
+]);
+
+export const kLockedBrowsePaths = new Set([
+  "hooks/bootstrap/agents.md",
+  "hooks/bootstrap/tools.md",
+  "skills/control-ui/skill.md",
+  ".alphaclaw/hourly-git-sync.sh",
+  ".alphaclaw/.cli-device-auto-approved",
+]);
+
+export const normalizeBrowsePolicyPath = (inputPath) =>
+  String(inputPath || "")
+    .replaceAll("\\", "/")
+    .replace(/^\.\/+/, "")
+    .replace(/^\/+/, "")
+    .trim()
+    .toLowerCase();
+
+export const matchesBrowsePolicyPath = (policyPathSet, normalizedPath) => {
+  const safeNormalizedPath = String(normalizedPath || "").trim();
+  if (!safeNormalizedPath) return false;
+  for (const policyPath of policyPathSet) {
+    if (
+      safeNormalizedPath === policyPath ||
+      safeNormalizedPath.endsWith(`/${policyPath}`)
+    ) {
+      return true;
+    }
+  }
+  return false;
+};

package/lib/scripts/git

@@ -0,0 +1,40 @@
+#!/bin/bash
+# Git auth shim -- injects GITHUB_TOKEN credentials for network operations
+# inside the configured OpenClaw repo so the agent can use plain git commands.
+
+REAL_GIT="@@REAL_GIT@@"
+OPENCLAW_REPO_ROOT="@@OPENCLAW_REPO_ROOT@@"
+ASKPASS_PATH="/tmp/alphaclaw-git-askpass.sh"
+
+SUBCMD=""
+for arg in "$@"; do
+  case "$arg" in
+    -*) ;;
+    *) SUBCMD="$arg"; break ;;
+  esac
+done
+
+needs_auth() {
+  case "$SUBCMD" in
+    push|pull|fetch|clone|ls-remote) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+in_openclaw_root() {
+  if [ -z "$OPENCLAW_REPO_ROOT" ]; then
+    return 1
+  fi
+  case "$(pwd)" in
+    "$OPENCLAW_REPO_ROOT"|"${OPENCLAW_REPO_ROOT}"/*) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+if [ "${ALPHACLAW_GIT_NO_AUTH:-}" = "1" ] || [ -z "${GITHUB_TOKEN:-}" ] || ! needs_auth || ! in_openclaw_root; then
+  exec "$REAL_GIT" "$@"
+fi
+
+export GIT_TERMINAL_PROMPT=0
+export GIT_ASKPASS="$ASKPASS_PATH"
+exec "$REAL_GIT" "$@"

package/lib/scripts/git-askpass

@@ -0,0 +1,6 @@
+#!/usr/bin/env sh
+case "$1" in
+  *Username*) echo "x-access-token" ;;
+  *Password*) echo "${GITHUB_TOKEN:-}" ;;
+  *) echo "" ;;
+esac

package/lib/server/constants.js

@@ -274,6 +274,13 @@ const kChannelDefs = {
   telegram: { envKey: "TELEGRAM_BOT_TOKEN" },
   discord: { envKey: "DISCORD_BOT_TOKEN" },
 };
+const kLockedBrowsePaths = new Set([
+  "hooks/bootstrap/agents.md",
+  "hooks/bootstrap/tools.md",
+  "skills/control-ui/skill.md",
+  ".alphaclaw/hourly-git-sync.sh",
+  ".alphaclaw/.cli-device-auto-approved",
+]);
 
 const SETUP_API_PREFIXES = [
   "/api/status",
@@ -343,6 +350,7 @@ module.exports = {
   kSystemVars,
   kKnownVars,
   kKnownKeys,
+  kLockedBrowsePaths,
   SCOPE_MAP,
   REVERSE_SCOPE_MAP,
   BASE_SCOPES,

package/lib/server/helpers.js

@@ -8,7 +8,11 @@ const {
 
 const normalizeOpenclawVersion = (rawVersion) => {
   if (!rawVersion) return null;
-  return String(rawVersion).trim().replace(/^openclaw\s*/i, "") || null;
+  return (
+    String(rawVersion)
+      .trim()
+      .replace(/^openclaw\s*/i, "") || null
+  );
 };
 
 const compareVersionParts = (a, b) => {
@@ -62,9 +66,14 @@ const getCodexAccountId = (accessToken) => {
 const normalizeIp = (ip) => String(ip || "").replace(/^::ffff:/, "");
 
 const isTruthyEnvFlag = (value) =>
-  ["1", "true", "yes", "on"].includes(String(value || "").trim().toLowerCase());
+  ["1", "true", "yes", "on"].includes(
+    String(value || "")
+      .trim()
+      .toLowerCase(),
+  );
 const isDebugEnabled = () =>
-  isTruthyEnvFlag(process.env.ALPHACLAW_DEBUG) || isTruthyEnvFlag(process.env.DEBUG);
+  isTruthyEnvFlag(process.env.ALPHACLAW_DEBUG) ||
+  isTruthyEnvFlag(process.env.DEBUG);
 
 const getClientKey = (req) =>
   normalizeIp(
@@ -165,9 +174,13 @@ const readGoogleCredentials = () => {
   try {
     const c = JSON.parse(fs.readFileSync(GOG_CREDENTIALS_PATH, "utf8"));
     return {
-      clientId: c.web?.client_id || c.installed?.client_id || c.client_id || null,
+      clientId:
+        c.web?.client_id || c.installed?.client_id || c.client_id || null,
       clientSecret:
-        c.web?.client_secret || c.installed?.client_secret || c.client_secret || null,
+        c.web?.client_secret ||
+        c.installed?.client_secret ||
+        c.client_secret ||
+        null,
     };
   } catch {
     return { clientId: null, clientSecret: null };

package/lib/server/internal-files-migration.js

@@ -0,0 +1,93 @@
+const path = require("path");
+
+const kInternalDirName = ".alphaclaw";
+const kHourlyGitSyncFileName = "hourly-git-sync.sh";
+const kCliDeviceAutoApprovedFileName = ".cli-device-auto-approved";
+
+const buildManagedPaths = ({ openclawDir, pathModule = path }) => {
+  const internalDir = pathModule.join(openclawDir, kInternalDirName);
+  return {
+    internalDir,
+    hourlyGitSyncPath: pathModule.join(internalDir, kHourlyGitSyncFileName),
+    cliDeviceAutoApprovedPath: pathModule.join(
+      internalDir,
+      kCliDeviceAutoApprovedFileName,
+    ),
+    legacyHourlyGitSyncPath: pathModule.join(openclawDir, kHourlyGitSyncFileName),
+    legacyCliDeviceAutoApprovedPath: pathModule.join(
+      openclawDir,
+      kCliDeviceAutoApprovedFileName,
+    ),
+  };
+};
+
+const moveFile = ({ fs, sourcePath, targetPath, mode }) => {
+  try {
+    fs.renameSync(sourcePath, targetPath);
+    return true;
+  } catch {
+    fs.copyFileSync(sourcePath, targetPath);
+    if (Number.isFinite(mode)) {
+      fs.chmodSync(targetPath, mode);
+    }
+    fs.rmSync(sourcePath, { force: true });
+    return true;
+  }
+};
+
+const migrateManagedInternalFiles = ({
+  fs,
+  openclawDir,
+  pathModule = path,
+  logger = console,
+}) => {
+  const managedPaths = buildManagedPaths({ openclawDir, pathModule });
+  fs.mkdirSync(managedPaths.internalDir, { recursive: true });
+
+  const migrateOne = ({ sourcePaths, targetPath }) => {
+    const existingSourcePath = sourcePaths.find((sourcePath) => fs.existsSync(sourcePath));
+    if (fs.existsSync(targetPath)) {
+      sourcePaths.forEach((sourcePath) => {
+        if (sourcePath !== targetPath && fs.existsSync(sourcePath)) {
+          fs.rmSync(sourcePath, { force: true });
+        }
+      });
+      return;
+    }
+    if (!existingSourcePath) return;
+    const sourceStats = fs.statSync(existingSourcePath);
+    moveFile({
+      fs,
+      sourcePath: existingSourcePath,
+      targetPath,
+      mode: sourceStats.mode,
+    });
+    sourcePaths.forEach((sourcePath) => {
+      if (sourcePath !== existingSourcePath && sourcePath !== targetPath && fs.existsSync(sourcePath)) {
+        fs.rmSync(sourcePath, { force: true });
+      }
+    });
+  };
+
+  try {
+    migrateOne({
+      sourcePaths: [managedPaths.legacyHourlyGitSyncPath],
+      targetPath: managedPaths.hourlyGitSyncPath,
+    });
+    migrateOne({
+      sourcePaths: [managedPaths.legacyCliDeviceAutoApprovedPath],
+      targetPath: managedPaths.cliDeviceAutoApprovedPath,
+    });
+  } catch (error) {
+    logger.error?.(
+      `[alphaclaw] Failed to migrate internal managed files: ${error.message || String(error)}`,
+    );
+  }
+
+  return managedPaths;
+};
+
+module.exports = {
+  buildManagedPaths,
+  migrateManagedInternalFiles,
+};