@openclaw-cloud/agent-controller 3.1.0 → 3.1.2

package/dist/utils/openclaw-stack-update.js

@@ -0,0 +1,50 @@
+import { installOpenclaw, installPlugins } from './openclaw-ops.js';
+import { restartGateway } from './gateway-restart.js';
+import { logCollector } from '../connection.js';
+import { toErrorMessage } from './response.js';
+/**
+ * Throws whatever `installOpenclaw` / `installPlugins` throw — per-plugin
+ * failures are reported inside `pluginSummary`, not raised. A failed gateway
+ * restart is never thrown: the install already landed, so it is a warning.
+ */
+export async function runOpenclawStackUpdate(opts) {
+    const { version, plugins, eventPrefix, meta = {} } = opts;
+    const push = (event, level, msg, data = {}) => {
+        logCollector?.push(`${eventPrefix}_${event}`, level, msg, { ...meta, ...data });
+    };
+    let runtimeChanged = false;
+    if (version) {
+        runtimeChanged = await installOpenclaw(version);
+        push(runtimeChanged ? 'runtime_installed' : 'runtime_skipped', 'info', runtimeChanged
+            ? `openclaw runtime installed at ${version}`
+            : `openclaw runtime already at ${version}`, { version });
+    }
+    let pluginSummary;
+    if (plugins?.length) {
+        push('plugin_install_start', 'info', `Installing ${plugins.length} plugin(s)`, {
+            pluginCount: plugins.length,
+        });
+        pluginSummary = await installPlugins(plugins);
+        push('plugin_install_done', pluginSummary.failed.length > 0 ? 'warn' : 'info', `Plugin install complete: ${pluginSummary.installed.length} installed, ` +
+            `${pluginSummary.skipped.length} skipped, ${pluginSummary.failed.length} failed`, {
+            installed: pluginSummary.installed,
+            skipped: pluginSummary.skipped,
+            failed: pluginSummary.failed,
+        });
+    }
+    // One restart per invocation, no matter how many things changed.
+    const anyChanged = runtimeChanged || (pluginSummary?.installed.length ?? 0) > 0;
+    if (!anyChanged)
+        return { runtimeChanged, pluginSummary, gatewayRestarted: false };
+    try {
+        await restartGateway();
+        push('gateway_restarted', 'info', 'Gateway restarted after openclaw stack update');
+        return { runtimeChanged, pluginSummary, gatewayRestarted: true };
+    }
+    catch (err) {
+        const error = toErrorMessage(err);
+        push('gateway_restart_failed', 'warn', `Gateway restart after openclaw stack update failed: ${error}`, { error });
+        return { runtimeChanged, pluginSummary, gatewayRestarted: false, restartError: error };
+    }
+}
+//# sourceMappingURL=openclaw-stack-update.js.map

package/dist/utils/openclaw-stack-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-stack-update.js","sourceRoot":"","sources":["../../src/utils/openclaw-stack-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,cAAc,EAA6B,MAAM,mBAAmB,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAoC/C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAgC;IAEhC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;IAC1D,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,KAAsB,EAAE,GAAW,EAAE,OAAe,EAAE,EAAQ,EAAE;QAC3F,YAAY,EAAE,IAAI,CAAC,GAAG,WAAW,IAAI,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC;IAEF,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,OAAO,EAAE,CAAC;QACZ,cAAc,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CACF,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,iBAAiB,EACxD,MAAM,EACN,cAAc;YACZ,CAAC,CAAC,iCAAiC,OAAO,EAAE;YAC5C,CAAC,CAAC,+BAA+B,OAAO,EAAE,EAC5C,EAAE,OAAO,EAAE,CACZ,CAAC;IACJ,CAAC;IAED,IAAI,aAA+C,CAAC;IACpD,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC,sBAAsB,EAAE,MAAM,EAAE,cAAc,OAAO,CAAC,MAAM,YAAY,EAAE;YAC7E,WAAW,EAAE,OAAO,CAAC,MAAM;SAC5B,CAAC,CAAC;QACH,aAAa,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CACF,qBAAqB,EACrB,aAAa,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EACjD,4BAA4B,aAAa,CAAC,SAAS,CAAC,MAAM,cAAc;YACtE,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,aAAa,aAAa,CAAC,MAAM,CAAC,MAAM,SAAS,EAClF;YACE,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,MAAM,EAAE,aAAa,CAAC,MAAM;SAC7B,CACF,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,MAAM,UAAU,GAAG,cAAc,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAChF,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;IAEnF,IAAI,CAAC;QACH,MAAM,cAAc,EAAE,CAAC;QACvB,IAAI,CAAC,mBAAmB,EAAE,MAAM,EAAE,+CAA+C,CAAC,CAAC;QACnF,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CACF,wBAAwB,EACxB,MAAM,EACN,uDAAuD,KAAK,EAAE,EAC9D,EAAE,KAAK,EAAE,CACV,CAAC;QACF,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACzF,CAAC;AACH,CAAC"}

package/dist/utils/package-install.js

@@ -1,4 +1,4 @@
-import { exec } from 'node:child_process';
+import { execAsync } from './exec.js';
 import { toErrorMessage } from './response.js';
 // ---------------------------------------------------------------------------
 // Shared package-install module — used by:
@@ -30,16 +30,6 @@ export function buildInstallCommand(manager, pkg) {
             return `pip install ${pkg}`;
     }
 }
-function execPackage(cmd, timeoutMs) {
-    return new Promise((resolve, reject) => {
-        exec(cmd, { timeout: timeoutMs }, (error) => {
-            if (error)
-                reject(error);
-            else
-                resolve();
-        });
-    });
-}
 /**
  * Install a single package via the named manager. Validates the package
  * name against the allowlist regex first; never reaches the shell with an
@@ -50,7 +40,9 @@ export async function installOnePackage(manager, pkg, timeoutMs = INSTALL_TIMEOU
         return { ok: false, error: 'Invalid package name: contains disallowed characters' };
     }
     try {
-        await execPackage(buildInstallCommand(manager, pkg), timeoutMs);
+        // execAsync, not a local wrapper: its 16MB maxBuffer is what keeps a
+        // chatty `npm install -g` from failing with ERR_CHILD_PROCESS_STDOUT_MAXBUFFER.
+        await execAsync(buildInstallCommand(manager, pkg), timeoutMs);
         return { ok: true };
     }
     catch (err) {

package/dist/utils/package-install.js.map

@@ -1 +1 @@
-{"version":3,"file":"package-install.js","sourceRoot":"","sources":["../../src/utils/package-install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,8EAA8E;AAC9E,2CAA2C;AAC3C,oDAAoD;AACpD,gDAAgD;AAChD,EAAE;AACF,0EAA0E;AAC1E,wEAAwE;AACxE,sEAAsE;AACtE,iEAAiE;AACjE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC,CAAC,kBAAkB;AAE7D;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,iCAAiC,CAAC;AAI/D,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAuB,EAAE,GAAW;IACtE,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,KAAK;YACR,OAAO,sBAAsB,GAAG,EAAE,CAAC;QACrC,KAAK,KAAK;YACR,OAAO,kBAAkB,GAAG,EAAE,CAAC;QACjC,KAAK,KAAK;YACR,OAAO,eAAe,GAAG,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,SAAiB;IACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1C,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACpB,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAuB,EACvB,GAAW,EACX,YAAoB,kBAAkB;IAEtC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sDAAsD,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;IACnD,CAAC;AACH,CAAC"}
+{"version":3,"file":"package-install.js","sourceRoot":"","sources":["../../src/utils/package-install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,8EAA8E;AAC9E,2CAA2C;AAC3C,oDAAoD;AACpD,gDAAgD;AAChD,EAAE;AACF,0EAA0E;AAC1E,wEAAwE;AACxE,sEAAsE;AACtE,iEAAiE;AACjE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC,CAAC,kBAAkB;AAE7D;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,iCAAiC,CAAC;AAI/D,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAuB,EAAE,GAAW;IACtE,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,KAAK;YACR,OAAO,sBAAsB,GAAG,EAAE,CAAC;QACrC,KAAK,KAAK;YACR,OAAO,kBAAkB,GAAG,EAAE,CAAC;QACjC,KAAK,KAAK;YACR,OAAO,eAAe,GAAG,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAuB,EACvB,GAAW,EACX,YAAoB,kBAAkB;IAEtC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sDAAsD,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,CAAC;QACH,qEAAqE;QACrE,gFAAgF;QAChF,MAAM,SAAS,CAAC,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;QAC9D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;IACnD,CAAC;AACH,CAAC"}

package/dist/utils/package-version.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Version from the package's own package.json.
+ *
+ * Read via `createRequire` rather than a JSON import so the compiled output
+ * stays plain ESM. The relative depth (`../..`) is correct from both
+ * `dist/utils/` and `src/utils/` — three call sites used to hand-roll this with
+ * three different depths, which is exactly the kind of thing that breaks
+ * silently when a file moves.
+ */
+export declare function getPackageVersion(): string;

package/dist/utils/package-version.js

@@ -0,0 +1,18 @@
+import { createRequire } from 'node:module';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+const _require = createRequire(import.meta.url);
+/**
+ * Version from the package's own package.json.
+ *
+ * Read via `createRequire` rather than a JSON import so the compiled output
+ * stays plain ESM. The relative depth (`../..`) is correct from both
+ * `dist/utils/` and `src/utils/` — three call sites used to hand-roll this with
+ * three different depths, which is exactly the kind of thing that breaks
+ * silently when a file moves.
+ */
+export function getPackageVersion() {
+    const pkgPath = join(dirname(fileURLToPath(import.meta.url)), '../../package.json');
+    return _require(pkgPath).version;
+}
+//# sourceMappingURL=package-version.js.map

package/dist/utils/package-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-version.js","sourceRoot":"","sources":["../../src/utils/package-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEhD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IACpF,OAAQ,QAAQ,CAAC,OAAO,CAAyB,CAAC,OAAO,CAAC;AAC5D,CAAC"}

package/dist/utils/parse-id-at-version.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Split a CLI token like `@scope/pkg@1.2.3` into `{ id, version }`, or null if
+ * it isn't one. Splits at the LAST `@` so scoped npm names survive, and rejects
+ * a leading `@` so a bare `@scope/name` (no version) doesn't parse as
+ * `{ id: '', version: 'scope/name' }`.
+ *
+ * Shared by the `plugin-update` and `agent-update` CLIs, which each had their
+ * own byte-identical copy. Kept out of openclaw-ops.ts on purpose: this is a
+ * pure parser, and openclaw-ops is the module every test mocks wholesale
+ * because it shells out.
+ */
+export declare function parseIdAtVersion(token: string): {
+    id: string;
+    version: string;
+} | null;

package/dist/utils/parse-id-at-version.js

@@ -0,0 +1,22 @@
+/**
+ * Split a CLI token like `@scope/pkg@1.2.3` into `{ id, version }`, or null if
+ * it isn't one. Splits at the LAST `@` so scoped npm names survive, and rejects
+ * a leading `@` so a bare `@scope/name` (no version) doesn't parse as
+ * `{ id: '', version: 'scope/name' }`.
+ *
+ * Shared by the `plugin-update` and `agent-update` CLIs, which each had their
+ * own byte-identical copy. Kept out of openclaw-ops.ts on purpose: this is a
+ * pure parser, and openclaw-ops is the module every test mocks wholesale
+ * because it shells out.
+ */
+export function parseIdAtVersion(token) {
+    const at = token.lastIndexOf('@');
+    if (at <= 0)
+        return null;
+    const id = token.slice(0, at).trim();
+    const version = token.slice(at + 1).trim();
+    if (!id || !version)
+        return null;
+    return { id, version };
+}
+//# sourceMappingURL=parse-id-at-version.js.map

package/dist/utils/parse-id-at-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-id-at-version.js","sourceRoot":"","sources":["../../src/utils/parse-id-at-version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACzB,CAAC"}

package/dist/utils/response.js

@@ -1,4 +1,5 @@
 export function toErrorMessage(err) {
+    // eslint-disable-next-line no-restricted-syntax -- this IS the one implementation
     return err instanceof Error ? err.message : String(err);
 }
 export function toErrorResponse(command, err) {

package/dist/utils/response.js.map

@@ -1 +1 @@
-{"version":3,"file":"response.js","sourceRoot":"","sources":["../../src/utils/response.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAqB,EAAE,GAAY;IACjE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;AAC5F,CAAC"}
+{"version":3,"file":"response.js","sourceRoot":"","sources":["../../src/utils/response.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,kFAAkF;IAClF,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAqB,EAAE,GAAY;IACjE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;AAC5F,CAAC"}

package/dist/utils/write-workspace-files.d.ts

@@ -12,4 +12,4 @@
  * command path in `applyBootstrapConfig` (propagates shared-file updates from
  * the backend without requiring a restart).
  */
-export declare function writeWorkspaceFiles(files: Record<string, string>, workspaceDir: string): Promise<void>;
+export declare function writeWorkspaceFiles(files: Record<string, string>, workspaceDir: string): Promise<number>;

package/dist/utils/write-workspace-files.js

@@ -1,5 +1,7 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
+import { resolveInsideWorkspace } from '../workspace.js';
+import { toErrorMessage } from './response.js';
 /**
  * Write a map of workspace-relative paths → content into `workspaceDir`.
  *
@@ -17,32 +19,42 @@ import path from 'node:path';
 export async function writeWorkspaceFiles(files, workspaceDir) {
     const fileNames = Object.keys(files);
     if (fileNames.length === 0)
-        return;
+        return 0;
     await fs.mkdir(workspaceDir, { recursive: true });
+    const written = [];
     for (const [filePath, content] of Object.entries(files)) {
-        const fullPath = path.join(workspaceDir, filePath);
+        // Reject any key that escapes the workspace — a backend-supplied key like
+        // "../../etc/openclaw/agent.env" or an absolute path must not write outside
+        // it. Same sandbox helper as the file_write / file_delete handlers.
+        const fullPath = resolveInsideWorkspace(workspaceDir, filePath);
+        if (!fullPath) {
+            console.error(`  ✗ ${filePath}: rejected (path escapes workspace)`);
+            continue;
+        }
         await fs.mkdir(path.dirname(fullPath), { recursive: true });
         try {
             await fs.writeFile(fullPath, content);
+            written.push(filePath);
             console.log(`  ✓ ${filePath}`);
         }
         catch (err) {
-            console.error(`  ✗ ${filePath}: ${err instanceof Error ? err.message : err}`);
+            console.error(`  ✗ ${filePath}: ${toErrorMessage(err)}`);
         }
     }
-    // Make .sh files executable
-    for (const filePath of fileNames) {
+    // Make .sh files executable (only the ones we actually wrote)
+    for (const filePath of written) {
         if (filePath.endsWith('.sh')) {
             const fullPath = path.join(workspaceDir, filePath);
             await fs.chmod(fullPath, 0o755);
         }
     }
     // Summary for deployed skills (under .agents/skills/<name>/...)
-    const skillFiles = fileNames.filter((f) => f.startsWith('.agents/skills/'));
+    const skillFiles = written.filter((f) => f.startsWith('.agents/skills/'));
     if (skillFiles.length > 0) {
         const skills = [...new Set(skillFiles.map((f) => f.split('/')[2]))];
         console.log(`  ✓ skills deployed: ${skills.join(', ')}`);
     }
-    console.log(`  wrote ${fileNames.length} workspace files`);
+    console.log(`  wrote ${written.length} workspace files`);
+    return written.length;
 }
 //# sourceMappingURL=write-workspace-files.js.map

package/dist/utils/write-workspace-files.js.map

@@ -1 +1 @@
-{"version":3,"file":"write-workspace-files.js","sourceRoot":"","sources":["../../src/utils/write-workspace-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA6B,EAC7B,YAAoB;IAEpB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEnC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAElD,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,OAAO,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YACnD,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC5E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,WAAW,SAAS,CAAC,MAAM,kBAAkB,CAAC,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"write-workspace-files.js","sourceRoot":"","sources":["../../src/utils/write-workspace-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA6B,EAC7B,YAAoB;IAEpB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAErC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAElD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,0EAA0E;QAC1E,4EAA4E;QAC5E,oEAAoE;QACpE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,OAAO,QAAQ,qCAAqC,CAAC,CAAC;YACpE,SAAS;QACX,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,OAAO,QAAQ,KAAK,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC/B,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YACnD,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC1E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,MAAM,kBAAkB,CAAC,CAAC;IACzD,OAAO,OAAO,CAAC,MAAM,CAAC;AACxB,CAAC"}

package/dist/workspace.d.ts

@@ -10,3 +10,14 @@
  * (which used WORKSPACE_DIR) and backup/knowledge_sync (which used OPENCLAW_STATE_DIR).
  */
 export declare function getWorkspaceDir(): string;
+/**
+ * Resolve a backend-supplied relative path inside `workspaceDir`, or null if it
+ * escapes. The ONE sandbox for every backend-supplied path — `file_write`,
+ * `file_delete` and `writeWorkspaceFiles` all route through it.
+ *
+ * Containment is checked on path *segments* (via `path.relative`), not by
+ * substring. The old `p.includes('..') || p.startsWith('/')` copies in the two
+ * handlers rejected innocent names like `notes..v2.md` and missed Windows
+ * absolute forms such as `C:\x` and `\\server\share`.
+ */
+export declare function resolveInsideWorkspace(workspaceDir: string, relPath: string): string | null;

package/dist/workspace.js

@@ -16,4 +16,24 @@ export function getWorkspaceDir() {
         return config.workspaceDir;
     return path.join(config.stateDir, 'workspace');
 }
+/**
+ * Resolve a backend-supplied relative path inside `workspaceDir`, or null if it
+ * escapes. The ONE sandbox for every backend-supplied path — `file_write`,
+ * `file_delete` and `writeWorkspaceFiles` all route through it.
+ *
+ * Containment is checked on path *segments* (via `path.relative`), not by
+ * substring. The old `p.includes('..') || p.startsWith('/')` copies in the two
+ * handlers rejected innocent names like `notes..v2.md` and missed Windows
+ * absolute forms such as `C:\x` and `\\server\share`.
+ */
+export function resolveInsideWorkspace(workspaceDir, relPath) {
+    if (!relPath || path.isAbsolute(relPath) || path.win32.isAbsolute(relPath))
+        return null;
+    const fullPath = path.resolve(workspaceDir, relPath);
+    const rel = path.relative(workspaceDir, fullPath);
+    if (rel === '' || rel === '..' || rel.startsWith('..' + path.sep) || path.isAbsolute(rel)) {
+        return null;
+    }
+    return fullPath;
+}
 //# sourceMappingURL=workspace.js.map

package/dist/workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,MAAM,CAAC,YAAY;QAAE,OAAO,MAAM,CAAC,YAAY,CAAC;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AACjD,CAAC"}
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,MAAM,CAAC,YAAY;QAAE,OAAO,MAAM,CAAC,YAAY,CAAC;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,YAAoB,EAAE,OAAe;IAC1E,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/package.json

@@ -1,17 +1,21 @@
 {
   "name": "@openclaw-cloud/agent-controller",
-  "version": "3.1.0",
+  "version": "3.1.2",
+  "packageManager": "pnpm@11.5.2",
   "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
   "main": "dist/index.js",
   "bin": {
     "agent-controller": "bin/agent-controller.js"
   },
   "scripts": {
     "build": "tsc",
-    "prepublishOnly": "npm run build",
-    "test": "node --experimental-vm-modules node_modules/.bin/jest --forceExit",
+    "prepublishOnly": "pnpm run build",
+    "test": "NODE_OPTIONS=--experimental-vm-modules jest --forceExit",
     "start": "node bin/agent-controller.js",
-    "prepare": "[ -d .git ] && husky || true",
+    "prepare": "[ -e .git ] && husky || true",
     "lint": "eslint --fix ./src"
   },
   "files": [
@@ -25,6 +29,7 @@
     "zod": "^4.3.6"
   },
   "devDependencies": {
+    "@jest/globals": "^30.0.0",
     "@semantic-release/git": "^10.0.1",
     "@semantic-release/npm": "^13.1.5",
     "@types/jest": "^30.0.0",