activeclaw 2026.2.11 → 2026.2.13

package/dist/{skills-ccAgQ3Ad.js → skills-DprQj9X2.js}

@@ -1,12 +1,14 @@
-import { t as createSubsystemLogger } from "./subsystem-Bh1Y_6Uv.js";
-import { b as resolveUserPath, t as CONFIG_DIR } from "./utils-es4ygvQ-.js";
-import { n as resolveOpenClawPackageRootSync } from "./openclaw-root-JLDMp6ux.js";
+import { t as createSubsystemLogger } from "./subsystem-BoExtIHo.js";
+import { b as resolveUserPath, t as CONFIG_DIR } from "./utils-Cd9QdCHh.js";
+import { n as resolveOpenClawPackageRootSync } from "./openclaw-root-1VeFrph_.js";
 import { t as parseBooleanValue } from "./boolean-BgXe2hyu.js";
-import { a as MANIFEST_KEY, c as normalizePluginsConfig, i as LEGACY_MANIFEST_KEYS, l as resolveEnableState, t as loadPluginManifestRegistry, u as resolveMemorySlotDecision } from "./manifest-registry-3It8Z8yN.js";
+import { a as MANIFEST_KEY, d as resolveMemorySlotDecision, i as LEGACY_MANIFEST_KEYS, l as normalizePluginsConfig, t as loadPluginManifestRegistry, u as resolveEnableState } from "./manifest-registry-CQhdnDBZ.js";
 import { fileURLToPath } from "node:url";
 import fs from "node:fs";
+import os from "node:os";
 import path from "node:path";
 import JSON5 from "json5";
+import fs$1 from "node:fs/promises";
 import { formatSkillsForPrompt, loadSkillsFromDir } from "@mariozechner/pi-coding-agent";
 import YAML from "yaml";
 
@@ -361,6 +363,83 @@ function applySkillEnvOverridesFromSnapshot(params) {
 	};
 }
 
+//#endregion
+//#region src/agents/sandbox-paths.ts
+const UNICODE_SPACES = /[\u00A0\u2000-\u200A\u202F\u205F\u3000]/g;
+const HTTP_URL_RE = /^https?:\/\//i;
+const DATA_URL_RE = /^data:/i;
+function normalizeUnicodeSpaces(str) {
+	return str.replace(UNICODE_SPACES, " ");
+}
+function expandPath(filePath) {
+	const normalized = normalizeUnicodeSpaces(filePath);
+	if (normalized === "~") return os.homedir();
+	if (normalized.startsWith("~/")) return os.homedir() + normalized.slice(1);
+	return normalized;
+}
+function resolveToCwd(filePath, cwd) {
+	const expanded = expandPath(filePath);
+	if (path.isAbsolute(expanded)) return expanded;
+	return path.resolve(cwd, expanded);
+}
+function resolveSandboxPath(params) {
+	const resolved = resolveToCwd(params.filePath, params.cwd);
+	const rootResolved = path.resolve(params.root);
+	const relative = path.relative(rootResolved, resolved);
+	if (!relative || relative === "") return {
+		resolved,
+		relative: ""
+	};
+	if (relative.startsWith("..") || path.isAbsolute(relative)) throw new Error(`Path escapes sandbox root (${shortPath(rootResolved)}): ${params.filePath}`);
+	return {
+		resolved,
+		relative
+	};
+}
+async function assertSandboxPath(params) {
+	const resolved = resolveSandboxPath(params);
+	await assertNoSymlink(resolved.relative, path.resolve(params.root));
+	return resolved;
+}
+function assertMediaNotDataUrl(media) {
+	const raw = media.trim();
+	if (DATA_URL_RE.test(raw)) throw new Error("data: URLs are not supported for media. Use buffer instead.");
+}
+async function resolveSandboxedMediaSource(params) {
+	const raw = params.media.trim();
+	if (!raw) return raw;
+	if (HTTP_URL_RE.test(raw)) return raw;
+	let candidate = raw;
+	if (/^file:\/\//i.test(candidate)) try {
+		candidate = fileURLToPath(candidate);
+	} catch {
+		throw new Error(`Invalid file:// URL for sandboxed media: ${raw}`);
+	}
+	return (await assertSandboxPath({
+		filePath: candidate,
+		cwd: params.sandboxRoot,
+		root: params.sandboxRoot
+	})).resolved;
+}
+async function assertNoSymlink(relative, root) {
+	if (!relative) return;
+	const parts = relative.split(path.sep).filter(Boolean);
+	let current = root;
+	for (const part of parts) {
+		current = path.join(current, part);
+		try {
+			if ((await fs$1.lstat(current)).isSymbolicLink()) throw new Error(`Symlink not allowed in sandbox path: ${current}`);
+		} catch (err) {
+			if (err.code === "ENOENT") return;
+			throw err;
+		}
+	}
+}
+function shortPath(value) {
+	if (value.startsWith(os.homedir())) return `~${value.slice(os.homedir().length)}`;
+	return value;
+}
+
 //#endregion
 //#region src/agents/skills/bundled-dir.ts
 function looksLikeSkillsDir(dir) {
@@ -518,7 +597,7 @@ function loadSkillEntries(workspaceDir, opts) {
 		return [];
 	};
 	const managedSkillsDir = opts?.managedSkillsDir ?? path.join(CONFIG_DIR, "skills");
-	const workspaceSkillsDir = path.join(workspaceDir, "skills");
+	const workspaceSkillsDir = path.resolve(workspaceDir, "skills");
 	const bundledSkillsDir = opts?.bundledSkillsDir ?? resolveBundledSkillsDir();
 	const extraDirs = (opts?.config?.skills?.load?.extraDirs ?? []).map((d) => typeof d === "string" ? d.trim() : "").filter(Boolean);
 	const pluginSkillDirs = resolvePluginSkillDirs({
@@ -540,6 +619,14 @@ function loadSkillEntries(workspaceDir, opts) {
 		dir: managedSkillsDir,
 		source: "openclaw-managed"
 	});
+	const personalAgentsSkills = loadSkills({
+		dir: path.resolve(os.homedir(), ".agents", "skills"),
+		source: "agents-skills-personal"
+	});
+	const projectAgentsSkills = loadSkills({
+		dir: path.resolve(workspaceDir, ".agents", "skills"),
+		source: "agents-skills-project"
+	});
 	const workspaceSkills = loadSkills({
 		dir: workspaceSkillsDir,
 		source: "openclaw-workspace"
@@ -548,6 +635,8 @@ function loadSkillEntries(workspaceDir, opts) {
 	for (const skill of extraSkills) merged.set(skill.name, skill);
 	for (const skill of bundledSkills) merged.set(skill.name, skill);
 	for (const skill of managedSkills) merged.set(skill.name, skill);
+	for (const skill of personalAgentsSkills) merged.set(skill.name, skill);
+	for (const skill of projectAgentsSkills) merged.set(skill.name, skill);
 	for (const skill of workspaceSkills) merged.set(skill.name, skill);
 	return Array.from(merged.values()).map((skill) => {
 		let frontmatter = {};
@@ -594,6 +683,36 @@ function resolveSkillsPromptForRun(params) {
 function loadWorkspaceSkillEntries(workspaceDir, opts) {
 	return loadSkillEntries(workspaceDir, opts);
 }
+function resolveUniqueSyncedSkillDirName(base, used) {
+	if (!used.has(base)) {
+		used.add(base);
+		return base;
+	}
+	for (let index = 2; index < 1e4; index += 1) {
+		const candidate = `${base}-${index}`;
+		if (!used.has(candidate)) {
+			used.add(candidate);
+			return candidate;
+		}
+	}
+	let fallbackIndex = 1e4;
+	let fallback = `${base}-${fallbackIndex}`;
+	while (used.has(fallback)) {
+		fallbackIndex += 1;
+		fallback = `${base}-${fallbackIndex}`;
+	}
+	used.add(fallback);
+	return fallback;
+}
+function resolveSyncedSkillDestinationPath(params) {
+	const sourceDirName = path.basename(params.entry.skill.baseDir).trim();
+	if (!sourceDirName || sourceDirName === "." || sourceDirName === "..") return null;
+	return resolveSandboxPath({
+		filePath: resolveUniqueSyncedSkillDirName(sourceDirName, params.usedDirNames),
+		cwd: params.targetSkillsDir,
+		root: params.targetSkillsDir
+	}).resolved;
+}
 async function syncSkillsToWorkspace(params) {
 	const sourceDir = resolveUserPath(params.sourceWorkspaceDir);
 	const targetDir = resolveUserPath(params.targetWorkspaceDir);
@@ -610,8 +729,24 @@ async function syncSkillsToWorkspace(params) {
 			force: true
 		});
 		await fsp.mkdir(targetSkillsDir, { recursive: true });
+		const usedDirNames = /* @__PURE__ */ new Set();
 		for (const entry of entries) {
-			const dest = path.join(targetSkillsDir, entry.skill.name);
+			let dest = null;
+			try {
+				dest = resolveSyncedSkillDestinationPath({
+					targetSkillsDir,
+					entry,
+					usedDirNames
+				});
+			} catch (error) {
+				const message = error instanceof Error ? error.message : JSON.stringify(error);
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: ${message}`);
+				continue;
+			}
+			if (!dest) {
+				console.warn(`[skills] Failed to resolve safe destination for ${entry.skill.name}: invalid source directory name`);
+				continue;
+			}
 			try {
 				await fsp.cp(entry.skill.baseDir, dest, {
 					recursive: true,
@@ -691,4 +826,4 @@ function resolveSkillsInstallPreferences(config) {
 }
 
 //#endregion
-export { resolveSkillKey as _, resolveSkillsPromptForRun as a, resolveBundledSkillsDir as c, hasBinary as d, isBundledSkillAllowed as f, resolveSkillConfig as g, resolveConfigPath as h, loadWorkspaceSkillEntries as i, applySkillEnvOverrides as l, resolveBundledAllowlist as m, buildWorkspaceSkillCommandSpecs as n, syncSkillsToWorkspace as o, isConfigPathTruthy as p, buildWorkspaceSkillSnapshot as r, resolvePluginSkillDirs as s, resolveSkillsInstallPreferences as t, applySkillEnvOverridesFromSnapshot as u, parseFrontmatterBlock as v };
+export { resolveBundledAllowlist as _, resolveSkillsPromptForRun as a, resolveSkillKey as b, resolveBundledSkillsDir as c, resolveSandboxedMediaSource as d, applySkillEnvOverrides as f, isConfigPathTruthy as g, isBundledSkillAllowed as h, loadWorkspaceSkillEntries as i, assertMediaNotDataUrl as l, hasBinary as m, buildWorkspaceSkillCommandSpecs as n, syncSkillsToWorkspace as o, applySkillEnvOverridesFromSnapshot as p, buildWorkspaceSkillSnapshot as r, resolvePluginSkillDirs as s, resolveSkillsInstallPreferences as t, assertSandboxPath as u, resolveConfigPath as v, parseFrontmatterBlock as x, resolveSkillConfig as y };

package/dist/{skills-cli-DQilTG3n.js → skills-cli-9WO-C55s.js}

@@ -1,19 +1,19 @@
 import "./paths-DVBShlw6.js";
-import { R as theme, c as defaultRuntime } from "./subsystem-Bh1Y_6Uv.js";
-import { C as shortenHomePath } from "./utils-es4ygvQ-.js";
-import "./exec-Cv_Ofd1m.js";
-import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-CGmuusG9.js";
-import "./model-selection-BK7DuyH8.js";
+import { R as theme, c as defaultRuntime } from "./subsystem-BoExtIHo.js";
+import { C as shortenHomePath } from "./utils-Cd9QdCHh.js";
+import "./exec-YIosokWE.js";
+import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-CQCus0rI.js";
+import "./model-selection-BLuqsGVB.js";
 import "./github-copilot-token-BW-SEg7E.js";
 import { t as formatCliCommand } from "./command-format-ChfKqObn.js";
 import "./boolean-BgXe2hyu.js";
-import "./env-BxRc6wWv.js";
-import { i as loadConfig } from "./config--NUdpACy.js";
-import "./manifest-registry-3It8Z8yN.js";
-import "./skills-ccAgQ3Ad.js";
-import { t as formatDocsLink } from "./links-C591fM9M.js";
-import { t as renderTable } from "./table-DEnmtvl5.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-BosMnzIs.js";
+import "./env-ONzUVAG2.js";
+import { i as loadConfig } from "./config-aFQssWKX.js";
+import "./manifest-registry-CQhdnDBZ.js";
+import "./skills-DprQj9X2.js";
+import { t as formatDocsLink } from "./links-Eax1UO3w.js";
+import { t as renderTable } from "./table-B8dx3v4v.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-5U3P3YfJ.js";
 
 //#region src/cli/skills-cli.ts
 function appendClawHubHint(output, json) {

package/dist/{skills-cli-ggyLBtAY.js → skills-cli-B9eej-EW.js}

@@ -1,16 +1,16 @@
-import { k as theme, p as defaultRuntime } from "./entry.js";
-import "./auth-profiles-Bv1AEm-Y.js";
-import { t as formatCliCommand } from "./command-format-ayFsmwwz.js";
-import { S as shortenHomePath } from "./utils-Dk86IbEs.js";
-import "./exec-B8JKbXKW.js";
-import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-DQuy3dwI.js";
-import "./github-copilot-token-SLWintYd.js";
-import { i as loadConfig } from "./config-B00lvFac.js";
-import "./manifest-registry-D5SiA3xq.js";
-import { t as formatDocsLink } from "./links-7M-j83As.js";
-import "./skills-D5UZZZSY.js";
-import { t as renderTable } from "./table-cCoGqLsk.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-DjtPPMnY.js";
+import { A as theme, p as defaultRuntime } from "./entry.js";
+import "./auth-profiles-ByNs3eEm.js";
+import { t as formatCliCommand } from "./command-format-Bxe0mWee.js";
+import { S as shortenHomePath } from "./utils-BLJAc3ZV.js";
+import "./exec-CACT5OAW.js";
+import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-CsRbLH4l.js";
+import "./github-copilot-token-Cfs0Wxr8.js";
+import { i as loadConfig } from "./config-Bdhomfei.js";
+import "./manifest-registry-u0okVSkU.js";
+import { t as formatDocsLink } from "./links-B8LAzWwg.js";
+import "./skills-DRjfSQT3.js";
+import { t as renderTable } from "./table-CwulTLQp.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-TDIgVd1K.js";
 
 //#region src/cli/skills-cli.ts
 function appendClawHubHint(output, json) {

package/dist/{skills-status-BosMnzIs.js → skills-status-5U3P3YfJ.js}

@@ -1,6 +1,6 @@
-import { t as createSubsystemLogger } from "./subsystem-Bh1Y_6Uv.js";
-import { t as CONFIG_DIR } from "./utils-es4ygvQ-.js";
-import { c as resolveBundledSkillsDir, d as hasBinary, f as isBundledSkillAllowed, g as resolveSkillConfig, h as resolveConfigPath, i as loadWorkspaceSkillEntries, m as resolveBundledAllowlist, p as isConfigPathTruthy, t as resolveSkillsInstallPreferences } from "./skills-ccAgQ3Ad.js";
+import { t as createSubsystemLogger } from "./subsystem-BoExtIHo.js";
+import { t as CONFIG_DIR } from "./utils-Cd9QdCHh.js";
+import { _ as resolveBundledAllowlist, c as resolveBundledSkillsDir, g as isConfigPathTruthy, h as isBundledSkillAllowed, i as loadWorkspaceSkillEntries, m as hasBinary, t as resolveSkillsInstallPreferences, v as resolveConfigPath, y as resolveSkillConfig } from "./skills-DprQj9X2.js";
 import path from "node:path";
 import { loadSkillsFromDir } from "@mariozechner/pi-coding-agent";
 

package/dist/{skills-status-DjtPPMnY.js → skills-status-TDIgVd1K.js}

@@ -1,6 +1,6 @@
 import { o as createSubsystemLogger } from "./entry.js";
-import { t as CONFIG_DIR } from "./utils-Dk86IbEs.js";
-import { c as resolveBundledSkillsDir, d as hasBinary, f as isBundledSkillAllowed, g as resolveSkillConfig, h as resolveConfigPath, i as loadWorkspaceSkillEntries, m as resolveBundledAllowlist, p as isConfigPathTruthy, t as resolveSkillsInstallPreferences } from "./skills-D5UZZZSY.js";
+import { t as CONFIG_DIR } from "./utils-BLJAc3ZV.js";
+import { _ as resolveBundledAllowlist, c as resolveBundledSkillsDir, g as isConfigPathTruthy, h as isBundledSkillAllowed, i as loadWorkspaceSkillEntries, m as hasBinary, t as resolveSkillsInstallPreferences, v as resolveConfigPath, y as resolveSkillConfig } from "./skills-DRjfSQT3.js";
 import path from "node:path";
 import { loadSkillsFromDir } from "@mariozechner/pi-coding-agent";
 

package/dist/{sqlite-B7FPASCO.js → sqlite-BINzs1U0.js}

@@ -1,6 +1,6 @@
 import { o as createSubsystemLogger, t as installProcessWarningFilter } from "./entry.js";
-import { a as resolveSessionTranscriptsDirForAgent } from "./paths-IivnSNkP.js";
-import { n as redactSensitiveText } from "./redact-DuEEf1p1.js";
+import { o as resolveSessionTranscriptsDirForAgent } from "./paths-DLINmNFQ.js";
+import { n as redactSensitiveText } from "./redact-Br9GfacZ.js";
 import { createRequire } from "node:module";
 import path from "node:path";
 import fs from "node:fs";

package/dist/{sqlite-Btrgi7-j.js → sqlite-D4w5TejA.js}

@@ -1,6 +1,6 @@
-import { t as createSubsystemLogger } from "./subsystem-Bh1Y_6Uv.js";
-import { a as resolveSessionTranscriptsDirForAgent } from "./paths-Bkhd_qY8.js";
-import { n as redactSensitiveText } from "./redact-DAKeu7PA.js";
+import { t as createSubsystemLogger } from "./subsystem-BoExtIHo.js";
+import { o as resolveSessionTranscriptsDirForAgent } from "./paths-B49s6UZQ.js";
+import { n as redactSensitiveText } from "./redact-BRsnXqwD.js";
 import { createRequire } from "node:module";
 import fs from "node:fs";
 import path from "node:path";

package/dist/{sqlite-BrQ9tw8B.js → sqlite-DRRHmlug.js}

@@ -1,6 +1,6 @@
-import { l as createSubsystemLogger } from "./exec-CijMSZd9.js";
-import { i as resolveSessionTranscriptsDirForAgent } from "./paths-MnZaxqPw.js";
-import { t as redactSensitiveText } from "./redact-BOIof271.js";
+import { l as createSubsystemLogger } from "./exec-B8lXct-k.js";
+import { i as resolveSessionTranscriptsDirForAgent } from "./paths-B0a4ywSO.js";
+import { t as redactSensitiveText } from "./redact-BrXLgslJ.js";
 import { createRequire } from "node:module";
 import fs from "node:fs/promises";
 import path from "node:path";

package/dist/{sqlite-HepBVDoX.js → sqlite-F6PGkEm1.js}

@@ -1,5 +1,5 @@
-import { l as createSubsystemLogger } from "./exec-57A8Rlc8.js";
-import { i as resolveSessionTranscriptsDirForAgent } from "./paths-DL6EIRTw.js";
+import { l as createSubsystemLogger } from "./exec-CJFFoM7H.js";
+import { i as resolveSessionTranscriptsDirForAgent } from "./paths-D0O87MfH.js";
 import { t as redactSensitiveText } from "./redact-BIMJ3ntQ.js";
 import { createRequire } from "node:module";
 import path from "node:path";

package/dist/{status-BByCntWS.js → status-BKGkKC_v.js}

@@ -1,7 +1,7 @@
 import { o as createSubsystemLogger } from "./entry.js";
-import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir, w as resolveDefaultAgentWorkspaceDir } from "./agent-scope-DQuy3dwI.js";
-import { i as loadConfig } from "./config-B00lvFac.js";
-import { t as loadOpenClawPlugins } from "./loader-wXwp4rZJ.js";
+import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir, w as resolveDefaultAgentWorkspaceDir } from "./agent-scope-CsRbLH4l.js";
+import { i as loadConfig } from "./config-Bdhomfei.js";
+import { t as loadOpenClawPlugins } from "./loader-KjT074JR.js";
 
 //#region src/plugins/status.ts
 const log = createSubsystemLogger("plugins");

package/dist/{status-Dt7RE_Yy.js → status-CiHtHdaa.js}

@@ -1,7 +1,7 @@
-import { t as createSubsystemLogger } from "./subsystem-Bh1Y_6Uv.js";
-import { ut as loadOpenClawPlugins } from "./reply--b7BsXGP.js";
-import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir, w as resolveDefaultAgentWorkspaceDir } from "./agent-scope-CGmuusG9.js";
-import { i as loadConfig } from "./config--NUdpACy.js";
+import { t as createSubsystemLogger } from "./subsystem-BoExtIHo.js";
+import { ut as loadOpenClawPlugins } from "./reply-DICXkh_C.js";
+import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir, w as resolveDefaultAgentWorkspaceDir } from "./agent-scope-CQCus0rI.js";
+import { i as loadConfig } from "./config-aFQssWKX.js";
 
 //#region src/plugins/status.ts
 const log = createSubsystemLogger("plugins");

package/dist/{status-zfL4Yej7.js → status-DDWoOpeB.js}

@@ -1,42 +1,42 @@
-import { I as DEFAULT_GATEWAY_PORT, O as isRich, W as resolveGatewayPort, k as theme, m as restoreTerminalState, p as defaultRuntime, y as info } from "./entry.js";
-import { Ct as DEFAULT_CONTEXT_TOKENS, N as resolveConfiguredModelRef, Tt as DEFAULT_PROVIDER, _ as ensureAuthProfileStore, wt as DEFAULT_MODEL } from "./auth-profiles-Bv1AEm-Y.js";
-import { r as resolveCliName, t as formatCliCommand } from "./command-format-ayFsmwwz.js";
+import { A as theme, G as resolveGatewayPort, L as DEFAULT_GATEWAY_PORT, k as isRich, m as restoreTerminalState, p as defaultRuntime, y as info } from "./entry.js";
+import { Ct as DEFAULT_CONTEXT_TOKENS, N as resolveConfiguredModelRef, Tt as DEFAULT_PROVIDER, _ as ensureAuthProfileStore, wt as DEFAULT_MODEL } from "./auth-profiles-ByNs3eEm.js";
+import { r as resolveCliName, t as formatCliCommand } from "./command-format-Bxe0mWee.js";
 import { l as normalizeAgentId, y as parseAgentSessionKey } from "./session-key-DVvxnFKg.js";
-import { h as pathExists, y as resolveUserPath } from "./utils-Dk86IbEs.js";
-import { n as runExec } from "./exec-B8JKbXKW.js";
-import { t as resolveOpenClawPackageRoot } from "./openclaw-root-Dw6gumSU.js";
-import { c as resolveDefaultAgentId, h as DEFAULT_IDENTITY_FILENAME, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir } from "./agent-scope-DQuy3dwI.js";
-import { M as VERSION, c as writeConfigFile, i as loadConfig, o as readConfigFileSnapshot } from "./config-B00lvFac.js";
-import { d as formatPortDiagnostics, l as inspectPortUsage } from "./chrome-yIKmOzCO.js";
-import { a as findTailscaleBinary, o as getTailnetHostname, s as readTailscaleStatusJson } from "./tailscale-DU6DgqVy.js";
-import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-7yrB6v4I.js";
-import { n as listChannelPlugins } from "./plugins-Db5BiELK.js";
-import { $t as loadProviderUsageSummary, Bn as readRestartSentinel, Fr as getMemorySearchManager, Nt as sha256HexPrefix, Vn as summarizeRestartSentinel, X as getRemoteSkillEligibility, _ as randomToken, a as applyWizardMetadata, b as summarizeExistingConfig, c as ensureWorkspaceAndSessions, d as handleReset, en as formatUsageReportLines, g as probeGatewayReachable, gn as lookupContextTokens, h as printWizardHeader, i as DEFAULT_WORKSPACE, l as formatControlUiSshHint, m as openUrl, nr as peekSystemEvents, p as normalizeGatewayTokenInput, q as buildChannelSummary, rn as listAgentsForGateway, s as detectBrowserOpenSupport, v as resolveControlUiLinks, w as normalizeControlUiBasePath, x as waitForGatewayReachable } from "./loader-wXwp4rZJ.js";
-import { n as withProgress } from "./progress-Da1ehW-x.js";
+import { h as pathExists, y as resolveUserPath } from "./utils-BLJAc3ZV.js";
+import { n as runExec } from "./exec-CACT5OAW.js";
+import { t as resolveOpenClawPackageRoot } from "./openclaw-root-BNlEap4i.js";
+import { c as resolveDefaultAgentId, h as DEFAULT_IDENTITY_FILENAME, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir } from "./agent-scope-CsRbLH4l.js";
+import { M as VERSION, c as writeConfigFile, i as loadConfig, o as readConfigFileSnapshot } from "./config-Bdhomfei.js";
+import { d as formatPortDiagnostics, l as inspectPortUsage } from "./chrome-foEwx3lN.js";
+import { d as getTailnetHostname, f as readTailscaleStatusJson, u as findTailscaleBinary } from "./auth-9x3lqfIY.js";
+import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-DVYCIV8m.js";
+import { n as listChannelPlugins } from "./plugins-4Hqd1WGf.js";
+import { $n as peekSystemEvents, Kt as loadProviderUsageSummary, Nn as readRestartSentinel, Nt as sha256HexPrefix, Pn as summarizeRestartSentinel, Pr as getMemorySearchManager, X as getRemoteSkillEligibility, Xt as listAgentsForGateway, _ as randomToken, a as applyWizardMetadata, b as summarizeExistingConfig, c as ensureWorkspaceAndSessions, d as handleReset, g as probeGatewayReachable, h as printWizardHeader, i as DEFAULT_WORKSPACE, l as formatControlUiSshHint, ln as lookupContextTokens, m as openUrl, p as normalizeGatewayTokenInput, q as buildChannelSummary, qt as formatUsageReportLines, s as detectBrowserOpenSupport, v as resolveControlUiLinks, w as normalizeControlUiBasePath, x as waitForGatewayReachable } from "./loader-KjT074JR.js";
+import { n as withProgress } from "./progress-DWqhRakV.js";
 import { t as WizardCancelledError } from "./prompts-CXLLIBwP.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-DdwqKAAS.js";
-import { n as setupChannels } from "./onboard-channels-DxXvp8og.js";
-import { o as resolveStorePath } from "./paths-IivnSNkP.js";
-import { I as resolveMainSessionKey, d as loadSessionStore } from "./sandbox-Aks-9EcZ.js";
-import { r as formatDurationPrecise } from "./format-duration-Be5Z7JdJ.js";
-import { n as formatTimeAgo } from "./format-relative-79_Y1n2Y.js";
-import { t as collectChannelStatusIssues } from "./channels-status-issues-B3KkflfR.js";
-import { r as installCompletion } from "./completion-cli-DrJGfJGl.js";
-import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-c0uXH4Dl.js";
-import { o as resolveGatewayLogPaths, t as resolveGatewayService } from "./service-DDPRbf8a.js";
-import { r as isSystemdUserServiceAvailable } from "./systemd-BEWwfwn0.js";
-import { o as readLastGatewayErrorLine } from "./service-audit-x6jCN-6a.js";
-import { t as renderTable } from "./table-cCoGqLsk.js";
-import { i as probeGateway, t as runSecurityAudit } from "./audit-CY-yopxa.js";
-import { c as promptDefaultModel, d as warnIfModelConfigLooksOff, f as applyAuthChoice, g as promptAuthChoiceGrouped, i as promptCustomApiConfig, r as promptRemoteGatewayConfig, s as applyPrimaryModel, t as setupSkills, u as resolvePreferredProviderForAuthChoice } from "./onboard-skills-CBxsRGyf.js";
-import { l as healthCommand, n as ensureControlUiAssetsBuilt, s as formatHealthChannelLines, t as formatHealthCheckFailure, u as resolveHeartbeatSummaryForAgent } from "./health-format-DrGFg8bx.js";
-import { C as resolveEffectiveUpdateChannel, S as normalizeUpdateChannel, c as formatUpdateOneLiner, d as checkShellCompletionStatus, h as compareSemverStrings, l as getUpdateCheckResult, m as checkUpdateStatus, p as ensureCompletionCacheExists, s as formatUpdateAvailableHint, u as resolveUpdateAvailability, x as formatUpdateChannelLabel } from "./update-runner-ChTf6O6p.js";
-import { n as logConfigUpdated } from "./logging-DuK6YXuK.js";
-import { t as buildWorkspaceHookStatus } from "./hooks-status-Br-2bK2G.js";
-import { t as buildWorkspaceSkillStatus } from "./skills-status-DjtPPMnY.js";
-import { t as runTui } from "./tui-BdJWZdto.js";
-import { t as resolveNodeService } from "./node-service-u8g85nD3.js";
-import { n as redactSecrets, t as formatGatewayAuthUsed } from "./format-CaxeRcue.js";
+import { n as setupChannels } from "./onboard-channels-C501x8GI.js";
+import { s as resolveStorePath } from "./paths-DLINmNFQ.js";
+import { I as resolveMainSessionKey, d as loadSessionStore } from "./sandbox-BKYnhYQH.js";
+import { r as formatDurationPrecise } from "./format-duration-Bo9zNKwO.js";
+import { n as formatTimeAgo } from "./format-relative-CZOlQ2pA.js";
+import { t as collectChannelStatusIssues } from "./channels-status-issues-D7GSV1GS.js";
+import { r as installCompletion } from "./completion-cli-CR77-jyv.js";
+import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-B0tg_LsX.js";
+import { o as resolveGatewayLogPaths, t as resolveGatewayService } from "./service-99RDXwX4.js";
+import { r as isSystemdUserServiceAvailable } from "./systemd-C0VZriGM.js";
+import { o as readLastGatewayErrorLine } from "./service-audit-ckBaRCVC.js";
+import { t as renderTable } from "./table-CwulTLQp.js";
+import { i as probeGateway, t as runSecurityAudit } from "./audit-wPu26VMb.js";
+import { d as applyPrimaryModel, f as promptDefaultModel, g as applyAuthChoice, h as warnIfModelConfigLooksOff, m as resolvePreferredProviderForAuthChoice, r as promptRemoteGatewayConfig, s as promptCustomApiConfig, t as setupSkills, x as promptAuthChoiceGrouped } from "./onboard-skills-DV0Qzvjj.js";
+import { l as healthCommand, n as ensureControlUiAssetsBuilt, s as formatHealthChannelLines, t as formatHealthCheckFailure, u as resolveHeartbeatSummaryForAgent } from "./health-format-LZDxu3rv.js";
+import { C as resolveEffectiveUpdateChannel, S as normalizeUpdateChannel, c as formatUpdateOneLiner, d as checkShellCompletionStatus, h as compareSemverStrings, l as getUpdateCheckResult, m as checkUpdateStatus, p as ensureCompletionCacheExists, s as formatUpdateAvailableHint, u as resolveUpdateAvailability, x as formatUpdateChannelLabel } from "./update-runner--ixK4J3W.js";
+import { n as logConfigUpdated } from "./logging-CRq4h04P.js";
+import { t as buildWorkspaceHookStatus } from "./hooks-status-Cw0xD8Lt.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-TDIgVd1K.js";
+import { t as runTui } from "./tui-Lu8FdrlK.js";
+import { t as resolveNodeService } from "./node-service-WQuEKz6W.js";
+import { n as redactSecrets, t as formatGatewayAuthUsed } from "./format-CNU-Zkrz.js";
 import { spawnSync } from "node:child_process";
 import path from "node:path";
 import os from "node:os";
@@ -152,7 +152,7 @@ async function finalizeOnboardingWizard(options) {
 	const systemdAvailable = process.platform === "linux" ? await isSystemdUserServiceAvailable() : true;
 	if (process.platform === "linux" && !systemdAvailable) await prompter.note("Systemd user services are unavailable. Skipping lingering checks and service install.", "Systemd");
 	if (process.platform === "linux" && systemdAvailable) {
-		const { ensureSystemdUserLingerInteractive } = await import("./systemd-linger-CDo2UbHM.js").then((n) => n.r);
+		const { ensureSystemdUserLingerInteractive } = await import("./systemd-linger-xdn3BdPh.js").then((n) => n.r);
 		await ensureSystemdUserLingerInteractive({
 			runtime,
 			prompter: {

package/dist/{subsystem-Bh1Y_6Uv.js → subsystem-BoExtIHo.js}

@@ -1,12 +1,38 @@
 import { o as resolveConfigPath } from "./paths-DVBShlw6.js";
 import { createRequire } from "node:module";
 import fs from "node:fs";
+import os from "node:os";
 import path from "node:path";
 import { Logger } from "tslog";
 import JSON5 from "json5";
 import chalk, { Chalk } from "chalk";
 import util from "node:util";
 
+//#region src/infra/tmp-openclaw-dir.ts
+const POSIX_OPENCLAW_TMP_DIR = "/tmp/openclaw";
+function isNodeErrorWithCode(err, code) {
+	return typeof err === "object" && err !== null && "code" in err && err.code === code;
+}
+function resolvePreferredOpenClawTmpDir(options = {}) {
+	const accessSync = options.accessSync ?? fs.accessSync;
+	const statSync = options.statSync ?? fs.statSync;
+	const tmpdir = options.tmpdir ?? os.tmpdir;
+	try {
+		if (!statSync(POSIX_OPENCLAW_TMP_DIR).isDirectory()) return path.join(tmpdir(), "openclaw");
+		accessSync(POSIX_OPENCLAW_TMP_DIR, fs.constants.W_OK | fs.constants.X_OK);
+		return POSIX_OPENCLAW_TMP_DIR;
+	} catch (err) {
+		if (!isNodeErrorWithCode(err, "ENOENT")) return path.join(tmpdir(), "openclaw");
+	}
+	try {
+		accessSync("/tmp", fs.constants.W_OK | fs.constants.X_OK);
+		return POSIX_OPENCLAW_TMP_DIR;
+	} catch {
+		return path.join(tmpdir(), "openclaw");
+	}
+}
+
+//#endregion
 //#region src/logging/config.ts
 function readLoggingConfig() {
 	const configPath = resolveConfigPath();
@@ -60,12 +86,13 @@ const loggingState = {
 	consoleTimestampPrefix: false,
 	consoleSubsystemFilter: null,
 	resolvingConsoleSettings: false,
+	streamErrorHandlersInstalled: false,
 	rawConsole: null
 };
 
 //#endregion
 //#region src/logging/logger.ts
-const DEFAULT_LOG_DIR = "/tmp/openclaw";
+const DEFAULT_LOG_DIR = resolvePreferredOpenClawTmpDir();
 const DEFAULT_LOG_FILE = path.join(DEFAULT_LOG_DIR, "openclaw.log");
 const LOG_PREFIX = "openclaw";
 const LOG_SUFFIX = ".log";
@@ -469,17 +496,10 @@ function restoreTerminalState(reason) {
 		reportRestoreFailure("progress line", err, reason);
 	}
 	const stdin = process.stdin;
-	if (stdin.isTTY && typeof stdin.setRawMode === "function") {
-		try {
-			stdin.setRawMode(false);
-		} catch (err) {
-			reportRestoreFailure("raw mode", err, reason);
-		}
-		if (typeof stdin.isPaused === "function" && stdin.isPaused()) try {
-			stdin.resume();
-		} catch (err) {
-			reportRestoreFailure("stdin resume", err, reason);
-		}
+	if (stdin.isTTY && typeof stdin.setRawMode === "function") try {
+		stdin.setRawMode(false);
+	} catch (err) {
+		reportRestoreFailure("raw mode", err, reason);
 	}
 	if (process.stdout.isTTY) try {
 		process.stdout.write(RESET_SEQUENCE);
@@ -593,12 +613,20 @@ function isEpipeError(err) {
 	return code === "EPIPE" || code === "EIO";
 }
 function formatConsoleTimestamp(style) {
-	const now = (/* @__PURE__ */ new Date()).toISOString();
-	if (style === "pretty") return now.slice(11, 19);
-	return now;
+	const now = /* @__PURE__ */ new Date();
+	if (style === "pretty") return `${String(now.getHours()).padStart(2, "0")}:${String(now.getMinutes()).padStart(2, "0")}:${String(now.getSeconds()).padStart(2, "0")}`;
+	const year = now.getFullYear();
+	const month = String(now.getMonth() + 1).padStart(2, "0");
+	const day = String(now.getDate()).padStart(2, "0");
+	const h = String(now.getHours()).padStart(2, "0");
+	const m = String(now.getMinutes()).padStart(2, "0");
+	const s = String(now.getSeconds()).padStart(2, "0");
+	const ms = String(now.getMilliseconds()).padStart(3, "0");
+	const tzOffset = now.getTimezoneOffset();
+	return `${year}-${month}-${day}T${h}:${m}:${s}.${ms}${tzOffset <= 0 ? "+" : "-"}${String(Math.floor(Math.abs(tzOffset) / 60)).padStart(2, "0")}:${String(Math.abs(tzOffset) % 60).padStart(2, "0")}`;
 }
 function hasTimestampPrefix(value) {
-	return /^(?:\d{2}:\d{2}:\d{2}|\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z?)/.test(value);
+	return /^(?:\d{2}:\d{2}:\d{2}|\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})?)/.test(value);
 }
 function isJsonPayload(value) {
 	const trimmed = value.trim();
@@ -617,6 +645,13 @@ function isJsonPayload(value) {
 function enableConsoleCapture() {
 	if (loggingState.consolePatched) return;
 	loggingState.consolePatched = true;
+	if (!loggingState.streamErrorHandlersInstalled) {
+		loggingState.streamErrorHandlersInstalled = true;
+		for (const stream of [process.stdout, process.stderr]) stream.on("error", (err) => {
+			if (isEpipeError(err)) return;
+			throw err;
+		});
+	}
 	let logger = null;
 	const getLoggerLazy = () => {
 		if (!logger) logger = getLogger();
@@ -843,4 +878,4 @@ function runtimeForLogger(logger, exit = defaultRuntime.exit) {
 }
 
 //#endregion
-export { logVerbose as A, getLogger as B, getActivePluginRegistry as C, info as D, danger as E, warn as F, toPinoLikeLogger as H, colorize as I, isRich as L, setVerbose as M, shouldLogVerbose as N, isVerbose as O, success as P, theme as R, normalizeChatChannelId as S, setActivePluginRegistry as T, normalizeLogLevel as U, getResolvedLoggerSettings as V, formatChannelSelectionLine as _, setConsoleTimestampPrefix as a, normalizeAnyChannelId as b, defaultRuntime as c, registerActiveProgressLine as d, unregisterActiveProgressLine as f, formatChannelPrimerLine as g, DEFAULT_CHAT_CHANNEL as h, setConsoleSubsystemFilter as i, logVerboseConsole as j, isYes as k, restoreTerminalState as l, CHAT_CHANNEL_ORDER as m, runtimeForLogger as n, shouldLogSubsystemToConsole as o, CHANNEL_IDS as p, enableConsoleCapture as r, visibleWidth as s, createSubsystemLogger as t, clearActiveProgressLine as u, getChatChannelMeta as v, requireActivePluginRegistry as w, normalizeChannelId as x, listChatChannels as y, getChildLogger as z };
+export { logVerbose as A, getLogger as B, getActivePluginRegistry as C, info as D, danger as E, warn as F, toPinoLikeLogger as H, colorize as I, isRich as L, setVerbose as M, shouldLogVerbose as N, isVerbose as O, success as P, theme as R, normalizeChatChannelId as S, setActivePluginRegistry as T, normalizeLogLevel as U, getResolvedLoggerSettings as V, resolvePreferredOpenClawTmpDir as W, formatChannelSelectionLine as _, setConsoleTimestampPrefix as a, normalizeAnyChannelId as b, defaultRuntime as c, registerActiveProgressLine as d, unregisterActiveProgressLine as f, formatChannelPrimerLine as g, DEFAULT_CHAT_CHANNEL as h, setConsoleSubsystemFilter as i, logVerboseConsole as j, isYes as k, restoreTerminalState as l, CHAT_CHANNEL_ORDER as m, runtimeForLogger as n, shouldLogSubsystemToConsole as o, CHANNEL_IDS as p, enableConsoleCapture as r, visibleWidth as s, createSubsystemLogger as t, clearActiveProgressLine as u, getChatChannelMeta as v, requireActivePluginRegistry as w, normalizeChannelId as x, listChatChannels as y, getChildLogger as z };

package/dist/{system-cli-DwuUkdkH.js → system-cli-B6lr60Io.js}

@@ -1,20 +1,20 @@
 import "./paths-DVBShlw6.js";
-import { E as danger, R as theme, c as defaultRuntime } from "./subsystem-Bh1Y_6Uv.js";
-import "./utils-es4ygvQ-.js";
-import "./exec-Cv_Ofd1m.js";
-import "./agent-scope-CGmuusG9.js";
-import "./model-selection-BK7DuyH8.js";
+import { E as danger, R as theme, c as defaultRuntime } from "./subsystem-BoExtIHo.js";
+import "./utils-Cd9QdCHh.js";
+import "./exec-YIosokWE.js";
+import "./agent-scope-CQCus0rI.js";
+import "./model-selection-BLuqsGVB.js";
 import "./github-copilot-token-BW-SEg7E.js";
 import "./boolean-BgXe2hyu.js";
-import "./env-BxRc6wWv.js";
-import "./config--NUdpACy.js";
-import "./manifest-registry-3It8Z8yN.js";
-import "./message-channel-Cu61-7H6.js";
-import "./client-6xKrRC-1.js";
-import "./call-Bek1xlgk.js";
-import { t as formatDocsLink } from "./links-C591fM9M.js";
-import "./progress-DIQJt9Va.js";
-import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-BoL2vinh.js";
+import "./env-ONzUVAG2.js";
+import "./config-aFQssWKX.js";
+import "./manifest-registry-CQhdnDBZ.js";
+import "./message-channel-BLi2a6Yw.js";
+import "./client-BrYfyoDK.js";
+import "./call-SolyGS1r.js";
+import { t as formatDocsLink } from "./links-Eax1UO3w.js";
+import "./progress-C9kngsTD.js";
+import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-wXSCUZXj.js";
 
 //#region src/cli/system-cli.ts
 const normalizeWakeMode = (raw) => {