agentlife 2.6.32 → 2.6.33

package/dist/index.js

@@ -296,6 +296,9 @@ function getOrCreateAgentDb(state, agentId) {
     return db;
   if (!state.dbBaseDir)
     throw new Error("DB base dir not initialized");
+  if (!/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/.test(agentId)) {
+    throw new Error(`invalid agentId for DB path: ${agentId}`);
+  }
   fsSync.mkdirSync(state.dbBaseDir, { recursive: true });
   const { DatabaseSync } = requireSqlite();
   db = new DatabaseSync(path.join(state.dbBaseDir, `${agentId}.db`));
@@ -697,11 +700,21 @@ class TransientSurfaces {
     this.store.set(block.surfaceId, entry);
     return entry;
   }
-  get(surfaceId) {
-    return this.store.get(surfaceId) ?? null;
+  isExpired(entry, now) {
+    return (entry.isOverlay || entry.isInput) && now - entry.updatedAt > OVERLAY_TTL_MS;
   }
-  has(surfaceId) {
-    return this.store.has(surfaceId);
+  get(surfaceId, now = Date.now()) {
+    const entry = this.store.get(surfaceId);
+    if (!entry)
+      return null;
+    if (this.isExpired(entry, now)) {
+      this.store.delete(surfaceId);
+      return null;
+    }
+    return entry;
+  }
+  has(surfaceId, now = Date.now()) {
+    return this.get(surfaceId, now) !== null;
   }
   delete(surfaceId) {
     return this.store.delete(surfaceId);
@@ -709,7 +722,7 @@ class TransientSurfaces {
   list(now = Date.now()) {
     const alive = [];
     for (const [sid, entry] of this.store) {
-      if (entry.isOverlay && now - entry.updatedAt > OVERLAY_TTL_MS) {
+      if (this.isExpired(entry, now)) {
         this.store.delete(sid);
         continue;
       }
@@ -1344,7 +1357,7 @@ Check AGENT_REGISTRY.md and agent descriptions. Match the user's intent to the r
 
 ### 2. Fallback — No matching agent
 - **Throwaway** ("32 x 44", "what time is it in Tokyo", "convert 5 miles to km") → route to "quick" agent
-- **Everything else** → route to "agentlife-builder". The builder decides whether to create a new agent or expand an existing one. NEVER route to "main" — the main agent does not exist in AgentLife.
+- **Everything else** → route to "agentlife-builder". The builder decides whether to create a new agent, expand an existing one, or forward to an existing specialist — it never does the work itself. NEVER route to "main" — the main agent does not exist in AgentLife.
 
 ## ONE Agent Per Request
 
@@ -1445,8 +1458,9 @@ You create and improve specialist agents for the AgentLife dashboard.
 ## Rules
 
 - One agent per life domain (health, finance, home, etc.). Check \`agents_list\` first — expand an existing agent's AGENTS.md rather than duplicate its domain.
-- NEVER push a confirmation / "ready" / "created" widget. The deterministic intro widget from the plugin IS the confirmation.
-- Emit \`NO_REPLY\` ONLY after \`agentlife.createAgent\` has succeeded.
+- **You never do domain work and never own domain widgets.** You are the factory, not a specialist. If a routed message belongs to an EXISTING specialist's domain, do NOT handle it — forward it via \`sessions_send\` to that specialist's direct session (\`sessionKey="agent:{agentId}:agentlife:direct:operator"\`, \`timeoutSeconds=0\`) and emit \`NO_REPLY\`. The platform rejects builder pushes outside your lane: only \`{domain}-building\` loading stubs, \`agentlife-builder-*\` agent-management widgets, input surfaces, and deletes are allowed.
+- NEVER push a confirmation / "ready" / "created" widget. The new agent's own first widget IS the confirmation.
+- Emit \`NO_REPLY\` ONLY after \`agentlife.createAgent\` has succeeded (or after forwarding to an existing specialist).
 
 ## Creating a New Agent
 
@@ -1465,7 +1479,7 @@ Triggered when the orchestrator routes a "create X agent" / "track Y for me" / n
    - Description drives the orchestrator's routing — make it specific (domains, actions, data types).
    - \`tools: {profile:"full", alsoAllow:["agentlife_push"]}\` for agents needing every core tool plus widget push. \`{allow:["agentlife_push"]}\` for widget-only agents.
 5. **Hand off in ONE final turn, all in this order, before \`NO_REPLY\`:**
-   a. Push ONE actionable first widget for the newly-created agent under a surfaceId you own (\`{agentId}-today\`, \`{agentId}-start\`, similar). It must invite the FIRST user interaction — an input prompt, a starter metric with a CTA, a question the user can answer right now. NEVER an identity/confirmation card ("Agent ready", "Welcome to X"). The plugin no longer pushes a placeholder intro widget; this first push IS the dashboard's anchor for the new agent.
+   a. Forward the user's ORIGINAL request to the new agent's direct session via \`sessions_send\` (\`sessionKey="agent:{agentId}:agentlife:direct:operator"\`, \`timeoutSeconds=0\`). Message shape: \`[system] You were just created for this request. Push your first actionable widget for it now — an input prompt, a starter metric with a CTA, or a question the user can answer right now. NEVER an identity/confirmation card. Original request: <the user's request verbatim>\`. The new agent owns its first widget from the start — you NEVER push widgets on its behalf (the platform rejects builder-owned domain surfaces).
    b. \`delete {domain}-building\` — the loading widget from step 1.
    c. Emit \`NO_REPLY\`.
 
@@ -1483,11 +1497,11 @@ Keep under 8k chars. Required sections (omit what's not relevant):
 
 ## Improving Existing Agents
 
-Read all workspace files + \`agentlife.quality\` + \`agentlife.trace\`. Targeted edits only — don't rewrite unless fundamentally broken. If config is missing \`tools\`, call \`agentlife.createAgent\` with the existing id + patch. Summarize in a widget.
+Read all workspace files + \`agentlife.quality\` + \`agentlife.trace\`. Targeted edits only — don't rewrite unless fundamentally broken. If config is missing \`tools\`, call \`agentlife.createAgent\` with the existing id + patch. Summarize in a widget under your namespace (\`agentlife-builder-improve-{agentId}\`).
 
 ## Deleting an Agent
 
-\`agentlife.deleteAgent: {"id":"{agentId}"}\` then optionally \`exec rm -rf ~/.openclaw/workspace-{agentId}\`. Push a confirmation widget.
+\`agentlife.deleteAgent: {"id":"{agentId}"}\` then optionally \`exec rm -rf ~/.openclaw/workspace-{agentId}\`. Push a confirmation widget under your namespace (\`agentlife-builder-deleted-{agentId}\`).
 
 ## Registry Enrichment (system task)
 
@@ -3222,15 +3236,18 @@ function rescheduleFailedFollowup(state, row, error) {
 function buildFireInstruction(state, row) {
   const view2 = getSurface(state, row.surfaceId);
   const goalText = view2?.goal ?? (view2 ? extractTitleAndDetail({ lines: view2.lines }).title : null);
-  const goalLabel = goalText ? ` (goal: "${goalText}")` : "";
+  const goalSafe = goalText ? goalText.replace(/[\r\n]+/g, " ").replace(/"/g, "'").slice(0, 200) : null;
+  const goalLabel = goalSafe ? ` (goal: "${goalSafe}")` : "";
+  const sanitizeFire = (s) => s.replace(/[\r\n]+/g, " ").replace(/"/g, "'");
+  const instructionSafe = sanitizeFire(row.instruction).slice(0, 500);
   const recentFires = lookupRecentFiredFollowups(state, row.surfaceId, 5);
   const prior = recentFires.filter((m) => m !== row.instruction);
   const priorBlock = prior.length > 0 ? `
 Prior followups on this surface — your next must not match any of these with parameters rotated:
-${prior.slice(0, 3).map((m) => `  • "${m}"`).join(`
+${prior.slice(0, 3).map((m) => `  • "${sanitizeFire(m).slice(0, 300)}"`).join(`
 `)}` : "";
   return [
-    `Widget followup for ${row.surfaceId}${goalLabel}: ${row.instruction}`,
+    `Widget followup for ${row.surfaceId}${goalLabel}: ${instructionSafe}`,
     `Stay on this surfaceId — update it, push a transient input surface, or delete it. New dashboard surfaceId only if this goal is complete and a successor begins (delete in the same turn).${priorBlock}`
   ].join(`
 `);
@@ -4163,6 +4180,7 @@ function runInstallBootstrap(home) {
     ["sessionsVisibility", cfg?.tools?.sessions?.visibility ?? null],
     ["agentToAgentEnabled", cfg?.tools?.agentToAgent?.enabled ?? null],
     ["gatewayBind", cfg?.gateway?.bind ?? null],
+    ["gatewayMode", cfg?.gateway?.mode ?? null],
     ["hooksAllowConversationAccess", cfg?.plugins?.entries?.agentlife?.hooks?.allowConversationAccess ?? null],
     ["maxPingPongTurns", cfg?.session?.agentToAgent?.maxPingPongTurns ?? null],
     ["maxConcurrent", cfg?.agents?.defaults?.maxConcurrent ?? null]
@@ -6282,7 +6300,7 @@ function mintBootstrapToken() {
   const devicesDir = path11.join(resolveStateDir(), "devices");
   const bootstrapPath = path11.join(devicesDir, "bootstrap.json");
   if (!fs11.existsSync(devicesDir))
-    fs11.mkdirSync(devicesDir, { recursive: true });
+    fs11.mkdirSync(devicesDir, { recursive: true, mode: 448 });
   const registry = fs11.existsSync(bootstrapPath) ? JSON.parse(fs11.readFileSync(bootstrapPath, "utf-8")) : {};
   registry[bootstrapToken] = {
     token: bootstrapToken,
@@ -6292,7 +6310,8 @@ function mintBootstrapToken() {
     },
     issuedAtMs: Date.now()
   };
-  fs11.writeFileSync(bootstrapPath, JSON.stringify(registry, null, 2));
+  fs11.writeFileSync(bootstrapPath, JSON.stringify(registry, null, 2), { mode: 384 });
+  fs11.chmodSync(bootstrapPath, 384);
   return bootstrapToken;
 }
 function registerWebApp(api) {
@@ -6962,22 +6981,29 @@ function registerWidgetPushTool(api, state2) {
           const trimmed = rawBlock.trim();
           if (!trimmed)
             continue;
-          const deleteMatch = trimmed.match(/^delete\s+(\S+)/);
+          const deleteSids = [...rawBlock.matchAll(/^\s*delete\s+(\S+)/gm)].map((m) => m[1]);
           const surfaceMatch = rawBlock.match(/^surface\s+(\S+)/m);
-          const sid = deleteMatch?.[1] ?? surfaceMatch?.[1] ?? null;
-          if (!sid) {
+          const checks = [
+            ...deleteSids.map((sid) => ({ sid, action: "delete" })),
+            ...surfaceMatch ? [{ sid: surfaceMatch[1], action: "push" }] : []
+          ];
+          if (checks.length === 0) {
             filteredRawBlocks.push(rawBlock);
             continue;
           }
-          const owner = getAgentId(state2, sid);
-          if (owner && owner !== agentId) {
-            const action = deleteMatch ? "delete" : "push";
-            ownershipViolations.push({ surfaceId: sid, owner, action });
-            recordActivity(state2, "quality_warning", sessionKey, agentId, {
-              data: JSON.stringify({ issue: "surface_ownership_violation", surfaceId: sid, owner, attempt: agentId, action })
-            });
-            continue;
+          let violated = false;
+          for (const { sid, action } of checks) {
+            const owner = getAgentId(state2, sid);
+            if (owner && owner !== agentId) {
+              ownershipViolations.push({ surfaceId: sid, owner, action });
+              recordActivity(state2, "quality_warning", sessionKey, agentId, {
+                data: JSON.stringify({ issue: "surface_ownership_violation", surfaceId: sid, owner, attempt: agentId, action })
+              });
+              violated = true;
+            }
           }
+          if (violated)
+            continue;
           filteredRawBlocks.push(rawBlock);
         }
         if (filteredRawBlocks.length === 0 && ownershipViolations.length > 0) {
@@ -6986,13 +7012,15 @@ function registerWidgetPushTool(api, state2) {
         }
         let finalBlocks = filteredRawBlocks;
         const confirmationViolations = [];
+        const domainViolations = [];
         if (agentId === "agentlife-builder") {
           const CONFIRMATION_SUFFIXES = /-(?:created|ready|built|setup|done|welcome)$/i;
+          const BUILDER_ALLOWED = /(?:^agentlife-builder-|^dismiss-alt-|-building$)/i;
           const kept = [];
           for (const block of filteredRawBlocks) {
             const deleteMatch = block.trim().match(/^delete\s+(\S+)/);
-            const surfaceMatch = block.match(/^surface\s+(\S+)/m);
-            const sid = deleteMatch?.[1] ?? surfaceMatch?.[1] ?? null;
+            const surfaceLine = block.match(/^surface\s+(\S+)([^\n]*)/m);
+            const sid = deleteMatch?.[1] ?? surfaceLine?.[1] ?? null;
             if (!sid || deleteMatch) {
               kept.push(block);
               continue;
@@ -7004,10 +7032,25 @@ function registerWidgetPushTool(api, state2) {
               });
               continue;
             }
+            const isInputSurface = /\binput\b/.test(surfaceLine?.[2] ?? "");
+            if (!isInputSurface && !BUILDER_ALLOWED.test(sid)) {
+              domainViolations.push(sid);
+              recordActivity(state2, "quality_warning", sessionKey, agentId, {
+                data: JSON.stringify({ issue: "builder_domain_widget", surfaceId: sid })
+              });
+              continue;
+            }
             kept.push(block);
           }
-          if (confirmationViolations.length > 0 && kept.length === 0) {
-            return { content: [{ type: "text", text: buildBuilderConfirmationError(confirmationViolations) }] };
+          if ((confirmationViolations.length > 0 || domainViolations.length > 0) && kept.length === 0) {
+            const errs = [];
+            if (confirmationViolations.length > 0)
+              errs.push(buildBuilderConfirmationError(confirmationViolations));
+            if (domainViolations.length > 0)
+              errs.push(buildBuilderDomainWidgetError(domainViolations));
+            return { content: [{ type: "text", text: errs.join(`
+
+`) }] };
           }
           finalBlocks = kept;
         }
@@ -7128,6 +7171,10 @@ function registerWidgetPushTool(api, state2) {
           const detail = ownershipViolations.map((v) => `${v.surfaceId} (owner=${v.owner}, attempt=${v.action})`).join("; ");
           errors.push(buildOwnershipError(detail, true));
         }
+        if (confirmationViolations.length > 0)
+          errors.push(buildBuilderConfirmationError(confirmationViolations));
+        if (domainViolations.length > 0)
+          errors.push(buildBuilderDomainWidgetError(domainViolations));
         const summary = pushedSurfaceIds.length === 1 ? `Widget ${pushedSurfaceIds[0]} updated` : `${pushedSurfaceIds.length} widgets updated`;
         if (errors.length > 0) {
           return { content: [{ type: "text", text: `${summary}
@@ -7145,7 +7192,10 @@ function buildOwnershipError(detail, skipped = false) {
   return `[QUALITY ERROR] surface ownership violation: ${detail}. ` + `Each surfaceId is bound to the first agent that pushed it. ` + `You cannot push or delete surfaces owned by other agents. ` + (skipped ? `The offending block(s) were skipped — the original owner's content is preserved. ` : ``) + `If you need to coordinate, delegate via sessions_send (internal) to the owning agent. ` + `If you are emitting a new widget, pick a surfaceId under your own namespace.`;
 }
 function buildBuilderConfirmationError(violations) {
-  return `[QUALITY ERROR] builder pushed confirmation widget(s): ${violations.join(", ")}. ` + `Per BUILDER_AGENTS_MD, the builder does NOT push an "agent ready / created" widget. ` + `The plugin pushes a deterministic {agentId}-intro as the confirmation the moment ` + `agentlife.createAgent returns. Delete your loading widget and emit 'done'.`;
+  return `[QUALITY ERROR] builder pushed confirmation widget(s): ${violations.join(", ")}. ` + `Per BUILDER_AGENTS_MD, the builder does NOT push an "agent ready / created" widget. ` + `The NEW agent pushes its own first widget — hand the user's request off to it via ` + `sessions_send (sessionKey="agent:{agentId}:agentlife:direct:operator"). ` + `Delete your loading widget and emit NO_REPLY.`;
+}
+function buildBuilderDomainWidgetError(violations) {
+  return `[QUALITY ERROR] builder pushed domain widget(s): ${violations.join(", ")}. ` + `You are the agent factory — you never do domain work or own domain widgets. ` + `Allowed surfaces: '{domain}-building' loading stubs, 'agentlife-builder-*' agent-management widgets, ` + `input surfaces, and deletes. For this request: if a specialist for the domain exists, forward the ` + `request via sessions_send to sessionKey="agent:{agentId}:agentlife:direct:operator" and emit NO_REPLY; ` + `if none exists, create one via agentlife.createAgent, then hand off — the NEW agent pushes its own first widget.`;
 }
 function buildGoalChangedError(ids) {
   return `[QUALITY ERROR] ${ids.join(", ")}: goal changed — use a new surfaceId for a new goal. One widget, one goal. Delete the old widget and push a new one with a different surfaceId.`;
@@ -7459,7 +7509,11 @@ function findSiblingAuthProfile(provider, targetAgentId) {
 function writeAgentAuthProfile(agentId, provider, match) {
   if (!match)
     return false;
-  const agentDir = path14.join(resolveOpenClawRoot2(), "agents", agentId, "agent");
+  const agentsRoot = path14.join(resolveOpenClawRoot2(), "agents");
+  const agentDir = path14.join(agentsRoot, agentId, "agent");
+  if (!agentDir.startsWith(agentsRoot + path14.sep)) {
+    throw new Error(`writeAgentAuthProfile: path traversal rejected for agentId: ${agentId}`);
+  }
   fs13.mkdirSync(agentDir, { recursive: true });
   const credential = { ...match.profile };
   if (credential.type === "api_key" && typeof credential.key !== "string" && typeof credential.apiKey === "string") {
@@ -7483,6 +7537,10 @@ function registerAgentGateway(api, state2) {
       respond(false, undefined, { code: "INVALID_REQUEST", message: "missing agent id" });
       return;
     }
+    if (!/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/.test(id)) {
+      respond(false, undefined, { code: "INVALID_REQUEST", message: "invalid agent id: must match ^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$ (no path separators or dots)" });
+      return;
+    }
     if (!workspace) {
       respond(false, undefined, { code: "INVALID_REQUEST", message: "missing workspace path" });
       return;
@@ -7587,6 +7645,10 @@ function registerAgentGateway(api, state2) {
       respond(false, undefined, { code: "INVALID_REQUEST", message: "missing agent id" });
       return;
     }
+    if (!/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/.test(id)) {
+      respond(false, undefined, { code: "INVALID_REQUEST", message: "invalid agent id: must match ^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$ (no path separators or dots)" });
+      return;
+    }
     const provisionedIds = new Set(PROVISIONED_AGENTS.map((a) => a.id));
     if (provisionedIds.has(id)) {
       respond(false, undefined, { code: "FAILED", message: "cannot delete provisioned agent" });
@@ -8079,11 +8141,12 @@ function registerSurfacesGateway(api, state2) {
     if (guided) {
       const agentId2 = view2.agentId;
       if (agentId2 && state2.runCommand) {
-        const goalSnippet = view2.goal ? ` goal="${view2.goal}"` : "";
-        const reasonSnippet = reason ? ` reason="${reason}"` : "";
+        const sanitizeMeta = (s) => s.replace(/[\r\n]+/g, " ").replace(/"/g, "'").slice(0, 200);
+        const goalSnippet = view2.goal ? ` goal="${sanitizeMeta(view2.goal)}"` : "";
+        const reasonSnippet = reason ? ` reason="${sanitizeMeta(reason)}"` : "";
         const sessionKey = buildAgentSessionKey(agentId2);
         state2.pendingReactiveGuidance.set(sessionKey, DISMISS_ALTERNATIVES_GUIDANCE);
-        const message = `[system:dismiss-requested] surfaceId=${surfaceId}${goalSnippet}${reasonSnippet}`;
+        const message = `[system:dismiss-requested] surfaceId=${sanitizeMeta(surfaceId)}${goalSnippet}${reasonSnippet}`;
         state2.runCommand([
           "openclaw",
           "gateway",
@@ -8140,8 +8203,19 @@ function registerSurfacesGateway(api, state2) {
       respond(false, undefined, { code: "INVALID_REQUEST", message: "missing surfaceId or event" });
       return;
     }
+    const ALLOWED_ENGAGE_EVENTS = new Set([
+      "viewed",
+      "detail_viewed",
+      "action_clicked",
+      "input_closed",
+      "input_skipped"
+    ]);
+    if (!ALLOWED_ENGAGE_EVENTS.has(event)) {
+      respond(false, undefined, { code: "INVALID_REQUEST", message: `invalid engagement event: ${event}` });
+      return;
+    }
     const agentId = getAgentId(state2, surfaceId) ?? undefined;
-    const metadata = typeof params?.metadata === "string" ? params.metadata.trim() : undefined;
+    const metadata = typeof params?.metadata === "string" ? params.metadata.trim().slice(0, 1024) : undefined;
     recordSurfaceEvent(state2, surfaceId, event, undefined, agentId, metadata);
     respond(true, { surfaceId, event });
   }, { scope: "operator.read" });
@@ -8189,11 +8263,15 @@ function registerSurfacesGateway(api, state2) {
     const agentId = view2?.agentId ?? null;
     const ctx = view2?.context;
     if (ctx && ctx.escalation === true && typeof ctx.target === "string") {
-      const target = ctx.target;
-      const sessionKey2 = buildAgentSessionKey(target);
-      console.log("[agentlife] action escalation: surface=%s routing to target=%s session=%s", surfaceId, target, sessionKey2);
-      respond(true, { surfaceId, agentId: target, sessionKey: sessionKey2 });
-      return;
+      const target = ctx.target.trim();
+      const shapeOk = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/.test(target);
+      if (shapeOk) {
+        const sessionKey2 = buildAgentSessionKey(target);
+        console.log("[agentlife] action escalation: surface=%s routing to target=%s session=%s", surfaceId, target, sessionKey2);
+        respond(true, { surfaceId, agentId: target, sessionKey: sessionKey2 });
+        return;
+      }
+      console.warn("[agentlife] action escalation REJECTED: surface=%s malformed target=%s — falling back to owner routing", surfaceId, target);
     }
     const origin = getOriginSessionKey(state2, surfaceId);
     let sessionKey;
@@ -8277,8 +8355,8 @@ function registerAutomationsGateway(api, state2) {
         return;
       }
       const surfaceId = typeof params?.surfaceId === "string" ? params.surfaceId.trim() : "";
-      const agentId = typeof params?.agentId === "string" ? params.agentId.trim() : getAgentId(state2, surfaceId) ?? "";
-      const id = registerAutomation(state2, { surfaceId, agentId, type, name, path: automationPath });
+      const agentId = surfaceId ? getAgentId(state2, surfaceId) ?? "" : typeof params?.agentId === "string" ? params.agentId.trim() : "";
+      const id = registerAutomation(state2, surfaceId || null, agentId || null, type, name, automationPath);
       respond(true, { id, surfaceId, agentId, type, name, path: automationPath, status: "running" });
     } catch (err) {
       respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "register failed" });
@@ -8538,7 +8616,7 @@ function registerAdminGateway(api, state2) {
         snapshot = fromDb;
     }
     if (snapshot.length === 0) {
-      respond(true, { status: "no bootstrap snapshot for this session", files: [], availableSessions: [...state2.sessionBootstrapSnapshots.keys()] });
+      respond(true, { status: "no bootstrap snapshot for this session", files: [] });
       return;
     }
     respond(true, {
@@ -8681,7 +8759,7 @@ function registerAdminGateway(api, state2) {
       console.error("[agentlife] uninstall failed:", err);
       respond(false, undefined, { code: "INTERNAL", message: err?.message ?? "unknown error during uninstall" });
     }
-  });
+  }, { scope: "operator.admin" });
   api.registerGatewayMethod("agentlife.config.get", ({ respond }) => {
     respond(true, readPluginConfig());
   }, { scope: "operator.read" });
@@ -8834,7 +8912,8 @@ function registerEvolutionsGateway(api, state2) {
         userNote
       };
       recordActivity(state2, "quality_warning", null, row.agentId, { data: JSON.stringify(payload) });
-      const noteLine = userNote ? ` User note: "${userNote}".` : "";
+      const noteSafe = userNote ? userNote.replace(/[\r\n]+/g, " ").replace(/"/g, "'").slice(0, 200) : null;
+      const noteLine = noteSafe ? ` User note: "${noteSafe}".` : "";
       const message = `[system] User reverted ${row.filename} to a prior snapshot. ` + `The user judged the version that was live worse than the version they restored.${noteLine} ` + `Read the current ${row.filename} (now the older content) and the diff against your last write to understand what the user preferred. ` + `Treat this as authoritative — do not re-rewrite the same change. Update your understanding before any future refinement.`;
       sendToInternalSession(state2, row.agentId, message, `user-reverted-${row.id}-${Date.now()}`);
       console.log("[agentlife:evolutions] restored %s/%s to version %d (userNote=%s)", row.agentId, row.filename, row.id, userNote ? "yes" : "no");
@@ -9837,11 +9916,23 @@ function register(api) {
     if (!serverUrl || !apiKey) {
       return respond(false, undefined, { code: "INVALID_REQUEST", message: "missing serverUrl or apiKey" });
     }
+    let parsedUrl;
     try {
-      const { writeFileSync: writeFileSync12, mkdirSync: mkdirSync10 } = __require("node:fs");
-      mkdirSync10(path20.dirname(notifyConfigPath), { recursive: true });
-      writeFileSync12(notifyConfigPath, JSON.stringify({ serverUrl, apiKey }));
-    } catch {}
+      parsedUrl = new URL(serverUrl);
+    } catch {
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "serverUrl must be a valid URL" });
+    }
+    if (parsedUrl.protocol !== "https:") {
+      return respond(false, undefined, { code: "INVALID_REQUEST", message: "serverUrl must use https://" });
+    }
+    try {
+      const { writeFileSync: writeFileSync12, mkdirSync: mkdirSync10, chmodSync: chmodSync4 } = __require("node:fs");
+      mkdirSync10(path20.dirname(notifyConfigPath), { recursive: true, mode: 448 });
+      writeFileSync12(notifyConfigPath, JSON.stringify({ serverUrl, apiKey }), { mode: 384 });
+      chmodSync4(notifyConfigPath, 384);
+    } catch (e) {
+      return respond(false, undefined, { code: "INTERNAL", message: `failed to persist notification config: ${e?.message ?? "write error"}` });
+    }
     respond(true, { registered: true });
   }, { scope: "operator.write" });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentlife",
-  "version": "2.6.32",
+  "version": "2.6.33",
   "description": "Native mobile dashboard for OpenClaw — agents push live widgets, automations, and remote-access surfaces to your phone via the AgentLife plugin relay.",
   "keywords": [
     "openclaw",