mnemospark 2026.4.12 → 2026.4.13

package/dist/cli.js

@@ -4450,6 +4450,8 @@ var opStatusSchema = {
 // src/openclaw-cli.ts
 import { spawn } from "child_process";
 import { join as join8 } from "path";
+var ANSI_ESCAPE_RE = new RegExp(`${String.fromCharCode(27)}\\[[0-9;]*m`, "g");
+var BOX_DRAWING_RE = /[\u2500-\u257F]/g;
 async function runOpenClawCli(args, homeDir) {
   return await new Promise((resolvePromise, rejectPromise) => {
     let stdout = "";
@@ -4492,16 +4494,59 @@ function parseOpenClawCliJson(stdout, commandLabel) {
     throw new Error(`openclaw ${commandLabel} returned invalid JSON output`);
   }
 }
-async function resolveOpenClawConfigFilePath(homeDir) {
-  const { stdout } = await runOpenClawCli(["config", "file"], homeDir);
-  const trimmed = stdout.trim();
-  if (trimmed.startsWith("~/")) {
-    return join8(homeDir, trimmed.slice(2));
+function stripCliDecorations(line) {
+  return line.replace(ANSI_ESCAPE_RE, "").replace(BOX_DRAWING_RE, "").trim();
+}
+function expandHomePath(homeDir, line) {
+  if (line.startsWith("~/")) {
+    return join8(homeDir, line.slice(2));
   }
-  if (trimmed.startsWith("~\\")) {
-    return join8(homeDir, trimmed.slice(2));
+  if (line.startsWith("~\\")) {
+    return join8(homeDir, line.slice(2));
   }
-  return trimmed;
+  return line;
+}
+function looksLikeOpenClawConfigPath(line) {
+  if (!line || line.includes("\n")) {
+    return false;
+  }
+  if (line.endsWith("openclaw.json")) {
+    return true;
+  }
+  if (line.startsWith("~/") || line.startsWith("~\\")) {
+    return true;
+  }
+  if (line.startsWith("/")) {
+    return true;
+  }
+  return /^[A-Za-z]:\\/.test(line);
+}
+function parseOpenClawConfigFileStdout(stdout, homeDir) {
+  const lines = stdout.split(/\r?\n/);
+  for (let i = lines.length - 1; i >= 0; i--) {
+    const line = stripCliDecorations(lines[i] ?? "");
+    if (!line || !looksLikeOpenClawConfigPath(line)) {
+      continue;
+    }
+    return expandHomePath(homeDir, line);
+  }
+  return null;
+}
+function getOpenClawConfigPath(homeDir, env = process.env) {
+  const stateDir = env.OPENCLAW_STATE_DIR ?? join8(homeDir, ".openclaw");
+  return join8(stateDir, "openclaw.json");
+}
+async function resolveOpenClawConfigFilePath(homeDir) {
+  const fallback = getOpenClawConfigPath(homeDir);
+  try {
+    const { stdout } = await runOpenClawCli(["config", "file"], homeDir);
+    const parsed = parseOpenClawConfigFileStdout(stdout, homeDir);
+    if (parsed) {
+      return parsed;
+    }
+  } catch {
+  }
+  return fallback;
 }
 
 // src/openclaw-renewal-runbook.ts
@@ -4509,6 +4554,15 @@ import { mkdir as mkdir5, readFile as readFile3, rename as rename2, writeFile as
 import { homedir as homedir6 } from "os";
 import { dirname as dirname5, join as join9 } from "path";
 import { randomUUID as randomUUID3 } from "crypto";
+var MAX_CONFIG_PATH_LENGTH = 4096;
+function assertValidConfigPath(configPath) {
+  if (configPath.includes("\n") || configPath.includes("\r")) {
+    throw new Error("openclaw config path must not contain newlines");
+  }
+  if (configPath.length > MAX_CONFIG_PATH_LENGTH) {
+    throw new Error("openclaw config path is too long");
+  }
+}
 var DEFAULT_RENEWAL_AGENT_ID = "mnemospark-renewal";
 var DEFAULT_MNEMOSPARK_AGENT_ID = "mnemospark";
 var RENEWAL_NODE_ALLOWLIST_ID = "node-usr-bin-node";
@@ -4617,6 +4671,7 @@ async function ensureOpenClawRenewalPrerequisites(options = {}) {
   const desiredPlugin = runbookDedicatedAgentEntry(pluginAgentId);
   const nodeBinary = getRenewalNodeBinary();
   const configPath = await resolveOpenClawConfigFilePath(homeDir);
+  assertValidConfigPath(configPath);
   let configRaw = "{}";
   try {
     configRaw = await readFile3(configPath, "utf-8");
@@ -8343,12 +8398,8 @@ function isOpenClawAvailable() {
     child.on("close", (code) => resolve3(code === 0));
   });
 }
-function getOpenClawConfigPath() {
-  const stateDir = process.env.OPENCLAW_STATE_DIR ?? join12(homedir8(), ".openclaw");
-  return join12(stateDir, "openclaw.json");
-}
 async function ensureMnemosparkInPluginsAllow() {
-  const configPath = getOpenClawConfigPath();
+  const configPath = getOpenClawConfigPath(homedir8());
   try {
     const raw = await readFile5(configPath, "utf-8");
     const config = JSON.parse(raw);