pixel-office-openclaw 0.1.6 → 0.1.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pixel-office-openclaw",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "Watch your OpenClaw AI agents work in a pixel-art virtual office",
   "type": "module",
   "bin": {

package/server.js

@@ -16,7 +16,7 @@
 
 import express from 'express'
 import { readFileSync, writeFileSync, mkdirSync, readdirSync, existsSync, statSync, unlinkSync } from 'fs'
-import { execFileSync, execSync } from 'child_process'
+import { execFileSync, execSync, spawnSync } from 'child_process'
 import { fileURLToPath } from 'url'
 import { dirname, join } from 'path'
 import { homedir } from 'os'
@@ -241,9 +241,10 @@ app.post('/api/send', async (req, res) => {
   // Send via OpenClaw CLI (gateway is WebSocket-only, no REST endpoint)
   try {
     console.log(`[bridge] Sending to ${safeAgentId} via CLI: ${safeMessage.slice(0, 50)}...`)
-    // Use execSync with shell to avoid npx fd/signal inheritance issues with execFileSync
-    const escapedMsg = safeMessage.replace(/'/g, "'\\''")
-    const cliResult = execSync(`/usr/bin/openclaw agent --agent '${safeAgentId}' --message '${escapedMsg}' --json`,
+    // Use env -i with essential vars to get a clean process, avoiding npx inheritance
+    const essential = ['HOME', 'PATH', 'USER', 'SHELL', 'LANG', 'TERM', 'XDG_RUNTIME_DIR', 'DBUS_SESSION_BUS_ADDRESS']
+    const envArgs = essential.filter(k => process.env[k]).map(k => `${k}=${process.env[k]}`)
+    const cliResult = execFileSync('/usr/bin/env', ['-i', ...envArgs, '/usr/bin/openclaw', 'agent', '--agent', safeAgentId, '--message', safeMessage, '--json'],
       { timeout: 120000, encoding: 'utf-8', cwd: homedir(), stdio: ['pipe', 'pipe', 'pipe'] }
     )
     console.log(`[bridge] Sent to ${safeAgentId} (CLI OK)`)