Summary

• Move duplicated safe filesystem primitives out of OpenClaw internals and onto @openclaw/fs-safe.
• Update OpenClaw call sites to use the reusable root, regular-file append, atomic replace, sibling temp, archive staging, path, timing, and private-state helpers.
• Clean the fs-safe root/API usage after the package-side breaking refactors: copyIn(rel, source), Root/ReadResult/OpenResult, ensureRoot(), already-exists handling for create(), narrowed store exports, focused JSON API split, and reduced temp/secret surfaces.
• Consume the published npm package @openclaw/fs-safe@0.1.0 instead of a local link or GitHub source tarball.

The matching fs-safe package changes landed on openclaw/fs-safe@main through 621d643d379533791ab5108e1cf639fc7d8e2c8c and were published to npm as @openclaw/fs-safe@0.1.0.

Real behavior proof

• Behavior or issue addressed: OpenClaw can install and build against the public @openclaw/fs-safe npm package, with the filesystem safety primitives moved out of OpenClaw internals and low-level lock/pinned-open APIs hidden behind narrower public wrappers.
• Real environment tested: Local macOS OpenClaw checkout on PR head d6f9591be76eeb7967e3de411da20926dde8723f, installing @openclaw/fs-safe@0.1.0 from the npm registry.
• Exact steps or command run after this patch: Published @openclaw/fs-safe@0.1.0, verified registry availability with curl https://registry.npmjs.org/%40openclaw%2Ffs-safe, ran pnpm --config.minimum-release-age=0 add -w @openclaw/fs-safe@^0.1.0, then ran the focused OpenClaw outbound/fs-safe/plugin SDK checks and pnpm build.
• Evidence after fix: Terminal output from the real package publish/install path:

$ npm publish --access public --otp <redacted>
+ @openclaw/fs-safe@0.1.0

$ curl -s -o /tmp/fs-safe-registry.json -w '%{http_code}\n' https://registry.npmjs.org/%40openclaw%2Ffs-safe
200
{"_id":"@openclaw/fs-safe","name":"@openclaw/fs-safe","dist-tags":{"latest":"0.1.0"},"versions":{"0.1.0":{...}}

$ pnpm --config.minimum-release-age=0 add -w @openclaw/fs-safe@^0.1.0
Packages: +9 -201
Done in 5.8s using pnpm v10.33.2

$ pnpm build
[build-all] check-plugin-sdk-exports
OK: All 4 required plugin-sdk exports verified.
[build-all] write-cli-compat

• Observed result after fix: OpenClaw resolves @openclaw/fs-safe from npm at 0.1.0, package.json no longer uses a GitHub/local source pin, and the rebuilt OpenClaw runtime/plugin SDK output succeeds against the published package.
• What was not tested: No live messaging-channel send was performed for this filesystem extraction; outbound queue durability behavior is covered by focused recovery tests in this PR.

Verification

Latest focused proof after publishing and rebasing:

• fs-safe: pnpm build
• fs-safe: pnpm check
• fs-safe: pnpm test:coverage -> 85.16% lines/statements, 219 tests
• fs-safe: pnpm docs:site
• fs-safe: npm pack --dry-run
• fs-safe GitHub: ci and coverage passed for 621d643d379533791ab5108e1cf639fc7d8e2c8c
• OpenClaw: pnpm test src/infra/outbound/deliver.test.ts src/infra/outbound/delivery-queue.storage.test.ts src/infra/outbound/delivery-queue.recovery.test.ts src/infra/outbound/delivery-queue.reconnect-drain.test.ts
• OpenClaw: pnpm test src/plugin-sdk/file-lock.test.ts src/agents/session-write-lock.test.ts src/gateway/control-ui.http.test.ts src/infra/fs-safe-import-boundary.test.ts src/agents/skills.loadworkspaceskillentries.test.ts src/agents/skills-install.test.ts src/agents/sandbox/fs-bridge.boundary.test.ts src/agents/sandbox/fs-bridge.anchored-ops.test.ts
• OpenClaw: pnpm plugin-sdk:api:check
• OpenClaw: pnpm check:docs
• OpenClaw: pnpm build
• OpenClaw: git diff --check

Earlier proof retained from this PR:

• pnpm build
• pnpm plugin-sdk:api:check
• pnpm test src/infra/fs-safe.test.ts src/gateway/canvas-documents.test.ts src/agents/apply-patch.test.ts extensions/memory-wiki/src/vault.test.ts src/plugins/install.test.ts src/agents/acp-spawn-parent-stream.test.ts extensions/qa-lab/src/multipass.runtime.test.ts src/auto-reply/reply/commands-export-trajectory.test.ts src/trajectory/export.test.ts src/trajectory/cleanup.test.ts extensions/active-memory/index.test.ts src/infra/diagnostics-timeline.test.ts src/logging/logger-transport.test.ts src/logging/logger.settings.test.ts