Warning: workdir "." is unavailable; using "/home/openclaw/.openclaw/workspace"

/usr/local/bin/gog
PWD=/workspace

---

/home/openclaw
bin
bin.usr-is-merged
boot
dev
etc
home
lib
lib.usr-is-merged
lib64
lost+found
media
mnt
opt
proc
root
run
sbin
sbin.usr-is-merged
snap
srv
sys
tmp
usr
var
yes
sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime)
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)
udev on /dev type devtmpfs (rw,nosuid,relatime,size=1986604k,nr_inodes=496651,mode=755,inode64)
devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000)
tmpfs on /run type tmpfs (rw,nosuid,nodev,noexec,relatime,size=401000k,mode=755,inode64)
/dev/vda1 on / type ext4 (rw,relatime,discard,errors=remount-ro,commit=30)
securityfs on /sys/kernel/security type securityfs (rw,nosuid,nodev,noexec,relatime)
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev,inode64)
tmpfs on /run/lock type tmpfs (rw,nosuid,nodev,noexec,relatime,size=5120k,inode64)
cgroup2 on /sys/fs/cgroup type cgroup2 (rw,nosuid,nodev,noexec,relatime,nsdelegate,memory_recursiveprot)
0::/init.scope

---

## Sandbox container evidence
A live Alfred sandbox container existed and appeared sane:
- example container: `openclaw-sbx-agent-main-main-6d9217fe`

Verified characteristics:
- expected bind mounts were present
- `/workspace` existed
- `/home/openclaw` did **not** exist inside the container

This makes a simple over-broad bind-mount explanation less likely.

## Relevant runtime code clues
Most suspicious installed runtime files:
- `dist/session-key-DoN4rm2T.js`
- `dist/get-reply-BzP5ZExp.js`
- `dist/runtime-status-21FwQJGx.js`
- `dist/sandbox-B4e3wZhD.js`

Observed direct-chat session-key logic in `dist/session-key-DoN4rm2T.js`:

function resolveSessionKey(scope, ctx, mainKey) {
	const explicit = ctx.SessionKey?.trim();
	if (explicit) return normalizeExplicitSessionKey(explicit, ctx);
	const raw = deriveSessionKey(scope, ctx);
	if (scope === "global") return raw;
	const canonical = buildAgentMainSessionKey({
		agentId: DEFAULT_AGENT_ID,
		mainKey: normalizeMainKey(mainKey)
	});
	if (!(raw.includes(":group:") || raw.includes(":channel:"))) return canonical;
	return `agent:${DEFAULT_AGENT_ID}:${raw}`;
}


Observed sandbox classification logic in `dist/runtime-status-21FwQJGx.js`:

function shouldSandboxSession(cfg, sessionKey, mainSessionKey) {
	if (cfg.mode === "off") return false;
	if (cfg.mode === "all") return true;
	return sessionKey.trim() !== mainSessionKey.trim();
}


Observed sandbox gating in `dist/sandbox-B4e3wZhD.js`:

function resolveSandboxSession(params) {
	const rawSessionKey = params.sessionKey?.trim();
	if (!rawSessionKey) return null;
	const runtime = resolveSandboxRuntimeStatus({
		cfg: params.config,
		sessionKey: rawSessionKey
	});
	if (!runtime.sandboxed) return null;
	...
}


These code paths suggest a possible failure mode where Telegram-routed direct-chat session keys are misclassified, which then causes sandbox activation to be skipped.

---

{
  "plugins": {
    "entries": {
      "anthropic": { "enabled": true },
      "openai": { "enabled": true },
      "browser": { "enabled": true },
      "codex": { "enabled": true, "config": {} }
    }
  },
  "gateway": {
    "port": 18789,
    "mode": "local",
    "bind": "loopback",
    "auth": { "mode": "password", "password": "[REDACTED]" },
    "tailscale": { "mode": "funnel", "resetOnExit": false }
  },
  "channels": {
    "telegram": {
      "enabled": true,
      "dmPolicy": "pairing",
      "groupPolicy": "allowlist",
      "streaming": { "mode": "off" },
      "accounts": {
        "alfred": {
          "name": "Alfred",
          "dmPolicy": "pairing",
          "botToken": "[REDACTED]",
          "groupPolicy": "allowlist",
          "streaming": { "mode": "partial" }
        }
      }
    }
  },
  "agents": {
    "list": [
      {
        "id": "main",
        "default": true,
        "name": "Alfred",
        "workspace": "/home/openclaw/.openclaw/workspace",
        "model": {
          "primary": "openai-codex/gpt-5.4",
          "fallbacks": []
        },
        "heartbeat": {
          "every": "1h",
          "target": "telegram"
        },
        "sandbox": {
          "mode": "all",
          "workspaceAccess": "rw",
          "scope": "agent",
          "docker": {
            "image": "openclaw-sandbox-browser:bookworm-slim",
            "network": "bridge",
            "user": "997:987",
            "env": {
              "XDG_CONFIG_HOME": "/workspace/.config",
              "GOG_KEYRING_PASSWORD": "[REDACTED]"
            },
            "binds": [
              "/home/openclaw/disc-mods/telegram-auth-manager/agent:/telegram-auth-manager:ro",
              "/home/openclaw/repos:/repos:rw",
              "/home/openclaw/disc-mods/chrome-extension/agent:/chrome-extension:ro",
              "/home/openclaw/disc-mods/browser-cookies/agent:/browser-cookies:ro",
              "/home/openclaw/agent-directives/common:/directives/common:ro",
              "/home/openclaw/agent-directives/agents:/directives/agents:ro",
              "/home/openclaw/disc-mods/google-suite:/google-suite:ro",
              "/home/openclaw/disc-mods/cloudflare-pages/agent:/cloudflare-pages:ro"
            ],
            "dangerouslyAllowExternalBindSources": true
          }
        },
        "tools": {
          "alsoAllow": ["cron"],
          "sandbox": {
            "tools": {
              "allow": [
                "browser",
                "group:runtime",
                "group:fs",
                "group:web",
                "group:sessions",
                "group:memory",
                "image",
                "cron",
                "nodes"
              ],
              "deny": ["gateway"]
            }
          }
        }
      }
    ]
  },
  "auth": {
    "profiles": {
      "anthropic:default": {
        "provider": "anthropic",
        "mode": "token"
      },
      "anthropic:manual": {
        "provider": "anthropic",
        "mode": "token"
      },
      "openai-codex:default": {
        "provider": "openai-codex",
        "mode": "oauth"
      }
    }
  }
}