OpenClaw gets its own HOME on local disk (no symlinks — boundary check rejects them; no FUSE — fence rejects that): boot restore + 60s backup

entrypoint.sh

@@ -40,25 +40,30 @@ export PATH="$AM_LOCAL/py/bin:$AM_LOCAL/npm/bin:$AM_LOCAL/bin:$HOME/.local/bin:$
 # embedded prompt lock was released"). Its state therefore lives on LOCAL disk,
 # with a durable copy on the bucket: restored on boot, synced back every 60s.
 # Worst case on an unclean stop: the last minute of chat history.
-export OPENCLAW_STATE_DIR="$AM_LOCAL/openclaw"
-OPENCLAW_BACKUP="$DATA_DIR/state/openclaw-backup"
-mkdir -p "$OPENCLAW_STATE_DIR" "$OPENCLAW_BACKUP"
-# seed local state from the durable backup
-if [ -n "$(ls -A "$OPENCLAW_BACKUP" 2>/dev/null)" ]; then
-  cp -a "$OPENCLAW_BACKUP/." "$OPENCLAW_STATE_DIR/" 2>/dev/null || true
-fi
-# The embedded runtime ignores OPENCLAW_STATE_DIR and resolves ~/.openclaw
-# directly, so ~/.openclaw becomes a SYMLINK to the local dir. If a real dir
-# is there (first boot, or written by an older build), merge its contents
-# (newer than the backup) and park it as .openclaw.pre-symlink.
-if [ -d "$HOME/.openclaw" ] && [ ! -L "$HOME/.openclaw" ]; then
-  cp -a "$HOME/.openclaw/." "$OPENCLAW_STATE_DIR/" 2>/dev/null || true
-  mv "$HOME/.openclaw" "$HOME/.openclaw.pre-symlink" 2>/dev/null || true
-fi
-[ -L "$HOME/.openclaw" ] || ln -s "$OPENCLAW_STATE_DIR" "$HOME/.openclaw" 2>/dev/null || true
+# OpenClaw can't run its state on the FUSE bucket (its session fence
+# false-positives on unstable metadata) and it REJECTS symlinked paths (the
+# workspace boundary check). No symlinks, no env overrides — OpenClaw simply
+# gets its OWN HOME on local disk: a real, ordinary install from its point of
+# view. Durable copy on the bucket: restored on boot, synced back every 60s.
+# Worst case on an unclean stop: the last minute of claw state.
+export OPENCLAW_HOME="$AM_LOCAL/oc-home"                # runner launches openclaw with HOME=$OPENCLAW_HOME
+export OPENCLAW_STATE_DIR="$OPENCLAW_HOME/.openclaw"    # where the server finds its config/traces
+OC_BACKUP="$DATA_DIR/state/openclaw-backup"
+mkdir -p "$OPENCLAW_STATE_DIR" "$OC_BACKUP"
+# heal from the earlier symlink experiment
+[ -L "$HOME/.openclaw" ] && rm "$HOME/.openclaw"
+# seed local state: backup (freshest) first, then legacy dirs fill gaps (--update: never clobber newer)
+[ -n "$(ls -A "$OC_BACKUP" 2>/dev/null)" ] && rsync -a "$OC_BACKUP/" "$OPENCLAW_STATE_DIR/" 2>/dev/null
+for legacy in "$HOME/.openclaw.pre-symlink" "$HOME/.openclaw"; do
+  if [ -d "$legacy" ] && [ ! -L "$legacy" ]; then
+    rsync -a --update "$legacy/" "$OPENCLAW_STATE_DIR/" 2>/dev/null || true
+  fi
+done
+# small comforts in the private HOME (harmless if missing)
+cp "$HOME/.gitconfig" "$OPENCLAW_HOME/.gitconfig" 2>/dev/null || true
 ( while :; do
     sleep 60
-    rsync -a --delete "$OPENCLAW_STATE_DIR/" "$OPENCLAW_BACKUP/" 2>/dev/null || true
+    rsync -a --delete "$OPENCLAW_STATE_DIR/" "$OC_BACKUP/" 2>/dev/null || true
   done ) &
 
 # Durable, user-editable setup script. Runs on EVERY start (keep it idempotent);

server/src/index.js

@@ -180,7 +180,7 @@ const BUILD_ENV_KEYS = (() => {
 const NON_SECRET = new Set([
   'HOME', 'CLAUDE_CONFIG_DIR', 'CODEX_HOME', 'NPM_CONFIG_PREFIX', 'PWD', 'OLDPWD', 'SHLVL', '_', 'HOSTNAME',
   'ACCELERATOR', 'COMMIT_SHA', 'CPU_CORES', 'HF_DATASETS_TRUST_REMOTE_CODE', 'IMAGE_SHA', 'MEMORY', 'OMP_NUM_THREADS',
-  'UV_CACHE_DIR', 'PIP_CACHE_DIR', 'PYTHONPYCACHEPREFIX', 'PYTHONUSERBASE', 'OPENCLAW_STATE_DIR',
+  'UV_CACHE_DIR', 'PIP_CACHE_DIR', 'PYTHONPYCACHEPREFIX', 'PYTHONUSERBASE', 'OPENCLAW_STATE_DIR', 'OPENCLAW_HOME',
 ]);
 const NON_SECRET_PREFIX = ['SPACE_', 'KUBERNETES_', 'NVIDIA_', 'CUDA_', 'NV_', 'AM_'];
 function injectedEnvKeys() {
@@ -255,7 +255,7 @@ Hermes — alongside plain shells and a file browser.
 - \`/data\` is **durable storage** (a mounted bucket). Files under \`/data/workspaces/…\` and \`/data/home/…\` survive restarts and sleep.
 - **Empty directories are not persisted** — only files. If a folder must exist, keep a file in it.
 - Sessions are **tmux-backed**: they keep running when the browser disconnects and can be resumed after the Space sleeps.
-- Exception: OpenClaw's state (\`$OPENCLAW_STATE_DIR\`) lives on local disk for filesystem compatibility and is backed up to the bucket every minute.
+- Exception: OpenClaw runs with its own \`$HOME\` on local disk for filesystem compatibility; that state is backed up to the bucket every minute.
 
 ## You may not be alone
 - Other agents run in **sibling folders** under \`/data/workspaces/\`, and you may be **grouped** to share a single folder with other agents.

server/src/runner.js

@@ -212,8 +212,12 @@ function commandFor(session) {
   // config exists, go straight to the TUI. Decided by config-file existence —
   // same honest pattern as the Claude transcript check.
   if (cli.id === 'openclaw') {
-    const cfg = '"${OPENCLAW_CONFIG_PATH:-${OPENCLAW_STATE_DIR:-$HOME/.openclaw}/openclaw.json}"';
-    return `if [ -s ${cfg} ]; then exec openclaw chat; else openclaw onboard && exec openclaw chat; fi`;
+    // OpenClaw runs with its own HOME on local disk (see entrypoint.sh): its
+    // state can't live on the FUSE bucket and it rejects symlinked paths.
+    // Locally (no OPENCLAW_HOME) the real HOME is used unchanged.
+    return 'HOME="${OPENCLAW_HOME:-$HOME}"; export HOME; '
+      + 'if [ -s "$HOME/.openclaw/openclaw.json" ]; then exec openclaw chat; '
+      + 'else openclaw onboard && exec openclaw chat; fi';
   }
 
   // Codex: resume this agent's pinned conversation (captured from its rollout

web/src/components/Sidebar.tsx

@@ -229,14 +229,18 @@ export default function Sidebar({
         )}
       </div>
 
-      {/* Overview: pinned above the session tree, selectable like a session */}
+      {/* Overview: pinned above the tree, styled EXACTLY like a session row
+          (dot · mono name · glyph) so it reads as clickable — its dot is the
+          aggregate of every agent's state. */}
       <div className="ov-fixed">
         <div
-          className={`row ov-row${activeRef === 'overview' ? ' active' : ''}`}
+          className={`row session ov-row${activeRef === 'overview' ? ' active' : ''}`}
           onClick={() => onActivate('overview')}
+          title="All agents: digests, states, replies"
         >
+          <span className={`status ${agg}`} />
+          <span className="name">overview</span>
           <PulseGlyph className="ov-row-ico" />
-          <span className="name">Overview</span>
         </div>
       </div>
 

web/src/styles.css

@@ -181,10 +181,10 @@ body {
 .stepper button:disabled { opacity: 0.35; cursor: not-allowed; }
 .stepper-n { min-width: 20px; text-align: center; font-size: 12px; font-variant-numeric: tabular-nums; }
 
-/* overview: pinned sidebar row + cards view */
+/* overview: pinned sidebar row (session-row anatomy) + cards view */
 .ov-fixed { padding: 6px 8px 0; }
-.ov-row .name { font-family: var(--font-sans); font-size: 13px; font-weight: 600; }
-.ov-row-ico { width: 14px; height: 14px; color: var(--accent); flex: none; }
+.ov-row { cursor: pointer; }
+.ov-row-ico { width: 13px; height: 13px; color: var(--accent); flex: none; }
 /* ---- Overview: one reading column of capsules (design mock v4.12) ---- */
 .ov-wrap { height: 100%; overflow-y: auto; }
 .ov-feed { max-width: 680px; margin: 0 auto; display: flex; flex-direction: column; gap: 18px; padding: 2px 2px 40px; }