Keep Codex's SQLite off the bucket

OpenClaw gets its own HOME on local disk (no symlinks — boundary check rejects them; no FUSE — fence rejects that): boot restore + 60s backup

OpenClaw local state via ~/.openclaw SYMLINK (embedded runtime ignores OPENCLAW_STATE_DIR); merge newest data on migration

OpenClaw state on local disk (FUSE fence incompatibility): boot restore + legacy migration + 60s rsync backup to bucket

Decouple names from folders (explicit paths + folder picker, visual-only groups), pin Codex conversations, fix drag-into-group, async usage, WS origin check, secrets filter

Run install.sh blocking before server start (tools ready + failures visible)

Add uv + local tool/env prefix on PATH; run durable /data/install.sh at startup

Document storage bucket setup for template duplicates

Public template: auto-locks at runtime, shows duplicate-to-private widget