);

}

type ResolvePreferredOpenClawTmpDirInternalOptions = ResolvePreferredOpenClawTmpDirOptions & {

/** Test seam for the host platform; defaults to `process.platform`. */

platform?: NodeJS.Platform;

};

export function resolvePreferredOpenClawTmpDir(

options: ResolvePreferredOpenClawTmpDirOptions = {},

options: ResolvePreferredOpenClawTmpDirInternalOptions = {},

): string {

// Evaluated here (not at module load) so this file is safe to import in browser bundles.

const TMP_DIR_ACCESS_MODE = fs.constants.W_OK | fs.constants.X_OK;

}

});

const tmpdir = typeof options.tmpdir === "function" ? options.tmpdir : getOsTmpDir;

const platform = options.platform ?? process.platform;

const uid = getuid();

const isSecureDirForUser = (st: { mode?: number; uid?: number }): boolean => {

const fallback = (): string => {

const base = tmpdir();

const suffix = uid === undefined ? "openclaw" : `openclaw-${uid}`;

return path.join(base, suffix);

// Use the platform-specific joiner so Windows fallbacks stay in pure

// backslash form even when the host process is non-Windows (e.g. when

// tests inject `platform: "win32"` on a Linux runner).

const joiner = platform === "win32" ? path.win32.join : path.join;

return joiner(base, suffix);

};

const isTrustedTmpDir = (st: {

return fallbackPath;

};

// On Windows, Node resolves the POSIX path `/tmp` to `C:\tmp` (relative to

// the current drive root). Many Windows hosts have `C:\tmp` because Git,

// MSYS2, and other Unix-compat tools create it; the existing logic then

// happily writes logs and TTS files to `C:\tmp\openclaw\` while every

// other code path expects `%TEMP%\openclaw\`. Skip the POSIX preferred

// path entirely on Windows so the function falls through to the

// os.tmpdir() fallback (#60713).

if (platform === "win32") {

return ensureTrustedFallbackDir();

}

const existingPreferredState = resolveDirState(POSIX_OPENCLAW_TMP_DIR);

if (existingPreferredState === "available") {

return POSIX_OPENCLAW_TMP_DIR;