OpenClaw's AI-written cleanup code killed processes by command-line pattern without ownership checks, letting shared-host users terminate unrelated processes.

+ */+export async function cleanupSuspendedCliProcesses(+  backend: CliBackendConfig,+  threshold = 10,+): Promise<void> {+  if (process.platform === "win32") return;+  const commandToken = path.basename(backend.command ?? "").trim();+  if (!commandToken) return;++  // Pattern includes --session-id to only match Clawdbot processes+  const pattern = `[${commandToken[0]}]${commandToken.slice(1)}.*--session-id`;++  try {+    // Count suspended Clawdbot processes+    const { stdout } = await runExec("bash", [+      "-c",+      `ps aux | grep -E '${pattern}' | grep -E '\\s+T\\s+' | wc -l`,+    ]);+    const count = parseInt(stdout.trim(), 10) || 0;++    if (count > threshold) {+      // Kill suspended Clawdbot processes only+      await runExec("bash", [+        "-c",+        `ps aux | grep -E '${pattern}' | grep -E '\\s+T\\s+' | awk '{print $2}' | xargs kill -9 2>/dev/null`,+      ]);+    }+  } catch {+    // ignore errors - best effort cleanup+  }+}+ export function enqueueCliRun<T>(key: string, task: () => Promise<T>): Promise<T> {   const prior = CLI_RUN_QUEUE.get(key) ?? Promise.resolve();   const chained = prior.catch(() => undefined).then(task);

     runCommandWithTimeoutMock.mockResolvedValueOnce({       stdout: "ok",       stderr: "",@@ -43,13 +45,58 @@ describe("runCliAgent resume cleanup", () => {       return;     } -    expect(runExecMock).toHaveBeenCalledTimes(1);-    const args = runExecMock.mock.calls[0] ?? [];-    expect(args[0]).toBe("pkill");-    const pkillArgs = args[1] as string[];+    // First call: cleanupSuspendedCliProcesses (bash to count)+    // Second call: cleanupResumeProcesses (pkill)+    expect(runExecMock).toHaveBeenCalledTimes(2);++    // Verify the pkill call for resume cleanup+    const pkillCall = runExecMock.mock.calls[1] ?? [];+    expect(pkillCall[0]).toBe("pkill");+    const pkillArgs = pkillCall[1] as string[];     expect(pkillArgs[0]).toBe("-f");     expect(pkillArgs[1]).toContain("codex");     expect(pkillArgs[1]).toContain("resume");     expect(pkillArgs[1]).toContain("thread-123");   });++  it("cleans up suspended processes when threshold exceeded", async () => {+    // Return count > 10 to trigger cleanup+    runExecMock+      .mockResolvedValueOnce({ stdout: "15", stderr: "" }) // count suspended+      .mockResolvedValueOnce({ stdout: "", stderr: "" }); // kill command+    runCommandWithTimeoutMock.mockResolvedValueOnce({+      stdout: "ok",+      stderr: "",+      code: 0,+      signal: null,+      killed: false,+    });++    await runCliAgent({+      sessionId: "s1",+      sessionFile: "/tmp/session.jsonl",+      workspaceDir: "/tmp",+      prompt: "hi",+      provider: "claude-cli",+      timeoutMs: 1_000,+      runId: "run-1",+    });++    if (process.platform === "win32") {+      expect(runExecMock).not.toHaveBeenCalled();+      return;+    }++    // cleanupSuspendedCliProcesses: count + kill (2 calls)+    // cleanupResumeProcesses: not called for claude-cli (no resumeArgs)+    expect(runExecMock).toHaveBeenCalledTimes(2);++    // First call: count suspended processes+    const countCall = runExecMock.mock.calls[0] ?? [];+    expect(countCall[0]).toBe("bash");++    // Second call: kill suspended processes+    const killCall = runExecMock.mock.calls[1] ?? [];+    expect(killCall[0]).toBe("bash");+  }); });

@@ -206,6 +207,9 @@ export async function runCliAgent(params: {         return next;       })(); +      // Cleanup suspended processes that have accumulated (regardless of sessionId)+      await cleanupSuspendedCliProcesses(backend);+       if (useResume && cliSessionIdToSend) {         await cleanupResumeProcesses(backend, cliSessionIdToSend);       }

 const runExecMock = vi.fn();@@ -22,12 +22,21 @@ describe("runCliAgent resume cleanup", () => {   });    it("kills stale resume processes for codex sessions", async () => {+    const selfPid = process.pid;+     runExecMock       .mockResolvedValueOnce({-        stdout: "  1 S /bin/launchd\n",+        stdout: "  1 999 S /bin/launchd\n",         stderr: "",-      }) // cleanupSuspendedCliProcesses (ps)-      .mockResolvedValueOnce({ stdout: "", stderr: "" }); // cleanupResumeProcesses (pkill)+      }) // cleanupSuspendedCliProcesses (ps) — ppid 999 != selfPid, no match+      .mockResolvedValueOnce({+        stdout: [+          `  ${selfPid + 1} ${selfPid} codex exec resume thread-123 --color never --sandbox read-only --skip-git-repo-check`,+          `  ${selfPid + 2} 999 codex exec resume thread-123 --color never --sandbox read-only --skip-git-repo-check`,+        ].join("\n"),+        stderr: "",+      }) // cleanupResumeProcesses (ps)+      .mockResolvedValueOnce({ stdout: "", stderr: "" }); // cleanupResumeProcesses (kill)     runCommandWithTimeoutMock.mockResolvedValueOnce({       stdout: "ok",       stderr: "",@@ -53,14 +62,19 @@ describe("runCliAgent resume cleanup", () => {       return;     } -    expect(runExecMock).toHaveBeenCalledTimes(2);-    const pkillCall = runExecMock.mock.calls[1] ?? [];-    expect(pkillCall[0]).toBe("pkill");-    const pkillArgs = pkillCall[1] as string[];-    expect(pkillArgs[0]).toBe("-f");-    expect(pkillArgs[1]).toContain("codex");-    expect(pkillArgs[1]).toContain("resume");-    expect(pkillArgs[1]).toContain("thread-123");+    expect(runExecMock).toHaveBeenCalledTimes(3);++    // Second call: cleanupResumeProcesses ps+    const psCall = runExecMock.mock.calls[1] ?? [];+    expect(psCall[0]).toBe("ps");++    // Third call: kill with only the child PID+    const killCall = runExecMock.mock.calls[2] ?? [];+    expect(killCall[0]).toBe("kill");+    const killArgs = killCall[1] as string[];+    expect(killArgs[0]).toBe("-9");+    expect(killArgs[1]).toBe(String(selfPid + 1));+    expect(killArgs).toHaveLength(2); // only -9 + one PID   });    it("falls back to per-agent workspace when workspaceDir is missing", async () => {@@ -165,11 +179,12 @@ describe("cleanupSuspendedCliProcesses", () => {   });    it("matches sessionArg-based commands", async () => {+    const selfPid = process.pid;     runExecMock       .mockResolvedValueOnce({         stdout: [-          "  40 T+ claude --session-id thread-1 -p",-          "  41 S  claude --session-id thread-2 -p",+          `  40 ${selfPid} T+ claude --session-id thread-1 -p`,+          `  41 ${selfPid} S  claude --session-id thread-2 -p`,         ].join("\n"),         stderr: "",       })@@ -195,11 +210,12 @@ describe("cleanupSuspendedCliProcesses", () => {   });    it("matches resumeArgs with positional session id", async () => {+    const selfPid = process.pid;     runExecMock       .mockResolvedValueOnce({         stdout: [-          "  50 T  codex exec resume thread-99 --color never --sandbox read-only",-          "  51 T  codex exec resume other --color never --sandbox read-only",+          `  50 ${selfPid} T  codex exec resume thread-99 --color never --sandbox read-only`,+          `  51 ${selfPid} T  codex exec resume other --color never --sandbox read-only`,         ].join("\n"),

+    const toKill: number[] = [];++    for (const line of stdout.split("\n")) {+      const trimmed = line.trim();+      if (!trimmed) {+        continue;+      }+      const match = /^(\d+)\s+(\d+)\s+(.*)$/.exec(trimmed);+      if (!match) {+        continue;+      }+      const pid = Number(match[1]);+      const ppid = Number(match[2]);+      const cmd = match[3] ?? "";+      if (!Number.isFinite(pid)) {+        continue;+      }+      if (ppid !== process.pid) {+        continue;+      }+      if (!patternRegex.test(cmd)) {+        continue;+      }+      toKill.push(pid);+    }++    if (toKill.length > 0) {+      await runExec("kill", ["-9", ...toKill.map((pid) => String(pid))]);+    }   } catch {-    // ignore missing pkill or no matches+    // ignore errors - best effort cleanup   } } @@ -115,23 +146,28 @@ export async function cleanupSuspendedCliProcesses(   }    try {-    const { stdout } = await runExec("ps", ["-ax", "-o", "pid=,stat=,command="]);+    // Use wide output to reduce false negatives from argv truncation.+    const { stdout } = await runExec("ps", ["-axww", "-o", "pid=,ppid=,stat=,command="]);     const suspended: number[] = [];     for (const line of stdout.split("\n")) {       const trimmed = line.trim();       if (!trimmed) {         continue;       }-      const match = /^(\d+)\s+(\S+)\s+(.*)$/.exec(trimmed);+      const match = /^(\d+)\s+(\d+)\s+(\S+)\s+(.*)$/.exec(trimmed);       if (!match) {         continue;       }       const pid = Number(match[1]);-      const stat = match[2] ?? "";-      const command = match[3] ?? "";+      const ppid = Number(match[2]);+      const stat = match[3] ?? "";+      const command = match[4] ?? "";       if (!Number.isFinite(pid)) {         continue;       }+      if (ppid !== process.pid) {+        continue;+      }       if (!stat.includes("T")) {         continue;       }