Include all credentials and runtime config

Remove secret exclusions from .gitignore (local-only repo).
Add openclaw runtime state: credentials, identity, devices,
hooks, telegram, secrets, agent configs.
Exclude noisy/binary data: sessions, sqlite, media, temp files.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

openclaw/hooks/command-logger/HOOK.md

@@ -0,0 +1,122 @@
+---
+name: command-logger
+description: "Log all command events to a centralized audit file"
+homepage: https://docs.openclaw.ai/automation/hooks#command-logger
+metadata:
+  {
+    "openclaw":
+      {
+        "emoji": "📝",
+        "events": ["command"],
+        "install": [{ "id": "bundled", "kind": "bundled", "label": "Bundled with OpenClaw" }],
+      },
+  }
+---
+
+# Command Logger Hook
+
+Logs all command events (`/new`, `/reset`, `/stop`, etc.) to a centralized audit log file for debugging and monitoring purposes.
+
+## What It Does
+
+Every time you issue a command to the agent:
+
+1. **Captures event details** - Command action, timestamp, session key, sender ID, source
+2. **Appends to log file** - Writes a JSON line to `~/.openclaw/logs/commands.log`
+3. **Silent operation** - Runs in the background without user notifications
+
+## Output Format
+
+Log entries are written in JSONL (JSON Lines) format:
+
+```json
+{"timestamp":"2026-01-16T14:30:00.000Z","action":"new","sessionKey":"agent:main:main","senderId":"+1234567890","source":"telegram"}
+{"timestamp":"2026-01-16T15:45:22.000Z","action":"stop","sessionKey":"agent:main:main","senderId":"user@example.com","source":"whatsapp"}
+```
+
+## Use Cases
+
+- **Debugging**: Track when commands were issued and from which source
+- **Auditing**: Monitor command usage across different channels
+- **Analytics**: Analyze command patterns and frequency
+- **Troubleshooting**: Investigate issues by reviewing command history
+
+## Log File Location
+
+`~/.openclaw/logs/commands.log`
+
+## Requirements
+
+No requirements - this hook works out of the box on all platforms.
+
+## Configuration
+
+No configuration needed. The hook automatically:
+
+- Creates the log directory if it doesn't exist
+- Appends to the log file (doesn't overwrite)
+- Handles errors silently without disrupting command execution
+
+## Disabling
+
+To disable this hook:
+
+```bash
+openclaw hooks disable command-logger
+```
+
+Or via config:
+
+```json
+{
+  "hooks": {
+    "internal": {
+      "entries": {
+        "command-logger": { "enabled": false }
+      }
+    }
+  }
+}
+```
+
+## Log Rotation
+
+The hook does not automatically rotate logs. To manage log size, you can:
+
+1. **Manual rotation**:
+
+   ```bash
+   mv ~/.openclaw/logs/commands.log ~/.openclaw/logs/commands.log.old
+   ```
+
+2. **Use logrotate** (Linux):
+   Create `/etc/logrotate.d/openclaw`:
+   ```
+   /home/username/.openclaw/logs/commands.log {
+       weekly
+       rotate 4
+       compress
+       missingok
+       notifempty
+   }
+   ```
+
+## Viewing Logs
+
+View recent commands:
+
+```bash
+tail -n 20 ~/.openclaw/logs/commands.log
+```
+
+Pretty-print with jq:
+
+```bash
+cat ~/.openclaw/logs/commands.log | jq .
+```
+
+Filter by action:
+
+```bash
+grep '"action":"new"' ~/.openclaw/logs/commands.log | jq .
+```

openclaw/hooks/command-logger/handler.js

@@ -0,0 +1,56 @@
+import { c as resolveStateDir } from "../../paths-hfkBoC7i.js";
+import { t as createSubsystemLogger } from "../../subsystem-C-Cf_MFK.js";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+//#region src/hooks/bundled/command-logger/handler.ts
+/**
+* Example hook handler: Log all commands to a file
+*
+* This handler demonstrates how to create a hook that logs all command events
+* to a centralized log file for audit/debugging purposes.
+*
+* To enable this handler, add it to your config:
+*
+* ```json
+* {
+*   "hooks": {
+*     "internal": {
+*       "enabled": true,
+*       "handlers": [
+*         {
+*           "event": "command",
+*           "module": "./hooks/handlers/command-logger.ts"
+*         }
+*       ]
+*     }
+*   }
+* }
+* ```
+*/
+const log = createSubsystemLogger("command-logger");
+/**
+* Log all command events to a file
+*/
+const logCommand = async (event) => {
+	if (event.type !== "command") return;
+	try {
+		const stateDir = resolveStateDir(process.env, os.homedir);
+		const logDir = path.join(stateDir, "logs");
+		await fs.mkdir(logDir, { recursive: true });
+		const logFile = path.join(logDir, "commands.log");
+		const logLine = JSON.stringify({
+			timestamp: event.timestamp.toISOString(),
+			action: event.action,
+			sessionKey: event.sessionKey,
+			senderId: event.context.senderId ?? "unknown",
+			source: event.context.commandSource ?? "unknown"
+		}) + "\n";
+		await fs.appendFile(logFile, logLine, "utf-8");
+	} catch (err) {
+		const message = err instanceof Error ? err.message : String(err);
+		log.error(`Failed to log command: ${message}`);
+	}
+};
+//#endregion
+export { logCommand as default };