Include all credentials and runtime config

Remove secret exclusions from .gitignore (local-only repo).
Add openclaw runtime state: credentials, identity, devices,
hooks, telegram, secrets, agent configs.
Exclude noisy/binary data: sessions, sqlite, media, temp files.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

openclaw/hooks/command-logger/handler.js

@@ -0,0 +1,56 @@
+import { c as resolveStateDir } from "../../paths-hfkBoC7i.js";
+import { t as createSubsystemLogger } from "../../subsystem-C-Cf_MFK.js";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+//#region src/hooks/bundled/command-logger/handler.ts
+/**
+* Example hook handler: Log all commands to a file
+*
+* This handler demonstrates how to create a hook that logs all command events
+* to a centralized log file for audit/debugging purposes.
+*
+* To enable this handler, add it to your config:
+*
+* ```json
+* {
+*   "hooks": {
+*     "internal": {
+*       "enabled": true,
+*       "handlers": [
+*         {
+*           "event": "command",
+*           "module": "./hooks/handlers/command-logger.ts"
+*         }
+*       ]
+*     }
+*   }
+* }
+* ```
+*/
+const log = createSubsystemLogger("command-logger");
+/**
+* Log all command events to a file
+*/
+const logCommand = async (event) => {
+	if (event.type !== "command") return;
+	try {
+		const stateDir = resolveStateDir(process.env, os.homedir);
+		const logDir = path.join(stateDir, "logs");
+		await fs.mkdir(logDir, { recursive: true });
+		const logFile = path.join(logDir, "commands.log");
+		const logLine = JSON.stringify({
+			timestamp: event.timestamp.toISOString(),
+			action: event.action,
+			sessionKey: event.sessionKey,
+			senderId: event.context.senderId ?? "unknown",
+			source: event.context.commandSource ?? "unknown"
+		}) + "\n";
+		await fs.appendFile(logFile, logLine, "utf-8");
+	} catch (err) {
+		const message = err instanceof Error ? err.message : String(err);
+		log.error(`Failed to log command: ${message}`);
+	}
+};
+//#endregion
+export { logCommand as default };