Fixes
- Outbound media/local files: align outbound media access with the configured fs policy so host-local files and inbound-media paths keep sending when
workspaceOnlyis off, while strict workspace-only agents remain sandboxed. - Runtime/install: lower the supported Node 22 floor to
22.14+while continuing to recommend Node 24, so npm installs and self-updates do not strand Node 22.14 users on older releases. - CLI/update: preflight the target npm package
engines.nodebeforeopenclaw updateruns a global package install, so outdated Node runtimes fail with a clear upgrade message instead of attempting an unsupported latest release. - Tests/security audit: isolate audit-test home and personal skill resolution so local
~/.agents/skillsinstalls no longer make maintainer prep runs fail nondeterministically. (#54473) thanks @huntharo