build(deps): refresh docs tooling

.agents/skills/openclaw-carapace/SKILL.md

@@ -13,11 +13,12 @@ Keep consumer-specific behavior, data, routes, and layout composition local.
 1. Read [tokens.md](references/tokens.md) before choosing colors, spacing, type, radii, or shadows.
 2. Read [consumer-adapters.md](references/consumer-adapters.md) for the current framework.
 3. Read [application-surfaces.md](references/application-surfaces.md) when working on shells, panes, settings, or operational screens.
-4. Read [embedded-surfaces.md](references/embedded-surfaces.md) when the surface renders inside a host frame, such as an MCP app.
-5. Inspect the consumer's existing shared primitives before creating a component.
-6. Use semantic tokens for UI intent; use palette primitives only for documented exceptions.
-7. Keep application behavior, routes, and information architecture unchanged unless the task says otherwise.
-8. Validate the affected routes with existing tests and real browser screenshots.
+4. Read [terminal-ui.md](references/terminal-ui.md) when designing or auditing a terminal interface.
+5. Read [embedded-surfaces.md](references/embedded-surfaces.md) when the surface renders inside a host frame, such as an MCP app.
+6. Inspect the consumer's existing shared primitives before creating a component.
+7. Use semantic tokens for UI intent; use palette primitives only for documented exceptions.
+8. Keep application behavior, routes, and information architecture unchanged unless the task says otherwise.
+9. Validate the affected routes with existing tests and real browser screenshots.
 
 ## Interface Rules
 

.agents/skills/openclaw-carapace/references/terminal-ui.md

@@ -0,0 +1,193 @@
+# Terminal UI
+
+Carapace documents terminal translations of its existing design language. The
+terminal consumer keeps runtime behavior, ANSI rendering, keybindings,
+commands, session state, and framework adapters.
+
+Browser specimens use the runtime as their source of truth. Run the real
+OpenClaw Pi or Clack component in a fixed-size PTY, capture its output bytes
+with `@openclaw/libterminal`, and replay those bytes through libterminal's
+Ghostty WASM renderer. Use HTML only for documentation around the terminal.
+Never redraw a terminal specimen with HTML elements or browser controls.
+
+The current reference covers both OpenClaw terminal compositions:
+
+- the retained agent TUI on `@earendil-works/pi-tui@0.81.1`
+- onboarding and command setup on `@clack/prompts@1.7.0`
+
+Re-audit OpenClaw, Pi, and Clack before treating version-specific behavior as
+current.
+
+## Reuse first
+
+Use existing Carapace Colors, Typography, Layout, Motion, Base styles, inputs,
+selections, approvals, loaders, flows, and Agent Components. Terminal UI adds
+only terminal-specific constraints: ANSI and cell width, the host foreground
+and font, focus and cursor ownership, scrollback/history, and row/column limits.
+
+Do not create a TUI palette, typography scale, CSS export, component package, or
+second renderer.
+
+## Structure
+
+Model the agent TUI as one vertical conversation buffer:
+
+1. header identity
+2. transcript rows and work cards
+3. connection and activity status
+4. session footer
+5. focused editor
+
+Pickers, settings, consent, approvals, and task suggestions are transient
+focus-capturing overlays. Help, command feedback, local-shell output, and most
+errors return to the transcript; do not present them as separate screens.
+
+Model setup as one append-only guide with a single active prompt. Completed
+ordinary answers collapse into history; notes and progress preserve context;
+intro, outro, and cancellation visibly close the guide.
+
+## Visual roles
+
+- Preserve assistant prose in the terminal's default foreground.
+- Use a neutral inset surface for user-authored turns.
+- Keep system notices muted and inline.
+- Use primary accent for the active choice or explicit confirmation.
+- Use secondary accent for focus, connection, and current context.
+- Reserve success, warning, and error colors for outcomes.
+- Pair every colored state with text, a glyph, ordering, or another non-color
+  signal.
+- Do not infer severity colors when the consumer currently renders severity as
+  text metadata.
+
+Carapace's browser specimens may map these relationships to coral, sea, and
+semantic status roles. That mapping is documentation, not an exported ANSI
+theme API.
+
+## Reference tokens
+
+The Terminal UI Lab keeps a small reference token map for relationships shared
+by the audited Clack and Pi surfaces. It is design guidance and preview input,
+not a published component or token package.
+
+- Terminal color roles alias the existing Carapace background, text, accent,
+  status, and monospace-font variables. Do not add terminal-only colors.
+- `terminal.space.marker-label` is the one-cell gap between a marker and label.
+- `terminal.space.leading-prefix` is the two-cell guide, focus, or selection
+  prefix before content.
+- `terminal.viewport.compact` is 40 columns.
+- `terminal.viewport.standard` is 80 columns.
+- `terminal.viewport.reference` is 120 columns and drives canonical captures.
+
+The viewport values are validation profiles, not component dimensions. A
+terminal implementation must still fit the column count supplied by its
+runtime.
+
+## Cells and width
+
+- Design and test in terminal columns and rows, not browser pixels.
+- Ensure every rendered line fits its supplied width after ANSI sequences are
+  ignored.
+- Preserve grapheme clusters, ANSI styles, and OSC 8 links when wrapping or
+  truncating.
+- Remove optional descriptions before labels, selection prefixes, or actions.
+- Bound long output and name omitted content; expansion behavior stays in the
+  consumer.
+- Treat consumer-specific line, item, and output limits as audited facts, not
+  Terminal UI tokens.
+
+## Setup prompts
+
+- Keep text, sensitive text, select, multiselect, searchable variants, confirm,
+  and progress within one connected guide.
+- Keep validation next to the active value or list.
+- Mask sensitive input, omit it from submitted history, and never cache it for
+  replay.
+- Preserve the focused option when clipping long lists. Remove descriptions
+  before labels, selection markers, or actions.
+- Keep option anatomy explicit: marker, human label, stable value, annotation,
+  optional description, and availability reason. `current`, `default`,
+  `selected`, `recommended`, and `configured` are separate meanings; do not
+  collapse them into one state.
+- At wide widths, concise metadata may follow the label. At narrow widths, move
+  metadata to a second line and remove optional description before identity or
+  status.
+- Show Back and Next only when available. Next accepts a remembered answer
+  without replaying output or side effects.
+- Disable Back after irreversible work instead of rerunning unsafe steps.
+- Use notes for framed human context and plain output for raw disclosure.
+
+## Input and decisions
+
+- The focused surface owns Enter, Escape, arrows, paging, and confirmation.
+- Propagate focus to embedded text inputs so hardware-cursor and IME placement
+  remain correct.
+- Keep a conservative action selected first when one is available.
+- Require an explicit second commit for privileged or costly actions.
+- Changing selection disarms confirmation.
+- Name the consequence in the confirmation sentence.
+- Preserve visible stale, expired, denied, accepted, dismissed, and failed
+  outcomes.
+- Keep one active decision at a time even when the runtime can stack overlays.
+
+Simple setup confirmation can render inline or vertically. Detailed agent
+approvals may use overlays and an explicit arm-then-commit sequence. Label
+specimens by renderer instead of implying that Pi and Clack are one component
+implementation.
+
+## Approvals
+
+Treat an approval as a bounded authorization surface, not a verbose
+confirmation. Show the approval family and requested action first, then
+severity, owner metadata, request context, the allowed decision set, and the
+eventual outcome.
+
+- Render only decisions supplied by the request. Never invent persistent
+  authorization when `allow-always` is unavailable.
+- Focus Deny first whenever it is available. Escape resolves Deny in that
+  case; an allow-only prompt dismisses without authorizing and remains pending.
+- `Allow once` authorizes the current request. `Always allow` authorizes only
+  the matching future scope defined by the owner and must name that persistence
+  clearly.
+- Require a visible second commit when an allow action starts focused. Moving
+  to another decision clears the armed state.
+- Sanitize untrusted title, description, tool, and plugin text before terminal
+  rendering. Preserve bidi, ANSI, OSC, and control-sequence defenses.
+- Return allowed, denied, dismissed, expired, stale, and failed outcomes to the
+  transcript. Do not silently close the overlay or imply that dismissal denied
+  an allow-only request.
+- Queue one session-matching request at a time. Resolution from another client
+  closes the local overlay and records that the request is no longer pending.
+
+## Ownership
+
+Use the existing terminal runtime. Do not introduce a second renderer, copy its
+width or focus algorithms into Carapace, import browser CSS into an ANSI
+surface, or publish a terminal component API from one consumer's implementation.
+
+Markup sections may show Carapace's standalone copy-and-paste libterminal
+replay interface. They must not present local Pi classes, WizardPrompter calls,
+or partial Clack excerpts as reusable Carapace components. Link those audited
+OpenClaw sources as implementation evidence instead.
+
+Keep the Carapace Terminal UI area in Lab until a second terminal consumer
+proves a shared reusable interface. Cross-link existing Carapace pages for
+medium-neutral semantics; Terminal UI owns only the translation into cells,
+terminal focus, ANSI, scrollback/history, and terminal compositions.
+
+## Validation
+
+- Verify comfortable, narrow, and short terminal sizes with real PTY proof.
+- Verify light and dark theme relationships.
+- Verify idle, streaming, tool success/error, approval, task suggestion, and
+  picker states.
+- Verify onboarding intro/outro/cancel, ordinary and sensitive fields,
+  validation, select/multiselect/searchable variants, inline/vertical confirm,
+  progress, remembered answers, replay suppression, and irreversible
+  boundaries.
+- Verify Enter and Escape precedence across editor, inline result, active run,
+  filter, and overlay scopes.
+- Verify state remains understandable without color.
+- Regenerate the libterminal fixtures from the audited OpenClaw revision before
+  updating a specimen.
+- Use browser screenshots to validate Carapace reference pages, not as proof of
+  the terminal runtime; the captured PTY bytes are the runtime evidence.

.github/scripts/i18n/tests/test_i18n_scripts.py

@@ -436,7 +436,7 @@ def test_translation_workflows_pin_latest_codex_and_tier_effort(self) -> None:
         full = (REPO_ROOT / ".github/workflows/translate-all.yml").read_text(encoding="utf-8")
         incremental = (REPO_ROOT / ".github/workflows/translate-incremental.yml").read_text(encoding="utf-8")
 
-        self.assertIn("npm install -g @openai/codex@0.144.4", reusable)
+        self.assertIn("npm install -g @openai/codex@0.146.0", reusable)
         self.assertIn("effort: xhigh", reusable)
         self.assertNotIn("effort: max", reusable)
         self.assertEqual(1, full.count('thinking_effort: "xhigh"'))

.github/workflows/codeql.yml

@@ -29,12 +29,12 @@ jobs:
         uses: actions/checkout@v7.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.37.2
+        uses: github/codeql-action/init@v4.37.4
         with:
           languages: ${{ matrix.language }}
           build-mode: none
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4.37.2
+        uses: github/codeql-action/analyze@v4.37.4
         with:
           category: "/language:${{ matrix.language }}"

.github/workflows/docs-code-ci.yml

@@ -56,7 +56,7 @@ jobs:
         run: npm test
 
       - name: Validate Worker bundle
-        run: npx wrangler@4.88.0 deploy --dry-run --config wrangler.toml
+        run: npx wrangler@4.118.0 deploy --dry-run --config wrangler.toml
 
       - name: Build shell artifact
         run: npm run docs:build:r2:shell

.github/workflows/pages.yml

@@ -53,15 +53,15 @@ jobs:
         run: npm ci
 
       - name: Validate Worker bundle
-        run: npx wrangler@4.88.0 deploy --dry-run --config wrangler.toml
+        run: npx wrangler@4.118.0 deploy --dry-run --config wrangler.toml
 
       - name: Deploy to Cloudflare
         if: github.event_name == 'workflow_dispatch' && inputs.deploy_worker == true
         env:
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
         run: |
-          npx wrangler@4.88.0 deploy --config wrangler.toml \
+          npx wrangler@4.118.0 deploy --config wrangler.toml \
             --tag "${GITHUB_SHA::12}" \
             --message "openclaw/docs ${GITHUB_SHA}"
 

.github/workflows/r2-pages.yml

@@ -357,7 +357,7 @@ jobs:
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
         run: |
-          npx wrangler@4.88.0 deploy --config wrangler.toml \
+          npx wrangler@4.118.0 deploy --config wrangler.toml \
             --tag "${GITHUB_SHA::12}" \
             --message "openclaw/docs ${GITHUB_SHA}"
 

.github/workflows/stale.yml

@@ -4,6 +4,11 @@ on:
   schedule:
     - cron: "43 4 * * *"
   workflow_dispatch:
+    inputs:
+      debug_only:
+        description: Run without changing issues or pull requests
+        type: boolean
+        default: false
 
 permissions: {}
 
@@ -15,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Mark stale unassigned issues and pull requests
-        uses: actions/stale@v10.4.0
+        uses: actions/stale@v11.0.0
         with:
           days-before-issue-stale: 14
           days-before-issue-close: 7
@@ -26,6 +31,7 @@ jobs:
           exempt-issue-labels: enhancement,maintainer,pinned,security,no-stale
           exempt-pr-labels: maintainer,no-stale
           operations-per-run: 1000
+          debug-only: ${{ inputs.debug_only || false }}
           ascending: true
           exempt-all-assignees: true
           remove-stale-when-updated: true
@@ -44,7 +50,7 @@ jobs:
             If this PR should be revived, reopen it with current context and validation.
 
       - name: Mark stale assigned issues
-        uses: actions/stale@v10.4.0
+        uses: actions/stale@v11.0.0
         with:
           days-before-issue-stale: 30
           days-before-issue-close: 10
@@ -53,6 +59,7 @@ jobs:
           stale-issue-label: stale
           exempt-issue-labels: enhancement,maintainer,pinned,security,no-stale
           operations-per-run: 1000
+          debug-only: ${{ inputs.debug_only || false }}
           ascending: true
           include-only-assigned: true
           remove-stale-when-updated: true
@@ -65,7 +72,7 @@ jobs:
           close-issue-reason: not_planned
 
       - name: Mark stale assigned pull requests
-        uses: actions/stale@v10.4.0
+        uses: actions/stale@v11.0.0
         with:
           days-before-issue-stale: -1
           days-before-issue-close: -1
@@ -74,6 +81,7 @@ jobs:
           stale-pr-label: stale
           exempt-pr-labels: maintainer,no-stale
           operations-per-run: 1000
+          debug-only: ${{ inputs.debug_only || false }}
           ascending: true
           include-only-assigned: true
           ignore-pr-updates: true

.github/workflows/translate-locale-reusable.yml

@@ -142,7 +142,7 @@ jobs:
 
       - name: Install Codex CLI
         if: steps.stale.outputs.skip != 'true'
-        run: npm install -g @openai/codex@0.144.4
+        run: npm install -g @openai/codex@0.146.0
 
       - name: Prune stale locale pages
         if: steps.stale.outputs.skip != 'true'