Update entrypoint.sh

entrypoint.sh

@@ -1,4 +1,5 @@
 #!/bin/sh
+umask 022
 # OpenClaw HF Spaces - Production Entrypoint
 # Storage: HF Storage Bucket at /data (100 GB persistent)
 
@@ -96,12 +97,46 @@ for f in "$OPENCLAW_HOME"/.openclaw/telegram/update-offset-*.json \
   fi
 done
 
+# ---- Check shared state DB; restore from doctor's own backup if corrupt ----
+check_db() {
+  DBPATH="$1" node - <<'JSEOF'
+const { DatabaseSync } = require('node:sqlite');
+try {
+  const db = new DatabaseSync(process.env.DBPATH, { readOnly: true });
+  const row = db.prepare('PRAGMA integrity_check').get();
+  db.close();
+  process.exit(Object.values(row)[0] === 'ok' ? 0 : 1);
+} catch (e) {
+  console.error('[db-check] ' + e.message);
+  process.exit(1);
+}
+JSEOF
+}
+
+STATE_DB="$OPENCLAW_HOME/.openclaw/state/openclaw.sqlite"
+if [ -f "$STATE_DB" ] && ! check_db "$STATE_DB" 2>/dev/null; then
+  warn "State DB failed integrity check - looking for an intact backup..."
+  GOOD=""
+  for B in $(ls -t "$STATE_DB".pre-startup-migration-*.bak 2>/dev/null); do
+    if check_db "$B" 2>/dev/null; then GOOD="$B"; break; fi
+  done
+  if [ -n "$GOOD" ]; then
+    mv "$STATE_DB" "$STATE_DB.corrupt-$(date +%s)"
+    rm -f "$STATE_DB-wal" "$STATE_DB-shm"
+    cp "$GOOD" "$STATE_DB" && log "Restored state DB from $GOOD"
+  else
+    warn "No intact backup found - leaving DB untouched"
+  fi
+fi
+
 log "Running openclaw doctor --fix (state migration)..."
 timeout 300 openclaw doctor --fix --non-interactive </dev/null \
-  || timeout 300 openclaw doctor --fix </dev/null \
-  || warn "openclaw doctor failed - gateway may refuse to start"
+  || warn "openclaw doctor reported problems (see output above)"
 log "Doctor step done."
 
+# Plugins must not be world-writable or OpenClaw blocks them
+chmod -R go-w "$OPENCLAW_HOME/.openclaw/npm" "$OPENCLAW_HOME/.openclaw/extensions" 2>/dev/null || true
+
 # ----------------------------------------------------------------
 # Auto-approve pending device pairings (background)
 # ----------------------------------------------------------------