diff --git a/package.json b/package.json
index ab3c95330e0..f752857492f 100644
--- a/package.json
+++ b/package.json
@@ -410,6 +410,10 @@
       "types": "./dist/plugin-sdk/keyed-async-queue.d.ts",
       "default": "./dist/plugin-sdk/keyed-async-queue.js"
     },
+    "./plugin-sdk/windows-spawn": {
+      "types": "./dist/plugin-sdk/windows-spawn.d.ts",
+      "default": "./dist/plugin-sdk/windows-spawn.js"
+    },
     "./plugin-sdk/provider-auth": {
       "types": "./dist/plugin-sdk/provider-auth.d.ts",
       "default": "./dist/plugin-sdk/provider-auth.js"
@@ -486,6 +490,10 @@
       "types": "./dist/plugin-sdk/state-paths.d.ts",
       "default": "./dist/plugin-sdk/state-paths.js"
     },
+    "./plugin-sdk/temp-path": {
+      "types": "./dist/plugin-sdk/temp-path.d.ts",
+      "default": "./dist/plugin-sdk/temp-path.js"
+    },
     "./plugin-sdk/tool-send": {
       "types": "./dist/plugin-sdk/tool-send.d.ts",
       "default": "./dist/plugin-sdk/tool-send.js"
diff --git a/scripts/lib/plugin-sdk-entrypoints.json b/scripts/lib/plugin-sdk-entrypoints.json
index ac54dabe731..555c9e54bb7 100644
--- a/scripts/lib/plugin-sdk-entrypoints.json
+++ b/scripts/lib/plugin-sdk-entrypoints.json
@@ -92,6 +92,7 @@
   "directory-runtime",
   "json-store",
   "keyed-async-queue",
+  "windows-spawn",
   "provider-auth",
   "provider-auth-api-key",
   "provider-auth-login",
@@ -111,6 +112,7 @@
   "web-media",
   "speech",
   "state-paths",
+  "temp-path",
   "tool-send",
   "secret-input-schema"
 ]
diff --git a/src/acp/client.ts b/src/acp/client.ts
index 1d25281cce5..f3a04371c55 100644
--- a/src/acp/client.ts
+++ b/src/acp/client.ts
@@ -13,12 +13,12 @@ import {
   type RequestPermissionResponse,
   type SessionNotification,
 } from "@agentclientprotocol/sdk";
-import { isKnownCoreToolId } from "../agents/tool-catalog.js";
-import { ensureOpenClawCliOnPath } from "../infra/path-env.js";
 import {
   materializeWindowsSpawnProgram,
   resolveWindowsSpawnProgram,
-} from "../plugin-sdk/windows-spawn.js";
+} from "openclaw/plugin-sdk/windows-spawn";
+import { isKnownCoreToolId } from "../agents/tool-catalog.js";
+import { ensureOpenClawCliOnPath } from "../infra/path-env.js";
 import {
   listKnownProviderAuthEnvVarNames,
   omitEnvKeysCaseInsensitive,
diff --git a/src/agents/sandbox/docker.ts b/src/agents/sandbox/docker.ts
index 80a2921cb6b..dff86ea6756 100644
--- a/src/agents/sandbox/docker.ts
+++ b/src/agents/sandbox/docker.ts
@@ -1,9 +1,9 @@
 import { spawn } from "node:child_process";
-import { createSubsystemLogger } from "../../logging/subsystem.js";
 import {
   materializeWindowsSpawnProgram,
   resolveWindowsSpawnProgram,
-} from "../../plugin-sdk/windows-spawn.js";
+} from "openclaw/plugin-sdk/windows-spawn";
+import { createSubsystemLogger } from "../../logging/subsystem.js";
 import { sanitizeEnvVars } from "./sanitize-env-vars.js";
 import type { EnvSanitizationOptions } from "./sanitize-env-vars.js";
 
diff --git a/src/line/download.ts b/src/line/download.ts
index 8ec7ad45c32..6067fcc01f4 100644
--- a/src/line/download.ts
+++ b/src/line/download.ts
@@ -1,7 +1,7 @@
 import fs from "node:fs";
 import { messagingApi } from "@line/bot-sdk";
+import { buildRandomTempFilePath } from "openclaw/plugin-sdk/temp-path";
 import { logVerbose } from "../globals.js";
-import { buildRandomTempFilePath } from "../plugin-sdk/temp-path.js";
 
 interface DownloadResult {
   path: string;
diff --git a/src/media-understanding/attachments.cache.ts b/src/media-understanding/attachments.cache.ts
index f8e61265022..ce4f966d56d 100644
--- a/src/media-understanding/attachments.cache.ts
+++ b/src/media-understanding/attachments.cache.ts
@@ -1,5 +1,6 @@
 import fs from "node:fs/promises";
 import path from "node:path";
+import { buildRandomTempFilePath } from "openclaw/plugin-sdk/temp-path";
 import { logVerbose, shouldLogVerbose } from "../globals.js";
 import { isAbortError } from "../infra/unhandled-rejections.js";
 import { fetchRemoteMedia, MediaFetchError } from "../media/fetch.js";
@@ -10,7 +11,6 @@ import {
 } from "../media/inbound-path-policy.js";
 import { getDefaultMediaLocalRoots } from "../media/local-roots.js";
 import { detectMime } from "../media/mime.js";
-import { buildRandomTempFilePath } from "../plugin-sdk/temp-path.js";
 import { normalizeAttachmentPath } from "./attachments.normalize.js";
 import { MediaUnderstandingSkipError } from "./errors.js";
 import { fetchWithTimeout } from "./providers/shared.js";
diff --git a/src/memory/qmd-process.ts b/src/memory/qmd-process.ts
index 5a70cd3c361..60d1efd41ed 100644
--- a/src/memory/qmd-process.ts
+++ b/src/memory/qmd-process.ts
@@ -2,7 +2,7 @@ import { spawn } from "node:child_process";
 import {
   materializeWindowsSpawnProgram,
   resolveWindowsSpawnProgram,
-} from "../plugin-sdk/windows-spawn.js";
+} from "openclaw/plugin-sdk/windows-spawn";
 
 export type CliSpawnInvocation = {
   command: string;