fix(plugins): localize bundled runtime deps to extensions (#67099)

* fix(plugins): localize bundled runtime deps to extensions

* fix(plugins): move staged runtime deps out of root

* fix(packaging): harden prepack and runtime dep staging

* fix(packaging): preserve optional runtime dep staging

* Update CHANGELOG.md

* fix(packaging): harden runtime staging filesystem writes

* fix(docker): ship preinstall warning in bootstrap layers

* fix(packaging): exclude staged plugin node_modules from npm pack

scripts/preinstall-package-manager-warning.mjs

@@ -0,0 +1,64 @@
+import { pathToFileURL } from "node:url";
+
+const allowedLifecyclePackageManagers = new Set(["pnpm", "npm", "yarn", "bun"]);
+
+function normalizeEnvValue(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+
+function normalizeLifecyclePackageManagerName(value) {
+  const normalized = normalizeEnvValue(value).toLowerCase();
+  if (!/^[a-z0-9][a-z0-9._-]*$/u.test(normalized)) {
+    return null;
+  }
+  return allowedLifecyclePackageManagers.has(normalized) ? normalized : null;
+}
+
+export function detectLifecyclePackageManager(env = process.env) {
+  const userAgent = normalizeEnvValue(env.npm_config_user_agent);
+  const userAgentMatch = /^([A-Za-z0-9._-]+)\//u.exec(userAgent);
+  if (userAgentMatch) {
+    return normalizeLifecyclePackageManagerName(userAgentMatch[1]);
+  }
+
+  const execPath = normalizeEnvValue(env.npm_execpath).toLowerCase();
+  if (execPath.includes("pnpm")) {
+    return "pnpm";
+  }
+  if (execPath.includes("npm")) {
+    return "npm";
+  }
+  if (execPath.includes("yarn")) {
+    return "yarn";
+  }
+  if (execPath.includes("bun")) {
+    return "bun";
+  }
+
+  return null;
+}
+
+export function createPackageManagerWarningMessage(packageManager) {
+  if (!packageManager || packageManager === "pnpm") {
+    return null;
+  }
+
+  return [
+    `[openclaw] warning: detected ${packageManager} for install lifecycle.`,
+    "[openclaw] this repo works best with pnpm; npm-compatible installs are slower and much larger here.",
+    "[openclaw] prefer: corepack pnpm install",
+  ].join("\n");
+}
+
+export function warnIfNonPnpmLifecycle(env = process.env, warn = console.warn) {
+  const message = createPackageManagerWarningMessage(detectLifecyclePackageManager(env));
+  if (!message) {
+    return false;
+  }
+  warn(message);
+  return true;
+}
+
+if (import.meta.url === pathToFileURL(process.argv[1] ?? "").href) {
+  warnIfNonPnpmLifecycle();
+}