fix(cli): route logs to stderr in --json mode to keep stdout clean

src/cli/program/preaction.test.ts

@@ -5,6 +5,7 @@ const setVerboseMock = vi.fn();
 const emitCliBannerMock = vi.fn();
 const ensureConfigReadyMock = vi.fn(async () => {});
 const ensurePluginRegistryLoadedMock = vi.fn();
+const routeLogsToStderrMock = vi.fn();
 
 const runtimeMock = {
   log: vi.fn(),
@@ -24,6 +25,10 @@ vi.mock("../banner.js", () => ({
   emitCliBanner: emitCliBannerMock,
 }));
 
+vi.mock("../../logging/console.js", () => ({
+  routeLogsToStderr: routeLogsToStderrMock,
+}));
+
 vi.mock("../cli-name.js", () => ({
   resolveCliName: () => "openclaw",
 }));
@@ -270,6 +275,35 @@ describe("registerPreActionHooks", () => {
     });
   });
 
+  it("routes logs to stderr in --json mode so stdout stays clean", async () => {
+    await runPreAction({
+      parseArgv: ["agents"],
+      processArgv: ["node", "openclaw", "agents", "--json"],
+    });
+
+    expect(routeLogsToStderrMock).toHaveBeenCalledOnce();
+
+    vi.clearAllMocks();
+
+    // config set --json is parse-only (not JSON output mode), should not route
+    await runPreAction({
+      parseArgv: ["config", "set", "gateway.auth.mode", "local", "--json"],
+      processArgv: ["node", "openclaw", "config", "set", "gateway.auth.mode", "local", "--json"],
+    });
+
+    expect(routeLogsToStderrMock).not.toHaveBeenCalled();
+
+    vi.clearAllMocks();
+
+    // non-json command should not route
+    await runPreAction({
+      parseArgv: ["agents"],
+      processArgv: ["node", "openclaw", "agents"],
+    });
+
+    expect(routeLogsToStderrMock).not.toHaveBeenCalled();
+  });
+
   it("bypasses config guard for config validate", async () => {
     await runPreAction({
       parseArgv: ["config", "validate"],