plugin-sdk: keep command-auth status compatibility path light by hxy91819 · Pull Request #63174 · openclaw/openclaw

hxy91819 · 2026-04-08T13:29:43Z

Summary

Problem: plugins that import openclaw/plugin-sdk/command-auth only need auth helpers, but the module also re-exported status/help text builders from src/auto-reply/status.ts. That static re-export dragged in status.ts → context.ts, a heavyweight chain that can trigger loadConfig() at import-time — causing recursive config loading during plugin load.
Why it matters: latest main already stopped the original stack-overflow via Weixin-side lazy loading and core loader/provider reentry guards. But the SDK boundary itself was still too broad: command-auth was wired to modules it has no business depending on.
Why not just remove the old exports (scheme A): these three builders are synchronous functions. In ESM there is no way to keep the same sync signature while lazily loading the implementation (await import() would change them to async — a worse breaking change). The project's own AGENTS.md states "Breaking removals or renames are major-version work, not drive-by cleanup", and src/plugin-sdk/compat.ts already demonstrates the deprecated-compatibility pattern. Since main is already stable, there is no urgency to break third-party plugins.
What changed (scheme E): extract the three sync builders into a new lightweight module (command-status-builders.ts) that does not import status.ts or context.ts. Both command-auth (deprecated compat) and the new command-status subpath now point to this lightweight module. The heavy command-auth → status.ts → context.ts edge is removed.
Outcome: zero breaking change for third-party plugins, the old heavy import edge is gone, and the new command-status boundary is covered by explicit contract tests.

Change Type (select all)

Scope (select all touched areas)

Linked Issue/PR

Closes #
Related #
This PR fixes a bug or regression

Root Cause (if applicable)

Root cause: the plugin-facing auth SDK surface (command-auth) had a static dependency on heavyweight status rendering code (status.ts), which in turn imported context warmup logic (context.ts). This module boundary violation meant that any plugin importing command-auth during loadConfig() could re-enter config loading.
Missing guardrail: command-auth lacked a module-boundary constraint preventing it from depending on status.ts. There was also no contract-level test proving that importing command-auth stays free of config-load side effects under CLI/plugin-load conditions.
Contributing context: the original production-style stack overflow no longer reproduces on latest main because Weixin 2.1.7 lazy-imported the hot path and core added plugin/provider reentry guards. This PR hardens the SDK boundary itself so the fix does not rely solely on those deeper runtime guards.

Regression Test Plan (if applicable)

Coverage level that should have caught this:
- Unit test
- Seam / integration test
- End-to-end test
- Existing coverage already sufficient
Target tests/files:
- src/agents/context.eager-warmup.test.ts
- src/plugin-sdk/command-auth.test.ts
- src/plugins/contracts/plugin-sdk-subpaths.test.ts
Scenarios locked in:
- importing ../plugin-sdk/command-auth.js under CLI-style argv for onboard, pairing approve, and channels login must not trigger loadConfig()
- deprecated sync builder exports on command-auth must still work for compatibility
- the explicit command-status subpath must export the three builders, while command-auth must no longer import ../auto-reply/status.js
Why this is the smallest reliable guardrail:
- it directly exercises the offending import boundary
- it proves the compatibility layer is intentional rather than accidental
- it makes the new command-status boundary visible in public-contract coverage
Existing test that already covers this (if any): none before this change
If no new test is added, why not: N/A

User-visible / Behavior Changes

New Plugin SDK import path: openclaw/plugin-sdk/command-status
command-status is not a new CLI command; it is only a new Plugin SDK subpath for status/help rendering helpers
command-auth still exports the legacy sync builders for compatibility, but those exports are now deprecated
New code should import buildCommandsMessage, buildCommandsMessagePaginated, and buildHelpMessage from openclaw/plugin-sdk/command-status

Diagram (if applicable)

Before:
  command-auth ──┬── auth helpers (lightweight) ✅
                 └── re-export from status.ts (heavyweight) ⚠️
                      └── status.ts → context.ts → loadConfig() → recursive 💥

After (scheme E):
  command-auth ──┬── auth helpers (unchanged) ✅
                 └── @deprecated builders → command-status-builders.ts (lightweight) ✅
                      └── does NOT import status.ts or context.ts

  command-status ────→ command-status-builders.ts (lightweight) ✅

  status.ts and context.ts are no longer on command-auth's import chain.

Security Impact (required)

New permissions/capabilities? (Yes/No) No
Secrets/tokens handling changed? (Yes/No) No
New/changed network calls? (Yes/No) No
Command/tool execution surface changed? (Yes/No) No
Data access scope changed? (Yes/No) No
If any Yes, explain risk + mitigation:

Repro + Verification

Environment

OS: Linux
Runtime/container: Node 22 / pnpm
Model/provider: N/A
Integration/channel (if any): Weixin plugin import path, Telegram in-repo consumer
Relevant config (redacted): isolated temp state dirs plus plugin load paths

Steps

Import ../plugin-sdk/command-auth.js under CLI-style argv for commands that previously hit the bad path.
Verify loadConfig() is not called from that import path.
Verify deprecated command-auth compatibility exports still work synchronously.
Verify the explicit command-status SDK contract is present and command-auth no longer imports status.ts.
Build and run targeted SDK/export checks.
Re-run the archived Weixin 2.1.6 smoke manually outside this PR branch if needed; that repro harness is now kept as case material rather than repo code because latest main no longer reproduces the original outage.

Expected

command-auth import stays lightweight and does not trigger config-load side effects.
Legacy sync builder exports from command-auth still exist for third-party compatibility.
Status/help rendering remains available through the explicit command-status SDK subpath.
Neither latest main nor this branch should emit the original stack-overflow signature with archived Weixin 2.1.6.

Actual

Regression tests pass and the compatibility exports remain available from command-auth without routing through status.ts.
Explicit contract assertions now cover the command-status public surface and the compatibility-layer boundary.
Latest main no longer reproduces the original recursion failure.
This branch also avoids the stack-overflow signature while removing the heavy SDK edge.

Evidence

Attach at least one:

Failing test/log before + passing after
Trace/log snippets
Screenshot/recording
Perf numbers (if relevant)

Concrete evidence used for this PR:

Targeted checks run:
- pnpm test src/agents/context.eager-warmup.test.ts
- pnpm test src/plugin-sdk/command-auth.test.ts
- pnpm plugin-sdk:check-exports
- pnpm build
Contract coverage added in:
- src/plugins/contracts/plugin-sdk-subpaths.test.ts
Manual archived-plugin verification notes are kept in the case materials, not in the repo tree, because that harness is currently investigative-only.

Human Verification (required)

Verified scenarios:
- pnpm test src/agents/context.eager-warmup.test.ts
- pnpm test src/plugin-sdk/command-auth.test.ts
- pnpm plugin-sdk:check-exports
- pnpm build
Edge cases checked in targeted tests:
- openclaw onboard
- openclaw pairing approve feishu BAH8YVB3
- openclaw channels login --channel openclaw-weixin
What was not verified:
- full repo test suite
- third-party plugins outside the known import pattern
- a repo-committed end-to-end repro harness, since that script is intentionally not part of this PR

Review Conversations

I replied to or resolved every bot review conversation I addressed in this PR.
I left unresolved only the conversations that still need reviewer or maintainer judgment.

Compatibility / Migration

Backward compatible? (Yes/No) Yes
Config/env changes? (Yes/No) No
Migration needed? (Yes/No) Yes
Exact upgrade steps:
- existing third-party plugins can keep importing the three sync builders from command-auth with no code changes
- new code should import them from openclaw/plugin-sdk/command-status instead
- the deprecated compatibility exports will only be removed after an explicit deprecation window in a future major version

Additional Notes

this PR intentionally chooses scheme E, a non-breaking deprecation path, instead of the earlier breaking split
command-status is an import-only SDK subpath, not a new user-facing CLI command
if maintainers want a stronger migration signal, we can add release-note or deprecation guidance later

Risks and Mitigations

Risk: third-party plugins may keep using the deprecated command-auth exports indefinitely.
- Mitigation: the compatibility path is now lightweight, so it no longer reintroduces the original heavy import edge; new docs and PR notes point people to command-status.
Risk: reviewers may miss that compatibility was preserved and assume this is still the earlier breaking split.
- Mitigation: the PR body, case docs, reviewer guide, and explicit contract tests all now call out the scheme E design.
Risk: latest main already masks the original outage via loader/runtime guards, so reviewers may question whether this PR still matters.
- Mitigation: this PR explicitly positions itself as SDK boundary hardening that removes an unnecessary heavy import from a plugin-facing surface.

Current Main Status

Latest main appears to have already fixed the immediate outage in two ways:

Plugin side: Weixin 2.1.7 moved monitorWeixinProvider behind a lazy import, so plugin registration no longer eagerly walks monitor -> process-message -> command-auth.
Core side: main added loader/provider runtime reentry guards, including:
- src/plugins/loader.ts: PluginLoadReentryError plus inFlightPluginRegistryLoads
- src/plugins/loader.ts: resolveRuntimePluginRegistry() returns undefined when the same load is already in flight
- src/plugins/provider-runtime.ts: resolveProviderPluginsForHooks() short-circuits to [] when provider plugin load is already in flight
- src/plugins/providers.runtime.ts: isPluginProvidersLoadInFlight() centralizes that check

What main already solved:

the original stack-overflow / recursive plugin-load outage is no longer reproducible in the same way
plugin/provider runtime now fails closed instead of recursing indefinitely in this class of path

What this PR still improves structurally:

openclaw/plugin-sdk/command-auth no longer reaches the old status.ts -> context.ts chain for the status/help builders
the new command-status boundary is explicit and test-covered
compatibility is preserved while the public SDK surface becomes semantically clearer

This PR should therefore be evaluated as boundary cleanup / architecture hardening with compatibility preserved, not as the only remaining live fix for the original outage.

greptile-apps · 2026-04-08T14:10:02Z

Greptile Summary

This PR extracts the three sync status/help builder functions (buildCommandsMessage, buildCommandsMessagePaginated, buildHelpMessage) from status.ts into a new lightweight command-status-builders.ts module, exposes them under a new openclaw/plugin-sdk/command-status SDK subpath, and replaces the old command-auth → status.ts → context.ts import chain with deprecated compatibility shims that point to the lighter module. The extensions/telegram consumer is already migrated to the new subpath. All SDK registration surfaces (package.json, plugin-sdk-entrypoints.json) and contract tests are updated in sync.

Confidence Score: 5/5

Safe to merge — clean boundary refactor with backward-compatible deprecated wrappers and no logic changes.

All remaining findings are P2 or lower. The core fix is correct, the new SDK subpath is properly wired, contract tests lock the boundary in both directions, and the model consumer (Telegram) is already migrated.

No files require special attention.

Vulnerabilities

No security concerns identified. The PR is a module boundary refactor with no changes to auth logic, secret handling, network calls, or access-control decisions.

_{Reviews (3): Last reviewed commit: "tests: document config mock choice for e..." | Re-trigger Greptile}

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 889e58bc0a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

hxy91819 · 2026-04-08T15:07:25Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 889e58bc0a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

hxy91819 · 2026-04-08T15:28:01Z

Addressed the current bot feedback in three ways:

The earlier P1 compatibility comments are now stale relative to the current branch state. command-auth again exports buildCommandsMessage, buildCommandsMessagePaginated, and buildHelpMessage as deprecated compatibility wrappers backed by command-status-builders.ts, and plugin-sdk-subpaths.test.ts now asserts that compatibility contract instead of omission.
I also updated the PR description/case docs so reviewers see this is scheme E with compatibility preserved, not the earlier breaking split.
For the remaining Greptile P2 point on context.eager-warmup.test.ts, I kept the partial-real mock and added a short comment explaining why: context.js and command-auth.js still read other config exports at import time, so a factory-only mock would be unsafe there.

I am resolving the two P1 review threads as outdated by the newer commits. The P2 note is addressed by the test comment in b6d5b7128e.

hxy91819 · 2026-04-08T15:30:51Z

@codex review

hxy91819 · 2026-04-08T15:31:08Z

@greptile-apps review

chatgpt-codex-connector · 2026-04-08T15:35:44Z

Codex Review: Didn't find any major issues. Can't wait for the next one!

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

…91819

…91819)

steipete · 2026-04-09T00:36:00Z

Merged via maintainer rebase. Thanks @hxy91819.

Landed on main: 6e200f4

Maintainer follow-up:

regenerated Plugin SDK API baseline
added CHANGELOG entry

Local gate:

pnpm plugin-sdk:api:check
pnpm plugin-sdk:check-exports
pnpm test src/agents/context.eager-warmup.test.ts src/plugin-sdk/command-auth.test.ts src/plugins/contracts/plugin-sdk-subpaths.test.ts
pnpm check
pnpm build

@hxy91819

* test(docker): quiet success-path e2e logs * style: sort session import * build: mirror bundled plugin runtime deps * plugins: load lightweight provider discovery entries * ci: narrow Windows node test lane * fix: filter provider auth aliases by plugin trust * fix: surface delayed browser navigation blocks * style: format memory and gateway touchups * Delete docs/plans directory Unused artifact * test: avoid remote ollama timeout in api-key preservation coverage * test: keep auth-choice default-model coverage on lightweight provider * test: keep undefined-token auth-choice coverage generic * fix: stabilize character eval and Qwen model routing * test: keep agent command tests off external auth overlays * fix openrouter model picker refs (openclaw#63416) * fix openrouter model picker refs Signed-off-by: sallyom <somalley@redhat.com> * test(ui): cover openrouter slash-id /model resolution --------- Signed-off-by: sallyom <somalley@redhat.com> Co-authored-by: Vignesh Natarajan <vignesh.natarajan92@gmail.com> * ci: stabilize macOS and transcript policy tests * test: keep cli-provider agent command tests off external auth overlays * chore(lint): clear extension lint regressions and add openclaw#63416 changelog * test: update modelstudio catalog contract sentinel * test: update character eval public panel * fix: repair Windows dev-channel updater * test: move copilot models-json injection coverage to plan tests * plugin-sdk: split command status surface * plugin-sdk: keep command status compatibility path light * plugin-sdk: drop investigative weixin repro harness * tests: document config mock choice for eager warmup * fix: update command-status SDK baseline (openclaw#63174) (thanks @hxy91819) * test: cap broad live model sweeps * fix: drop raw gateway chat control replies * test: make shared-token reload deterministic * test: isolate agentic suite smoke tests * test: replace models-config matrix with narrow coverage * test: isolate onboard skills status mock * plugins: add lightweight anthropic vertex discovery * test: isolate model auth module state * test: isolate subagent registry resume imports * plugins: keep google provider policy lightweight * test: keep ollama unreachable discovery on localhost * test: mock auth profile external overlay in oauth tests * auth: avoid plugin setup scans during common auth resolution * fix(logging): break console/logger type cycle * fix(config): stop owner-display barrel cycles * fix(commands): split auth choice apply types * fix(infra): extract exec approvals allowlist types * fix(commands): split doctor prompt option types * chore: prepare 2026.4.9-beta.1 release * chore: refresh config schema version for 2026.4.9-beta.1 * chore: refresh plugin SDK API baseline * test: run local full suite project shards in parallel * wizard: add explicit skip option to plugin setup (openclaw#63436) * Wizard: allow skipping plugin setup * Agents: reset nodes tool test modules * tests: reset discord native-command seams in model picker (openclaw#63267) * ci: tolerate noisy npm pack json output * test: isolate slack thread-ts recovery --------- Signed-off-by: sallyom <somalley@redhat.com> Co-authored-by: Peter Steinberger <steipete@gmail.com> Co-authored-by: Radek Sienkiewicz <mail@velvetshark.com> Co-authored-by: Sally O'Malley <somalley@redhat.com> Co-authored-by: Vignesh Natarajan <vignesh.natarajan92@gmail.com> Co-authored-by: Mason Huang <masonxhuang@tencent.com> Co-authored-by: Vincent Koc <vincentkoc@ieee.org> Co-authored-by: pashpashpash <nik@vault77.ai>

@scoootscooob

* release: mirror bundled channel deps at root (openclaw#63065) Merged via squash. Prepared head SHA: ac26799 Co-authored-by: scoootscooob <167050519+scoootscooob@users.noreply.github.com> Co-authored-by: scoootscooob <167050519+scoootscooob@users.noreply.github.com> Reviewed-by: @scoootscooob * fix(test): keep warn log capture under openclaw temp dir * revert: undo background alive review findings fix * feat: add qa character vibes eval * test: stabilize plugin boundary invariants * test: isolate agent gateway cli command mocks * test: skip duplicate package boundary wrapper in ci * test: fix postpublish verifier sidecar handling * test: keep status tests off live usage probes * auto-reply: type status auth overrides * plugins: read contract inventory from manifests * test: inline cli metadata channel fixture * ci: skip duplicate full extension shard * test: isolate discord directory live token env * test: keep followup runner memory mock complete * ci: split parallel full suite into leaf shards * test: guard loader fixtures against broad sdk imports * test: keep bundled channel entry smokes descriptor-only * ci: reduce full suite test parallelism * test: avoid bundled test api smokes in matrix and telegram * test: keep discord and irc entry smokes descriptor-only * test: keep web provider artifact coverage manifest-only * test: keep provider policy artifact coverage narrow * test: keep web provider artifact test in boundary * test: keep status message tests off auth auto-detection * status: avoid plugin lookup for direct channel model overrides * channels: fast-path direct model override matches * test: restore manifest-only web provider coverage * fix: allow blank TLS manual port default (openclaw#63134) (thanks @Tyler-RNG) * make port optional for TLS manual connections * fix: restrict manual blank-port fallback to tls * fix: allow blank TLS manual port default (openclaw#63134) (thanks @Tyler-RNG) --------- Co-authored-by: Ayaan Zaidi <hi@obviy.us> * test: fix full suite CI test isolation * fix: align LLM idle timeout policy * test: exercise models json file mode without provider discovery * test: keep shared dm policy contract off channel facades * test: keep web provider artifact test in boundary * test: keep kilocode provider tests on plugin-owned helpers * ci: restore sequential full suite tests * test: keep public artifact coverage on cheap boundaries * test: keep openclaw tools registration tests on a fast shell * test: keep bundled metadata sidecar scan inventory-only * docs(inferrs): fix Gemma model id from gg-hf-gg to google (openclaw#62586) * fix: harden bundled plugin dependency release checks * ci: isolate full suite leaf shards * test: keep openclaw tools registration policy pure * fix: support Codex CLI QA auth * feat: add QA character eval reports * docs: document QA character eval workflow * refactor: dedupe media generation tool helpers * refactor: dedupe internal helper glue * refactor: dedupe shared helper branches * refactor: dedupe browser navigation guard tests * refactor: dedupe config and subagent tests * refactor: dedupe test helpers and script warning filter * refactor: dedupe plugin test harnesses * refactor: dedupe media runtime test mocks * refactor: dedupe plugin metadata test helpers * refactor: dedupe firecrawl and directive helpers * refactor: dedupe exec defaults tests * refactor: dedupe approval runtime tests * refactor: dedupe matrix exec approval tests * refactor: dedupe telegram exec approval tests * refactor: dedupe doctor codex oauth tests * refactor: dedupe agent command test fixtures * refactor: dedupe embedding provider test fixtures * refactor: share html entity tool call decoding * fix: keep minimax provider mocks package-local * test: keep pdf and update-plan registration tests pure * test: keep model reasoning override coverage on merge helpers * fix: default OpenAI reasoning effort to high * test: keep kimi implicit provider tests on provider catalog * fix(build): prune stale bundled plugin node_modules * fix(build): address bundled plugin prune review * fix(build): honor postinstall disable flag * test: keep chutes implicit provider tests on provider catalog * fix(plugin-sdk): export channel plugin base * docs: reorder changelog entries * test: keep bundled web-search owner checks on public artifacts * fix(build): keep tsdown prune best-effort * test: trust gateway exec fixture node path * fix: keep runtime task test harness behind task seams * test: explain gateway exec fixture trust * Reply: surface OAuth reauth failures (openclaw#63217) Merged via squash. Prepared head SHA: 68b7ffd Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Reviewed-by: @mbelinky * test: make character eval scenario natural * feat: add character eval model options * test: keep pi fs workspace tests on fs tool factories * test: keep media runtime tests on same-directory provider mocks * fix(android): auto-resume pairing approval * fix(android): prefer bootstrap auth on qr pairing * fix(android): reset auth on new setup codes * fix(android): tighten pairing retry behavior * fix(android): prefer stored device auth after pairing * fix: restore android qr pairing flow (openclaw#63199) * fix(auto-reply): strip leading NO_REPLY tokens to prevent silent-reply leak (openclaw#63068) * fix(auto-reply): strip leading NO_REPLY tokens to prevent silent-reply leak * fix(auto-reply): preserve substantive NO_REPLY leading text * fix(agents): preserve ACP silent-prefix cumulative deltas * fix(auto-reply): harden silent-token streaming paths * fix(auto-reply): normalize glued silent tokens consistently --------- Co-authored-by: termtek <termtek@ubuntu.tail2b72cd.ts.net> * fix(gateway): clear auto-fallback model override on session reset (openclaw#63155) * fix(gateway): clear auto-fallback model override on session reset When `persistFallbackCandidateSelection()` writes a fallback provider override with `authProfileOverrideSource: "auto"`, the override was incorrectly preserved across `/reset` and `/new` commands. This caused sessions to keep using the fallback provider even after the user changed the agent config primary provider, because the session store override takes precedence over the config default. Now the override fields (`providerOverride`, `modelOverride`, `authProfileOverride`, `authProfileOverrideSource`, `authProfileOverrideCompactionCount`) are only carried forward when `authProfileOverrideSource === "user"` (i.e. explicit `/model` command). System-driven overrides are dropped on reset so the session picks up the current config default. Introduced in cb0a752 ("fix: preserve reset session behavior config") * fix(gateway): preserve explicit reset model selection * fix(gateway): track reset model override source * fix(gateway): preserve legacy reset model overrides * docs(changelog): add session reset merge note --------- Co-authored-by: termtek <termtek@ubuntu.tail2b72cd.ts.net> * test: stabilize ci test isolation * test: isolate volcengine byteplus auth resolver imports * fix: patch hono security advisories * fix: pass system prompt to codex cli * fix(plugins): prevent untrusted workspace plugins from hijacking bundled provider auth choices [AI] (openclaw#62368) * fix: address issue * fix: address review feedback * docs(changelog): add onboarding auth-choice guard entry * fix: address PR review feedback * fix: address PR review feedback * fix: address PR review feedback * fix: address PR review feedback * fix: address PR review feedback * fix: address PR review feedback * fix: address PR review feedback * fix: address PR review feedback --------- Co-authored-by: Devin Robison <drobison@nvidia.com> * test: isolate provider runtime test mocks * feat(plugins): support provider auth aliases * feat(memory): add grounded REM backfill lane (openclaw#63273) Merged via squash. Prepared head SHA: 4450f25 Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Reviewed-by: @mbelinky * feat(memory): harden grounded REM extraction (openclaw#63297) Merged via squash. Prepared head SHA: e188b7e Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Reviewed-by: @mbelinky * feat(ui): add dreaming diary controls and navigation (openclaw#63298) Merged via squash. Prepared head SHA: 0a2ae66 Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Reviewed-by: @mbelinky * chore(ui): refresh zh-TW control ui locale * chore(ui): refresh zh-CN control ui locale * chore(ui): refresh pt-BR control ui locale * chore(ui): refresh de control ui locale * chore(ui): refresh es control ui locale * chore(ui): refresh ko control ui locale * chore(ui): refresh ja-JP control ui locale * chore(ui): refresh fr control ui locale * docs(matrix): tighten setup and config guidance * chore(ui): refresh tr control ui locale * chore(ui): refresh uk control ui locale * chore(ui): refresh pl control ui locale * chore(ui): refresh id control ui locale * test: stabilize full-suite execution * fix(matrix): contain sync outage failures (openclaw#62779) Merged via squash. Prepared head SHA: 901bb76 Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com> Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com> Reviewed-by: @gumadeiras * Align remote node exec event system messages with untrusted handling (openclaw#62659) * fix(nodes): downgrade remote exec system events * docs(changelog): add remote node exec event entry --------- Co-authored-by: Devin Robison <drobison@nvidia.com> * test: reuse image generate tool imports * test: reuse followup runner imports * docs(config): tighten wording in reference * test: harden provider mock isolation * fix(memory): accept embedded dreaming heartbeat tokens * test: harden Parallels macOS smoke fallback * build: narrow plugin SDK declaration build * fix(dotenv): block workspace runtime env vars (openclaw#62660) * fix(dotenv): block workspace runtime env vars Co-authored-by: zsx <git@zsxsoft.com> * docs(changelog): add workspace dotenv runtime-control entry * fix(dotenv): block workspace gateway port override --------- Co-authored-by: zsx <git@zsxsoft.com> Co-authored-by: Devin Robison <drobison@nvidia.com> * build: stage nostr runtime dependencies * fix: load QA live provider overrides * feat: parallelize character eval runs * auth: avoid external cli sync on profile upsert * test(doctor): mock memory-core runtime seam * auth: persist explicit profile upserts directly * Matrix: report startup failures as errors * fix(browser): harden browser control override loading (openclaw#62663) * fix(browser): harden browser control overrides * fix(lint): prepare boundary artifacts for extension oxlint * docs(changelog): add browser override hardening entry * fix(lint): avoid duplicate boundary prep --------- Co-authored-by: Devin Robison <drobison@nvidia.com> Co-authored-by: Devin Robison <drobison00@users.noreply.github.com> * test: reuse exec directive reply imports * test: reuse verbose directive reply imports * fix(browser): re-check interaction-driven navigations (openclaw#63226) * fix(browser): guard interaction-driven navigations * fix(browser): avoid rechecking unchanged interaction urls * fix(browser): guard delayed interaction navigations * fix(browser): guard interaction-driven navigations for full action duration * fix(browser): avoid waiting on interaction grace timer * fix(browser): ignore same-document hash-only URL changes in navigation guard * fix(browser): dedupe interaction nav guards * fix(browser): guard same-URL reloads in interaction navigation listeners * docs(changelog): add interaction navigation guard entry * fix(browser): drop duplicate ssrfPolicy props * fix(browser): tighten interaction navigation guards --------- Co-authored-by: Devin Robison <drobison@nvidia.com> * test: move directive state coverage to pure tests * fix: enable thinking support for the ollama api (openclaw#62712) Merged via squash. Prepared head SHA: c0b9950 Co-authored-by: hoyyeva <63033505+hoyyeva@users.noreply.github.com> Co-authored-by: BruceMacD <5853428+BruceMacD@users.noreply.github.com> Reviewed-by: @BruceMacD * Slack: treat ACP block text as visible output (openclaw#62858) Merged via squash. Prepared head SHA: 14f202e Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com> Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com> Reviewed-by: @gumadeiras * fix: fail fast on qa live auth errors * fix: fail fast across qa scenario wait paths * test: cover qa scenario wait failure replies * fix: sanitize qa missing-key replies * test: cover sanitized qa missing-key replies * fix: align qa wait cursor semantics * test: cover mixed-traffic qa wait cursors * fix: classify curated qa missing-key replies * test: cover curated qa missing-key reply classification * fix: harden qa missing-key provider messages * test: cover unsafe qa missing-key providers * docs(changelog): add qa auth fail-fast entry (openclaw#63333) (thanks @shakkernerd) * fix(matrix/doctor): migrate legacy channels.matrix.dm.policy 'trusted' (fixes openclaw#62931) (openclaw#62942) Merged via squash. Prepared head SHA: d9f553b Co-authored-by: lukeboyett <46942646+lukeboyett@users.noreply.github.com> Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com> Reviewed-by: @gumadeiras * Memory/dreaming: feed grounded backfill into short-term promotion (openclaw#63370) Merged via squash. Prepared head SHA: 5dfe246 Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Reviewed-by: @mbelinky * docs: update unreleased changelog * fix(gateway): classify dream diary actions * fix(memory): align dreaming status payloads * Memory/dreaming: harden grounded backfill follow-ups * test: reuse inline directive reply imports * Docs/memory: explain grounded backfill flows * fix(deps): patch basic-ftp advisory * test: move inline directive collisions to pure tests * Slack: dedupe partial streaming replies (openclaw#62859) Merged via squash. Prepared head SHA: cbecb50 Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com> Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com> Reviewed-by: @gumadeiras * test: replace exec directive e2e with pure coverage * fix(plugins): keep test helpers out of contract barrels (openclaw#63311) Merged via squash. Prepared head SHA: 769e90c Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com> Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com> Reviewed-by: @altaywtf * test: move cron heartbeat delivery coverage below full turns * fix: inter-session messages must not overwrite established external lastRoute (openclaw#58013) Merged via squash. Prepared head SHA: 820ea20 Co-authored-by: duqaXxX <12242811+duqaXxX@users.noreply.github.com> Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com> Reviewed-by: @jalehman * fix(gateway): suppress announce/reply skip chat leakage (openclaw#51739) Merged via squash. Prepared head SHA: 2f53f3b Co-authored-by: Pinghuachiu <9033138+Pinghuachiu@users.noreply.github.com> Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com> Reviewed-by: @jalehman * Slack: key turn-local dedupe by dispatch kind Scope Slack turn-local delivery dedupe by reply dispatch kind so identical tool and final payloads on the same thread do not collapse into one send. Expose the existing dispatcher kind on the public reply-runtime seam and cover the Slack tracker and preview-fallback paths with regression tests. * Dreaming: surface grounded scene lane (openclaw#63395) Merged via squash. Prepared head SHA: 0c7f586 Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Reviewed-by: @mbelinky * test: avoid runtime auth overlays in failure-state coverage * fix(ci): align ollama thinking expectations * chore(ui): refresh zh-CN control ui locale * chore(ui): refresh pt-BR control ui locale * chore(ui): refresh zh-TW control ui locale * chore(ui): refresh de control ui locale * test(docker): reduce e2e log noise * chore(ui): refresh es control ui locale * chore(ui): refresh fr control ui locale * chore(ui): refresh ja-JP control ui locale * chore(ui): refresh ko control ui locale * chore(ui): refresh uk control ui locale * chore(ui): refresh id control ui locale * chore(ui): refresh pl control ui locale * chore(ui): refresh tr control ui locale * fix: restore main ci * fix(ci): drop silent history before truncation * docs: reorder unreleased changelog * test(docker): quiet success-path e2e logs * style: sort session import * build: mirror bundled plugin runtime deps * plugins: load lightweight provider discovery entries * ci: narrow Windows node test lane * fix: filter provider auth aliases by plugin trust * fix: surface delayed browser navigation blocks * style: format memory and gateway touchups * Delete docs/plans directory Unused artifact * test: avoid remote ollama timeout in api-key preservation coverage * test: keep auth-choice default-model coverage on lightweight provider * test: keep undefined-token auth-choice coverage generic * fix: stabilize character eval and Qwen model routing * test: keep agent command tests off external auth overlays * fix openrouter model picker refs (openclaw#63416) * fix openrouter model picker refs Signed-off-by: sallyom <somalley@redhat.com> * test(ui): cover openrouter slash-id /model resolution --------- Signed-off-by: sallyom <somalley@redhat.com> Co-authored-by: Vignesh Natarajan <vignesh.natarajan92@gmail.com> * ci: stabilize macOS and transcript policy tests * test: keep cli-provider agent command tests off external auth overlays * chore(lint): clear extension lint regressions and add openclaw#63416 changelog * test: update modelstudio catalog contract sentinel * test: update character eval public panel * fix: repair Windows dev-channel updater * test: move copilot models-json injection coverage to plan tests * plugin-sdk: split command status surface * plugin-sdk: keep command status compatibility path light * plugin-sdk: drop investigative weixin repro harness * tests: document config mock choice for eager warmup * fix: update command-status SDK baseline (openclaw#63174) (thanks @hxy91819) * test: cap broad live model sweeps * fix: drop raw gateway chat control replies * test: make shared-token reload deterministic * test: isolate agentic suite smoke tests * test: replace models-config matrix with narrow coverage * test: isolate onboard skills status mock * plugins: add lightweight anthropic vertex discovery * test: isolate model auth module state * test: isolate subagent registry resume imports * plugins: keep google provider policy lightweight * test: keep ollama unreachable discovery on localhost * test: mock auth profile external overlay in oauth tests * auth: avoid plugin setup scans during common auth resolution * fix(logging): break console/logger type cycle * fix(config): stop owner-display barrel cycles * fix(commands): split auth choice apply types * fix(infra): extract exec approvals allowlist types * fix(commands): split doctor prompt option types * chore: prepare 2026.4.9-beta.1 release * chore: refresh config schema version for 2026.4.9-beta.1 * chore: refresh plugin SDK API baseline * test: run local full suite project shards in parallel * wizard: add explicit skip option to plugin setup (openclaw#63436) * Wizard: allow skipping plugin setup * Agents: reset nodes tool test modules * tests: reset discord native-command seams in model picker (openclaw#63267) * ci: tolerate noisy npm pack json output * test: isolate slack thread-ts recovery * fix(msteams): isolate channel thread sessions by replyToId (openclaw#58615) (openclaw#62713) * fix(msteams): isolate thread sessions by replyToId (openclaw#58615) * fix(msteams): align thread ID extraction + fix test types * fix(msteams): route thread replies to correct thread via replyToId (openclaw#58030) (openclaw#62715) * fix(msteams): pin reply target at inbound time to prevent DM/channel leak (openclaw#54520) (openclaw#62716) * test: keep local full suite serial by default * chore: prepare 2026.4.9 stable release * Agents: guard legacy pi transport override * Agents: restore upstream pi runner sources --------- Signed-off-by: sallyom <somalley@redhat.com> Co-authored-by: scoootscooob <zhentongfan@gmail.com> Co-authored-by: scoootscooob <167050519+scoootscooob@users.noreply.github.com> Co-authored-by: Peter Steinberger <steipete@gmail.com> Co-authored-by: Nimrod Gutman <nimrod.gutman@gmail.com> Co-authored-by: Tyler Warburton <Ethan.gold-Steinberg@protonmail.com> Co-authored-by: Ayaan Zaidi <hi@obviy.us> Co-authored-by: Eric Curtin <eric.curtin@docker.com> Co-authored-by: Mariano <mbelinky@gmail.com> Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com> Co-authored-by: Frank Yang <frank.ekn@gmail.com> Co-authored-by: termtek <termtek@ubuntu.tail2b72cd.ts.net> Co-authored-by: Pavan Kumar Gondhi <pgondhi@nvidia.com> Co-authored-by: Devin Robison <drobison@nvidia.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Gustavo Madeira Santana <gumadeiras@gmail.com> Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com> Co-authored-by: Agustin Rivera <31522568+eleqtrizit@users.noreply.github.com> Co-authored-by: zsx <git@zsxsoft.com> Co-authored-by: Devin Robison <drobison00@users.noreply.github.com> Co-authored-by: Eva H <63033505+hoyyeva@users.noreply.github.com> Co-authored-by: BruceMacD <5853428+BruceMacD@users.noreply.github.com> Co-authored-by: Shakker <shakkerdroid@gmail.com> Co-authored-by: lukeboyett <46942646+lukeboyett@users.noreply.github.com> Co-authored-by: Altay <altay@uinaf.dev> Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com> Co-authored-by: Accunza <12242811+duqaXxX@users.noreply.github.com> Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com> Co-authored-by: Pinghuachiu <9033138+Pinghuachiu@users.noreply.github.com> Co-authored-by: Radek Sienkiewicz <mail@velvetshark.com> Co-authored-by: Sally O'Malley <somalley@redhat.com> Co-authored-by: Vignesh Natarajan <vignesh.natarajan92@gmail.com> Co-authored-by: Mason Huang <masonxhuang@tencent.com> Co-authored-by: Vincent Koc <vincentkoc@ieee.org> Co-authored-by: pashpashpash <nik@vault77.ai> Co-authored-by: sudie-codes <suvenkat95@gmail.com>

…91819

…91819)

…91819

…91819)

…91819

…91819)

openclaw-barnacle Bot added docs Improvements or additions to documentation channel: telegram Channel integration: telegram scripts Repository scripts agents Agent runtime and tooling size: S maintainer Maintainer-authored PR labels Apr 8, 2026

hxy91819 marked this pull request as ready for review April 8, 2026 14:06

chatgpt-codex-connector Bot reviewed Apr 8, 2026

View reviewed changes

Comment thread src/plugin-sdk/command-auth.ts

greptile-apps Bot reviewed Apr 8, 2026

View reviewed changes

Comment thread src/agents/context.eager-warmup.test.ts

hxy91819 marked this pull request as draft April 8, 2026 14:23

hxy91819 marked this pull request as ready for review April 8, 2026 15:05

chatgpt-codex-connector Bot reviewed Apr 8, 2026

View reviewed changes

Comment thread src/plugin-sdk/command-auth.ts

openclaw-barnacle Bot added size: L and removed size: S labels Apr 8, 2026

hxy91819 changed the title ~~plugin-sdk: split command status surface~~ plugin-sdk: keep command-auth status compatibility path light Apr 8, 2026

hxy91819 and others added 5 commits April 9, 2026 01:29

plugin-sdk: split command status surface

1ff4477

plugin-sdk: keep command status compatibility path light

bc06ff4

plugin-sdk: drop investigative weixin repro harness

78540e4

tests: document config mock choice for eager warmup

96b834d

fix: update command-status SDK baseline (openclaw#63174) (thanks @hxy…

ab4d12b

…91819)

steipete force-pushed the fix-onboard-plugin-recursion branch from b6d5b71 to ab4d12b Compare April 9, 2026 00:34

steipete merged commit 6e200f4 into openclaw:main Apr 9, 2026
25 checks passed

github-actions Bot mentioned this pull request Apr 9, 2026

📡 Upstream Digest — 2026-04-09 01:25 UTC curtismercier/openclaw-mods#515

Open

zhonghe0615 pushed a commit to zhonghe0615/openclaw that referenced this pull request Apr 27, 2026

fix: update command-status SDK baseline (openclaw#63174) (thanks @hxy…

62c92f3

…91819)

lovewanwan pushed a commit to lovewanwan/openclaw that referenced this pull request Apr 28, 2026

fix: update command-status SDK baseline (openclaw#63174) (thanks @hxy…

66a6180

…91819)

ogt-redknie pushed a commit to ogt-redknie/OPENX that referenced this pull request May 2, 2026

fix: update command-status SDK baseline (openclaw#63174) (thanks @hxy…

031d010

…91819)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

plugin-sdk: keep command-auth status compatibility path light#63174

plugin-sdk: keep command-auth status compatibility path light#63174
steipete merged 5 commits intoopenclaw:mainfrom
hxy91819:fix-onboard-plugin-recursion

hxy91819 commented Apr 8, 2026 •

edited

Loading

Uh oh!

greptile-apps Bot commented Apr 8, 2026 •

edited

Loading

Vulnerabilities

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

Uh oh!

Uh oh!

hxy91819 commented Apr 8, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

Uh oh!

hxy91819 commented Apr 8, 2026

Uh oh!

hxy91819 commented Apr 8, 2026

Uh oh!

hxy91819 commented Apr 8, 2026

Uh oh!

chatgpt-codex-connector Bot commented Apr 8, 2026

Uh oh!

Uh oh!

steipete commented Apr 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

hxy91819 commented Apr 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Change Type (select all)

Scope (select all touched areas)

Linked Issue/PR

Root Cause (if applicable)

Regression Test Plan (if applicable)

User-visible / Behavior Changes

Diagram (if applicable)

Security Impact (required)

Repro + Verification

Environment

Steps

Expected

Actual

Evidence

Human Verification (required)

Review Conversations

Compatibility / Migration

Additional Notes

Risks and Mitigations

Current Main Status

Uh oh!

greptile-apps Bot commented Apr 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Greptile Summary

Confidence Score: 5/5

Vulnerabilities

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

hxy91819 commented Apr 8, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

hxy91819 commented Apr 8, 2026

Uh oh!

hxy91819 commented Apr 8, 2026

Uh oh!

hxy91819 commented Apr 8, 2026

Uh oh!

chatgpt-codex-connector Bot commented Apr 8, 2026

Uh oh!

Uh oh!

steipete commented Apr 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

hxy91819 commented Apr 8, 2026 •

edited

Loading

greptile-apps Bot commented Apr 8, 2026 •

edited

Loading