[codex] add Crestodian plugin management by steipete · Pull Request #75869 · openclaw/openclaw

steipete · 2026-05-02T00:31:24Z

Summary

add openclaw plugins search for ClawHub code-plugin and bundle-plugin discovery
wire Crestodian plugin list/search/install/uninstall commands with approval and audit coverage for install/uninstall
document the new CLI and Crestodian flows, including remote rescue limits for plugin install

Validation

pnpm test src/crestodian/operations.test.ts src/crestodian/rescue-message.test.ts src/cli/plugins-search-command.test.ts src/cli/plugins-cli.list.test.ts src/cli/plugins-cli.uninstall.test.ts
pnpm test src/cli/plugins-search-command.test.ts
pnpm testbox:run --id tbx_01kqk0vtjz724y991gp49a51bs -- "OPENCLAW_TESTBOX=1 pnpm check:changed"
git diff --check

clawsweeper · 2026-05-02T00:32:54Z

Codex review: passed.

Summary
The branch adds ClawHub plugin search and Crestodian plugin list/search/install/uninstall flows, with docs, changelog, tests, runtime injection, and regenerated config baseline hashes.

Reproducibility: not applicable. as a bug reproduction request. The high-confidence verification path is current-main surface search plus exact-head diff/source inspection against the PR's targeted tests and queued CI checks.

Next step before merge
No repair job is needed; this automerge-opted PR has no narrow blocker from this review, so required checks and exact-head gating are the right next action.

Security
Cleared: No concrete security or supply-chain regression was found; the executable-code install path remains approval-gated and blocked from message-channel rescue.

Review details

Best possible solution:

Let the exact-head automerge path land this PR once required checks pass, while keeping the separate Gateway RPC plugin-management work in #75186 independent.

Do we have a high-confidence way to reproduce the issue?

Not applicable as a bug reproduction request. The high-confidence verification path is current-main surface search plus exact-head diff/source inspection against the PR's targeted tests and queued CI checks.

Is this the best way to solve the issue?

Yes. The PR reuses existing ClawHub, plugin install, and uninstall primitives, adds runtime injection for Crestodian capture, and keeps message-channel plugin install blocked by default.

What I checked:

Current main lacks the new surface: A source/docs search on main found no plugins search, plugin-search, runPluginsSearchCommand, plugin-list, or remote-rescue plugin-install refusal text for the requested behavior. (4efce5957130)
PR adds ClawHub plugin package search: The new command searches only installable code-plugin and bundle-plugin ClawHub families, clamps result limits, supports JSON, and prints install hints. (src/cli/plugins-search-command.ts:16, c29cda60050b)
PR wires the CLI surface: openclaw plugins search is registered under the plugins CLI, and uninstall is extracted to a reusable command wrapper rather than forking behavior. (src/cli/plugins-cli.ts:75, c29cda60050b)
PR wires Crestodian operations: Crestodian now parses plugin list/search/install/uninstall, runs list/search as read-only operations, and gates install/uninstall behind approval with audit entries after config mutation. (src/crestodian/operations.ts:39, c29cda60050b)
Remote rescue install boundary is explicit: Message-channel Crestodian rescue refuses plugin install because it downloads executable code, while other persistent operations still go through the pending approval path. (src/crestodian/rescue-message.ts:130, c29cda60050b)
Exact-head CI status checked: GitHub reported 69 successful check runs, 9 skipped, 1 neutral, 1 cancelled dispatch, and 5 still in progress for exact head c29cda60050b at review time. (c29cda60050b)

Likely related people:

steipete: GitHub history verifies feat: add Crestodian setup helper, and current-main blame/log for the central Crestodian and plugin CLI files routes through Peter Steinberger's recent maintainer work. (role: current maintainer and Crestodian/plugin CLI adjacent owner; confidence: high; commits: 2011de69d3dc, 23178d933fa5, 4d00c470724e; files: src/crestodian/operations.ts, src/crestodian/rescue-message.ts, src/cli/plugins-cli.ts)
vincentkoc: Recent merged plugin SDK, ClawHub, and plugin install work is adjacent to the ClawHub package search and installer path reused here. (role: recent ClawHub/plugin install maintainer; confidence: medium; commits: c9103c2e47dc, 20e8769d9326, 0aa8022e887f; files: src/infra/clawhub.ts, src/plugins/clawhub.ts, src/cli/plugins-install-command.ts)
wbxl2000: The uninstall planner path reused by this PR includes prior channel-config cleanup work authored as qer and merged in the plugin uninstall area. (role: plugin uninstall behavior contributor; confidence: medium; commits: 8c079a804ca4; files: src/plugins/uninstall.ts, src/cli/plugins-uninstall-command.ts)

Remaining risk / open question:

Exact-head checks were still in progress at review time, so automerge should wait for the required checks on c29cda60050b to finish green.

Codex review notes: model gpt-5.5, reasoning high; reviewed against 4efce5957130.

steipete · 2026-05-02T00:34:26Z

@clawsweeper automerge

clawsweeper · 2026-05-02T00:35:30Z

🦞🦞
ClawSweeper merged this PR after the passing review.

Source: clawsweeper[bot]
Feedback: structured ClawSweeper verdict: pass (sha=c29cda60050b09bf12b0c9eb97d5261935215d8f)
Merge status: merged by ClawSweeper automerge
Merged at: 2026-05-02T03:12:39Z
Merge commit: eee3aeae00fd

What merged:

The branch adds ClawHub plugin search and Crestodian plugin list/search/install/uninstall flows, with docs, changelog, tests, runtime injection, and regenerated config baseline hashes.
Reproducibility: not applicable. as a bug reproduction request. The high-confidence verification path is cur ... surface search plus exact-head diff/source inspection against the PR's targeted tests and queued CI checks.

Fixups included:

Included follow-up commit: Repair Crestodian plugin management config schema drift

The automerge loop is complete.

Automerge progress:

2026-05-02 00:41:30 UTC review passed `e6ed27e89a00` (structured ClawSweeper verdict: pass (sha=e6ed27e89a00a00eb826feb40127921357d31...)
2026-05-02 00:41:37 UTC repair queued `e6ed27e89a00` (autonomous) Run: https://github.com/openclaw/clawsweeper/actions/runs/25239354010
2026-05-02 00:54:20 UTC repair completed `989191c5e87b` (branch updated) in 10m 24s Run: https://github.com/openclaw/clawsweeper/actions/runs/25239354010
2026-05-02 01:03:33 UTC review queued `989191c5e87b` (queued)
2026-05-02 01:07:53 UTC review passed `989191c5e87b` (structured ClawSweeper verdict: pass (sha=989191c5e87be36ddf38812a424fcb2b6cc79...)
2026-05-02 02:04:01 UTC repair completed (no branch change) in 11m 43s Run: https://github.com/openclaw/clawsweeper/actions/runs/25240801347 validation command failed (pnpm check:changed): [check:changed] lanes=core, coreTests, docs [check:changed] src/cli/plugins-cli-test-helpers.ts: core productio...
2026-05-02 02:41:55 UTC repair completed (no branch change) in 1m 29s Run: https://github.com/openclaw/clawsweeper/actions/runs/25241734467 rebase produced additional conflicts: docs/.generated/config-baseline.sha256
2026-05-02 02:51:37 UTC repair completed [`cd6fae5f1f4d`](https://github.com/openclaw/openclaw/commit/cd6fae5f1f4df31345e6dd4f628787fb9f528004) (deterministic rebase) in 1m 32s Run: https://github.com/openclaw/clawsweeper/actions/runs/25241914994 mechanically resolved deterministic rebase
2026-05-02 02:51:37 UTC review queued [`cd6fae5f1f4d`](https://github.com/openclaw/openclaw/commit/cd6fae5f1f4df31345e6dd4f628787fb9f528004) (after repair)
2026-05-02 02:55:13 UTC review passed [`cd6fae5f1f4d`](https://github.com/openclaw/openclaw/commit/cd6fae5f1f4df31345e6dd4f628787fb9f528004) (structured ClawSweeper verdict: pass (sha=cd6fae5f1f4df31345e6dd4f628787fb9f528...)
2026-05-02 02:55:20 UTC repair queued [`cd6fae5f1f4d`](https://github.com/openclaw/openclaw/commit/cd6fae5f1f4df31345e6dd4f628787fb9f528004) (autonomous) Run: https://github.com/openclaw/clawsweeper/actions/runs/25242055815
2026-05-02 02:59:59 UTC repair completed [`c29cda60050b`](https://github.com/openclaw/openclaw/commit/c29cda60050b09bf12b0c9eb97d5261935215d8f) (deterministic rebase) in 1m 34s Run: https://github.com/openclaw/clawsweeper/actions/runs/25242057382 mechanically resolved deterministic rebase
2026-05-02 02:59:59 UTC review queued [`c29cda60050b`](https://github.com/openclaw/openclaw/commit/c29cda60050b09bf12b0c9eb97d5261935215d8f) (after repair)
2026-05-02 03:03:18 UTC review passed [`c29cda60050b`](https://github.com/openclaw/openclaw/commit/c29cda60050b09bf12b0c9eb97d5261935215d8f) (structured ClawSweeper verdict: pass (sha=c29cda60050b09bf12b0c9eb97d5261935215...)
2026-05-02 03:05:35 UTC repair queued [`c29cda60050b`](https://github.com/openclaw/openclaw/commit/c29cda60050b09bf12b0c9eb97d5261935215d8f) (autonomous) Run: https://github.com/openclaw/clawsweeper/actions/runs/25242255316
2026-05-02 03:12:41 UTC merged [`c29cda60050b`](https://github.com/openclaw/openclaw/commit/c29cda60050b09bf12b0c9eb97d5261935215d8f) (merged by ClawSweeper automerge)

steipete · 2026-05-02T01:28:55Z

@clawsweeper rebase

clawsweeper · 2026-05-02T01:30:00Z

🦞🦞
ClawSweeper picked this up.

Command: rebase
Action: repair worker queued. Run: https://github.com/openclaw/clawsweeper/actions/runs/25241914994
Model: gpt-5.5

I will keep the change narrow and update the PR branch if the repair worker finds a safe fix.

steipete · 2026-05-02T01:49:05Z

@clawsweeper rebase

steipete · 2026-05-02T02:37:13Z

@clawsweeper rebase

steipete · 2026-05-02T02:46:48Z

@clawsweeper rebase

clawsweeper · 2026-05-02T02:52:17Z

🦞🦞
ClawSweeper picked this up.

Command: rebase
Action: repair worker queued. Run: https://github.com/openclaw/clawsweeper/actions/runs/25242057382
Model: gpt-5.5

I will keep the change narrow and update the PR branch if the repair worker finds a safe fix.

steipete · 2026-05-02T02:56:41Z

@clawsweeper fix ci

clawsweeper · 2026-05-02T02:57:35Z

🦞🦞
ClawSweeper picked this up.

Command: fix ci
Action: repair worker queued. Run: https://github.com/openclaw/clawsweeper/actions/runs/25242096328
Model: gpt-5.5

I will keep the change narrow and update the PR branch if the repair worker finds a safe fix.

clawsweeper · 2026-05-02T03:05:38Z

🦞🦞
ClawSweeper did not dispatch a repair worker for this one.

Reason: repair commands require an open issue or PR.

Supported re-review commands work on open issues and PRs: /review, /clawsweeper re-review, or @clawsweeper re-review.
Supported repair commands work on existing ClawSweeper PRs and PRs opted into clawsweeper:autofix or clawsweeper:automerge: /clawsweeper fix ci, /clawsweeper address review, /clawsweeper rebase.
A maintainer can opt a PR in with /clawsweeper autofix or /clawsweeper automerge and I can take another pass.
A maintainer can close unsupported or declined work with /autoclose <reason>.

Summary: - The branch adds ClawHub plugin search and Crestodian plugin list/search/install/uninstall flows, with docs, changelog, tests, runtime injection, and regenerated config baseline hashes. - Reproducibility: not applicable. as a bug reproduction request. The high-confidence verification path is cur ... surface search plus exact-head diff/source inspection against the PR's targeted tests and queued CI checks. ClawSweeper fixups: - Included follow-up commit: Repair Crestodian plugin management config schema drift Validation: - ClawSweeper review passed for head c29cda6. - Required merge gates passed before the squash merge. Prepared head SHA: c29cda6 Review: openclaw#75869 (comment) Co-authored-by: Peter Steinberger <steipete@gmail.com> Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>

Summary: - The branch adds ClawHub plugin search and Crestodian plugin list/search/install/uninstall flows, with docs, changelog, tests, runtime injection, and regenerated config baseline hashes. - Reproducibility: not applicable. as a bug reproduction request. The high-confidence verification path is cur ... surface search plus exact-head diff/source inspection against the PR's targeted tests and queued CI checks. ClawSweeper fixups: - Included follow-up commit: Repair Crestodian plugin management config schema drift Validation: - ClawSweeper review passed for head c29cda60050b09bf12b0c9eb97d5261935215d8f. - Required merge gates passed before the squash merge. Prepared head SHA: c29cda60050b09bf12b0c9eb97d5261935215d8f Review: openclaw/openclaw#75869 (comment) Co-authored-by: Peter Steinberger <steipete@gmail.com> Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>

Summary: - The branch adds ClawHub plugin search and Crestodian plugin list/search/install/uninstall flows, with docs, changelog, tests, runtime injection, and regenerated config baseline hashes. - Reproducibility: not applicable. as a bug reproduction request. The high-confidence verification path is cur ... surface search plus exact-head diff/source inspection against the PR's targeted tests and queued CI checks. ClawSweeper fixups: - Included follow-up commit: Repair Crestodian plugin management config schema drift Validation: - ClawSweeper review passed for head c29cda6. - Required merge gates passed before the squash merge. Prepared head SHA: c29cda6 Review: openclaw#75869 (comment) Co-authored-by: Peter Steinberger <steipete@gmail.com> Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>

openclaw-barnacle Bot added docs Improvements or additions to documentation cli CLI command changes size: XL maintainer Maintainer-authored PR labels May 2, 2026

steipete force-pushed the codex/crestodian-plugin-management branch from 591bfa4 to e6ed27e Compare May 2, 2026 00:34

steipete marked this pull request as ready for review May 2, 2026 00:34

clawsweeper Bot added the clawsweeper:automerge Maintainer opted this PR into bounded ClawSweeper-reviewed automerge label May 2, 2026

clawsweeper Bot force-pushed the codex/crestodian-plugin-management branch from e6ed27e to 989191c Compare May 2, 2026 00:54

clawsweeper Bot force-pushed the codex/crestodian-plugin-management branch from 989191c to cd6fae5 Compare May 2, 2026 02:51

steipete and others added 2 commits May 2, 2026 02:59

feat: add crestodian plugin management

2d76bd3

Repair Crestodian plugin management config schema drift

c29cda6

clawsweeper Bot force-pushed the codex/crestodian-plugin-management branch from cd6fae5 to c29cda6 Compare May 2, 2026 02:59

clawsweeper Bot merged commit eee3aea into main May 2, 2026
86 of 87 checks passed

clawsweeper Bot deleted the codex/crestodian-plugin-management branch May 2, 2026 03:12

RomneyDa mentioned this pull request May 2, 2026

fix(plugins): drop duplicate official flag in plugins search output #76000

Merged

3 tasks

Uh oh!

Conversation

steipete commented May 2, 2026

Summary

Validation

Uh oh!

clawsweeper Bot commented May 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

steipete commented May 2, 2026

Uh oh!

clawsweeper Bot commented May 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

steipete commented May 2, 2026

Uh oh!

clawsweeper Bot commented May 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

steipete commented May 2, 2026

Uh oh!

steipete commented May 2, 2026

Uh oh!

steipete commented May 2, 2026

Uh oh!

clawsweeper Bot commented May 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

steipete commented May 2, 2026

Uh oh!

clawsweeper Bot commented May 2, 2026

Uh oh!

clawsweeper Bot commented May 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

clawsweeper Bot commented May 2, 2026 •

edited

Loading

clawsweeper Bot commented May 2, 2026 •

edited

Loading

clawsweeper Bot commented May 2, 2026 •

edited

Loading

clawsweeper Bot commented May 2, 2026 •

edited

Loading

clawsweeper Bot commented May 2, 2026 •

edited

Loading