Summary

• Honor explicit message allow/alsoAllow policy during embedded core tool construction, with deny precedence preserved.
• Preserve runtime message allowlists through restrictive profiles, including literal, grouped, and wildcard allowlists.
• Deprecate legacy low-level channel runtime reply/session escape hatches used by external Weixin and point plugin authors toward channel-message/channel-inbound helpers.
• Add changelog entry for [Regression]: message tool not exposed to weixin agent despite being in alsoAllow since 2026.5.16-beta.3 #82833.

Verification

• pnpm exec oxfmt --check src/agents/pi-tools.ts src/agents/pi-tools.create-openclaw-coding-tools.test.ts src/agents/openclaw-tools.ts src/agents/openclaw-tools.update-plan.test.ts src/plugins/runtime/types-channel.ts && git diff --check
• pnpm test src/agents/openclaw-tools.update-plan.test.ts src/agents/pi-tools.create-openclaw-coding-tools.test.ts
• pnpm test src/plugins/contracts/plugin-sdk-index.test.ts src/plugins/contracts/plugin-sdk-runtime-api-guardrails.test.ts
• pnpm changed:lanes --json
• pnpm check:changed via Blacksmith Testbox tbx_01krt1xb26bzqpw3xgs3p5sw5f, GitHub Actions https://github.com/openclaw/openclaw/actions/runs/25980959972
• Codex review: clean, no accepted/actionable findings

Real behavior proof
Behavior addressed: embedded channel runs can now keep the message tool when it is explicitly allowed by tools.alsoAllow or runtime tool allowlists, even under restrictive profiles such as minimal.
Real environment tested: local repo checkout plus delegated Blacksmith Testbox changed-check.
Exact steps or command run after this patch: pnpm test src/agents/openclaw-tools.update-plan.test.ts src/agents/pi-tools.create-openclaw-coding-tools.test.ts; pnpm check:changed.
Evidence after fix: focused tests cover embedded factory inclusion, config tools.alsoAllow, deny precedence, runtime literal/group/wildcard allowlists, and restrictive profile filtering.
Observed result after fix: focused tests passed; plugin SDK contract tests passed; Testbox check:changed passed with exit 0.
What was not tested: live Weixin send was not run because this checkout does not have a configured Weixin bot session; external @tencent-weixin/openclaw-weixin still needs to move off deprecated low-level runtime helpers for the full channel-side update.