Sidewisp Plugin v0.2.23

OpenClaw updater compatibility release.\n\n- Accepts the current OpenClaw 2026.9.4 plugin inspection schema.\n- Preserves the idle-stability gate before installation and restart.\n- Keeps the single-install and no-second-restart guarantees covered by tests.\n\nHermes installation and update remain unverified in a live Hermes runtime for this release.

Sidewisp Plugin v0.2.22

Fixes OpenClaw automatic updates so they wait for a stable idle window, skip repeated or downgrade updates, and avoid a second gateway restart when automatic reload already activated the new version.

Also includes privacy-bounded runtime usage collection for OpenClaw and Hermes.

Verification before publication:

• 205/205 plugin tests passed
• package and syntax checks passed
• exact release archive installed and inspected in a separate OpenClaw state
• SHA256SUMS is attached

OpenClaw update-loop fix commit: 28484bc
Archive SHA-256: 449ca492175a661ec7ad730ac3bddd9dad148d217d2fd76c36b4f686bd987afb

Sidewisp Plugin v0.2.21

Preserves active user-task correlation across OpenClaw Gateway restarts. Technical runtime restarts no longer create a false user stop/new-start sequence; the resumed turn keeps the existing work ID.

Rollout note: legacy OpenClaw agents on 0.2.18/0.2.19 must be upgraded through an installer outside the Gateway cgroup. Do not use the legacy self-updater to bootstrap this release.

Sidewisp Plugin v0.2.20

Fixes OpenClaw self-update loops by launching the update helper in a separate transient systemd user unit, allowing Gateway restarts to complete without killing the updater. Restricts the helper environment to a safe allowlist. Includes the v0.2.19 re-enrollment fix.

Sidewisp Plugin 0.2.19

Staging release: automatically replace stale Telegram enrollment credentials when a fresh Sidewisp handoff targets a new installation.

Sidewisp Plugin v0.2.17

Fixes

• Deletes acknowledged telemetry after backend ACK and reclaims SQLite pages continuously.
• Migrates legacy spools to incremental auto-vacuum and compacts ACK-filled databases at startup.
• Retries reclamation before enforcing the 64 MiB spool quota.
• Isolates SpoolError and detached telemetry failures so they cannot terminate the OpenClaw gateway or interrupt a user turn.
• Adds legacy migration and 2,500-event quota regression coverage.

Compatibility

Spool schema remains v1. Credentials, cursors, pending events, and dead letters remain compatible with v0.2.16. ACKed delivery tombstones are intentionally removed during upgrade.

Upgrade

openclaw plugins install git:github.com/golem-workers/sidewisp-plugin@v0.2.17 --force
openclaw gateway restart

Back up /root/.openclaw/sidewisp/spool.sqlite before upgrade. Rollback to v0.2.16 remains possible; pending events and credentials are preserved.

Verification

• 99/99 tests pass
• package syntax/check suite passes
• isolated OpenClaw release installation passes
• archive checksum is attached as SHA256SUMS

Sidewisp Plugin v0.2.16

Sidewisp Plugin v0.2.0

Public open-source release of the Sidewisp collector plugin.

License change

Beginning with this release, Sidewisp Plugin is licensed under the GNU Affero
General Public License v3.0 (AGPL-3.0-only) instead of MIT.
Commercial use and modification are permitted under AGPLv3. Copyleft and
corresponding-source obligations apply when covered versions are conveyed or
AGPLv3 section 13 applies. Earlier releases remain governed by the license
shipped with those releases.

The collector remains free to use, modify, and redistribute under AGPLv3.
Sidewisp's hosted analysis, alerts, and recovery workflows remain separate
managed services.

Documentation

• Added reproducible OpenClaw and Hermes installation guides.
• Added Codex and Claude Code command-hook adapters, installers, removal
  scripts, and runtime guides.
• Documented the boundary between the plugin and the managed service.
• Added explicit licensing, security-reporting, and contribution guidance.
• Added package metadata and package-content gates for public distribution.

Contracts and compatibility

• Telemetry contract: sidewisp.telemetry.v1; no raw prompts, responses,
  files, credentials, or tool payloads.
• Spool schema: version 1; credentials and pending events are stored outside
  the package and survive reinstall or rollback.
• OpenClaw: verified with OpenClaw 2026.7.1-2 and plugin API 2026.7.1.
• Hermes: verified against the upstream hook, state, crash, and recovery
  interfaces documented in COMPATIBILITY.md.
• Codex: verified against CLI 0.145.0 and its stable lifecycle-hook contract.
• Claude Code: verified against the official 2.1.218 lifecycle-hook contract.

Upgrade and rollback

Install the immutable release tag:

openclaw plugins install git:github.com/golem-workers/sidewisp-plugin@v0.2.0 --force

Before changing versions, back up the plugin state directory. Roll back by
installing the previously pinned release without deleting that directory.
Rolling back to v0.1.20 also rolls back to that release's MIT license.

Verification

• The release archive is accompanied by SHA256SUMS.
• GitHub Actions signs build provenance for the exact archive using OIDC and
  Sigstore.
• Verify provenance with
  gh attestation verify <archive> --repo golem-workers/sidewisp-plugin.
• Report security concerns privately through the repository Security tab.

Sidewisp Plugin v0.2.13

Sidewisp Plugin v0.2.0

Public open-source release of the Sidewisp collector plugin.

License change

Beginning with this release, Sidewisp Plugin is licensed under the GNU Affero
General Public License v3.0 (AGPL-3.0-only) instead of MIT.
Commercial use and modification are permitted under AGPLv3. Copyleft and
corresponding-source obligations apply when covered versions are conveyed or
AGPLv3 section 13 applies. Earlier releases remain governed by the license
shipped with those releases.

The collector remains free to use, modify, and redistribute under AGPLv3.
Sidewisp's hosted analysis, alerts, and recovery workflows remain separate
managed services.

Documentation

• Added reproducible OpenClaw and Hermes installation guides.
• Added Codex and Claude Code command-hook adapters, installers, removal
  scripts, and runtime guides.
• Documented the boundary between the plugin and the managed service.
• Added explicit licensing, security-reporting, and contribution guidance.
• Added package metadata and package-content gates for public distribution.

Contracts and compatibility

• Telemetry contract: sidewisp.telemetry.v1; no raw prompts, responses,
  files, credentials, or tool payloads.
• Spool schema: version 1; credentials and pending events are stored outside
  the package and survive reinstall or rollback.
• OpenClaw: verified with OpenClaw 2026.7.1-2 and plugin API 2026.7.1.
• Hermes: verified against the upstream hook, state, crash, and recovery
  interfaces documented in COMPATIBILITY.md.
• Codex: verified against CLI 0.145.0 and its stable lifecycle-hook contract.
• Claude Code: verified against the official 2.1.218 lifecycle-hook contract.

Upgrade and rollback

Install the immutable release tag:

openclaw plugins install git:github.com/golem-workers/sidewisp-plugin@v0.2.0 --force

Before changing versions, back up the plugin state directory. Roll back by
installing the previously pinned release without deleting that directory.
Rolling back to v0.1.20 also rolls back to that release's MIT license.

Verification

• The release archive is accompanied by SHA256SUMS.
• GitHub Actions signs build provenance for the exact archive using OIDC and
  Sigstore.
• Verify provenance with
  gh attestation verify <archive> --repo golem-workers/sidewisp-plugin.
• Report security concerns privately through the repository Security tab.

Sidewisp Plugin v0.2.9

Sidewisp Plugin v0.2.0

Public open-source release of the Sidewisp collector plugin.

License change

Beginning with this release, Sidewisp Plugin is licensed under the GNU Affero
General Public License v3.0 (AGPL-3.0-only) instead of MIT.
Commercial use and modification are permitted under AGPLv3. Copyleft and
corresponding-source obligations apply when covered versions are conveyed or
AGPLv3 section 13 applies. Earlier releases remain governed by the license
shipped with those releases.

The collector remains free to use, modify, and redistribute under AGPLv3.
Sidewisp's hosted analysis, alerts, and recovery workflows remain separate
managed services.

Documentation

• Added reproducible OpenClaw and Hermes installation guides.
• Added Codex and Claude Code command-hook adapters, installers, removal
  scripts, and runtime guides.
• Documented the boundary between the plugin and the managed service.
• Added explicit licensing, security-reporting, and contribution guidance.
• Added package metadata and package-content gates for public distribution.

Contracts and compatibility

• Telemetry contract: sidewisp.telemetry.v1; no raw prompts, responses,
  files, credentials, or tool payloads.
• Spool schema: version 1; credentials and pending events are stored outside
  the package and survive reinstall or rollback.
• OpenClaw: verified with OpenClaw 2026.7.1-2 and plugin API 2026.7.1.
• Hermes: verified against the upstream hook, state, crash, and recovery
  interfaces documented in COMPATIBILITY.md.
• Codex: verified against CLI 0.145.0 and its stable lifecycle-hook contract.
• Claude Code: verified against the official 2.1.218 lifecycle-hook contract.

Upgrade and rollback

Install the immutable release tag:

openclaw plugins install git:github.com/golem-workers/sidewisp-plugin@v0.2.0 --force

Before changing versions, back up the plugin state directory. Roll back by
installing the previously pinned release without deleting that directory.
Rolling back to v0.1.20 also rolls back to that release's MIT license.

Verification

• The release archive is accompanied by SHA256SUMS.
• GitHub Actions signs build provenance for the exact archive using OIDC and
  Sigstore.
• Verify provenance with
  gh attestation verify <archive> --repo golem-workers/sidewisp-plugin.
• Report security concerns privately through the repository Security tab.

Sidewisp Plugin v0.2.3

Sidewisp Plugin v0.2.0

Public open-source release of the Sidewisp collector plugin.

License change

Beginning with this release, Sidewisp Plugin is licensed under the GNU Affero
General Public License v3.0 (AGPL-3.0-only) instead of MIT.
Commercial use and modification are permitted under AGPLv3. Copyleft and
corresponding-source obligations apply when covered versions are conveyed or
AGPLv3 section 13 applies. Earlier releases remain governed by the license
shipped with those releases.

The collector remains free to use, modify, and redistribute under AGPLv3.
Sidewisp's hosted analysis, alerts, and recovery workflows remain separate
managed services.

Documentation

• Added reproducible OpenClaw and Hermes installation guides.
• Added Codex and Claude Code command-hook adapters, installers, removal
  scripts, and runtime guides.
• Documented the boundary between the plugin and the managed service.
• Added explicit licensing, security-reporting, and contribution guidance.
• Added package metadata and package-content gates for public distribution.

Contracts and compatibility

• Telemetry contract: sidewisp.telemetry.v1; no raw prompts, responses,
  files, credentials, or tool payloads.
• Spool schema: version 1; credentials and pending events are stored outside
  the package and survive reinstall or rollback.
• OpenClaw: verified with OpenClaw 2026.7.1-2 and plugin API 2026.7.1.
• Hermes: verified against the upstream hook, state, crash, and recovery
  interfaces documented in COMPATIBILITY.md.
• Codex: verified against CLI 0.145.0 and its stable lifecycle-hook contract.
• Claude Code: verified against the official 2.1.218 lifecycle-hook contract.

Upgrade and rollback

Install the immutable release tag:

openclaw plugins install git:github.com/golem-workers/sidewisp-plugin@v0.2.0 --force

Before changing versions, back up the plugin state directory. Roll back by
installing the previously pinned release without deleting that directory.
Rolling back to v0.1.20 also rolls back to that release's MIT license.

Verification

• The release archive is accompanied by SHA256SUMS.
• GitHub Actions signs build provenance for the exact archive using OIDC and
  Sigstore.
• Verify provenance with
  gh attestation verify <archive> --repo golem-workers/sidewisp-plugin.
• Report security concerns privately through the repository Security tab.