v0.6.0

• Added trusted Codex CLI config passthrough for explicit config files while rejecting repository-controlled passthrough config, thanks @brad-ai-agent.
• Added a MiniMax HTTP provider for map, review, and revalidate, with local schema validation and explicit unsupported fix handling, thanks @ferminquant.

Release proof:

• npm: https://www.npmjs.com/package/clawpatch/v/0.6.0
• registry tarball: https://registry.npmjs.org/clawpatch/-/clawpatch-0.6.0.tgz
• integrity: sha512-mz2xaUNM/hyPka0MFdm5gl2wmVeCHKj08g5ZV40tc7W41IKbagJlN6cGoyRZbzaXqvayyrhMRU04bon29e6aHQ==
• published: 2026-06-11T03:16:24.283Z
• release commit: 17944c1
• CI: https://github.com/openclaw/clawpatch/actions/runs/27320027909
• CodeQL: https://github.com/openclaw/clawpatch/actions/runs/27320027918
• secret scanning: https://github.com/openclaw/clawpatch/actions/runs/27320027901
• release validation: https://github.com/openclaw/clawpatch/actions/runs/27320111643 completed all validation gates; npm trusted publishing lacked package access, so 0.6.0 was published with targeted npmjs owner authentication instead.
• MiniMax live proof on the release commit: authenticated /models returned HTTP 200 with 8 models; one schema-valid review operation completed with exit 0 and 3 validated findings.
• local proof: pnpm typecheck && pnpm lint && pnpm format:check && pnpm test && pnpm build && pnpm pack:smoke
• registry artifact proof: clawpatch-0.6.0.tgz, 347871 bytes packed, 1995760 bytes unpacked, 162 files, SHA-1 dba80068e1bf0a44e7b775ba06a948b9e46c465c.