Skip to content

plugin-inspector v0.4.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Oct 06:43
· 13 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.4.0
This tag was signed with the committer’s verified signature.
steipete Peter Steinberger
SSH Key Fingerprint: 0R9sOfREAbuojItYW9O6fvh2RHbgqVJyvk8FBS/35dk
Verified
Learn about vigilant mode.
9431488
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

plugin-inspector v0.4.0

  • Report deprecated SDK members from OpenClaw's delegated compatibility records, including shared metadata, with structured deprecatedApi, replacement, and removeAfter fields for calm, non-blocking retirement notices. Include the announced December 31, 2026 retirement inventory for packed npm targets used by ClawHub. The removal date is the final compatibility day; existing finding codes and fields are preserved.

  • Assert explicit method-scoped Gateway response contracts without skipping handlers or exposing mismatched payloads; preserve default rejection, wire validation, and settlement failures.

  • Let registration and retained callbacks read the supplied capture config through runtime.config.current() without loading host configuration.

  • Avoid type erasure and scope analysis for unrelated literal calls, and process runtime-import markers in linear passes so large plugin sources do not amplify inspection cost.

  • Discover literal SDK imports through stable handles from named Node.js createRequire imports so deferred registration and retained handlers receive their generated mock modules. Namespace/default factory handles are outside the supported static contract; shadowed require calls now need proven factory provenance.

  • Capture plugins that bind asynchronous state stores or inspect optional instance lifecycle capabilities during registration; preserve capture-local singleton factory state and runtime slots across SDK barrels. State operations and singleton lifecycle drains remain explicitly unsupported by capture mocks.

  • Capture namespace SDK imports and published doctor-contract bundles without missing exports; mock doctor descriptors remain inspectable while actual migration execution fails explicitly.

  • Capture synchronous bundled module namespaces with scoped SDK mocks on Node.js 22.15+; preserve named callable capture on Node.js 22.13 and report unsupported namespace capture before loading any module.

  • Clarify that inspect reports hard breakages without failing unless --check is passed; use check for CI failure enforcement. Thanks @KrasimirKralev.

  • Read OpenClaw manifest contract fields from its canonical key tuple when the manifest type derives its keys through Partial<Record<...>>, preserving inline object-type parsing for older targets.

  • Apply the same canonical key tuple to packed npm targets (--openclaw-version), where the tuple ships as a declared readonly const in bundled dist/*.d.ts; manifest-unknown-contracts no longer flags valid keys such as tools on OpenClaw 2026.10.1-beta.1. Fixes #101. Thanks @Bergschloss.

Changed

  • Update Acorn to 8.19.0 for current JavaScript parser fixes and Unicode 18 support.

  • Update eslint-scope to 9.1.2 and align supported Node.js versions with its Node 22.13 and Node 24 requirements.

Published

Contributors

Bergschloss and KrasimirKralev
Assets 3
Loading