Skip to content

feat(plugins): externalize additional official plugins#95683

Merged
vincentkoc merged 1 commit into
mainfrom
externalize-plugin-batch
Jun 22, 2026
Merged

feat(plugins): externalize additional official plugins#95683
vincentkoc merged 1 commit into
mainfrom
externalize-plugin-batch

Conversation

@vincentkoc

@vincentkoc vincentkoc commented Jun 22, 2026

Copy link
Copy Markdown
Member

What Problem This Solves

Externalizes another batch of official OpenClaw plugins so they resolve from the official external catalogs instead of core bundled dist.

Batch:

  • Channels: @openclaw/irc, @openclaw/mattermost, @openclaw/signal, @openclaw/sms, @openclaw/clickclack
  • Web search/tools: @openclaw/tavily-plugin, @openclaw/searxng-plugin
  • Providers: @openclaw/fireworks-provider, @openclaw/moonshot-provider, @openclaw/tencent-provider, @openclaw/venice-provider, @openclaw/vercel-ai-gateway-provider, @openclaw/zai-provider

Why This Change Was Made

The previous release externalized a large slice of bundled plugins. These remaining channel, provider, and tool plugins had the same shape: plugin-local runtime ownership, packageable manifests, and no reason to stay in core dist once the official external catalogs can advertise npm/ClawHub installs.

This change updates package metadata, root package excludes, official external catalogs, runtime sidecar baseline, config-presence env detection for newly externalized official channels, tests, generated docs, READMEs, and npm shrinkwrap files for the full batch.

User Impact

New installs and catalog-driven repair/install flows can resolve these plugins as official external packages. Core dist stops carrying their bundled runtime output after release packaging, while docs continue to show the same user-facing plugin names and install surfaces.

Env-only channel deployments keep producing setup/repair signals for official external channel installs through catalog-owned env vars for ClickClack, IRC, Mattermost, and SMS.

Placeholder npm reservation status: published empty 0.0.0 reservation packages for the 12 package names that were missing on npm: @openclaw/irc, @openclaw/signal, @openclaw/sms, @openclaw/clickclack, @openclaw/tavily-plugin, @openclaw/searxng-plugin, @openclaw/fireworks-provider, @openclaw/moonshot-provider, @openclaw/tencent-provider, @openclaw/venice-provider, @openclaw/vercel-ai-gateway-provider, and @openclaw/zai-provider. @openclaw/mattermost already exists at 2026.2.21, so it was not republished or downgraded.

Evidence

  • node scripts/generate-plugin-inventory-doc.mjs --check
  • node --import tsx scripts/plugin-npm-release-check.ts --selection-mode selected --plugins @openclaw/irc,@openclaw/mattermost,@openclaw/signal,@openclaw/sms,@openclaw/clickclack,@openclaw/tavily-plugin,@openclaw/searxng-plugin,@openclaw/fireworks-provider,@openclaw/moonshot-provider,@openclaw/tencent-provider,@openclaw/venice-provider,@openclaw/vercel-ai-gateway-provider,@openclaw/zai-provider
  • bash scripts/plugin-npm-publish.sh --pack-dry-run extensions/<plugin> for all 13 package dirs, plus ClickClack rerun after export fix
  • node --import tsx - <<'NODE' ... smoke proving MATTERMOST_URL produces a mattermost channel env presence signal from the official catalog
  • PNPM_CONFIG_VERIFY_DEPS_BEFORE_RUN=false OPENCLAW_TESTBOX=1 node scripts/check-changed.mjs on Testbox tbx_01kvq3vs65gt90hxhs9v11xvhz, Actions run https://github.com/openclaw/openclaw/actions/runs/27936808718, exit 0
  • .agents/skills/autoreview/scripts/autoreview --mode commit --commit HEAD clean, no accepted/actionable findings
  • npm publish --access public published empty 0.0.0 reservation packages for the 12 missing npm names after browser 2FA
  • public registry check returned 200, latest: 0.0.0, and version 0.0.0 for all 12 newly reserved package names

@openclaw-barnacle openclaw-barnacle Bot added docs Improvements or additions to documentation channel: mattermost Channel integration: mattermost channel: signal Channel integration: signal scripts Repository scripts channel: irc extensions: moonshot extensions: venice extensions: vercel-ai-gateway extensions: tavily extensions: tencent extensions: zai channel: sms Channel integration: sms size: XL maintainer Maintainer-authored PR labels Jun 22, 2026
@vincentkoc
vincentkoc force-pushed the externalize-plugin-batch branch from cafa438 to be6bfb0 Compare June 22, 2026 07:45
@vincentkoc
vincentkoc marked this pull request as ready for review June 22, 2026 08:12
@vincentkoc
vincentkoc requested a review from a team as a code owner June 22, 2026 08:12
@vincentkoc
vincentkoc merged commit f2eca94 into main Jun 22, 2026
81 checks passed
@vincentkoc
vincentkoc deleted the externalize-plugin-batch branch June 22, 2026 08:12
@github-actions github-actions Bot added the dependencies-changed PR changes dependency-related files label Jun 22, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Guard

This PR changes dependency-related files. Maintainers should confirm these changes are intentional.

Changed files:

  • extensions/clickclack/npm-shrinkwrap.json
  • extensions/fireworks/npm-shrinkwrap.json
  • extensions/irc/npm-shrinkwrap.json
  • extensions/mattermost/npm-shrinkwrap.json
  • extensions/moonshot/npm-shrinkwrap.json
  • extensions/searxng/npm-shrinkwrap.json
  • extensions/signal/npm-shrinkwrap.json
  • extensions/sms/npm-shrinkwrap.json
  • extensions/tavily/npm-shrinkwrap.json
  • extensions/tencent/npm-shrinkwrap.json
  • extensions/venice/npm-shrinkwrap.json
  • extensions/vercel-ai-gateway/npm-shrinkwrap.json
  • extensions/zai/npm-shrinkwrap.json

Maintainer follow-up:

  • Review whether the dependency changes are intentional.
  • Inspect resolved package deltas when lockfile, shrinkwrap, or workspace dependency policy changes are present.
  • Treat package-lock.json and npm-shrinkwrap.json diffs as security-review surfaces.
  • Run pnpm deps:changes:report -- --base-ref origin/main --markdown /tmp/dependency-changes.md --json /tmp/dependency-changes.json locally for detailed release-style evidence.

@github-actions

Copy link
Copy Markdown
Contributor

Dependency graph changes noted

This PR includes dependency graph changes. The dependency guard is informational because the PR author is a repository admin or a member of @openclaw/openclaw-secops.

  • Current SHA: be6bfb016d614c2864cbe11c528743b5dd6adcfb
  • Trusted actor: @vincentkoc
  • Trusted role: pull request author; openclaw-secops

Security review is still recommended before merge when the dependency graph change is intentional.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

channel: irc channel: mattermost Channel integration: mattermost channel: signal Channel integration: signal channel: sms Channel integration: sms dependencies-changed PR changes dependency-related files docs Improvements or additions to documentation extensions: moonshot extensions: tavily extensions: tencent extensions: venice extensions: vercel-ai-gateway extensions: zai maintainer Maintainer-authored PR scripts Repository scripts size: XL

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant