@openclaw/plugin-inspector 0.3.20 → 0.3.22

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## Unreleased
+
+## 0.3.22 - 2026-08-30
+
+### Fixed
+
+- Finish OpenClaw target archive extraction before cleanup so strict extraction errors cannot race unfinished filesystem writes.
+
+### Changed
+
+- Refresh Crabbox hydration tooling to pnpm 11.24.0 and pnpm/action-setup 6.0.10.
+- Update the code-scanning example to CodeQL's Node 24-based SARIF upload action.
+
+## 0.3.21 - 2026-08-05
+
+### Fixed
+
+- Preserve record predicate and coercion contracts in generated SDK mocks so schema-aware plugin imports cannot recurse through primitive values.
+- Read raw plugin manifest fields from packed OpenClaw declarations instead of runtime registry fields, avoiding false unknown-field warnings for supported metadata such as `uiHints`.
+
 ## 0.3.20 - 2026-07-31
 
 ### Added

package/examples/github-actions-code-scanning.yml

@@ -20,7 +20,7 @@ jobs:
           cache: npm
       - run: npm ci
       - run: npx @openclaw/plugin-inspector ci --no-openclaw --runtime --mock-sdk --allow-execute
-      - uses: github/codeql-action/upload-sarif@v3
+      - uses: github/codeql-action/upload-sarif@v4
         if: always()
         with:
           sarif_file: reports/plugin-inspector.sarif

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/plugin-inspector",
-  "version": "0.3.20",
+  "version": "0.3.22",
   "private": false,
   "description": "Offline compatibility inspector for OpenClaw plugins.",
   "type": "module",

package/src/openclaw-target.js

@@ -284,12 +284,12 @@ async function readPackedOpenClawTargetSurface({ rootDir, requestedPaths, reques
     }))
     .sort((left, right) => right.values.length - left.values.length)[0];
   const hookDeclaration = declarations.find((declaration) => declaration.source.includes("type PluginHookName ="));
-  const manifestDeclaration = declarations.find((declaration) => declaration.source.includes("type PluginManifestRecord ="));
+  const manifestDeclaration = declarations.find((declaration) => declaration.source.includes("type PluginManifest ="));
   const manifestContractDeclaration = declarations.find((declaration) => declaration.source.includes("type PluginManifestContracts ="));
   const apiRegistrars = apiDeclaration?.values ?? [];
   const hookNames = hookDeclaration ? parseStringUnion(hookDeclaration.source, "PluginHookName") : [];
   const manifestFields = manifestDeclaration
-    ? parseObjectTypeFields(manifestDeclaration.source, "PluginManifestRecord")
+    ? parseObjectTypeFields(manifestDeclaration.source, "PluginManifest")
     : [];
   const manifestContractFields = manifestContractDeclaration
     ? parseObjectTypeFields(manifestContractDeclaration.source, "PluginManifestContracts")

package/src/openclaw-version.js

@@ -149,7 +149,9 @@ async function preparePackageArchive(resolvedTarget, options) {
   try {
     const archivePath = path.join(temporaryDir, "openclaw.tgz");
     await writeFile(archivePath, archive);
-    await extractTar({ cwd: temporaryDir, file: archivePath, strict: true });
+    // Async tar rejection can leave filesystem writes running. Finish extraction
+    // before finally removes its workspace, including when strict validation fails.
+    extractTar({ cwd: temporaryDir, file: archivePath, strict: true, sync: true });
     const packageDir = path.join(temporaryDir, "package");
     if (!(await isPreparedPackage(packageDir, resolvedTarget.version))) {
       throw new Error(`downloaded OpenClaw ${resolvedTarget.version} archive has unexpected package metadata`);

package/src/sdk-mock.js

@@ -621,6 +621,21 @@ function isValidExportName(name) {
 }
 
 function genericExportStatement(name) {
+  if (name === "isRecord") {
+    return "export function isRecord(value) { return isPlainObject(value); }";
+  }
+  if (name === "asRecord") {
+    return 'export function asRecord(value) { return value !== null && typeof value === "object" ? value : {}; }';
+  }
+  if (name === "asOptionalRecord") {
+    return "export function asOptionalRecord(value) { return isPlainObject(value) ? value : undefined; }";
+  }
+  if (name === "asNullableRecord") {
+    return "export function asNullableRecord(value) { return isPlainObject(value) ? value : null; }";
+  }
+  if (name === "readStringField") {
+    return 'export function readStringField(record, key) { const value = record?.[key]; return typeof value === "string" ? value : undefined; }';
+  }
   if (name === "z") {
     return "export const z = createZNamespace();";
   }