@openclaw/plugin-inspector 0.3.22 → 0.3.24

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 ## Unreleased
 
+## 0.3.24 - 2026-08-31
+
+### Fixed
+
+- Recognize compiled CommonJS plugin factory calls when checking expected channel registrations, preserving source references and excluding factory values passed to wrappers.
+- Classify widget presenters as metadata-only synthetic probes without invoking presentation callbacks.
+
+## 0.3.23 - 2026-08-30
+
+### Fixed
+
+- Mask source comments in spans so inspecting large bundled JavaScript stays within serverless memory limits while preserving source offsets and findings.
+
 ## 0.3.22 - 2026-08-30
 
 ### Fixed

package/README.md

@@ -208,6 +208,8 @@ plugin-inspector --help
 
 ## Runtime Capture
 
+Static inspection recognizes direct plugin factory calls and compiled CommonJS
+calls such as `(0, sdk.defineBundledChannelEntry)(...)` without importing them.
 Runtime capture imports plugin entrypoints in an isolated subprocess and records
 what `register(api)` does. Use it when static inspection cannot prove the actual
 registrations made at runtime.
@@ -230,6 +232,10 @@ That keeps compatibility CI offline and credential-free. It does not call live
 services, launch OpenClaw, run provider SDKs, or emulate service lifecycle side
 effects.
 
+Synthetic probes classify widget presenters as metadata-only. They record the
+registration without calling its match, availability, or presentation callbacks,
+including when channel, provider, or lifecycle execution is enabled.
+
 Use `--real-sdk` only when the plugin workspace already has real SDK
 dependencies installed and you intentionally want that path.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/plugin-inspector",
-  "version": "0.3.22",
+  "version": "0.3.24",
   "private": false,
   "description": "Offline compatibility inspector for OpenClaw plugins.",
   "type": "module",

package/src/inspector.js

@@ -15,6 +15,9 @@ import { buildCompatibilityReport, buildReport } from "./report.js";
 import { inspectSdkDeprecations } from "./sdk-deprecation-rules.js";
 
 const execFileAsync = promisify(execFile);
+const pluginFactoryNames = "defineBundledChannelEntry|defineChannelPluginEntry|createChatChannelPlugin|definePluginEntry";
+// Bundlers emit unbound calls as (0, sdk.factory)(...), including inline require receivers.
+const compiledFactoryCall = new RegExp(String.raw`\(\s*0\s*,\s*(?:require\s*\(\s*(?:"[^"\r\n]*"|'[^'\r\n]*')\s*\)|[$A-Z_a-z][$\w]*)(?:\s*\.\s*[$A-Z_a-z][$\w]*)*\s*\.\s*(${pluginFactoryNames})\s*\)\s*\(`, "dg");
 const registrationEquivalents = new Map([
   ["registerChannel", new Set(["createChatChannelPlugin", "defineBundledChannelEntry", "defineChannelPluginEntry", "registerChannel"])],
 ]);
@@ -164,10 +167,8 @@ export function inspectSourceText(text, filePath = "source.js") {
   const hooks = collectDetailedMatches(searchableText, /\bapi\.on\(\s*["'`]([^"'`]+)["'`]/g, filePath, "name");
   const registrations = [
     ...collectDetailedMatches(searchableText, /\bapi\.(register[A-Za-z0-9]+)\s*\(/g, filePath, "name"),
-    ...collectDetailedMatches(searchableText, /\b(defineBundledChannelEntry)\s*\(/g, filePath, "name"),
-    ...collectDetailedMatches(searchableText, /\b(defineChannelPluginEntry)\s*\(/g, filePath, "name"),
-    ...collectDetailedMatches(searchableText, /\b(createChatChannelPlugin)\s*\(/g, filePath, "name"),
-    ...collectDetailedMatches(searchableText, /\b(definePluginEntry)\s*\(/g, filePath, "name"),
+    ...collectDetailedMatches(searchableText, new RegExp(String.raw`\b(${pluginFactoryNames})\s*\(`, "g"), filePath, "name"),
+    ...collectDetailedMatches(searchableText, compiledFactoryCall, filePath, "name"),
   ];
   const sdkImports = collectSdkImports(searchableText, filePath);
   const sdkDeprecations = inspectSdkDeprecations(searchableText, filePath);
@@ -373,7 +374,7 @@ function emptyInspection(fixture, status) {
 function collectDetailedMatches(text, regex, filePath, key) {
   const details = [];
   for (const match of text.matchAll(regex)) {
-    const line = lineForOffset(text, match.index ?? 0);
+    const line = lineForOffset(text, match.indices?.[1]?.[0] ?? match.index ?? 0);
     details.push({
       [key]: match[1],
       file: filePath,
@@ -727,38 +728,11 @@ function lineForOffset(text, offset) {
 }
 
 function stripComments(text) {
-  let result = "";
-  for (let index = 0; index < text.length; index += 1) {
-    const char = text[index];
-    const next = text[index + 1];
-    if (char === "/" && next === "*") {
-      result += "  ";
-      index += 2;
-      while (index < text.length && !(text[index] === "*" && text[index + 1] === "/")) {
-        result += blankCommentChar(text[index]);
-        index += 1;
-      }
-      if (index < text.length) {
-        result += "  ";
-        index += 1;
-      }
-    } else if (char === "/" && next === "/") {
-      result += "  ";
-      index += 2;
-      while (index < text.length && text[index] !== "\n" && text[index] !== "\r") {
-        result += " ";
-        index += 1;
-      }
-      index -= 1;
-    } else {
-      result += char;
-    }
-  }
-  return result;
-}
-
-function blankCommentChar(char) {
-  return char === "\n" || char === "\r" ? char : " ";
+  // Mask spans rather than building one string node per UTF-16 code unit.
+  // Keep offsets and CR/LF intact for findings, including unterminated comments.
+  return text.replace(/\/\*[\s\S]*?(?:\*\/|$)|\/\/[^\r\n]*/g, (comment) =>
+    comment.replace(/[^\r\n]+/g, (span) => " ".repeat(span.length)),
+  );
 }
 
 function sortDetails(details) {

package/src/synthetic-probes.js

@@ -295,6 +295,11 @@ export const syntheticRegistrationExecutionProfiles = {
     callableProperties: [],
     reason: "web search providers are captured as registration metadata before provider runtime execution",
   },
+  registerWidgetPresenter: {
+    mode: "metadata-only",
+    callableProperties: [],
+    reason: "widget presenters are captured as registration metadata before presentation runtime execution",
+  },
 };
 
 export const defaultSyntheticHookEvents = {