@openclaw/plugin-inspector 0.3.5 → 0.3.7

package/CHANGELOG.md

@@ -2,7 +2,24 @@
 
 ## Unreleased
 
-_No unreleased changes._
+## 0.3.7 - 2026-05-03
+
+### Changed
+
+- Downgrade `registration-capture-gap` to advisory severity so missing capture evidence no longer reports as a P1 plugin contract risk.
+
+## 0.3.6 - 2026-05-03
+
+### Changed
+
+- Report import-loop RSS and CPU as baseline-adjusted plugin deltas alongside raw subprocess metrics so Crabpot dashboards do not treat harness import cost as plugin runtime cost.
+- Include optional OpenClaw loader lifecycle timings for import and full activation when a capture runner provides them.
+
+### Fixed
+
+- Accept plugin install minimum-host floors as supported package metadata.
+- Flag unsupported legacy OpenClaw bundle metadata and advertised npm pack blockers.
+- Reconcile runtime capture evidence and harden mocked capture paths for downstream fixture reports.
 
 ## 0.3.5 - 2026-04-29
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/plugin-inspector",
-  "version": "0.3.5",
+  "version": "0.3.7",
   "private": false,
   "description": "Offline compatibility inspector for OpenClaw plugins.",
   "type": "module",

package/src/advanced.js

@@ -95,6 +95,7 @@ export {
   classifyTargetOpenClawCoverage,
   readPackageSummaries,
   readPluginManifests,
+  readSecurityManifests,
   summarizePackage,
 } from "./fixture-summary.js";
 export {
@@ -183,6 +184,10 @@ export {
   validateRuntimeProfile,
   writeRuntimeProfile,
 } from "./runtime-profile.js";
+export {
+  applyRuntimeExecutionCoverage,
+  buildRuntimeExecutionCoverage,
+} from "./runtime-reconciliation.js";
 export {
   buildRuntimeCaptureReport,
   renderRuntimeCaptureMarkdown,

package/src/api.js

@@ -45,6 +45,7 @@ export async function inspectPluginRoot(options = {}) {
   return inspectCompatibilityFixtureSet(config, {
     generatedAt: options.generatedAt,
     openclawPath: options.openclawPath,
+    executionResults: options.executionResults,
     targetOpenClaw: options.targetOpenClaw,
   });
 }
@@ -59,6 +60,7 @@ export async function inspectCompatibilityFixtureSetConfig(options = {}) {
   return inspectCompatibilityFixtureSet(config, {
     generatedAt: options.generatedAt,
     openclawPath: options.openclawPath,
+    executionResults: options.executionResults,
     targetOpenClaw: options.targetOpenClaw,
   });
 }
@@ -112,6 +114,7 @@ export async function buildFixtureSetColdImportReadiness(options = {}) {
     (await inspectCompatibilityFixtureSet(config, {
       generatedAt: options.generatedAt,
       openclawPath: options.openclawPath,
+      executionResults: options.executionResults,
       targetOpenClaw: options.targetOpenClaw,
     }));
 
@@ -143,6 +146,7 @@ export async function buildFixtureSetWorkspacePlan(options = {}) {
     (await inspectCompatibilityFixtureSet(config, {
       generatedAt: options.generatedAt,
       openclawPath: options.openclawPath,
+      executionResults: options.executionResults,
       targetOpenClaw: options.targetOpenClaw,
     }));
   const rootDir = options.rootDir ?? config?.rootDir ?? options.cwd;

package/src/artifacts.js

@@ -95,7 +95,7 @@ export function renderPaddedMarkdownTable(rows, headers, options = {}) {
 }
 
 export function escapeMarkdownTableCell(value) {
-  return value.replace(/\|/g, "\\|").replace(/\n/g, "<br>");
+  return value.replace(/\\/g, "\\\\").replace(/\|/g, "\\|").replace(/\n/g, "<br>");
 }
 
 async function assertFileMatches(filePath, expected) {

package/src/ci-policy.js

@@ -241,7 +241,9 @@ function executionChecks(executionResults, policy, options) {
 }
 
 function findPolicyMatch(rules, item) {
-  return rules.find((rule) => item.seam === rule.seam && item.reason?.includes(rule.reasonIncludes));
+  return rules.find(
+    (rule) => (rule.seam === "*" || item.seam === rule.seam) && item.reason?.includes(rule.reasonIncludes),
+  );
 }
 
 function failedExecutionEvidence(executionResults) {

package/src/ci-summary.js

@@ -56,8 +56,12 @@ export async function buildCiSummary(options = {}) {
       loaderJitiCandidates: reports.platform?.summary?.jitiAlternativeCount ?? 0,
       importLoopP50Ms: reports.importLoop?.summary?.p50WallMs ?? 0,
       importLoopP95Ms: reports.importLoop?.summary?.p95WallMs ?? 0,
-      importLoopMaxRssMb: reports.importLoop?.summary?.maxPeakRssMb ?? 0,
-      importLoopMaxCpuMs: reports.importLoop?.summary?.maxCpuMsEstimate ?? 0,
+      importLoopOpenClawLifecycleCount: reports.importLoop?.summary?.openClawLifecycleCount ?? 0,
+      importLoopOpenClawImportP50Ms: reports.importLoop?.summary?.p50OpenClawImportMs ?? 0,
+      importLoopOpenClawActivationP50Ms: reports.importLoop?.summary?.p50OpenClawActivationMs ?? 0,
+      importLoopMetricBasis: reports.importLoop?.summary?.maxPluginPeakRssDeltaMb === undefined ? "raw" : "baseline-adjusted",
+      importLoopMaxRssMb: reports.importLoop?.summary?.maxPluginPeakRssDeltaMb ?? reports.importLoop?.summary?.maxPeakRssMb ?? 0,
+      importLoopMaxCpuMs: reports.importLoop?.summary?.maxPluginCpuDeltaMsEstimate ?? reports.importLoop?.summary?.maxCpuMsEstimate ?? 0,
       importLoopRssSampleCount: metricSampleCount(reports.importLoop, "rss", "maxPeakRssMb"),
       importLoopCpuSampleCount: metricSampleCount(reports.importLoop, "cpu", "maxCpuMsEstimate"),
     },
@@ -150,7 +154,7 @@ export function renderCiSummaryMarkdown(summary) {
         ["Jiti loader candidates", summary.summary.loaderJitiCandidates],
         [
           "Import loop",
-          `p50 ${summary.summary.importLoopP50Ms} ms / p95 ${summary.summary.importLoopP95Ms} ms / max RSS ${formatSampledMetric(summary.summary.importLoopMaxRssMb, summary.summary.importLoopRssSampleCount)} / CPU ${formatSampledMetric(summary.summary.importLoopMaxCpuMs, summary.summary.importLoopCpuSampleCount, "ms")}`,
+          importLoopSummaryLabel(summary.summary),
         ],
       ],
       ["Metric", "Value"],
@@ -249,6 +253,15 @@ function inferSampleCount(samples = [], kind) {
   }, 0);
 }
 
+function importLoopSummaryLabel(summary) {
+  const metricLabel = summary.importLoopMetricBasis === "baseline-adjusted" ? "plugin delta" : "raw";
+  const lifecycle =
+    summary.importLoopOpenClawLifecycleCount > 0
+      ? ` / OpenClaw import ${summary.importLoopOpenClawImportP50Ms} ms / activate ${summary.importLoopOpenClawActivationP50Ms} ms`
+      : "";
+  return `p50 ${summary.importLoopP50Ms} ms / p95 ${summary.importLoopP95Ms} ms / ${metricLabel} RSS ${formatSampledMetric(summary.importLoopMaxRssMb, summary.importLoopRssSampleCount)} / ${metricLabel} CPU ${formatSampledMetric(summary.importLoopMaxCpuMs, summary.importLoopCpuSampleCount, "ms")}${lifecycle}`;
+}
+
 function formatSampledMetric(value, count, unit = "MB") {
   if ((count ?? 0) <= 0) {
     return "n/a";

package/src/compatibility-report.js

@@ -26,13 +26,20 @@ export function renderCompatibilityMarkdownReport(report, options = {}) {
         ["Warnings", report.summary.warningCount],
         ["Compatibility suggestions", report.summary.suggestionCount],
         ["Issue findings", report.summary.issueCount],
+        ["Open issue findings", report.summary.openIssueCount ?? report.summary.issueCount],
+        ["Runtime-covered findings", report.summary.runtimeCoveredIssueCount ?? 0],
+        ["Runtime-partial findings", report.summary.runtimePartiallyCoveredIssueCount ?? 0],
         ["P0 issues", report.summary.p0IssueCount],
         ["P1 issues", report.summary.p1IssueCount],
+        ["Open P0 issues", report.summary.openP0IssueCount ?? report.summary.p0IssueCount],
+        ["Open P1 issues", report.summary.openP1IssueCount ?? report.summary.p1IssueCount],
         ["Live issues", report.summary.liveIssueCount],
         ["Live P0 issues", report.summary.liveP0IssueCount],
         ["Compat gaps", report.summary.compatGapCount],
         ["Deprecation warnings", report.summary.deprecationWarningCount],
         ["Inspector gaps", report.summary.inspectorGapCount],
+        ["Open inspector gaps", report.summary.openInspectorGapCount ?? report.summary.inspectorGapCount],
+        ["Runtime coverage artifacts", report.summary.runtimeCoverageArtifactCount ?? 0],
         ["Upstream metadata", report.summary.upstreamIssueCount],
         ["Contract probes", report.summary.contractProbeCount],
         ["Decision rows", report.summary.decisionCount],
@@ -65,7 +72,11 @@ export function renderCompatibilityMarkdownReport(report, options = {}) {
     "",
     "## Inspector Proof Gaps",
     "",
-    issuesTable(report.issues.filter((issue) => issue.issueClass === "inspector-gap"), options),
+    issuesTable(report.issues.filter((issue) => issue.issueClass === "inspector-gap" && issue.status !== "runtime-covered"), options),
+    "",
+    "## Runtime-Covered Inspector Gaps",
+    "",
+    issuesTable(report.issues.filter((issue) => issue.issueClass === "inspector-gap" && issue.status === "runtime-covered"), options),
     "",
     "## Upstream Metadata Issues",
     "",
@@ -141,13 +152,20 @@ export function renderCompatibilityIssuesReport(report, options = {}) {
     markdownTable(
       [
         ["Issue findings", report.summary.issueCount],
+        ["Open issue findings", report.summary.openIssueCount ?? report.summary.issueCount],
+        ["Runtime-covered findings", report.summary.runtimeCoveredIssueCount ?? 0],
+        ["Runtime-partial findings", report.summary.runtimePartiallyCoveredIssueCount ?? 0],
         [severityLabel("P0", options), report.summary.p0IssueCount],
         [severityLabel("P1", options), report.summary.p1IssueCount],
+        [`Open ${severityLabel("P0", options)}`, report.summary.openP0IssueCount ?? report.summary.p0IssueCount],
+        [`Open ${severityLabel("P1", options)}`, report.summary.openP1IssueCount ?? report.summary.p1IssueCount],
         ["Live issues", report.summary.liveIssueCount],
         ["Live P0 issues", report.summary.liveP0IssueCount],
         ["Compat gaps", report.summary.compatGapCount],
         ["Deprecation warnings", report.summary.deprecationWarningCount],
         ["Inspector gaps", report.summary.inspectorGapCount],
+        ["Open inspector gaps", report.summary.openInspectorGapCount ?? report.summary.inspectorGapCount],
+        ["Runtime coverage artifacts", report.summary.runtimeCoverageArtifactCount ?? 0],
         ["Upstream metadata", report.summary.upstreamIssueCount],
         ["Contract probes", report.summary.contractProbeCount],
       ],
@@ -179,7 +197,11 @@ export function renderCompatibilityIssuesReport(report, options = {}) {
     "",
     "## Inspector Proof Gaps",
     "",
-    issuesTable(report.issues.filter((issue) => issue.issueClass === "inspector-gap"), options),
+    issuesTable(report.issues.filter((issue) => issue.issueClass === "inspector-gap" && issue.status !== "runtime-covered"), options),
+    "",
+    "## Runtime-Covered Inspector Gaps",
+    "",
+    issuesTable(report.issues.filter((issue) => issue.issueClass === "inspector-gap" && issue.status === "runtime-covered"), options),
     "",
     "## Upstream Metadata Issues",
     "",
@@ -228,6 +250,7 @@ function issueBlock(issue, options) {
     `  - state: ${issueState(issue)}`,
     "  - evidence:",
     ...evidenceList(issue.evidence, options).map((item) => `    - ${item}`),
+    ...runtimeCoverageList(issue, options),
   ].join("\n");
 }
 
@@ -235,6 +258,7 @@ function issueState(issue) {
   const flags = [
     issue.status,
     `compat:${issue.compatStatus ?? "none"}`,
+    issue.runtimeCoverage?.status ? `runtime:${issue.runtimeCoverage.status}` : null,
     issue.live ? "live" : null,
     issue.deprecated ? "deprecated" : null,
   ].filter(Boolean);
@@ -266,7 +290,7 @@ function triageOverview(report) {
         "inspector-gap",
         report.summary.inspectorGapCount,
         "-",
-        "Plugin Inspector needs stronger capture/probe evidence before making contract judgments.",
+        "Plugin Inspector needs stronger capture/probe evidence before making contract judgments. Runtime-covered rows are proof-backed and not open report work.",
       ],
       [
         "upstream-metadata",
@@ -357,3 +381,15 @@ function evidenceList(evidence, options) {
   const formatEvidence = options.formatEvidence ?? ((item) => item);
   return items.map((item) => formatEvidence(item));
 }
+
+function runtimeCoverageList(issue, options) {
+  const runtimeCoverage = issue.runtimeCoverage;
+  if (!runtimeCoverage) {
+    return [];
+  }
+  return [
+    "  - runtime coverage:",
+    ...evidenceList(runtimeCoverage.captured, options).map((item) => `    - captured ${item}`),
+    ...evidenceList(runtimeCoverage.artifacts, options).map((item) => `    - ${item}`),
+  ];
+}

package/src/config.js

@@ -202,13 +202,43 @@ export function packageId(packageName) {
   if (!packageName) {
     return null;
   }
-  return packageName
+  const packageBase = packageName
     .split("/")
     .pop()
-    .replace(/^openclaw-/, "")
-    .replace(/[^a-zA-Z0-9]+/g, "-")
-    .replace(/^-+|-+$/g, "")
-    .toLowerCase();
+    .replace(/^openclaw-/, "");
+  return trimHyphenEdges(collapsePackageIdSeparators(packageBase)).toLowerCase();
+}
+
+function collapsePackageIdSeparators(value) {
+  let result = "";
+  let previousWasHyphen = false;
+  for (const char of value) {
+    if (isAsciiAlphaNumeric(char)) {
+      result += char;
+      previousWasHyphen = false;
+    } else if (!previousWasHyphen) {
+      result += "-";
+      previousWasHyphen = true;
+    }
+  }
+  return result;
+}
+
+function isAsciiAlphaNumeric(char) {
+  const code = char.charCodeAt(0);
+  return (code >= 48 && code <= 57) || (code >= 65 && code <= 90) || (code >= 97 && code <= 122);
+}
+
+function trimHyphenEdges(value) {
+  let start = 0;
+  let end = value.length;
+  while (start < end && value[start] === "-") {
+    start += 1;
+  }
+  while (end > start && value[end - 1] === "-") {
+    end -= 1;
+  }
+  return value.slice(start, end);
 }
 
 export function inferPluginSeams(pluginManifest, packageJson) {

package/src/contract-probes.js

@@ -74,6 +74,31 @@ export const contractProbeRules = {
     contract: "OpenClaw package entrypoints resolve to files in the published or built plugin package.",
     target: "package-loader",
   },
+  "package-install-metadata-incomplete": {
+    id: "package.metadata.install-release",
+    contract: "Release publishing metadata declares canonical ClawHub and npm install specs.",
+    target: "package-loader",
+  },
+  "package-min-host-version-drift": {
+    id: "package.metadata.min-host-version",
+    contract: "Install minimum host version matches the OpenClaw package surface targeted by the plugin.",
+    target: "package-loader",
+  },
+  "package-npm-pack-entrypoint-missing": {
+    id: "package.npm-pack.entrypoints",
+    contract: "Advertised npm artifacts include every declared OpenClaw package entrypoint.",
+    target: "package-loader",
+  },
+  "package-npm-pack-metadata-missing": {
+    id: "package.npm-pack.metadata",
+    contract: "Advertised npm artifacts include OpenClaw manifest and package metadata.",
+    target: "package-loader",
+  },
+  "package-npm-pack-unavailable": {
+    id: "package.npm-pack.available",
+    contract: "Packages that advertise npm install support can produce an npm pack artifact.",
+    target: "package-loader",
+  },
   "package-openclaw-entry-missing": {
     id: "package.entrypoint.openclaw-metadata",
     contract: "OpenClaw package metadata declares entrypoints for cold import and registration capture.",
@@ -150,7 +175,6 @@ export function probePriority(code, fixturePriority) {
       "before-tool-call-probe",
       "conversation-access-hook",
       "missing-compat-record",
-      "registration-capture-gap",
       "sdk-export-missing",
     ].includes(code)
   ) {