@totalreclaw/totalreclaw 3.3.7-rc.2 → 3.3.7-rc.3

package/CHANGELOG.md

@@ -4,6 +4,21 @@ All notable changes to `@totalreclaw/totalreclaw` (the OpenClaw plugin) are docu
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.3.7-rc.3] — 2026-05-04
+
+Root cause of tool-binding gap on OpenClaw 2026.5.2: the plugin manifest (`openclaw.plugin.json`) was missing the `contracts.tools` declaration that OpenClaw 2026.5.2 now requires before any non-bundled plugin may register agent tools. Without it, every `api.registerTool()` call is silently rejected — `openclaw plugins doctor` shows 17× "plugin must declare contracts.tools before registering agent tools". The gateway loads the plugin module (ESM import succeeds, `plugins.allow` check passes) but no tools bind to any session, so `totalreclaw_pair` / `totalreclaw_remember` / etc. are invisible to the agent and auto-QA step 1 fails.
+
+The `plugins.allow` warning ("plugins.allow is empty; discovered non-bundled plugins may auto-load: totalreclaw") is a separate UX issue logged by the discoveryLoader when `plugins.allow` is absent — it is informational and does NOT prevent loading; the actual block is `contracts.tools`. Setting `plugins.allow=["totalreclaw"]` via `openclaw config set` is still recommended to suppress the noisy warning for users who follow the install guide, but it is not the root fix. See NOTE below.
+
+### Fixed — add `contracts.tools` to plugin manifest (issue #87 / FR #72097 tool-binding race)
+
+**Root cause:** OpenClaw 2026.5.2 (image `openclaw-qa:2026.5.2`) enforced a new security gate: non-bundled plugins must declare `contracts.tools` — an explicit allowlist of tool names — in their `openclaw.plugin.json` before registering any agent tool. Plugins that omit the field have every `registerTool` call silently dropped. The gate did not exist in ≤2026.4.24 (the version the plugin was built against), so the gap only surfaced when the QA container was upgraded.
+
+**Fix:** added `contracts.tools` to `skill/plugin/openclaw.plugin.json` listing all 17 tool names the plugin registers:
+`totalreclaw_remember`, `totalreclaw_recall`, `totalreclaw_forget`, `totalreclaw_export`, `totalreclaw_status`, `totalreclaw_preload_embedder`, `totalreclaw_consolidate`, `totalreclaw_pin`, `totalreclaw_unpin`, `totalreclaw_retype`, `totalreclaw_set_scope`, `totalreclaw_import_from`, `totalreclaw_import_batch`, `totalreclaw_upgrade`, `totalreclaw_migrate`, `totalreclaw_pair`, `totalreclaw_report_qa_bug`.
+
+**NOTE — `plugins.allow` side-effect:** OpenClaw 2026.5.2 also emits `plugins.allow is empty; discovered non-bundled plugins may auto-load: totalreclaw` as an INFO log whenever a session starts and `plugins.allow` is unset. The plugin install step (`openclaw plugins install @totalreclaw/totalreclaw@<ver>`) does NOT automatically add the plugin to `plugins.allow`. As a consequence, users who follow the public install guide hit this noisy warning every session. The `contracts.tools` fix resolves tool binding; the `plugins.allow` warning requires either (a) an upstream OpenClaw change to auto-populate `plugins.allow` on `plugins install`, or (b) adding `openclaw config set plugins.allow '["totalreclaw"]'` to the install guide as a one-time post-install step. Tracked as FR upstream; the setup guide has been updated to include the config set step.
+
 ## [3.3.7-rc.2] — 2026-05-04
 
 Follow-up to 3.3.7-rc.1, caught in Pedro's manual integration testing on the OpenClaw side 2026-05-03. The 5-tier auth fix shipped DEAD-CODE in rc.1: gateway logs surfaced `[gateway] [plugins] command registration failed: Command name "restart" is reserved by a built-in command (plugin=totalreclaw, source=/home/pdiogo/.openclaw/extensions/totalreclaw/dist/index.js)`. The plugin's `/restart` registration was rejected because OpenClaw's plugin registry hard-rejects `restart` (and the rest of `RESERVED_COMMANDS` — see `node_modules/openclaw/dist/registry-*.js` — `help`, `commands`, `status`, `whoami`, `context`, `stop`, `restart`, `reset`, `new`, `compact`, `config`, `debug`, `allowlist`, `activation`, `skill`, `subagents`, `kill`, `steer`, `tell`, `model`, `models`, `queue`, `send`, `bash`, `exec`, `think`, `verbose`, `reasoning`, `elevated`, `usage`). Built-in `/restart` retains its allow-from-only semantics, which is what gave Pedro the original "You are not authorized" — and our 5-tier fallback never ran because plugin registration never succeeded.

package/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: totalreclaw
 description: "Install + set up TotalReclaw encrypted memory for OpenClaw, then use totalreclaw_remember / totalreclaw_recall. Trigger on 'install TotalReclaw', 'set up TotalReclaw', 'restore my recovery phrase', or any remember / recall request."
-version: 3.3.7-rc.2
+version: 3.3.7-rc.3
 author: TotalReclaw Team
 license: MIT
 homepage: https://totalreclaw.xyz

package/openclaw.plugin.json

@@ -2,6 +2,27 @@
   "id": "totalreclaw",
   "name": "TotalReclaw",
   "description": "End-to-end encrypted memory vault for AI agents",
+  "contracts": {
+    "tools": [
+      "totalreclaw_remember",
+      "totalreclaw_recall",
+      "totalreclaw_forget",
+      "totalreclaw_export",
+      "totalreclaw_status",
+      "totalreclaw_preload_embedder",
+      "totalreclaw_consolidate",
+      "totalreclaw_pin",
+      "totalreclaw_unpin",
+      "totalreclaw_retype",
+      "totalreclaw_set_scope",
+      "totalreclaw_import_from",
+      "totalreclaw_import_batch",
+      "totalreclaw_upgrade",
+      "totalreclaw_migrate",
+      "totalreclaw_pair",
+      "totalreclaw_report_qa_bug"
+    ]
+  },
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@totalreclaw/totalreclaw",
-  "version": "3.3.7-rc.2",
+  "version": "3.3.7-rc.3",
   "description": "End-to-end encrypted, agent-portable memory for OpenClaw and any LLM-agent runtime. XChaCha20-Poly1305 with protobuf v4 + on-chain Memory Taxonomy v1 (claim / preference / directive / commitment / episode / summary).",
   "type": "module",
   "keywords": [

package/skill.json

@@ -1,6 +1,6 @@
 {
   "name": "totalreclaw",
-  "version": "3.3.7-rc.2",
+  "version": "3.3.7-rc.3",
   "description": "End-to-end encrypted memory for AI agents — portable, yours forever. XChaCha20-Poly1305 E2EE: server never sees plaintext.",
   "author": "TotalReclaw Team",
   "license": "MIT",