openclaw-code-agent 4.2.0 → 4.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -70,6 +70,19 @@ openclaw gateway restart
70
70
  openclaw plugins inspect openclaw-code-agent --runtime --json
71
71
  ```
72
72
 
73
+ If OpenClaw blocks installation with a dangerous-code scanner finding for
74
+ `child_process`, that is expected for this trusted plugin because it launches
75
+ local coding harnesses and git tooling. Review the rationale in
76
+ [docs/SECURITY.md](docs/SECURITY.md), then rerun the trusted package/source with
77
+ the unsafe-install override:
78
+
79
+ ```bash
80
+ openclaw plugins install openclaw-code-agent --force --pin --dangerously-force-unsafe-install
81
+ ```
82
+
83
+ Use that override only for a package/source you already trust. When validating a
84
+ specific reviewed release, add its version after the package name.
85
+
73
86
  Add the smallest useful config under `plugins.entries["openclaw-code-agent"]` in `~/.openclaw/openclaw.json`:
74
87
 
75
88
  ```json
@@ -103,7 +116,7 @@ Because worktree isolation defaults to `delegate`, `defaultWorkdir` should norma
103
116
 
104
117
  Chat-launched sessions route updates back to their originating chat thread. For agent-launched tool sessions without an origin route, configure `fallbackChannel` or `agentChannels` in the reference guide.
105
118
 
106
- This release targets the OpenClaw SDK package `openclaw@2026.5.5`, while keeping the plugin peer floor at `>=2026.4.21`.
119
+ This release targets the OpenClaw SDK package `openclaw@2026.5.6`, while keeping the plugin peer floor at `>=2026.4.21`.
107
120
 
108
121
  If you use Codex, make sure the local `codex` command or `OPENCLAW_CODEX_APP_SERVER_COMMAND` override is available and authenticated. When Codex auth is inconsistent, this is the recommended `~/.codex/config.toml` setting:
109
122