openclaw/docs/plugins
Sarah Fortune 6bd0d9114c
feat(agentsapi): discover self-hosted skills (#159363)
* feat(agentsapi): discover self-hosted skills

* fix(agentsapi): accept absolute Windows capability paths

* docs(agentsapi): clarify skill directory binding compatibility

* refactor(agentsapi): name executor skill directories clearly

* fix(agentsapi): reject invalid executor skill directories

ClawSweeper request:

> The new prefix regex accepts duplicate directories and `.` or `..` segments, such as `/workspace/../skills`, then forwards them to the native request. [OpenAI's Agents API guidance](https://developers.openai.com/api/docs/guides/tools-skills) forbids those entries, so an accepted OpenClaw setting can fail only when a session starts. Validate the whole list at the plugin boundary and cover the request path.

Reject duplicate paths and dot segments in both plugin configuration validation
and the runtime schema. Preserve executor-host path semantics for POSIX and
Windows; do not normalize or rewrite configured paths.

* fix(agentsapi): require complete executor UNC directories

ClawSweeper requested:
"Require a server and share in both validators and cover the request path."

Require both path components in runtime and manifest validation while
preserving configured directory bytes and existing POSIX/drive handling.

---------

Co-authored-by: Sarah Fortune <sarah.fortune@gmail.com>
2026-09-28 06:11:58 +00:00
..
architecture-internals fix(openai): retire the Sora video provider after the API shutdown (#159543) 2026-09-27 22:52:14 +00:00
codex-harness fix(codex): recover remote connections during harness replacement (#159466) 2026-09-27 21:11:17 -07:00
codex-harness-reference refactor(tool-search): retire tool_search_code in favor of structured search and Code Mode (#159398) 2026-09-27 16:08:37 -07:00
codex-harness-runtime fix: deliver side answers while channel tasks continue (#159416) 2026-09-26 22:14:00 -07:00
google-meet feat(meetings): add durable participation foundation (#152327) 2026-09-25 14:28:23 -07:00
hooks fix: keep plugin queues bound to their selected session (#155714) 2026-09-22 08:37:46 -07:00
manifest feat: reserve ordered model recommendations in catalog v2 (#158863) 2026-09-26 18:13:21 +05:30
reference feat(agentsapi): configure hosted or self-hosted environments (#158307) 2026-09-27 21:59:00 -07:00
sdk-agent-harness feat(agentsapi): discover self-hosted skills (#159363) 2026-09-28 06:11:58 +00:00
sdk-channel-plugins feat(channels): configure mentions in bot-created threads (#157713) 2026-09-26 19:06:17 -07:00
sdk-entrypoints fix: preview files in remotely hosted workspaces (#159895) 2026-09-27 22:47:43 -07:00
sdk-migration fix(gateway): keep paired diagnostics working across SSH routes (#159169) 2026-09-27 17:32:22 -07:00
sdk-overview refactor: remove Tasks and TaskFlow runtime (#159179) 2026-09-27 10:40:29 -07:00
sdk-provider-plugins fix(models): preserve legacy catalogs after failed refreshes (#158113) 2026-09-25 11:39:38 -07:00
sdk-runtime fix(terminal): terminals fail on OpenClaw's Bun build when Node is not installed (#159447) 2026-09-27 17:30:18 -07:00
voice-call fix(voice-call): load on supported 2026.9.6 hosts (#159987) 2026-09-27 19:52:02 -07:00
adding-capabilities.md
admin-http-rpc.md refactor: remove Tasks and TaskFlow runtime (#159179) 2026-09-27 10:40:29 -07:00
apple-fm.md
architecture-internals.md
architecture.md fix: stop catalog refreshes rebuilding known provider owners (#160055) 2026-09-27 20:29:54 -07:00
beam.md perf(beam): reuse session catalog metadata between polls (#158394) 2026-09-25 15:43:31 -07:00
building-plugins.md chore(deps): refresh dependencies with seven-day cutoff (#158298) 2026-09-26 20:42:53 -07:00
bundles.md fix(agents): MCP server tools disappear when catalog listing takes over 1.5s (#157855) 2026-09-25 15:16:16 +05:30
cli-backend-plugins.md fix(agents): keep cli-runner recovery retry budgets monotonic (#150817) 2026-09-20 22:17:38 +03:00
codex-computer-use.md fix(codex): support signed Desktop runtime layouts (#158480) 2026-09-26 00:39:11 +00:00
codex-harness-reference.md
codex-harness-runtime.md fix(codex): preserve memory instructions with Desktop Computer Use (#158472) 2026-09-26 02:12:04 +00:00
codex-harness.md refactor: remove Tasks and TaskFlow runtime (#159179) 2026-09-27 10:40:29 -07:00
codex-native-plugins.md docs: explain Codex app approval precedence (#155089) 2026-09-24 22:55:34 +00:00
codex-supervision.md perf(codex): reuse paired node snapshots for progressive catalogs (#153614) 2026-09-20 03:46:15 -07:00
community.md
compatibility.md docs: fix 12 concrete defects from the ux audit remainder (#144128) 2026-09-25 17:28:14 +08:00
copilot.md fix(copilot): keep turns responsive during native task persistence (#159071) 2026-09-26 13:25:54 -07:00
dependency-resolution.md fix(release): preserve root precedence in legacy dependency checks (#156886) 2026-09-23 18:44:15 -07:00
facetime-recovery.md feat(plugins): add experimental FaceTime realtime voice bridge (#119291) 2026-09-19 20:36:04 -07:00
facetime.md fix(facetime): repair call ownership and realtime routing (#154225) 2026-09-20 19:45:01 -07:00
feature-plugins.md feat: show declared plugin capabilities and setup guides (#157956) 2026-09-25 16:43:53 -07:00
geolocation.md feat: let agents query online people and device activity (#159117) 2026-09-27 11:38:53 +00:00
github.md fix(github): avoid anonymous quota in authenticated link readers (#153981) 2026-09-20 21:00:36 +00:00
google-meet.md
hooks.md fix(plugins): withhold Incognito content from observation hooks (#156417) 2026-09-23 19:41:31 +08:00
install-overrides.md
llama-cpp.md
logbook.md
manage-plugins.md docs: clarify when plugin reload requires a restart (#157052) 2026-09-23 22:57:18 -07:00
manifest.md feat: curate plugin categories and add Computer use discovery (#158686) 2026-09-26 02:55:54 -07:00
meeting-plugins.md fix(meetings): wait for pending audio setup on leave (#155787) 2026-09-22 11:32:27 -07:00
memory-lancedb.md fix: retain loaded native captures and cancel stalled memory stats (#158950) 2026-09-26 18:29:57 +00:00
memory-wiki.md refactor(extensions): deslop memory-wiki, active-memory, acpx and agentsapi (#159262) 2026-09-26 23:35:00 -07:00
message-presentation.md
oc-path.md
onepassword.md fix(onepassword): move pending authorization onto SQLite worker (#156000) 2026-09-23 11:24:06 -07:00
onnx.md fix: give local decision models up to 30 seconds (#154538) 2026-09-21 03:02:35 -07:00
plugin-inventory.md feat(agentsapi): configure hosted or self-hosted environments (#158307) 2026-09-27 21:59:00 -07:00
plugin-permission-requests.md
reference.md refactor: retire the TaskFlow Webhooks plugin (#158225) 2026-09-25 20:29:15 -07:00
sdk-agent-harness.md
sdk-channel-inbound.md fix: preserve bot reply context and enable bot messages by default (#157091) 2026-09-24 07:58:36 +00:00
sdk-channel-ingress.md docs: fix 12 concrete defects from the ux audit remainder (#144128) 2026-09-25 17:28:14 +08:00
sdk-channel-outbound.md fix(telegram): keep a visible outcome when final delivery fails (#155906) 2026-09-23 09:59:35 +05:30
sdk-channel-plugins.md fix: scheduled message-tool posts ignore the channel's formatting rules and flatten <pre> spacing (#159442) 2026-09-27 15:13:04 +05:30
sdk-entrypoints.md refactor(agents): share workspace context preparation (#158389) 2026-09-25 18:44:34 -07:00
sdk-migration.md refactor: remove Tasks and TaskFlow runtime (#159179) 2026-09-27 10:40:29 -07:00
sdk-overview.md feat: read GitHub issues, pull requests, and commits beside chat (#148464) 2026-09-18 23:54:04 -07:00
sdk-provider-plugins.md feat(openai): add Sign in with ChatGPT through Responses (#148567) 2026-09-24 15:19:53 -07:00
sdk-runtime.md refactor: remove Tasks and TaskFlow runtime (#159179) 2026-09-27 10:40:29 -07:00
sdk-setup.md chore(deps): refresh dependencies with seven-day cutoff (#158298) 2026-09-26 20:42:53 -07:00
sdk-subpaths.md fix(pairing): device join codes ignore gateway.publicOrigin behind public ingress (#159465) 2026-09-27 12:07:50 -07:00
sdk-testing.md refactor: remove Tasks and TaskFlow runtime (#159179) 2026-09-27 10:40:29 -07:00
session-share.md perf(session-share): keep chat catalog startup responsive (#156400) 2026-09-23 11:49:31 +00:00
team-reports.md perf(team-reports): keep collection off the Gateway event loop (#159101) 2026-09-26 12:32:24 -07:00
teams-meetings.md
tool-plugins.md feat(gateway): let operators disable client file and image uploads (#158567) 2026-09-27 18:40:36 -07:00
typesafe.md fix(decisions): preserve fallback on provider input rejection (#156746) 2026-09-24 00:45:00 +00:00
vault.md
voice-call.md
workboard.md refactor: remove Tasks and TaskFlow runtime (#159179) 2026-09-27 10:40:29 -07:00
zalouser.md
zoom-meetings.md