v0.10.0 — OpenClaw compatibility refresh (2026.4.15 → 2026.4.23)

[FRIDAY-Drakon]

Summary

Rolls Agent Optimizer forward to match OpenClaw through v2026.4.23. Bundles the earlier compat-refresh work already on this branch with new detectors for the four config-surface changes that landed in v2026.4.23 on 2026-04-24.

Included (earlier commits on this branch)

• hooks-deprecations.ts — warns on legacy hooks.internal.handlers[] array format and before_agent_start usage
• plugins.ts — recognises firecrawl, openrouter, github-copilot, openai-codex as bundled
• plugins.ts — warns when legacy ~/.openclaw/plugins/ is populated

New in this commit — v2026.4.23 detectors

config-patch-usage (new auditor)

Scans hooks.internal.entries/handlers and agent tools.alsoAllow lists for config.patch / config.apply references. v2026.4.23 fails closed on non-allowlisted paths (prompt, model, mention-gating). Agents relying on config.patch for anything else will silently fail. Particularly relevant for Jarvis — past config.patch crashes (invalid keys, unknown subtrees) would now be silent rejects.

dreaming-cron (new auditor)

Reads ~/.openclaw/cron/jobs.json and flags stale main-session dreaming jobs. v2026.4.23 decouples dreaming from heartbeat and runs it as an isolated lightweight agent turn; openclaw doctor --fix migrates the old shape. Uses HOME env override in tests so they work in any CI.

bootstrap-files — MEMORY.md split-brain

Detects when both MEMORY.md and memory.md exist in workspace root. v2026.4.23 canonicalizes on MEMORY.md and no longer treats lowercase as a runtime fallback. Uses readdirSync for case-sensitive detection; positive test is skipped on case-insensitive FS (macOS) since the FS can't represent the split-brain state.

memory-search — local.contextSize validation

Validates the new memorySearch.local.contextSize field (default 4096). Warns below 1024 (typo / severely constrained host) or above 32768 (likely wrong magnitude, bloats embedding-host memory). Silent when unset.

security-advisories

Adds v2026.4.23 row for the config.patch allowlist lockdown behaviour change (warn severity), pointing the operator at the new config-patch-usage auditor.

Version

0.9.2 → 0.10.0. Collects this PR's work plus the earlier compat commits on the branch under one release rather than a mid-cycle 0.9.3.

Test plan

• Full suite: 165 tests (146 baseline + 19 new), 1 skipped on macOS (runs on Linux CI)
• npm run build clean
• Dry-run on a real fleet agent config (Jarvis / Edith / Tars openclaw.json) — expect Config Patch Usage to fire on any config.patch hook history
• Verify dreaming-cron auditor against Jarvis's cron/jobs.json on clawdbot1

Out of scope

• security-scan, fleet, config-drift stay CLI-only (not in the standard audit cycle). Unchanged.
• Autofix support for the new warnings. openclaw doctor --fix handles the split-brain + dreaming migrations; Agent Optimizer just detects.
• Channel-security tightening from 2026.4.23 (Android/pairing cleartext, Teams/Discord/Slack hardening) — mostly internal fixes, low config surface. Revisit if needed.

🤖 Generated with Claude Code