fix(outbound): restore generic delivery and security seams

src/plugin-sdk/channel-contract.ts

@@ -14,9 +14,16 @@ export type {
   ChannelMessageActionName,
   ChannelMessageToolDiscovery,
   ChannelMessageToolSchemaContribution,
+  ChannelStructuredComponents,
   ChannelStatusIssue,
   ChannelThreadingContext,
   ChannelThreadingToolContext,
 } from "../channels/plugins/types.js";
 
-export type { ChannelDirectoryAdapter } from "../channels/plugins/types.adapters.js";
+export type {
+  ChannelDirectoryAdapter,
+  ChannelDoctorAdapter,
+  ChannelDoctorConfigMutation,
+  ChannelDoctorEmptyAllowlistAccountContext,
+  ChannelDoctorSequenceResult,
+} from "../channels/plugins/types.adapters.js";

src/plugin-sdk/command-auth.ts

@@ -71,7 +71,6 @@ export {
   resolveSkillCommandInvocation,
 } from "../auto-reply/skill-commands.js";
 export type { SkillCommandSpec } from "../agents/skills.js";
-export { buildCommandsPaginationKeyboard } from "../auto-reply/reply/commands-info.js";
 export {
   buildModelsProviderData,
   formatModelsAvailableHeader,

src/plugin-sdk/config-runtime.ts

@@ -41,6 +41,8 @@ export {
   resolveTelegramCustomCommands,
 } from "../config/telegram-custom-commands.js";
 export {
+  formatSlackStreamingBooleanMigrationMessage,
+  formatSlackStreamModeMigrationMessage,
   mapStreamingModeToSlackLegacyDraftStreamMode,
   resolveDiscordPreviewStreamMode,
   resolveSlackNativeStreaming,

src/plugin-sdk/conversation-runtime.ts

@@ -42,8 +42,6 @@ export {
   resolveThreadBindingThreadName,
 } from "../channels/thread-bindings-messages.js";
 export {
-  DISCORD_THREAD_BINDING_CHANNEL,
-  MATRIX_THREAD_BINDING_CHANNEL,
   formatThreadBindingDisabledError,
   resolveThreadBindingEffectiveExpiresAt,
   resolveThreadBindingIdleTimeoutMs,

src/plugin-sdk/core.ts

@@ -34,7 +34,6 @@ export type {
   OpenClawPluginService,
   OpenClawPluginServiceContext,
   PluginCommandContext,
-  PluginInteractiveTelegramHandlerContext,
   PluginLogger,
   ProviderAuthContext,
   ProviderAuthDoctorHintContext,
@@ -247,6 +246,8 @@ type CreateChannelPluginBaseOptions<TResolvedAccount> = {
   meta?: Partial<NonNullable<ChannelPlugin<TResolvedAccount>["meta"]>>;
   setupWizard?: NonNullable<ChannelPlugin<TResolvedAccount>["setupWizard"]>;
   capabilities?: ChannelPlugin<TResolvedAccount>["capabilities"];
+  commands?: ChannelPlugin<TResolvedAccount>["commands"];
+  doctor?: ChannelPlugin<TResolvedAccount>["doctor"];
   agentPrompt?: ChannelPlugin<TResolvedAccount>["agentPrompt"];
   streaming?: ChannelPlugin<TResolvedAccount>["streaming"];
   reload?: ChannelPlugin<TResolvedAccount>["reload"];
@@ -267,6 +268,8 @@ type CreatedChannelPluginBase<TResolvedAccount> = Pick<
       ChannelPlugin<TResolvedAccount>,
       | "setupWizard"
       | "capabilities"
+      | "commands"
+      | "doctor"
       | "agentPrompt"
       | "streaming"
       | "reload"
@@ -357,6 +360,7 @@ type ChatChannelSecurityOptions<TResolvedAccount extends { accountId?: string |
     normalizeEntry?: (raw: string) => string;
   };
   collectWarnings?: ChannelSecurityAdapter<TResolvedAccount>["collectWarnings"];
+  collectAuditFindings?: ChannelSecurityAdapter<TResolvedAccount>["collectAuditFindings"];
 };
 
 type ChatChannelPairingOptions = {
@@ -464,6 +468,9 @@ function resolveChatChannelSecurity<TResolvedAccount extends { accountId?: strin
         normalizeEntry: security.dm.normalizeEntry,
       }),
     ...(security.collectWarnings ? { collectWarnings: security.collectWarnings } : {}),
+    ...(security.collectAuditFindings
+      ? { collectAuditFindings: security.collectAuditFindings }
+      : {}),
   };
 }
 
@@ -559,6 +566,8 @@ export function createChannelPluginBase<TResolvedAccount>(
     },
     ...(params.setupWizard ? { setupWizard: params.setupWizard } : {}),
     ...(params.capabilities ? { capabilities: params.capabilities } : {}),
+    ...(params.commands ? { commands: params.commands } : {}),
+    ...(params.doctor ? { doctor: params.doctor } : {}),
     ...(params.agentPrompt ? { agentPrompt: params.agentPrompt } : {}),
     ...(params.streaming ? { streaming: params.streaming } : {}),
     ...(params.reload ? { reload: params.reload } : {}),

src/plugin-sdk/infra-runtime.ts

@@ -33,6 +33,7 @@ export * from "../infra/net/proxy-fetch.js";
 export * from "../infra/net/undici-global-dispatcher.js";
 export * from "../infra/net/ssrf.js";
 export * from "../infra/outbound/identity.js";
+export * from "../infra/outbound/sanitize-text.js";
 export * from "../infra/parse-finite-number.js";
 export * from "../infra/outbound/send-deps.js";
 export * from "../infra/retry.js";

src/plugin-sdk/matrix-runtime-heavy.ts

@@ -3,5 +3,17 @@
 
 export { ensureConfiguredAcpBindingReady } from "../acp/persistent-bindings.lifecycle.js";
 export { resolveConfiguredAcpBindingRecord } from "../acp/persistent-bindings.resolve.js";
-export { maybeCreateMatrixMigrationSnapshot } from "../infra/matrix-migration-snapshot.js";
+export {
+  autoPrepareLegacyMatrixCrypto,
+  detectLegacyMatrixCrypto,
+} from "../infra/matrix-legacy-crypto.js";
+export {
+  autoMigrateLegacyMatrixState,
+  detectLegacyMatrixState,
+} from "../infra/matrix-legacy-state.js";
+export {
+  hasActionableMatrixMigration,
+  hasPendingMatrixMigration,
+  maybeCreateMatrixMigrationSnapshot,
+} from "../infra/matrix-migration-snapshot.js";
 export { dispatchReplyFromConfigWithSettledDispatcher } from "./inbound-reply-dispatch.js";

src/plugin-sdk/outbound-runtime.ts

@@ -1,3 +1,4 @@
 export { createRuntimeOutboundDelegates } from "../channels/plugins/runtime-forwarders.js";
 export { resolveOutboundSendDep, type OutboundSendDeps } from "../infra/outbound/send-deps.js";
 export { resolveAgentOutboundIdentity, type OutboundIdentity } from "../infra/outbound/identity.js";
+export { sanitizeForPlainText } from "../infra/outbound/sanitize-text.js";

src/plugin-sdk/plugin-entry.ts

@@ -11,7 +11,6 @@ import type {
   OpenClawPluginServiceContext,
   OpenClawPluginToolContext,
   OpenClawPluginToolFactory,
-  PluginInteractiveTelegramHandlerContext,
   PluginLogger,
   ProviderAugmentModelCatalogContext,
   ProviderAuthContext,
@@ -117,7 +116,6 @@ export type {
   OpenClawPluginCommandDefinition,
   OpenClawPluginDefinition,
   PluginLogger,
-  PluginInteractiveTelegramHandlerContext,
 };
 export type { OpenClawConfig };
 

src/plugin-sdk/plugin-runtime.ts

@@ -4,6 +4,7 @@ export * from "../plugins/commands.js";
 export * from "../plugins/hook-runner-global.js";
 export * from "../plugins/http-path.js";
 export * from "../plugins/http-registry.js";
+export * from "../plugins/interactive-binding-helpers.js";
 export * from "../plugins/interactive.js";
 export * from "../plugins/lazy-service-module.js";
 export * from "../plugins/types.js";

src/plugin-sdk/reply-runtime.ts

@@ -52,8 +52,5 @@ export type {
 export { createReplyReferencePlanner } from "../auto-reply/reply/reply-reference.js";
 export type { GetReplyOptions, ReplyPayload } from "../auto-reply/types.js";
 export type { FinalizedMsgContext, MsgContext } from "../auto-reply/templating.js";
-export {
-  resolveAutoTopicLabelConfig,
-  generateTopicLabel,
-} from "../auto-reply/reply/auto-topic-label.js";
-export type { AutoTopicLabelParams } from "../auto-reply/reply/auto-topic-label.js";
+export { generateConversationLabel } from "../auto-reply/reply/conversation-label-generator.js";
+export type { ConversationLabelParams } from "../auto-reply/reply/conversation-label-generator.js";

src/plugin-sdk/runtime.ts

@@ -2,6 +2,8 @@ import { format } from "node:util";
 import type { OutputRuntimeEnv, RuntimeEnv } from "../runtime.js";
 export type { OutputRuntimeEnv, RuntimeEnv } from "../runtime.js";
 export { createNonExitingRuntime, defaultRuntime } from "../runtime.js";
+export { resolveCommandSecretRefsViaGateway } from "../cli/command-secret-gateway.js";
+export { getChannelsCommandSecretTargetIds } from "../cli/command-secret-targets.js";
 export {
   danger,
   info,
@@ -17,7 +19,18 @@ export {
 } from "../globals.js";
 export * from "../logging.js";
 export { waitForAbortSignal } from "../infra/abort-signal.js";
+export {
+  detectPluginInstallPathIssue,
+  formatPluginInstallPathIssue,
+} from "../infra/plugin-install-path-warnings.js";
+export { collectProviderDangerousNameMatchingScopes } from "../config/dangerous-name-matching.js";
 export { registerUnhandledRejectionHandler } from "../infra/unhandled-rejections.js";
+export { removePluginFromConfig } from "../plugins/uninstall.js";
+export {
+  isDiscordMutableAllowEntry,
+  isSlackMutableAllowEntry,
+  isZalouserMutableGroupEntry,
+} from "../security/mutable-allowlist-detectors.js";
 
 /** Minimal logger contract accepted by runtime-adapter helpers. */
 type LoggerLike = {