* fix(gateway): approval registry hardening and protocol-surface follow-ups
Follow-up delta to the merged #103579 head, rebased onto current main:
- gateway-protocol wire types derive from owner-module schema consts
(types.ts tombstone) and ProtocolSchemas leaves the package index so the
public plugin-sdk d.ts graph tree-shakes the registry declaration
- approval access authority follows the operator.approvals scope tier with
reviewerDeviceIds as the opt-in restriction (cross-surface
first-answer-wins; requester identity gates only legacy adapters)
- plugin node.invoke approvals register directly so unrenderable
presentations fail closed before request routing
- exec-approval manager reconciliation with #103515 revocation hardening
(resolution source attribution, one-shot ask-fallback consumption)
- surface-report pins and plugin-sdk API baseline refreshed; Swift models
regenerated
* feat(channels): add typed operator approval actions
Squash-rebased #103679 segment onto the durable-approval-registry tip on
current main. Typed approval/command/select presentation actions replace
raw-string inference across slack/telegram/discord/matrix/imessage/whatsapp,
approval.resolve carries an explicit kind, and channel adapters map native
callback envelopes through the typed action registry.
Drift reconciliation: deprecated buildExecApprovalInteractiveReply assertions
dropped (#104650 removed the shims); worker_environments bootstrap-column
migration kept alongside the approval resolution_ref backfill; plugin-sdk API
baseline regenerated.
(cherry picked from commit 68765a5d39d2118c88a7a54d00387337912d4494)
(cherry picked from commit 8642ac12af142e4b751f4f30d4b114615e7e5f66)
(cherry picked from commit 036c4bc39499925fc03de16ec9302e346769350a)
(cherry picked from commit 19dc350d6bc34e29a5169c6bc80971b0ad12adde)
(cherry picked from commit fc978b0bad86aef421c79f6a211b25cc1b743c01)
(cherry picked from commit 10de4d1ed5071f9be6ad1ee5d1e32c0fa8c9d11c)
(cherry picked from commit 9a664ced1b1fa740172b258f355f1a82925ae41c)
(cherry picked from commit c5ff69abbf444139e9e007bfa45beb0f00ffea54)
(cherry picked from commit d466a80795)
(cherry picked from commit f5b4fe40dd5c961322f8553cc80b2fdfb3f6503e)
(cherry picked from commit 7340b4749a4cc4c72f7a41cce1bc9cb550cae038)
(cherry picked from commit a151f41808f23ae60b10305ccd2bc959b9169a86)
* fix(approvals): preserve typed transport ownership
* test(imessage): narrow chunked approval text
* refactor(protocol): remove retired type tombstone
* fix(plugin-sdk): align surface budgets after rebase
* docs(changelog): note typed operator approvals
* docs(changelog): defer typed approval release note
25 KiB
summary, title, read_when
| summary | title | read_when | ||||
|---|---|---|---|---|---|---|
| Semantic message cards, charts, tables, controls, fallback text, and delivery hints for channel plugins | Message presentation |
|
Message presentation is OpenClaw's shared contract for rich outbound chat UI. It lets agents, CLI commands, approval flows, and plugins describe the message intent once, while each channel plugin renders the best native shape it can.
Use presentation for portable message UI: text sections, small context/footer text, dividers, charts, tables, buttons, select menus, and card title/tone.
Do not add new provider-native fields such as Discord components, Slack
blocks, Telegram buttons, Teams card, or Feishu card to the shared
message tool. Those are renderer outputs owned by the channel plugin.
Contract
Plugin authors import the public contract from:
import type {
MessagePresentation,
ReplyPayloadDelivery,
} from "openclaw/plugin-sdk/interactive-runtime";
Shape:
type MessagePresentation = {
title?: string;
tone?: "neutral" | "info" | "success" | "warning" | "danger";
blocks: MessagePresentationBlock[];
};
type MessagePresentationBlock =
| { type: "text"; text: string }
| { type: "context"; text: string }
| { type: "divider" }
| { type: "buttons"; buttons: MessagePresentationButton[] }
| { type: "select"; placeholder?: string; options: MessagePresentationOption[] }
| {
type: "chart";
chartType: "pie";
title: string;
segments: Array<{ label: string; value: number }>;
}
| {
type: "chart";
chartType: "bar" | "area" | "line";
title: string;
categories: string[];
series: Array<{ name: string; values: number[] }>;
xLabel?: string;
yLabel?: string;
}
| {
type: "table";
caption: string;
headers: string[];
rows: Array<Array<string | number>>;
rowHeaderColumnIndex?: number;
};
type MessagePresentationAction =
| { type: "command"; command: string }
| { type: "callback"; value: string }
| {
type: "approval";
approvalId: string;
approvalKind: "exec" | "plugin";
decision: "allow-once" | "allow-always" | "deny";
}
| { type: "url"; url: string }
| { type: "web-app"; url: string };
type MessagePresentationButton = {
label: string;
action?: MessagePresentationAction;
/** Legacy callback value. Prefer action for new controls. */
value?: string;
/** @deprecated Use an action with type "url". */
url?: string;
/** @deprecated Use an action with type "web-app". */
webApp?: { url: string };
/** @deprecated Use an action with type "web-app". */
web_app?: { url: string };
priority?: number;
disabled?: boolean;
reusable?: boolean;
style?: "primary" | "secondary" | "success" | "danger";
};
type MessagePresentationOption = {
label: string;
action?: Extract<MessagePresentationAction, { type: "command" | "callback" }>;
/** Legacy callback value. Prefer action for new controls. */
value?: string;
};
type ReplyPayloadDelivery = {
pin?:
| boolean
| {
enabled: boolean;
notify?: boolean;
required?: boolean;
};
};
Button semantics:
action.type: "command"runs a native slash command through core's command path. Use this for built-in command buttons and menus.action.type: "callback"carries opaque plugin data through the channel's interaction path. Channel plugins must not reinterpret callback data as slash commands.action.type: "approval"identifies one durable operator approval, its explicitexecorpluginkind, and the requested decision. Channel plugins encode that action into a transport-private callback and resolve it through the approval service; they must not parse/approvecommand text or infer kind from the ID.action.type: "url"opens a normal link.action.type: "web-app"launches a channel-native web app.valueis the legacy opaque callback value. New controls should useactionso channel plugins can map commands and callbacks without guessing from text.url,webApp, andweb_appremain accepted as deprecated boundary inputs. Normalizers preserve these fields so renderers can distinguish shipped legacy semantics from explicit typed actions. New producers should useaction.labelis required and is also used in text fallback.styleis advisory. Renderers should map unsupported styles to a safe default, not fail the send.priorityis optional. When a channel advertises action limits and controls must be dropped, core keeps higher-priority buttons first and preserves original order among equal priority buttons. When all controls fit, authored order is preserved.disabledis optional. Channels must opt in withsupportsDisabled; otherwise core degrades the disabled control to non-interactive fallback text. A disabled button always renders label-only in fallback text, even when it carries acommandaction.reusableis optional. Channels that support reusable native callbacks may keep the action available after a successful interaction. Use it for repeatable or idempotent actions such as refresh, inspect, or more details; leave it unset for normal one-shot approvals and destructive actions.
Select semantics:
options[].actionaccepts onlycommandorcallback; approval and link actions are button-only.options[].valueis the legacy selected application value.placeholderis advisory and may be ignored by channels without native select support.- If a channel does not support selects, fallback text lists the labels.
Chart semantics:
pierequires positive segment values.bar,area, andlineuse one orderedcategoriesarray. Every series supplies exactly one finite value per category, in the same order.- Category labels and series names must be unique. Invalid or incomplete chart blocks are dropped during normalization rather than silently changing data.
- Native chart rendering is opt-in through
presentationCapabilities.charts. Other channels receive the chart title, axes, categories, series, and values as deterministic text. This is also the accessibility fallback.
Table semantics:
-
captionis a required short heading.headersmust contain at least one unique, non-empty column label. -
rowsmust contain at least one row. Every row must have exactly one cell per header, and every cell must be a non-empty string or a finite number. -
rowHeaderColumnIndexis an optional zero-based index identifying the column whose cells should be exposed as row headers by native renderers. -
Table normalization is atomic. An invalid caption, header, row width, cell, or row-header index drops the table block instead of truncating or repairing its data.
-
Native table rendering is opt-in through
presentationCapabilities.tables. Other channels receive the caption and every row as deterministic linear text, with internal whitespace collapsed:Open pipeline (table) - Account: Acme; Stage: Won; ARR: 125000 - Account: Globex; Stage: Review; ARR: 82000
There is no separate report discriminator. Compose a report from title,
tone, text, context, chart, table, and action blocks. This keeps each
block independently renderable and gives the complete report the same
deterministic text fallback.
Producer examples
Simple card:
{
"title": "Deploy approval",
"tone": "warning",
"blocks": [
{ "type": "text", "text": "Canary is ready to promote." },
{ "type": "context", "text": "Build 1234, staging passed." },
{
"type": "buttons",
"buttons": [
{
"label": "Approve",
"action": { "type": "callback", "value": "deploy:approve" },
"style": "success"
},
{
"label": "Decline",
"action": { "type": "callback", "value": "deploy:decline" },
"style": "danger"
}
]
}
]
}
URL-only link button:
{
"blocks": [
{ "type": "text", "text": "Release notes are ready." },
{
"type": "buttons",
"buttons": [
{
"label": "Open notes",
"action": { "type": "url", "url": "https://example.com/release" }
}
]
}
]
}
Telegram Mini App button:
{
"blocks": [
{
"type": "buttons",
"buttons": [
{
"label": "Launch",
"action": { "type": "web-app", "url": "https://example.com/app" }
}
]
}
]
}
Select menu:
{
"title": "Choose environment",
"blocks": [
{
"type": "select",
"placeholder": "Environment",
"options": [
{ "label": "Canary", "value": "env:canary" },
{ "label": "Production", "value": "env:prod" }
]
}
]
}
Chart:
{
"blocks": [
{
"type": "chart",
"chartType": "line",
"title": "Quarterly revenue",
"categories": ["Q1", "Q2", "Q3"],
"series": [
{ "name": "Product", "values": [120, 145, 138] },
{ "name": "Services", "values": [80, 95, 104] }
],
"xLabel": "Quarter",
"yLabel": "Revenue"
}
]
}
Table report:
{
"title": "Pipeline report",
"tone": "info",
"blocks": [
{ "type": "text", "text": "Current opportunities by stage." },
{
"type": "table",
"caption": "Open pipeline",
"headers": ["Account", "Stage", "ARR"],
"rows": [
["Acme", "Won", 125000],
["Globex", "Review", 82000]
],
"rowHeaderColumnIndex": 0
},
{ "type": "context", "text": "Updated from the CRM snapshot." }
]
}
CLI send:
openclaw message send --channel slack \
--target channel:C123 \
--message "Deploy approval" \
--presentation '{"title":"Deploy approval","tone":"warning","blocks":[{"type":"text","text":"Canary is ready."},{"type":"buttons","buttons":[{"label":"Approve","value":"deploy:approve","style":"success"},{"label":"Decline","value":"deploy:decline","style":"danger"}]}]}'
Pinned delivery:
openclaw message send --channel telegram \
--target -1001234567890 \
--message "Topic opened" \
--pin
Pinned delivery with explicit JSON:
{
"pin": {
"enabled": true,
"notify": true,
"required": false
}
}
Renderer contract
Channel plugins declare render support on their outbound adapter:
const adapter: ChannelOutboundAdapter = {
deliveryMode: "direct",
presentationCapabilities: {
supported: true,
buttons: true,
selects: true,
context: true,
divider: true,
charts: false,
tables: false,
limits: {
actions: {
maxActions: 25,
maxActionsPerRow: 5,
maxRows: 5,
maxLabelLength: 80,
maxValueBytes: 100,
supportsStyles: true,
supportsDisabled: false,
},
selects: {
maxOptions: 25,
maxLabelLength: 100,
maxValueBytes: 100,
},
text: {
maxLength: 2000,
encoding: "characters",
markdownDialect: "discord-markdown",
},
},
},
deliveryCapabilities: {
pin: true,
},
renderPresentation({ payload, presentation, ctx }) {
return renderNativePayload(payload, presentation, ctx);
},
async pinDeliveredMessage({ target, messageId, pin }) {
await pinNativeMessage(target, messageId, { notify: pin.notify === true });
},
};
Capability booleans describe what the renderer can make interactive. Optional
limits describe the generic envelope core can adapt before calling the
renderer:
type ChannelPresentationCapabilities = {
supported?: boolean;
buttons?: boolean;
selects?: boolean;
context?: boolean;
divider?: boolean;
charts?: boolean;
tables?: boolean;
limits?: {
actions?: {
maxActions?: number;
maxActionsPerRow?: number;
maxRows?: number;
maxLabelLength?: number;
maxValueBytes?: number;
supportsStyles?: boolean;
supportsDisabled?: boolean;
supportsLayoutHints?: boolean;
};
selects?: {
maxOptions?: number;
maxLabelLength?: number;
maxValueBytes?: number;
};
text?: {
maxLength?: number;
encoding?: "characters" | "utf8-bytes" | "utf16-units";
markdownDialect?: "plain" | "markdown" | "html" | "slack-mrkdwn" | "discord-markdown";
supportsEdit?: boolean;
};
};
};
Core applies generic limits to semantic controls before rendering. Renderers still own final provider-specific validation and clipping for native block count, card size, URL limits, and provider quirks that cannot be expressed in the generic contract. If limits remove every control from a block, core keeps the labels as non-interactive context text so the delivered message still has a visible fallback.
Core render flow
On the canonical outbound path used by CLI and standard message actions, core:
- Normalizes the presentation payload.
- Resolves the target channel's outbound adapter.
- Reads
presentationCapabilities. - Applies generic capability limits such as action count, label length, and
select option count when the adapter advertises them. Chart and table blocks
become deterministic text unless the adapter explicitly advertises
charts: trueortables: true, respectively. - Calls
renderPresentationwhen the adapter can render the payload. - Falls back to conservative text when the adapter is absent or cannot render.
- Sends the resulting payload through the normal channel delivery path.
- Applies delivery metadata such as
delivery.pinafter the first successful sent message.
Channel-local reply or preview funnels that consume ReplyPayload directly
must either enter that canonical path or materialize the same presentation
fallback before projecting the payload down to plain text/media.
Core owns fallback behavior so producers can stay channel-agnostic. Channel plugins own native rendering and interaction handling.
Degradation rules
Presentation must be safe to send on limited channels.
Fallback text includes:
titleas the first linetextblocks as normal paragraphscontextblocks as compact context linesdividerblocks as a visual separator- button labels, including URLs for link buttons
- select option labels
- chart title, type, axes, categories, series, and values
- table caption, headers, and every row value
Button value fallback visibility
When a channel cannot render interactive controls, button and select values fall back to plain text. The fallback behavior preserves usability while keeping opaque callback data private:
command-typed actions render aslabel: \command`` so users can copy the command and run it manually in the channel input.callback-typed actions and legacyvaluefields render as label-only. The opaque callback value is not exposed in fallback text.approval-typed actions render label-only. Approval IDs and decisions are transport data and are not exposed through generic scalar helpers or fallback text.url/web-appactions and deprecatedurl/webApp/web_appinputs render the URL text alongside the button label, since the URL is user-facing.- Select options render as label-only. The underlying option value is not exposed in fallback text.
Channel adapters that add manual-command guidance in their fallback UI (e.g. Feishu document-comment instructions) must derive the command-present check from the same presentation blocks that the fallback renderer uses, so the guidance text only appears when a manual command is actually shown.
Unsupported native controls should degrade rather than fail the whole send. Examples:
- Telegram with inline buttons disabled sends text fallback.
- A channel without select support lists select options as text.
- A channel without native chart support lists the chart data as text.
- A channel without native table support lists every table row as text.
- A URL-only button becomes either a native link button or a fallback URL line.
- Optional pin failures do not fail the delivered message.
The main exception is delivery.pin.required: true; if pinning is requested as
required and the channel cannot pin the sent message, delivery reports failure.
Provider mapping
Current bundled renderers:
| Channel | Native render target | Notes |
|---|---|---|
| Discord | Components and component containers | Preserves legacy channelData.discord.components for existing provider-native payload producers, but new shared sends should use presentation. |
| Feishu | Interactive cards | Card header can use title; body avoids duplicating that title. |
| Matrix | Text fallback plus structured event field | Buttons/selects advertise as supported, but every block currently renders as renderMessagePresentationFallbackText output carried in a com.openclaw.presentation event field, not native interactive widgets. |
| Mattermost | Text plus interactive props | Selects and dividers are not supported; those blocks degrade to text. |
| Microsoft Teams | Adaptive Cards | Plain message text is included with the card when both are provided. Selects, styles, and disabled state are not supported. |
| Slack | Block Kit | Renders chart as native data_visualization and table as native data_table; preserves legacy channelData.slack.blocks, but new shared sends should use presentation. |
| Telegram | Text plus inline keyboards | Buttons/selects require inline button capability for the target surface; otherwise text fallback is used. |
| Plain channels | Text fallback | Channels without a renderer still get readable output. |
Provider-native payload compatibility is a transition affordance for existing reply producers. It is not a reason to add new shared native fields.
Presentation vs InteractiveReply
InteractiveReply is the older internal subset used by approval and interaction
helpers. It supports:
- text
- buttons
- selects
MessagePresentation is the canonical shared send contract. It adds:
- title
- tone
- context
- divider
- chart
- table
- URL-only buttons
- generic delivery metadata through
ReplyPayload.delivery
Use helpers from openclaw/plugin-sdk/interactive-runtime when bridging older
code:
import {
adaptMessagePresentationForChannel,
applyPresentationActionLimits,
hasMessagePresentationBlocks,
interactiveReplyToPresentation,
isMessagePresentationInteractiveBlock,
normalizeMessagePresentation,
presentationPageSize,
presentationToInteractiveControlsReply,
presentationToInteractiveReply,
renderMessagePresentationChartFallbackText,
renderMessagePresentationFallbackText,
renderMessagePresentationTableFallbackText,
resolveMessagePresentationActionValue,
resolveMessagePresentationButtonAction,
resolveMessagePresentationControlValue,
resolveMessagePresentationOptionAction,
} from "openclaw/plugin-sdk/interactive-runtime";
New code should accept or produce MessagePresentation directly. Existing
interactive payloads are a deprecated subset of presentation; runtime
support remains for older producers.
Non-deprecated helpers worth knowing:
normalizeMessagePresentation(raw)/hasMessagePresentationBlocks(value)validate and coerce an untyped payload (for example, JSON from the CLI--presentationflag) intoMessagePresentation.isMessagePresentationInteractiveBlock(block)narrows a block to thebuttons|selectunion.resolveMessagePresentationButtonAction(button)andresolveMessagePresentationOptionAction(option)return the canonical typed action while accepting deprecated boundary fields. An explicitactionalways wins.resolveMessagePresentationActionValue(action)/resolveMessagePresentationControlValue(control)read command/callback scalar values only. A non-scalar canonical action never falls through to a legacy shadowvalue, so approval IDs and link targets stay typed.renderMessagePresentationChartFallbackText(block)/renderMessagePresentationTableFallbackText(block)render one structured data block as deterministic text for channel-specific fallback paths.
The legacy InteractiveReply* types and conversion helpers are marked
@deprecated in the SDK:
InteractiveReply,InteractiveReplyBlock,InteractiveReplyButton,InteractiveReplyOption,InteractiveReplySelectBlock, andInteractiveReplyTextBlocknormalizeInteractiveReply(...)hasInteractiveReplyBlocks(...)interactiveReplyToPresentation(...)presentationToInteractiveReply(...)presentationToInteractiveControlsReply(...)resolveInteractiveTextFallback(...)reduceInteractiveReply(...)
presentationToInteractiveReply(...) and
presentationToInteractiveControlsReply(...) remain available as renderer
bridges for legacy channel implementations. New producer code should not call
them; send presentation and let core/channel adaptation handle rendering.
Approval helpers also have presentation-first replacements:
- use
buildApprovalPresentationFromActionDescriptors(...)instead ofbuildApprovalInteractiveReplyFromActionDescriptors(...) - use
buildApprovalPresentation(...)instead ofbuildApprovalInteractiveReply(...) - use
buildExecApprovalPresentation(...)instead ofbuildExecApprovalInteractiveReply(...)
Those shipped builders remain command-backed for plugin compatibility. Gateway
and bundled channel code that owns a durable approval kind should use
buildTypedApprovalPresentation(...),
buildTypedExecApprovalPendingReplyPayload(...), or
buildTypedPluginApprovalPendingReplyPayload(...) so transports receive an
explicit approval action instead of inferring semantics from /approve text.
renderMessagePresentationFallbackText(...) returns an empty string for
presentation blocks that have no text fallback, such as a divider-only
presentation. Transports that require a non-empty send body can pass
emptyFallback to opt into a minimal body without changing the default fallback
contract.
Delivery pin
Pinning is delivery behavior, not presentation. Use delivery.pin instead of
provider-native fields such as channelData.telegram.pin.
Semantics:
pin: truepins the first successfully delivered message.pin.notifydefaults tofalse.pin.requireddefaults tofalse.- Optional pin failures degrade and leave the sent message intact.
- Required pin failures fail delivery.
- Chunked messages pin the first delivered chunk, not the tail chunk.
Manual pin, unpin, and pins message actions still exist for existing
messages where the provider supports those operations.
Plugin author checklist
- Declare
presentationfromdescribeMessageTool(...)when the channel can render or safely degrade semantic presentation. - Add
presentationCapabilitiesto the runtime outbound adapter. - Implement
renderPresentationin runtime code, not control-plane plugin setup code. - Keep native UI libraries out of hot setup/catalog paths.
- Declare generic capability limits on
presentationCapabilities.limitswhen they are known. - Preserve final platform limits in the renderer and tests.
- Add fallback tests for unsupported charts, tables, buttons, selects, URL
buttons, title/text duplication, and mixed
messagepluspresentationsends. - Add delivery pin support through
deliveryCapabilities.pinandpinDeliveredMessageonly when the provider can pin the sent message id. - Do not expose new provider-native card/block/component/button fields through the shared message action schema.