id: plugin-validation title: Validate plugin packages and capabilities before activation scenario: plugin-lifecycle-management taskType: plugin-lifecycle intent: Ensure plugin packages and capabilities are validated before they become active runtime configuration. touchedAreas:
- electron/gateway/config-sync.ts
- electron/utils/openclaw-auth.ts
- electron/utils/channel-config.ts
- electron/utils/plugin-install.ts
- electron/api/routes/skills.ts
- tests/unit/openclaw-auth.test.ts
- tests/unit/channel-config.test.ts
- tests/unit/plugin-install.test.ts
- harness/specs/tasks/plugin-validation.md
- harness/specs/rules/active-config-guards.md
- harness/specs/scenarios/plugin-lifecycle-management.md expectedUserBehavior:
- Invalid plugin packages do not become active silently.
- Capability config errors are surfaced as blocked, conflicted, degraded, or actionable diagnostics.
- Valid plugin changes keep Gateway startup and configured capabilities usable. requiredProfiles:
- fast requiredTests:
- tests/unit/openclaw-auth.test.ts
- tests/unit/channel-config.test.ts acceptance:
- Package manifest, dependency, and compatibility checks run before activation when affected by the task.
- Capability validation checks owner uniqueness and required config.
- Failure states are diagnosable and do not leave stale active owners. docs: required: false
Use this task spec when changing plugin validation, manifest checks, dependency readiness, or capability readiness gates.