chore(plugin): update OpenClaw SDK to 2026.5.9

[calltelemetry-jason]

Summary

• update the OpenClaw plugin SDK dev dependency to v2026.5.9-beta.1, the latest OpenClaw release available on May 9, 2026
• move task-flow mutation binding to runtime.tasks.managedFlows with 2026.4 fallback aliases retained
• add strict source typecheck, CI typecheck coverage, Node >=22.16 engine metadata, and patch release version 0.9.24
• keep doctor backend diagnostics stable by reporting API-key and live-test status even when a CLI binary is missing
• refresh lockfile overrides for vulnerable transitive dev packages

Release Notes Checked

• OpenClaw v2026.5.9-beta.1: plugin SDK/task ledger updates, managed plugin dependency fixes, Node 22.16+ floor, dependency refresh
• OpenClaw v2026.5.7: latest stable release on npm/GitHub latest tag before the May 9 prerelease

Testing

• npm run typecheck
• npm test
• npm audit --omit=dev
• npm audit --audit-level=high

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

📝 Walkthrough

Walkthrough

This PR adds TypeScript tooling and CI type-checking, bumps package and plugin versions, updates dependency overrides, prefers OpenClaw's runtime.tasks.managedFlows with fallbacks, and runs unconditional API-key validation in doctor; tests and README updated accordingly.

Changes

OpenClaw Plugin Update & Tooling

Layer / File(s)	Summary
TypeScript Configuration & Setup tsconfig.json, package.json	TypeScript project configuration targets ES2022 with NodeNext module resolution, strict mode, and noEmit. typecheck and test:coverage scripts added.
Build, Test & CI Infrastructure package.json, .github/workflows/ci.yml, codecov.yml	engines constraint (Node.js ≥22.16) added. CI workflow runs npm run typecheck after dependency install and before tests. Codecov patch status set to informational.
Version & Dependency Updates package.json, openclaw.plugin.json	Package and plugin versions bumped to 0.9.24; openclaw devDependency updated to ^2026.5.9-beta.1. overrides extended with basic-ftp and postcss.
Documentation README.md	OpenClaw badge updated to v2026.5.9--beta.1. Unit test example now runs npm run typecheck before Vitest.
Task Flow API Compatibility Core src/pipeline/taskflow-bridge.ts	Runtime probing now prefers runtime.tasks.managedFlows, falls back to runtime.tasks.flow and then runtime.taskFlow, and requires a bindSession function; JSDoc added for helpers.
Task Flow API Tests src/pipeline/taskflow-bridge.test.ts	Fixture changed to expose runtime.tasks.managedFlows; tests added for namespace preference, probing invalid managedFlows before falling back, and OpenClaw 2026.4 compatibility via taskFlow; obsolete fallback test removed.
Doctor Diagnostic Implementation src/infra/doctor.ts	API-key validation runs for every backend before binary checks; live invocation test still requires installed binary and logs a skip warning when missing.
Doctor Tests src/infra/doctor.test.ts	afterEach now clears mocks and unstubs globals; dispatch state counts test writes a temp file and passes explicit dispatchStatePath; tilde-path mock removal.

Sequence Diagram(s)

sequenceDiagram
  participant CI
  participant Typecheck
  participant Test
  participant Codecov
  CI->>Typecheck: run npm run typecheck
  Typecheck-->>CI: pass/fail
  CI->>Test: run vitest / coverage
  Test->>Codecov: upload coverage (informational)

Loading

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

Poem

🐰 A tiny hop, a version new,
TypeScript scans each line anew,
The bridge learns flows both old and fine,
Doctor checks keys and gives a sign,
CI hums along — the trees align.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes the main objective of the PR—updating the OpenClaw SDK—and aligns with the primary changes throughout the changeset.
Description check	✅ Passed	The description covers the key changes and testing performed, though the template's 'Changes' section is replaced with a bulleted summary and the PR description lacks explicit verification of the three checklist items.
Docstring Coverage	✅ Passed	Docstring coverage is 90.91% which is sufficient. The required threshold is 80.00%.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/openclaw-2026-5-linear

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[sentry]

Welcome to Codecov 🎉

Once you merge this PR into your default branch, you're all set! Codecov will compare coverage reports and display results in all future pull requests.

Thanks for integrating Codecov - We've got you covered ☂️

[Copilot]

Pull request overview

Updates this plugin to align with the latest OpenClaw SDK (v2026.5.9-beta.1) and its task-flow runtime namespace changes, while tightening CI/typechecking and keeping doctor output stable across environments.

Changes:

• Add a strict TypeScript tsconfig.json, a typecheck script, and run it in CI.
• Update task-flow mutation binding to prefer api.runtime.tasks.managedFlows, retaining 2026.4-compatible fallbacks.
• Keep doctor deep checks stable by reporting API-key status regardless of CLI binary presence, and explicitly reporting live-test skipped status when binaries are missing.

Reviewed changes

Copilot reviewed 9 out of 11 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
tsconfig.json	Adds strict TS config used by the new typecheck CI step.
src/pipeline/taskflow-bridge.ts	Switches runtime probing to prefer runtime.tasks.managedFlows with compatibility fallbacks.
src/pipeline/taskflow-bridge.test.ts	Updates fixtures and adds coverage for managedFlows + fallback selection behavior.
src/infra/doctor.ts	Always reports API-key check; adds explicit “live test skipped” when binaries are missing.
src/infra/doctor.test.ts	Adjusts mocking cleanup and updates checkFilesAndDirs test setup for dispatch-state path.
README.md	Updates OpenClaw badge/link and documents npm run typecheck.
package.json	Bumps version, sets Node engine floor, updates OpenClaw devDependency, adds typecheck, refreshes overrides.
openclaw.plugin.json	Updates plugin manifest version to 0.9.24.
.github/workflows/ci.yml	Runs npm run typecheck in CI prior to tests.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 9 out of 11 changed files in this pull request and generated no new comments.

[Copilot]

Pull request overview

Copilot reviewed 9 out of 11 changed files in this pull request and generated no new comments.

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@src/pipeline/taskflow-bridge.ts`:
- Around line 118-120: The fallback selection currently uses nullish coalescing
so a present but invalid tasks.managedFlows can short-circuit the chain; change
the logic to probe each candidate in order (tasks.managedFlows, then tasks.flow,
then runtime.taskFlow) and pick the first one where typeof candidate.bindSession
=== "function" before returning; reference the variables tasks, managedFlows,
flow, runtime.taskFlow and the validation of bindSession to implement an
explicit sequential check and only return null if none are valid.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 03c4a53b-6c29-4859-bc0f-a9e0076cf872

📥 Commits

Reviewing files that changed from the base of the PR and between 3c729bb and 2254666.

📒 Files selected for processing (2)

• src/infra/doctor.ts
• src/pipeline/taskflow-bridge.ts

[Copilot]

Pull request overview

Copilot reviewed 9 out of 11 changed files in this pull request and generated 1 comment.

[Copilot]

Pull request overview

Copilot reviewed 9 out of 11 changed files in this pull request and generated no new comments.