### Changes

- Plugin SDK: mark remaining legacy alias exports and diffs tool/config aliases with deprecation metadata, and add a guard so future legacy alias comments require `@deprecated` tags. Thanks @vincentkoc.

- CLI/QR/dependencies: internalize small terminal progress and QR wrapper helpers while keeping the real QR encoder dependency direct, reducing the default runtime dependency graph without changing QR output behavior. Thanks @vincentkoc.

- Channels: add Yuanbao channel docs entrance so the Tencent Yuanbao bot appears in the channel listing and sidebar navigation. (#73443) Thanks @loongfay.

- Active Memory: add optional per-conversation `allowedChatIds` and `deniedChatIds` filters so operators can enable recall only for selected direct, group, or channel conversations while keeping broad sessions skipped. (#67977) Thanks @quengh.

- Active Memory: return bounded partial recall summaries when the hidden memory sub-agent times out, including the default temporary-transcript path, so useful recovered context is not discarded. (#73219) Thanks @joeykrug.

"express": "5.2.1",

"playwright-core": "1.59.1",

"typebox": "1.1.33",

"undici": "8.1.0",

"ws": "^8.20.0"

},

"devDependencies": {

"@openclaw/plugin-sdk": "workspace:*"

"@openclaw/plugin-sdk": "workspace:*",

"undici": "8.1.0"

},

"openclaw": {

"extensions": [

"private": true,

"description": "OpenClaw Deepgram media-understanding provider",

"type": "module",

"dependencies": {

"ws": "^8.20.0"

},

"devDependencies": {

"@openclaw/plugin-sdk": "workspace:*"

},

"private": true,

"description": "OpenClaw ElevenLabs speech plugin",

"type": "module",

"dependencies": {

"ws": "^8.20.0"

},

"devDependencies": {

"@openclaw/plugin-sdk": "workspace:*"

},

"private": true,

"description": "OpenClaw Mistral provider plugin",

"type": "module",

"dependencies": {

"ws": "^8.20.0"

},

"devDependencies": {

"@openclaw/plugin-sdk": "workspace:*"

},

"type": "module",

"dependencies": {

"@mariozechner/pi-ai": "0.70.5",

"typebox": "1.1.33",

"ws": "^8.20.0"

"typebox": "1.1.33"

},

"devDependencies": {

"@openclaw/plugin-sdk": "workspace:*"

"@openclaw/plugin-sdk": "workspace:*",

"ws": "^8.20.0"

},

"openclaw": {

"extensions": [

"@mariozechner/pi-coding-agent": "0.70.5",

"@mariozechner/pi-tui": "0.70.5",

"@modelcontextprotocol/sdk": "1.29.0",

"@vincentkoc/qrcode-tui": "0.2.1",

"ajv": "^8.20.0",

"chalk": "^5.6.2",

"chokidar": "^5.0.0",

"jszip": "^3.10.1",

"markdown-it": "14.1.1",

"openai": "^6.34.0",

"osc-progress": "^0.3.0",

"proxy-agent": "^8.0.1",

"qrcode": "1.5.4",

"semver": "7.7.4",

"sqlite-vec": "0.1.9",

"tar": "7.5.13",

-f "$ROOT_DIR/scripts/e2e/Dockerfile.qr-import" \

"$ROOT_DIR"

echo "Running qrcode-tui import smoke..."

run_logged qr-import-run docker run --rm -t "$IMAGE_NAME" node -e "import('@vincentkoc/qrcode-tui').then(async (m)=>{process.stdout.write(await m.renderTerminal('qr-smoke',{small:true}))})"

echo "Running qrcode import smoke..."

run_logged qr-import-run docker run --rm -t "$IMAGE_NAME" node -e "import('qrcode').then(async (m)=>{const q=m.default??m;process.stdout.write(await q.toString('qr-smoke',{small:true,type:'terminal'}))})"

],

"risk": ["native", "parser", "untrusted-files"]

},

"@vincentkoc/qrcode-tui": {

"owner": "core:qr-setup",

"class": "default-runtime-initially",

"risk": ["terminal-rendering"]

},

"ajv": {

"owner": "core:json-schema-validation",

"class": "core-runtime",

"class": "default-runtime-initially",

"risk": ["provider-sdk", "network"]

},

"osc-progress": {

"owner": "core:terminal-progress",

"class": "core-runtime",

"risk": ["terminal-rendering"]

},

"pdfjs-dist": {

"owner": "plugin:document-extract",

"class": "plugin-runtime",

"class": "core-runtime",

"risk": ["network", "proxy"]

},

"qrcode": {

"owner": "core:qr-setup",

"class": "default-runtime-initially",

"risk": ["terminal-rendering", "png-encoding"]

},

"semver": {

"owner": "core:package-versioning",

"class": "core-runtime",