- Tooling/check:changed: pass parent heavy-check lock markers to lint lanes so

`pnpm check:changed` no longer waits on its own `lint:extensions` child.

Thanks @steipete.

- CLI/completion: dedupe provider auth flags before registering `openclaw onboard`

options, so completion-cache refresh during update no longer fails when stale

core fallback flags overlap plugin manifest flags. Fixes #71667.

- Plugins/Bonjour: stop the gateway from crash-looping on `CIAO PROBING CANCELLED` when the mDNS watchdog cancels a stuck probe. Restores the rejection-handler wiring dropped during the bonjour plugin migration and shares unhandled-rejection state across module instances so plugin-staged copies of `openclaw/plugin-sdk/runtime` register into the same handler set the host consults. Especially affects Docker on macOS, where mDNS probing reliably hits the watchdog. Thanks @troyhitch.

- Google Meet: report pinned Chrome nodes as offline or missing capabilities in

setup/join diagnostics, keep inaccessible nodes out of auto-selection, and

description: "Mistral API key",

optionKey: "mistralApiKey",

},

{

cliOption: "--openai-api-key <key>",

description: "OpenAI API key (core fallback)",

optionKey: "openaiApiKey",

},

] as Array<{ cliOption: string; description: string; optionKey: string }>,

}));

);

});

it("dedupes provider auth flags before registering command options", async () => {

await runCli(["onboard", "--openai-api-key", "sk-openai-test"]);

expect(setupWizardCommandMock).toHaveBeenCalledWith(

expect.objectContaining({

openaiApiKey: "sk-openai-test", // pragma: allowlist secret

}),

runtime,

);

});

it("forwards --gateway-token-ref-env", async () => {

await runCli(["onboard", "--gateway-token-ref-env", "OPENCLAW_GATEWAY_TOKEN"]);

expect(setupWizardCommandMock).toHaveBeenCalledWith(

includeSkip: true,

});

const ONBOARD_AUTH_FLAGS = [

...CORE_ONBOARD_AUTH_FLAGS,

...resolveManifestProviderOnboardAuthFlags(),

] as const;

type OnboardAuthFlag = {

readonly cliOption: string;

readonly description: string;

readonly optionKey: string;

};

function extractCliFlags(cliOption: string): string[] {

return cliOption

.split(/[ ,|]+/)

.filter((part) => part.startsWith("-"))

.map((part) => {

const equalsIndex = part.indexOf("=");

return equalsIndex === -1 ? part : part.slice(0, equalsIndex);

});

}

function resolveOnboardAuthFlags(): OnboardAuthFlag[] {

const seenCliFlags = new Set<string>();

const flags: OnboardAuthFlag[] = [];

for (const flag of [...CORE_ONBOARD_AUTH_FLAGS, ...resolveManifestProviderOnboardAuthFlags()]) {

const cliFlags = extractCliFlags(flag.cliOption);

if (cliFlags.some((cliFlag) => seenCliFlags.has(cliFlag))) {

continue;

}

for (const cliFlag of cliFlags) {

seenCliFlags.add(cliFlag);

}

flags.push(flag);

}

return flags;

}

const ONBOARD_AUTH_FLAGS = resolveOnboardAuthFlags();

function pickOnboardProviderAuthOptionValues(

opts: Record<string, unknown>,