- security

paths:

- extensions/bluebubbles/src

- extensions/discord/src

- extensions/feishu/src

- extensions/googlechat/src

"channel: bluebubbles":

- changed-files:

- any-glob-to-any-file:

- "extensions/bluebubbles/**"

- "docs/channels/bluebubbles.md"

"plugin: azure-speech":

- changed-files:

- any-glob-to-any-file:

- "src/*.ts"

- "src/**/*.ts"

- "src/config/**"

- "extensions/bluebubbles/src/**"

- "extensions/discord/src/**"

- "extensions/feishu/src/**"

- "extensions/googlechat/src/**"

src/auto-reply/reply/post-compaction-context.ts|src/auto-reply/reply/queue/*|src/auto-reply/reply/startup-context.ts|src/commands/doctor-session-*.ts|src/commands/session-store-targets.ts|src/commands/sessions*.ts|src/infra/diagnostic-*.ts|src/infra/diagnostics-timeline.ts|src/infra/session-delivery-queue*.ts|src/logging/diagnostic*.ts)

session_diagnostics=true

;;

extensions/bluebubbles/src/*|extensions/discord/src/*|extensions/feishu/src/*|extensions/googlechat/src/*|extensions/imessage/src/*|extensions/irc/src/*|extensions/line/src/*|extensions/matrix/src/*|extensions/mattermost/src/*|extensions/msteams/src/*|extensions/nextcloud-talk/src/*|extensions/nostr/src/*|extensions/qa-channel/src/*|extensions/qqbot/src/*|extensions/signal/src/*|extensions/slack/src/*|extensions/synology-chat/src/*|extensions/telegram/src/*|extensions/tlon/src/*|extensions/twitch/src/*|extensions/whatsapp/src/*|extensions/zalo/src/*|extensions/zalouser/src/*|src/channels/*)

extensions/discord/src/*|extensions/feishu/src/*|extensions/googlechat/src/*|extensions/imessage/src/*|extensions/irc/src/*|extensions/line/src/*|extensions/matrix/src/*|extensions/mattermost/src/*|extensions/msteams/src/*|extensions/nextcloud-talk/src/*|extensions/nostr/src/*|extensions/qa-channel/src/*|extensions/qqbot/src/*|extensions/signal/src/*|extensions/slack/src/*|extensions/synology-chat/src/*|extensions/telegram/src/*|extensions/tlon/src/*|extensions/twitch/src/*|extensions/whatsapp/src/*|extensions/zalo/src/*|extensions/zalouser/src/*|src/channels/*)

channel=true

;;

src/config/*)

| Plugin | Description | Distribution | Surface |

| ------------------------------------------------------------------- | ------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------- |

| [acpx](/plugins/reference/acpx) | Embedded ACP runtime backend with plugin-owned session and transport management. | `@openclaw/acpx`<br />npm; ClawHub | skills |

| [bluebubbles](/plugins/reference/bluebubbles) | Adds the BlueBubbles channel surface for sending and receiving OpenClaw messages. | `@openclaw/bluebubbles`<br />npm; ClawHub | channels: bluebubbles |

| [brave](/plugins/reference/brave) | Adds web search provider support. | `@openclaw/brave-plugin`<br />npm; ClawHub | contracts: webSearchProviders |

| [codex](/plugins/reference/codex) | Codex app-server harness and Codex-managed GPT model catalog. | `@openclaw/codex`<br />npm; ClawHub | providers: codex; contracts: mediaUnderstandingProviders, migrationProviders |

| [diagnostics-otel](/plugins/reference/diagnostics-otel) | OpenClaw diagnostics OpenTelemetry exporter. | `@openclaw/diagnostics-otel`<br />npm; ClawHub: `clawhub:@openclaw/diagnostics-otel` | plugin |

| [anthropic-vertex](/plugins/reference/anthropic-vertex) | Adds Anthropic Vertex model provider support to OpenClaw. | `@openclaw/anthropic-vertex-provider`<br />included in OpenClaw | providers: anthropic-vertex |

| [arcee](/plugins/reference/arcee) | Adds Arcee model provider support to OpenClaw. | `@openclaw/arcee-provider`<br />included in OpenClaw | providers: arcee |

| [azure-speech](/plugins/reference/azure-speech) | Azure AI Speech text-to-speech (MP3, native Ogg/Opus voice notes, PCM telephony). | `@openclaw/azure-speech`<br />included in OpenClaw | contracts: speechProviders |

| [bluebubbles](/plugins/reference/bluebubbles) | Adds the BlueBubbles channel surface for sending and receiving OpenClaw messages. | `@openclaw/bluebubbles`<br />npm; ClawHub | channels: bluebubbles |

| [bonjour](/plugins/reference/bonjour) | Advertise the local OpenClaw gateway over Bonjour/mDNS. | `@openclaw/bonjour`<br />included in OpenClaw | plugin |

| [brave](/plugins/reference/brave) | Adds web search provider support. | `@openclaw/brave-plugin`<br />npm; ClawHub | contracts: webSearchProviders |

| [browser](/plugins/reference/browser) | Adds agent-callable tools. | `@openclaw/browser-plugin`<br />included in OpenClaw | contracts: tools; skills |

"!dist/extensions/acpx/**",

"!dist/extensions/node_modules/**",

"!dist/extensions/*/node_modules/**",

"!dist/extensions/bluebubbles/**",

"!dist/extensions/brave/**",

"!dist/extensions/codex/**",

"!dist/extensions/diagnostics-otel/**",

];

const channelIds = [

"bluebubbles",

"discord",

"googlechat",

"imessage",

}

const userFacingChannelNameRe =

/\b(?:discord|telegram|slack|signal|imessage|whatsapp|google\s*chat|irc|line|zalo|matrix|msteams|bluebubbles)\b/i;

/\b(?:discord|telegram|slack|signal|imessage|whatsapp|google\s*chat|irc|line|zalo|matrix|msteams)\b/i;

const systemMarkLiteral = "⚙️";

function isModuleSpecifierStringNode(node) {

// Temporary allowlist for legacy callsites. New raw fetch callsites in channel/plugin runtime

// code should be rejected and migrated to fetchWithSsrFGuard/shared channel helpers.

const allowedRawFetchCallsites = new Set([

bundledPluginCallsite("bluebubbles", "src/test-harness.ts", 132),

bundledPluginCallsite("bluebubbles", "src/types.ts", 204),

bundledPluginCallsite("browser", "src/browser/cdp.helpers.ts", 268),

bundledPluginCallsite("browser", "src/browser/client-fetch.ts", 192),

bundledPluginCallsite("chutes", "models.ts", 536),

const sourceRoots = ["extensions"];

const enforcedFiles = new Set([

bundledPluginFile("bluebubbles", "src/monitor.ts"),

bundledPluginFile("feishu", "src/monitor.transport.ts"),

bundledPluginFile("googlechat", "src/monitor.ts"),

bundledPluginFile("zalo", "src/monitor.webhook.ts"),