openclaw - 💡(How to fix) Fix OC 2026.4.23 schema validator rejects hooks.allowConversationAccess (loader expects it) [1 comments, 2 participants]

Summary

Schema/loader drift in OC 2026.4.23: the zod config validator only accepts plugins.entries.<id>.hooks.allowPromptInjection, but the plugin loader reads and enforces allowConversationAccess for non-bundled plugins that register conversation-class typed hooks (llm_input, llm_output, agent_end).

Net effect: a non-bundled plugin can never register conversation hooks. Setting allowConversationAccess: true is rejected at config-validation time. Omitting it causes the loader to block the typed hooks at runtime with diagnostic:

typed hook "llm_input" blocked because non-bundled plugins must set plugins.entries.<id>.hooks.allowConversationAccess=true

Evidence (from a 2026.4.23 install at /home/boss/.npm-global/lib/node_modules/openclaw/dist/)

Schema (rejects allowConversationAccess): zod-schema-BhKK4qYw.js:775

hooks: z.object({ allowPromptInjection: z.boolean().optional() }).strict().optional(),

The .strict() here forbids any other key, including allowConversationAccess.

Manifest registry (normalizes both keys): manifest-registry-D5n47dku.js:261-266

allowPromptInjection: hooksRaw.allowPromptInjection,
allowConversationAccess: hooksRaw.allowConversationAccess
...
const normalizedHooks = hooks && (typeof hooks.allowPromptInjection === "boolean" || typeof hooks.allowConversationAccess === "boolean") ? { ... } : {};

Loader (enforces allowConversationAccess): loader-DeOtDUYt.js:1285-1303

if (isConversationHookName(hookName)) {
  const explicitConversationAccess = policy?.allowConversationAccess;
  if (record.origin !== "bundled" && explicitConversationAccess !== true) {
    pushDiagnostic({ level: "warn", ..., message: `typed hook "${hookName}" blocked because non-bundled plugins must set plugins.entries.${record.id}.hooks.allowConversationAccess=true` });
    return;
  }
  ...
}

Hook classification (the two sets are disjoint): types-tVEbjKoB.js:184-191

const PROMPT_INJECTION_HOOK_NAMES = ["before_prompt_build", "before_agent_start"];
const CONVERSATION_HOOK_NAMES   = ["llm_input", "llm_output", "agent_end"];

So allowPromptInjection cannot be used as a substitute — it gates a different set of hooks.

Repro

1. Install any non-bundled plugin that registers llm_input / llm_output / agent_end (e.g. completion-event-writer).
2. Try to set:

   "plugins": {
     "entries": {
       "completion-event-writer": {
         "enabled": true,
         "hooks": { "allowConversationAccess": true }
       }
     }
   }

3. Config validator rejects the file (strict schema).
4. Remove the hooks block: file validates, but loader emits the "blocked because non-bundled plugins must set …" warning and the 3 typed hooks never register.

Suggested fix

Update the zod schema at zod-schema-BhKK4qYw.js:775 (i.e. the source plugins/config-normalization-shared plugin-entry hooks shape) to:

hooks: z.object({
  allowPromptInjection: z.boolean().optional(),
  allowConversationAccess: z.boolean().optional()
}).strict().optional(),

Both flags are already present in the runtime types (plugin-sdk/.../types.plugins.d.ts, config-normalization-shared.d.ts) and in the manifest registry — only the validator schema is out of sync.

Impact

• completion-event-writer (and any third-party plugin needing conversation hooks) cannot function on 2026.4.23.
• No workaround in user config — this requires either a schema patch or running the plugin as bundled (record.origin === "bundled").

Environment

• OC 2026.4.23 (LX, Ubuntu 24.04, Node global install at ~/.npm-global/lib/node_modules/openclaw)
• Discovered while wiring completion-event-writer for typed-hook completion logging.