docs(plugin-sdk): document public SDK surface

docs/plugins/building-plugins.md

@@ -181,7 +181,7 @@ my-plugin/
     // Correct: focused subpaths
     import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
     import { createPluginRuntimeStore } from "openclaw/plugin-sdk/runtime-store";
-    import { buildOauthProviderAuthResult } from "openclaw/plugin-sdk/provider-oauth";
+    import { buildOauthProviderAuthResult } from "openclaw/plugin-sdk/provider-auth";
 
     // Wrong: monolithic root (lint will reject this)
     import { ... } from "openclaw/plugin-sdk";
@@ -195,22 +195,23 @@ my-plugin/
       | --- | --- |
       | `plugin-sdk/plugin-entry` | Canonical `definePluginEntry` helper + provider/plugin entry types |
       | `plugin-sdk/core` | Channel entry helpers, channel builders, and shared base types |
-      | `plugin-sdk/channel-setup` | Setup wizard adapters |
+      | `plugin-sdk/runtime-store` | Safe module-level runtime storage |
+      | `plugin-sdk/setup` | Shared setup-wizard helpers |
+      | `plugin-sdk/channel-setup` | Channel setup adapters |
       | `plugin-sdk/channel-pairing` | DM pairing primitives |
-      | `plugin-sdk/channel-reply-pipeline` | Reply prefix + typing wiring |
-      | `plugin-sdk/channel-config-schema` | Config schema builders |
-      | `plugin-sdk/channel-policy` | Group/DM policy helpers |
+      | `plugin-sdk/channel-actions` | Shared `message` tool schema helpers |
+      | `plugin-sdk/channel-contract` | Pure channel types |
       | `plugin-sdk/secret-input` | Secret input parsing/helpers |
       | `plugin-sdk/webhook-ingress` | Webhook request/target helpers |
-      | `plugin-sdk/runtime-store` | Persistent plugin storage |
-      | `plugin-sdk/allow-from` | Allowlist resolution |
       | `plugin-sdk/reply-payload` | Message reply types |
-      | `plugin-sdk/provider-oauth` | OAuth login + PKCE helpers |
+      | `plugin-sdk/provider-auth` | Provider auth and OAuth helpers |
       | `plugin-sdk/provider-onboard` | Provider onboarding config patches |
+      | `plugin-sdk/provider-models` | Model catalog helpers |
       | `plugin-sdk/testing` | Test utilities |
     </Accordion>
 
-    Use the narrowest subpath that matches the job.
+    Use the narrowest subpath that matches the job. For the curated map and
+    examples, see [Plugin SDK Overview](/plugins/sdk-overview).
 
   </Step>
 
@@ -266,7 +267,7 @@ my-plugin/
     For unit tests, import test helpers from the testing surface:
 
     ```typescript
-    import { createTestRuntime } from "openclaw/plugin-sdk/testing";
+    import { createWindowsCmdShimFixture } from "openclaw/plugin-sdk/testing";
     ```
 
   </Step>
@@ -370,6 +371,13 @@ patterns is strongly recommended.
 ## Related
 
 - [Plugin SDK Migration](/plugins/sdk-migration) — migrating from deprecated compat surfaces
+- [Plugin SDK Overview](/plugins/sdk-overview) — public SDK map and subpath guidance
+- [Plugin Entry Points](/plugins/sdk-entrypoints) — `definePluginEntry` and `defineChannelPluginEntry`
+- [Plugin Runtime](/plugins/sdk-runtime) — injected runtime and runtime-store
+- [Plugin Setup](/plugins/sdk-setup) — setup, channel setup, and secret input helpers
+- [Channel Plugin SDK](/plugins/sdk-channel-plugins) — channel contracts and actions
+- [Provider Plugin SDK](/plugins/sdk-provider-plugins) — provider auth, onboarding, and catalogs
+- [Plugin SDK Testing](/plugins/sdk-testing) — public test helpers
 - [Plugin Architecture](/plugins/architecture) — internals and capability model
 - [Plugin Manifest](/plugins/manifest) — full manifest schema
 - [Plugin Agent Tools](/plugins/building-plugins#registering-agent-tools) — adding agent tools in a plugin