fix(plugins): allow media-understanding package suffix

This commit is contained in:
Vincent Koc
2026-03-22 18:30:26 -07:00
parent f580b68380
commit 4f0bb7594b
2 changed files with 6 additions and 1 deletions

View File

@@ -435,6 +435,11 @@ skills.
Use allowlists and explicit install/load paths for non-bundled plugins. Treat
workspace plugins as development-time code, not production defaults.
For bundled workspace package names, keep the plugin id anchored in the npm
name: `@openclaw/<id>` by default, or an approved typed suffix such as
`-provider`, `-plugin`, `-speech`, `-sandbox`, or `-media-understanding` when
the package intentionally exposes a narrower plugin role.
Important trust note:
- `plugins.allow` trusts **plugin ids**, not source provenance.