feat(capabilities): Initial capability manifest support (legacy + map) by vincentkoc · Pull Request #545 · openclaw/clawhub

vincentkoc · 2026-02-27T16:58:08Z

Summary

Problem:
- Registry-side schema/API needs to accept and surface capability metadata during migration.
Why it matters:
- Visibility and validation must precede strict enforcement.
What changed:
- Added capability schema support and validation helpers.
- Parsed capability metadata in skill-processing pipeline.
- Exposed capabilities through v1 API response.
- Included declared capabilities in security evaluator context.
- Updated skill format docs for capability declarations.
What did NOT change (scope boundary):
- No publish-time hard blocking.
- No broad UI refactor in this PR.

Testing

bun run lint
bun run test
bun run build

Expanded canonical capability enum to include messaging and scheduling.
Added alias normalization for common external naming (terminal/bash/exec, web_fetch/web_search, subagent, cron/message, etc.).
Capability parser now accepts:
- flat string list
- object-map shape (constraints payload supported)
- array-of-objects shape (name/type/id/capability)
Added tests covering alias normalization and object-shape parsing.

Local validation:

bun run lint
bun run test
bun run build
(all passed)

Note: current failing "Scan for Verified Secrets" check appears infrastructure-related (missing trufflesecurity/trufflehog action tarball), not diff-related.

greptile-apps · 2026-02-27T17:43:50Z

Greptile Summary

Adds capability manifest support to the skill registry, enabling skills to declare their required capabilities (shell, filesystem, network, browser, sessions, messaging, scheduling) for visibility and future enforcement.

Key changes:

Created new capability normalization system with comprehensive alias mapping
Integrated capability parsing into skill metadata pipeline
Exposed capabilities through v1 API endpoints
Added capability validation via schema
Included robust test coverage for various declaration formats

Implementation highlights:

Handles multiple input formats: strings, arrays, and object-style declarations
Normalizes capability aliases (e.g., terminal → shell, web_fetch → network)
Filters unknown capabilities silently
Deduplicates capabilities automatically

Confidence Score: 4/5

This PR is safe to merge with one minor style fix
The implementation is solid with good test coverage and proper validation. Only one minor indentation style issue was found that doesn't affect functionality.
Fix indentation in packages/schema/src/schemas.ts line 170

_{Last reviewed commit: e0d4948}

greptile-apps

_{5 files reviewed, 1 comment}

_{Edit Code Review Agent Settings | Greptile}

greptile-apps · 2026-02-27T17:43:53Z

packages/schema/src/schemas.ts

+      latestVersion: type({
+        version: 'string',
+        createdAt: 'number',
+        changelog: 'string',
+        capabilities: '("shell"|"filesystem"|"network"|"browser"|"sessions"|"messaging"|"scheduling")[]?',
+      }).optional(),


inconsistent indentation (should be 4 spaces like other fields, not 6)

Suggested change

latestVersion: type({

version: 'string',

createdAt: 'number',

changelog: 'string',

capabilities: '("shell"|"filesystem"|"network"|"browser"|"sessions"|"messaging"|"scheduling")[]?',

}).optional(),

latestVersion: type({

version: 'string',

createdAt: 'number',

changelog: 'string',

capabilities: '("shell"|"filesystem"|"network"|"browser"|"sessions"|"messaging"|"scheduling")[]?',

}).optional(),

_{Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!}

Prompt To Fix With AI

This is a comment left during a code review. Path: packages/schema/src/schemas.ts Line: 170-175 Comment: inconsistent indentation (should be 4 spaces like other fields, not 6) ```suggestion latestVersion: type({ version: 'string', createdAt: 'number', changelog: 'string', capabilities: '("shell"|"filesystem"|"network"|"browser"|"sessions"|"messaging"|"scheduling")[]?', }).optional(), ``` <sub>Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!</sub> How can I resolve this? If you propose a fix, please make it concise.

Addressed in 6248053. Indentation has been normalized to match surrounding schema fields.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: da1dab3ec8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector · 2026-02-27T17:51:20Z

convex/lib/skills.ts

    if (typeof clawdisObj.author === 'string') metadata.author = clawdisObj.author
    const links = parseSkillLinks(clawdisObj.links)
    if (links) metadata.links = links
+    const capabilities = normalizeCapabilities(clawdisObj.capabilities)


Read openclaw capabilities even when clawdis metadata exists

This normalization only reads clawdisObj.capabilities, and clawdisObj comes from the first metadata alias selected earlier (clawdbot/clawdis before openclaw). In mixed manifests that keep legacy metadata.clawdis fields but add new metadata.openclaw.capabilities (the format documented in this PR), the declared capabilities are silently dropped, so downstream API consumers see [] instead of the author-declared capabilities.

Useful? React with 👍 / 👎.

Addressed in b7482e7 (+ coverage in be990c8). Capability parsing now prefers metadata.openclaw.capabilities when present, even when other legacy metadata namespaces exist in the same frontmatter.

vercel

Additional Suggestion:

The ListSkillsResult type is missing the capabilities property in its clawdis type definition, causing TypeScript error TS2339 when accessing capabilities at line 208.

vincentkoc · 2026-02-27T19:07:33Z

Addressed remaining review items from bots/reviewers in latest push:

ListSkillsResult typing now includes parsed.clawdis.capabilities (f65d5e8)
Mixed-manifest capability precedence fixed to prefer metadata.openclaw.capabilities (b7482e7)
Added regression test for mixed legacy + openclaw manifests (be990c8)
Fixed schema indentation nit in packages/schema/src/schemas.ts (6248053)

Re-ran local validation after these updates:

bun run lint
bun run test
bun run build

vercel bot deployed to Preview February 27, 2026 16:58 View deployment

vincentkoc mentioned this pull request Feb 27, 2026

feat(capabilities): Skill capability badges and declaration visibility in UI #546

Open

3 tasks

vincentkoc added 6 commits February 27, 2026 09:08

feat(schema): add capability enum to clawdis metadata

dd5a6c8

feat(convex): add capability normalization helper

0dc7b1c

feat(convex): parse and normalize clawdis capabilities

6ff1dbb

feat(api): expose capabilities in skills v1 responses

ee51e9a

test(convex): cover clawdis capabilities parsing

507a4cb

fix(schema): avoid capability schema initialization order issue

446be4b

vincentkoc force-pushed the vincentkoc-code/phase1-capabilities-registry-schema branch from 2a524e9 to 446be4b Compare February 27, 2026 17:09

vercel bot deployed to Preview February 27, 2026 17:10 View deployment

vincentkoc added 3 commits February 27, 2026 09:14

convex: normalize capability aliases and declaration shapes

a0fd033

test(convex): cover capability alias and object shapes

cd1abd2

schema: expand canonical skill capabilities set

e0d4948

vercel bot deployed to Preview February 27, 2026 17:18 View deployment

vincentkoc changed the title ~~feat(schema): phase 1 capability manifest support (legacy + map)~~ feat(capability): Initial capability manifest support (legacy + map) Feb 27, 2026

vincentkoc marked this pull request as ready for review February 27, 2026 17:40

greptile-apps bot reviewed Feb 27, 2026

View reviewed changes

docs(skill-format): include full openclaw metadata and capability shapes

da1dab3

vercel bot deployed to Preview February 27, 2026 17:46 View deployment

chatgpt-codex-connector bot reviewed Feb 27, 2026

View reviewed changes

vercel bot reviewed Feb 27, 2026

View reviewed changes

vincentkoc changed the title ~~feat(capability): Initial capability manifest support (legacy + map)~~ feat(capabilities): Initial capability manifest support (legacy + map) Feb 27, 2026

vincentkoc added 4 commits February 27, 2026 11:06

api(v1): type latestVersion clawdis capabilities field

f65d5e8

convex: prefer openclaw capability declarations in mixed metadata

b7482e7

test(convex): cover mixed legacy plus openclaw capabilities

be990c8

schema: fix capability field indentation in v1 response schema

6248053

vercel bot deployed to Preview February 27, 2026 19:07 View deployment

liamkauffman mentioned this pull request Feb 28, 2026

feat: add Oathe behavioral security scan integration #562

Open

7 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(capabilities): Initial capability manifest support (legacy + map)#545

feat(capabilities): Initial capability manifest support (legacy + map)#545
vincentkoc wants to merge 14 commits intomainfrom
vincentkoc-code/phase1-capabilities-registry-schema

vincentkoc commented Feb 27, 2026

Uh oh!

vercel bot commented Feb 27, 2026 •

edited

Loading

Uh oh!

vincentkoc commented Feb 27, 2026

Uh oh!

greptile-apps bot commented Feb 27, 2026

Uh oh!

greptile-apps bot left a comment

Uh oh!

greptile-apps bot Feb 27, 2026

Uh oh!

vincentkoc Feb 27, 2026

Uh oh!

chatgpt-codex-connector bot left a comment

Uh oh!

chatgpt-codex-connector bot Feb 27, 2026

Uh oh!

vincentkoc Feb 27, 2026

Uh oh!

vercel bot left a comment

Uh oh!

vincentkoc commented Feb 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

vincentkoc commented Feb 27, 2026

Summary

Testing

Related

Uh oh!

vercel bot commented Feb 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

vincentkoc commented Feb 27, 2026

Uh oh!

greptile-apps bot commented Feb 27, 2026

Greptile Summary

Confidence Score: 4/5

Uh oh!

greptile-apps bot left a comment

Choose a reason for hiding this comment

Uh oh!

greptile-apps bot Feb 27, 2026

Choose a reason for hiding this comment

Uh oh!

vincentkoc Feb 27, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector bot Feb 27, 2026

Choose a reason for hiding this comment

Uh oh!

vincentkoc Feb 27, 2026

Choose a reason for hiding this comment

Uh oh!

vercel bot left a comment

Choose a reason for hiding this comment

Uh oh!

vincentkoc commented Feb 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

vercel bot commented Feb 27, 2026 •

edited

Loading