manifest: declare contracts.tools, bump to 1.2.0

[pallaoro]

Summary

Restores flow_run/flow_create/etc. as native OpenClaw tools on hosts running ≥ 2026.4.26, and replaces the legacy boolean approval gate with a configurable one. Four compounding issues addressed:

1. Manifest missing contracts.tools (OpenClaw 2026.5.2)

"enforce contracts.tools as the manifest ownership contract for plugin tool registration, rejecting undeclared runtime tool names"

Adds all 11 runtime tools: flow_create, flow_delete, flow_restore_from_bin, flow_run, flow_resume, flow_send_event, flow_status, flow_list, flow_read, flow_publish, flow_edit.

2. dist/index.js had no plugin default export

OpenClaw's loader resolves through package.json.main. Previously src/index.ts exported only the library surface, so dist/index.js had no default.register → gateway logged [plugins] clawflow missing register/activate export. src/index.ts now re-exports default from ./plugin/index.js so dist/index.js exposes both plugin entry + public library symbols.

3. registerHook missing required name (OpenClaw 2026.4.26)

"fail plugin registration when loader-owned acceptance gates reject missing hook names"

The plugin called api.registerHook("before_tool_call", handler) without opts. The current SDK signature requires { name }. Now passes { name: "clawflow-flow-run-approval", description: ... }.

4. Approval gate hardcoded + inflexible

Previously: prompted unconditionally on every flow_run with a boolean requireApproval: true + plain prompt string. Incompatible with hook-driven, unattended automation (e.g. inbound-email workflows whose session has no interactive channel).

Adds approval to PluginConfig (and configSchema):

approval?: {
  enabled?: boolean;              // default true
  skipSessionPatterns?: string[]; // substrings against ctx.sessionKey
  timeoutMs?: number;             // default 5 min
  timeoutBehavior?: "allow" | "deny"; // default "deny"
}

Hosts running unattended workflows (e.g. Clawnify with "skipSessionPatterns": ["email"]) bypass the gate for those sessions. Standalone clawflow users keep the safe default.

Also modernizes the hook event handling:

• Reads event.toolName (with event.tool fallback for older runtimes).
• Reads event.context.sessionKey per current OpenClaw event shape.
• Returns the rich requireApproval: { title, description, severity, timeoutMs, timeoutBehavior } object the gateway and dashboard render natively.

Also

• Bumps version 0.2.2 / 1.1.0 → 1.2.0 (sync openclaw.plugin.json with package.json).
• Bumps compat.pluginApi / minGatewayVersion to >=2026.5.2, build.openclawVersion to 2026.5.12.
• Drops the unreferenced duplicate manifest at src/plugin/openclaw.plugin.json.

Test plan

• npm run build + npm run lint pass
• node -e "import('./dist/index.js').then(m => …)" → default.register: function
• Termit canary deploy: gateway log clean, plugin loads, [clawflow] flow server listening on :3335
• Agent CLI test: openclaw agent --agent main --message "is flow_run available?" → YES
• Termit inbound-email end-to-end: PDF order email → flow ran successfully (confirmed by user)
• Approval skip on email sessions configured via plugins.entries.clawflow.config.approval.skipSessionPatterns = ["email"]