refactor: add xai plugin-sdk boundary canary (#61548)

* docs: plan real plugin-sdk workspace rollout

* build: add xai plugin-sdk boundary canary

* build: generate plugin-sdk package types

* build: hide plugin-sdk core export

* build: alias scoped plugin-sdk runtime imports

* build: repair plugin-sdk boundary drift

* fix(plugins): remove duplicated plugin-sdk entrypoints

* test(plugins): make tsc boundary canary portable

---------

Co-authored-by: Vincent Koc <vincentkoc@ieee.org>

test/extension-package-tsc-boundary.test.ts

@@ -0,0 +1,64 @@
+import { spawnSync } from "node:child_process";
+import { rmSync, writeFileSync } from "node:fs";
+import { createRequire } from "node:module";
+import { resolve } from "node:path";
+import { describe, expect, it } from "vitest";
+
+const REPO_ROOT = resolve(import.meta.dirname, "..");
+const XAI_ROOT = resolve(REPO_ROOT, "extensions/xai");
+const require = createRequire(import.meta.url);
+const TSC_BIN = require.resolve("typescript/bin/tsc");
+const PLUGIN_SDK_PACKAGE_TSCONFIG = resolve(REPO_ROOT, "packages/plugin-sdk/tsconfig.json");
+
+function runTsc(args: string[]) {
+  return spawnSync(process.execPath, [TSC_BIN, ...args], {
+    cwd: REPO_ROOT,
+    encoding: "utf8",
+  });
+}
+
+describe("xai package TypeScript boundary", () => {
+  it("typechecks cleanly through @openclaw/plugin-sdk", () => {
+    const prepareResult = runTsc(["-p", PLUGIN_SDK_PACKAGE_TSCONFIG]);
+    expect(prepareResult.status, `${prepareResult.stdout}\n${prepareResult.stderr}`).toBe(0);
+
+    const result = runTsc(["-p", resolve(XAI_ROOT, "tsconfig.json"), "--noEmit"]);
+    expect(result.status, `${result.stdout}\n${result.stderr}`).toBe(0);
+  });
+
+  it("fails when xai imports src/cli through a relative path", () => {
+    const canaryPath = resolve(XAI_ROOT, "__rootdir_boundary_canary__.ts");
+    const tsconfigPath = resolve(XAI_ROOT, "tsconfig.rootdir-canary.json");
+
+    try {
+      writeFileSync(
+        canaryPath,
+        'import * as foo from "../../src/cli/acp-cli.ts";\nvoid foo;\nexport {};\n',
+        "utf8",
+      );
+      writeFileSync(
+        tsconfigPath,
+        JSON.stringify(
+          {
+            extends: "./tsconfig.json",
+            include: ["./__rootdir_boundary_canary__.ts"],
+            exclude: [],
+          },
+          null,
+          2,
+        ),
+        "utf8",
+      );
+
+      const result = runTsc(["-p", tsconfigPath, "--noEmit"]);
+
+      const output = `${result.stdout}\n${result.stderr}`;
+      expect(result.status).not.toBe(0);
+      expect(output).toContain("TS6059");
+      expect(output).toContain("src/cli/acp-cli.ts");
+    } finally {
+      rmSync(canaryPath, { force: true });
+      rmSync(tsconfigPath, { force: true });
+    }
+  });
+});