chore(release): finalize 2026.2.1 docs and roadmap

Update release documentation for the completed parity train, including 2026.2.1 changelog notes, README highlights, testing guidance, and the dedicated roadmap record.

Made-with: Cursor

Author: MarcoDotIO

CHANGELOG.md

@@ -1,5 +1,48 @@
 # Changelog
 
+## 2026.2.1 - 2026-03-01
+
+### Added
+
+- Channel adapter parity wave completed:
+  - Slack, Google Chat, Signal, iMessage, Microsoft Teams, and production WebChat adapters
+  - parity expansion for `WhatsAppCloudChannelAdapter` diagnostics/webhook handling.
+- Model service parity completed across remaining OpenClaw provider families:
+  - first-class `xai` / Grok support
+  - OpenAI-compatible packs: `openrouter`, `groq`, `mistral`, `cerebras`,
+    `moonshot`, `litellm`, `together`, `huggingface`, `qianfan`, `nvidia`, `zai`
+  - Anthropic-compatible/gateway pack: `minimax`, `minimax-portal`, `synthetic`,
+    `xiaomi`, `cloudflare-ai-gateway`, `vercel-ai-gateway`
+  - unique protocol pack: `amazon-bedrock`, `github-copilot`, `ollama`,
+    `vllm`, `qwen-portal`.
+- Generic provider-service model layers:
+  - `ProviderServiceOpenAIModelProvider`
+  - `ProviderServiceAnthropicModelProvider`
+  - `BedrockConverseModelProvider`
+  for consistent config/auth handling across provider families.
+
+### Changed
+
+- `OpenClawConfig` channel/model config surfaces now fully cover the parity matrix
+  with backward-compatible decode defaults.
+- `SecurityAuditReport` now audits newly added channel/provider credentials and
+  emits risky-default findings for parity-specific misconfiguration cases.
+- iOS sample deployment/state flows now expose all parity providers/channels and
+  persist credentials through secure storage with migration-safe settings updates.
+
+### Tests
+
+- Expanded adapter test suites for new channel behavior, mention-only gating, and
+  webhook/transport edge handling.
+- Expanded model routing tests for all parity providers plus auth/api-style
+  validation failures and protocol-specific request expectations.
+- Expanded config/security regression suites for provider matrix serialization and
+  security-audit parity checks (including local auth-none exemptions and provider
+  secret detection).
+- Kept full per-commit validation gate green:
+  Swift warnings-as-errors build, networking concurrency check, `swift test`,
+  iOS build/test scripts, and Apple matrix validation for macOS + iOS.
+
 ## 2026.2.0 - 2026-03-01
 
 ### Added

README.md

@@ -13,31 +13,30 @@ OpenClawKit is a Swift-native agent SDK for Apple platforms and Linux services.
 It provides a complete runtime surface: protocol contracts, model routing, channels,
 skills, memory, observability, security, iOS app integrations, and release-grade tooling.
 
-## 2026.2.0 Highlights
-
-### Core Breakthroughs
-
-- **Deterministic Replay Runtime (Flight Recorder)**  
-  Stable replay schemas (`ReplayEvent`, `ReplayEventEnvelope`), append-only replay stores,
-  deterministic replay engine queries, and SDK replay APIs.
-- **Self-Optimizing Router (Latency/Cost/Quality Autopilot)**  
-  Adaptive routing state and feedback loops powered by runtime diagnostics and provider telemetry.
-- **WASM Skill Runtime (Portable + Safer Skills)**  
-  Runtime WASM skill execution support integrated into skill invocation flow.
-
-### Apple-First Features
-
-- Secure Enclave-signed replay ledger hooks with integrity verification support.
-- Instruments-native timeline sink (`OSLog`/signpost-friendly diagnostics export).
-- Intent graph as a first-class protocol/runtime/SDK surface.
-- App Intents + App Shortcuts updated to intent-graph aware flows.
-- Live Activities support for long-running runs in the iOS sample.
-- Proactive automation layer with persisted rules + background tick hooks.
-- Personal-data skills kit with permissioned connector policy gates.
-- Multimodal on-device session mode (attachments in protocol/runtime/channel/iOS chat).
-- SwiftData + CloudKit-ready memory graph store with legacy migration bridge.
-- Ask OpenClaw Share Extension scaffold + app inbox bridge.
-- CI Apple matrix validation for platform declarations and iOS build coverage.
+## 2026.2.1 Highlights
+
+### Channel + Model-Service Parity
+
+- Channel adapter parity against OpenClaw references:
+  Slack, Google Chat, Signal, iMessage (with availability guards), Microsoft Teams,
+  production WebChat, and hardened WhatsApp Cloud behavior/diagnostics.
+- Provider service parity for xAI/Grok and the remaining provider packs:
+  OpenRouter, Groq, Mistral, Cerebras, Moonshot, LiteLLM, Together, Hugging Face,
+  Qianfan, NVIDIA, Z.AI, MiniMax, MiniMax Portal, Synthetic, Xiaomi,
+  Cloudflare AI Gateway, Vercel AI Gateway, Amazon Bedrock, GitHub Copilot,
+  Ollama, vLLM, and Qwen Portal.
+- Unified provider matrix through `ProviderServiceConfig` with explicit API style
+  and auth mode controls (`apiKey`, bearer/OAuth token, `awsSDK`, `none`).
+
+### Security + Validation Hardening
+
+- Security audit coverage expanded for new channel/provider secrets and risky defaults,
+  including mention-only gates, verification/shared-secret checks, insecure service
+  URL checks, and provider auth/region diagnostics.
+- iOS sample deploy surfaces now expose parity provider/channel configuration with
+  migration-safe secure secret persistence.
+- Full release gate is enforced across Swift build/test, networking concurrency,
+  iOS build/test, and Apple matrix validation.
 
 ## Table of Contents
 
@@ -111,8 +110,10 @@ print(await diagnostics.usageSnapshot().runsCompleted)
 ## Runtime Features
 
 - Actor-isolated embedded runtime orchestration (`EmbeddedAgentRuntime`)
-- Multi-provider model routing with fallback and adaptive optimization
-- Channel adapters (Discord, Telegram, WhatsApp Cloud, webchat)
+- Multi-provider model routing with fallback and adaptive optimization across
+  OpenAI-compatible, Anthropic-compatible, Gemini, xAI, Bedrock, and local runtimes
+- Channel adapters (Discord, Telegram, WhatsApp Cloud, Slack, Google Chat, Signal,
+  iMessage, Microsoft Teams, and production WebChat)
 - Skill discovery/invocation (`SKILL.md`, JS/WASM executors)
 - Prompt bootstrap context loading (`AGENTS.md`, identity/personality files)
 - Persistent session routing and conversation memory
@@ -158,6 +159,7 @@ print(await diagnostics.usageSnapshot().runsCompleted)
 ### iOS Sample App (`Examples/iOS/OpenClawiOS`)
 
 - Deploy/chat/models/skills/channels/diagnostics flows
+- Provider/channel parity selection surfaces with secure credential persistence
 - Intent-graph aware App Intents + shortcuts
 - Live Activities status surfaces for run lifecycle
 - Proactive background automation hooks
@@ -221,6 +223,8 @@ CI workflows:
 - [Architecture](docs/architecture.md)
 - [API Surface](docs/api-surface.md)
 - [Testing Guide](docs/testing.md)
+- [2026.2.1 Parity Manifest](docs/parity-2026.2.1.md)
+- [2026.2.1 Roadmap](docs/roadmap-2026.2.1.md)
 - [Changelog](CHANGELOG.md)
 
 Protocol generation:

docs/roadmap-2026.2.1.md

@@ -0,0 +1,43 @@
+# Roadmap 2026.2.1
+
+This document records the 2026.2.1 channel + model-service parity train and
+its release discipline (`one step = one commit`).
+
+## Commit Train
+
+1. `c1-parity-manifest` - parity manifest lock for channels/providers
+2. `c2-channel-config-foundation` - shared channel config/ID scaffolding
+3. `c3-whatsapp-cloud-parity` - WhatsApp Cloud parity behavior + diagnostics
+4. `c4-slack-adapter` - Slack adapter + tests
+5. `c5-google-chat-adapter` - Google Chat adapter + tests
+6. `c6-signal-adapter` - Signal adapter + tests
+7. `c7-imessage-adapter` - iMessage adapter with availability guards + tests
+8. `c8-ms-teams-adapter` - Microsoft Teams adapter + tests
+9. `c9-webchat-adapter` - production WebChat adapter + integration coverage
+10. `c10-provider-config-matrix` - provider service config/auth matrix expansion
+11. `c11-grok-provider` - xAI/Grok provider + routing tests
+12. `c12-openai-pack-a` - OpenRouter/Groq/Mistral/Cerebras services
+13. `c13-openai-pack-b` - Moonshot/LiteLLM/Together/Hugging Face/Qianfan/NVIDIA/Z.AI services
+14. `c14-anthropic-gateway-pack` - MiniMax/MiniMax Portal/Synthetic/Xiaomi/Cloudflare/Vercel services
+15. `c15-unique-provider-pack` - Bedrock/Copilot/Ollama/vLLM/Qwen Portal services
+16. `c16-security-audit-updates` - parity secret/risky-default audit coverage
+17. `c17-ios-integration` - iOS provider/channel surfaces + persistence wiring
+18. `c18-tests-hardening` - expanded unit/E2E/config/security parity coverage
+19. `c19-docs-and-release` - docs refresh + release/tag finalization
+
+## Required Validation Gate (Per Commit)
+
+1. `swift build -Xswiftc -warnings-as-errors`
+2. `Scripts/check-networking-concurrency.sh`
+3. `swift test`
+4. `./Scripts/build-ios-example.sh`
+5. `./Scripts/test-ios-example.sh`
+6. `Scripts/validate-apple-matrix.sh --platform macos`
+7. `Scripts/validate-apple-matrix.sh --platform ios`
+
+## Release Output References
+
+- Parity scope lock: `docs/parity-2026.2.1.md`
+- Human-facing release notes: `CHANGELOG.md`
+- Testing/quality guidance: `docs/testing.md`
+- Version tag: `2026.2.1`

docs/testing.md

@@ -31,8 +31,10 @@ Some integration-style E2E workflows may require provider keys:
 
 - `OPENAI_API_KEY`
 - `GEMINI_API_KEY`
+- `ANTHROPIC_API_KEY`
+- `XAI_API_KEY`
 
-Set these in local `.env` (ignored by git) when running provider-backed E2E scenarios.
+Set these in local `.env` (ignored by git) when running live provider-backed scenarios.
 Never commit `.env`.
 
 ## Recommended Local Validation Sequence
@@ -45,21 +47,20 @@ Never commit `.env`.
 6. `Scripts/validate-apple-matrix.sh --platform macos`
 7. `Scripts/validate-apple-matrix.sh --platform ios`
 
-## 2026.2.0 Reliability + Platform Coverage Highlights
-
-- Replay/diagnostics reliability:
-  deterministic replay sequence tests, replay store compaction/recovery, and
-  SDK replay query filtering coverage.
-- Router/telemetry reliability:
-  adaptive routing policy + closed-loop diagnostics tests for provider scoring
-  behavior under runtime feedback.
-- Skills/runtime reliability:
-  WASM execution tests plus connector-permission policy coverage across allow/deny paths.
-- Apple integration reliability:
-  intent-graph App Intents tests, Live Activity status checks, proactive
-  automation background hook tests, and multimodal iOS/UI/runtime assertions.
-- Memory reliability:
-  SwiftData+CloudKit-ready memory graph migration/config tests.
+## 2026.2.1 Parity Coverage Highlights
+
+- Channel adapter reliability:
+  dedicated suites for Slack, Google Chat, Signal, iMessage, Microsoft Teams,
+  WebChat, and parity-expanded WhatsApp Cloud handling.
+- Provider parity reliability:
+  routing/unit tests for xAI/Grok, OpenAI-compatible packs, Anthropic-compatible
+  gateway packs, and unique protocol providers (Bedrock/Copilot/Ollama/vLLM/Qwen).
+- Config matrix reliability:
+  serialization/defaulting coverage for expanded provider-service auth/API-style
+  fields and channel config surfaces.
+- Security reliability:
+  regression coverage for parity secret detection and risky-default findings,
+  including local-runtime auth-none exemptions and AWS-region checks.
 - CI platform coverage:
-  Apple matrix contract validation in `Scripts/validate-apple-matrix.sh`
-  (platform declarations, share-extension scaffold, iOS 26 API guard checks).
+  full per-commit gate remains required, including Apple matrix validation in
+  `Scripts/validate-apple-matrix.sh` for macOS and iOS declarations.