chore: slash-command full chain — bump Frontend/Plugin/Guild; TEST_POINTS §10

Backend.Guild registry + Plugin catalog sync + Frontend / autocomplete.
Verified: registry PUT/GET (401 unauth), 41 specs built+synced (incl.
dynamic choices), GET round-trip, frontend bundle+fetch wired.
Caveat: in-browser / panel interaction not automated; in-gateway auto
sync needs plugin reinstall + gateway restart.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

docs/TEST_POINTS.md

@@ -179,6 +179,17 @@ Guild1 :7002 = `test-guild1`, Guild2 :7003 = `test-guild2`, Frontend :8088).
 | X5 | metadata/message separation | one message-id; metadata only at push; frontend/desktop metadata-agnostic; `author=guild` hidden unless debug |
 | X6 | submodule pointers | parent `Fabric` repo bumped after each submodule change; pushed to `origin/main` |
 
+## 10. Slash commands (registry / sync / autocomplete)
+
+| # | Test point | Expected |
+|---|---|---|
+| SC1 | Guild registry API | `PUT /api/commands {commands}` idempotent full replace; `GET /api/commands` → `{commands,updatedAt}`; both authed (no token → 401). Verified |
+| SC2 | plugin builds catalog | `buildFabricCommandSpecs(cfg)` via `openclaw/plugin-sdk/native-command-registry` (`listNativeCommandSpecsForConfig`+`findCommandByNativeName`); dynamic arg `choices` resolved to a static snapshot (`resolveCommandArgChoices`). Verified (41 specs, choices incl. dynamic) |
+| SC3 | plugin syncs on start | `syncFabricCommands` runs after inbound on `gateway_start`; PUTs catalog to each connected guild (one per guild, idempotent). Verified via direct call (`synced 41 -> test-guild1`); in-gateway run needs plugin reinstall + gateway restart |
+| SC4 | no `nativeCommands` capability | Fabric stays a TEXT-command surface; a `/<cmd>` message is delivered normally → plugin → OpenClaw command system. Only `/no-reply`,`/force-proceed` stay server-intercepted |
+| SC5 | frontend autocomplete | `/` opens a command panel (filter, ↑↓/Enter/Esc); pick inserts `/<nativeName> `; arg stage shows args + clickable `choices`. Built & deployed; **browser interaction not automated** — catalog fetch + bundle wiring verified |
+| SC6 | command execution | a registered `/<cmd>` reuses the existing message→plugin→OpenClaw path (text-command + command session + auth); not re-verified end-to-end here (same path as P13/P14) |
+
 ---
 
 ## Known coverage gaps / notes