feat: version-aware config — 3.24 default, 4.5/latest optional

OpenClaw 3.24 doesn't support the plugins.entries.discovery config
format from PR #58 (silently fails, no models discovered). This adds
version-aware logic:

- Default: 2026.3.24 (no model approval needed, WeChat compatible)
- Optional: 2026.4.5 (auto-discovery, embeddings) or latest
- Two config templates: legacy (models.providers) and modern (plugins.entries)
- UserData selects config based on OpenClawVersion parameter
- ARM64 install: --ignore-scripts only for 3.24 (4.5 needs native modules)

Tested on production EC2:
- 3.24 + old config: works
- 3.24 + new config: fails (unknown model)
- 4.5 + new config: works (with Gateway running)
- 4.5 + --ignore-scripts: fails (missing @buape/carbon)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: JiaDe

README.md

@@ -230,6 +230,7 @@ Switch models with one CloudFormation parameter — no code changes:
 | Parameter | Default | Description |
 |-----------|---------|-------------|
 | `OpenClawModel` | Nova 2 Lite | Bedrock model ID |
+| `OpenClawVersion` | 2026.3.24 | `2026.3.24` (default, no model approval needed, WeChat compatible), `2026.4.5` (auto-discovery, embeddings), or `latest` |
 | `InstanceType` | c7g.large | EC2 instance type |
 | `CreateVPCEndpoints` | false | Private networking (+$22/mo) |
 | `EnableSandbox` | true | Docker isolation for code execution |

clawdbot-bedrock.yaml

@@ -81,8 +81,12 @@ Parameters:
 
   OpenClawVersion:
     Type: String
-    Default: "2026.4.5"
-    Description: "OpenClaw version to install (npm package version)"
+    Default: "2026.3.24"
+    AllowedValues:
+      - "2026.3.24"
+      - "2026.4.5"
+      - "latest"
+    Description: "OpenClaw version. 2026.3.24 (default, no model approval needed, WeChat compatible). 2026.4.5+ (auto-discovery, embeddings)."
 
   EnableDataProtection:
     Type: String
@@ -458,7 +462,52 @@ Resources:
             - run_setup
         write_files:
           files:
-            /opt/openclaw/openclaw-config.json:
+            /opt/openclaw/openclaw-config-legacy.json:
+              content: |
+                {
+                  "gateway": {
+                    "mode": "local",
+                    "port": 18789,
+                    "bind": "loopback",
+                    "controlUi": {
+                      "enabled": true,
+                      "allowInsecureAuth": true
+                    },
+                    "auth": {
+                      "mode": "token",
+                      "token": "GATEWAY_TOKEN_PLACEHOLDER"
+                    }
+                  },
+                  "models": {
+                    "providers": {
+                      "amazon-bedrock": {
+                        "baseUrl": "https://bedrock-runtime.REGION_PLACEHOLDER.amazonaws.com",
+                        "api": "bedrock-converse-stream",
+                        "auth": "aws-sdk",
+                        "models": [
+                          {
+                            "id": "MODEL_ID_PLACEHOLDER",
+                            "name": "Bedrock Model",
+                            "input": ["text", "image"],
+                            "contextWindow": 200000,
+                            "maxTokens": 8192
+                          }
+                        ]
+                      }
+                    }
+                  },
+                  "agents": {
+                    "defaults": {
+                      "model": {
+                        "primary": "amazon-bedrock/MODEL_ID_PLACEHOLDER"
+                      }
+                    }
+                  }
+                }
+              mode: "000644"
+              owner: root
+              group: root
+            /opt/openclaw/openclaw-config-modern.json:
               content: |
                 {
                   "gateway": {
@@ -683,18 +732,17 @@ Resources:
                   npm config set registry https://registry.npmjs.org/
                   OPENCLAW_VERSION="${OpenClawVersion}"
                   ARCH=$(uname -m)
-                  if [ "$ARCH" = "aarch64" ]; then
-                    echo "ARM64 detected, installing with --ignore-scripts..."
-                    npm install -g openclaw@$OPENCLAW_VERSION --timeout=300000 --ignore-scripts || {
-                      npm cache clean --force
-                      npm install -g openclaw@$OPENCLAW_VERSION --timeout=300000 --ignore-scripts
-                    }
-                  else
-                    npm install -g openclaw@$OPENCLAW_VERSION --timeout=300000 || {
-                      npm cache clean --force
-                      npm install -g openclaw@$OPENCLAW_VERSION --timeout=300000
-                    }
+                  # 2026.3.24 on ARM64: use --ignore-scripts (avoids native build issues)
+                  # 2026.4.5+: must NOT use --ignore-scripts (needs native modules like @buape/carbon)
+                  IGNORE_FLAG=""
+                  if [ "$ARCH" = "aarch64" ] && [ "$OPENCLAW_VERSION" = "2026.3.24" ]; then
+                    IGNORE_FLAG="--ignore-scripts"
+                    echo "ARM64 + 3.24: installing with --ignore-scripts"
                   fi
+                  npm install -g openclaw@$OPENCLAW_VERSION --timeout=300000 $IGNORE_FLAG || {
+                    npm cache clean --force
+                    npm install -g openclaw@$OPENCLAW_VERSION --timeout=300000 $IGNORE_FLAG
+                  }
 
                   if ! grep -q 'NVM_DIR' ~/.bashrc; then
                       echo 'export NVM_DIR="$HOME/.nvm"' >> ~/.bashrc
@@ -748,8 +796,18 @@ Resources:
 
                   GATEWAY_TOKEN=$(openssl rand -hex 24)
 
-                  # Copy config files from cfn-init staging area
-                  cp /opt/openclaw/openclaw-config.json /home/ubuntu/.openclaw/openclaw.json
+                  # Select config template based on OpenClaw version
+                  # 2026.3.24: uses models.providers (explicit model list)
+                  # 2026.4.5+: uses plugins.entries.discovery (auto-discovers Bedrock models)
+                  OPENCLAW_VERSION="${OpenClawVersion}"
+                  if [ "$OPENCLAW_VERSION" = "2026.3.24" ]; then
+                    echo "Using legacy config (models.providers) for $OPENCLAW_VERSION"
+                    cp /opt/openclaw/openclaw-config-legacy.json /home/ubuntu/.openclaw/openclaw.json
+                    sed -i "s/REGION_PLACEHOLDER/$AWS_REGION/g" /home/ubuntu/.openclaw/openclaw.json
+                  else
+                    echo "Using modern config (plugins.discovery) for $OPENCLAW_VERSION"
+                    cp /opt/openclaw/openclaw-config-modern.json /home/ubuntu/.openclaw/openclaw.json
+                  fi
                   chown ubuntu:ubuntu /home/ubuntu/.openclaw/openclaw.json
                   sed -i "s/GATEWAY_TOKEN_PLACEHOLDER/$GATEWAY_TOKEN/g" /home/ubuntu/.openclaw/openclaw.json
                   sed -i "s|MODEL_ID_PLACEHOLDER|${OpenClawModel}|g" /home/ubuntu/.openclaw/openclaw.json