@clawscarf/cli 0.1.0-alpha.1 → 0.1.0-alpha.10

package/recipes/README.md

@@ -5,13 +5,15 @@ Recipes are bundled with the CLI. Each folder contains a [recipe.json](team-serv
 
 ```text
 recipes/team-server/recipe.json
-runtime/releases/0.1.0-dev.json
+runtime/current.json
 packs/research-team/pack.json
 ```
 
 Each recipe has an ID and a version. Accepted installations retain that provenance
 alongside their actual settings; a CLI update never reapplies new defaults. Bump the
-recipe version when its defaults, pack selections or runtime pin change.
+recipe version when its defaults, pack selections or explicit runtime reference change.
+The resolved runtime release is retained separately; automatic advancement of the
+[current selection](../release/README.md#published-and-development-use) does not change recipe defaults.
 
 A recipe's `runtime` points to an exact runtime definition, relative to the recipe
 file. Runtime images and tools are fixed; its other fields are defaults that users
@@ -21,7 +23,8 @@ no executable hooks, secrets or user identities.
 
 - `models` selects model ID, provider and reasoning from the bundled
   [model catalog](../deploy/models/catalog.json).
-- `defaults` selects resources, browser and Connections enablement.
+- `defaults` selects the initial `agentName`, resources, public web access, browser and Connections enablement.
+  The name configures OpenClaw's default agent once; later renaming belongs in OpenClaw.
 - `packs: [{ id, members }]` selects agents from the bundled [packs](../packs/README.md).
   The installer checks members and collects required credentials after settings review.
 
@@ -30,8 +33,9 @@ menu; `--recipe /path/to/recipe.json` uses a custom definition. Both use the sam
 validation and editable settings. `clawscarf recipes` lists available choices.
 Recipe changes never reconfigure an existing server automatically.
 
-**Team server:** GPT-6 Astra through OpenAI, medium reasoning,
-hosted login, Connections enabled, browser off, and no packs selected. It supplies
-a basic team server, not a document ingestion or question-answering workflow. A future document recipe remains separate in [TODO.md](../TODO.md).
+**Team server** supplies a basic team server. Its exact model, reasoning, resource,
+capability and pack defaults are defined in [recipe.json](team-server/recipe.json);
+`clawscarf recipes` displays the bundled selection. Document workflows are separate
+[open work](../TODO.md#openclaw-curation).
 
 See [runtime and package distribution](../release/README.md).

package/recipes/team-server/recipe.json

@@ -1,11 +1,10 @@
 {
   "id": "team-server",
-  "version": "0.1.0",
-  "runtime": "../../runtime/releases/0.1.0-alpha.1.json",
   "name": "Team server",
   "description": "A protected OpenClaw server for your team, with hosted login, managed models and optional Connections.",
   "maturity": "supported",
   "defaults": {
+    "agentName": "ClawScarf",
     "resources": {
       "runtime": {
         "cpu": "4",
@@ -17,12 +16,14 @@
     },
     "connections": {
       "enabled": true
-    }
+    },
+    "publicWeb": true
   },
   "models": {
     "model": "gpt-6-astra",
     "provider": "openai",
     "reasoning": "medium"
   },
-  "packs": []
+  "runtime": "../../runtime/current.json",
+  "version": "0.1.4"
 }

package/release/README.md

@@ -2,11 +2,11 @@
 
 These have separate responsibilities:
 
-| Definition      | Owns                                                                                             | Location                                               |
-| --------------- | ------------------------------------------------------------------------------------------------ | ------------------------------------------------------ |
-| Runtime release | Exact software images, OpenShell executables, checksums and supported platforms                  | [runtime/releases](../runtime/releases/0.1.0-dev.json) |
-| Recipe          | A fixed runtime reference plus editable model, reasoning, resource, capability and pack defaults | [recipes](../recipes/README.md)                        |
-| Pack            | Native agent, skill and workflow files with declared prerequisites                               | [packs](../packs/README.md)                            |
+| Definition      | Owns                                                                                             | Location                                        |
+| --------------- | ------------------------------------------------------------------------------------------------ | ----------------------------------------------- |
+| Runtime release | Exact software images, OpenShell executables, checksums and supported platforms                  | [runtime/current.json](../runtime/current.json) |
+| Recipe          | A fixed runtime reference plus editable model, reasoning, resource, capability and pack defaults | [recipes](../recipes/README.md)                 |
+| Pack            | Native agent, skill and workflow files with declared prerequisites                               | [packs](../packs/README.md)                     |
 
 Several recipes can use the same runtime. A runtime contains no recipes, model
 catalog or pack selections. Changing a recipe does not require rebuilding its runtime.
@@ -14,30 +14,29 @@ Recipes and packs ship with the CLI; there is no separate registry or dependency
 The [model catalog](../deploy/models/catalog.json) is also a CLI asset. Recipe IDs select
 catalog entries; model protocols and limits have one definition.
 
-## Current development use
+## Published and development use
 
-```sh
-clawscarf configure
-# Or use staging for hosted login and Connections:
-clawscarf configure --cloud-url https://cloud-staging.clawscarf.com
-```
+Use the [installation guide](../deploy/deployment/installation.md) for published
+CLI installation, platform requirements and runtime downloads. Use the
+[development command](../scripts/README.md#development-command) for this checkout.
 
-No recipe argument opens the bundled recipe menu. `--recipe team-server` selects
-that bundled definition; `--recipe /path/to/recipe.json` reads a custom one. Its
-`runtime` path resolves relative to the recipe file. The runtime cannot be changed
-in the settings menu. `--directory` defaults to `~/clawscarf-team`.
+The tracked [current runtime](../runtime/current.json) selects a published release
+by exact image digests and downloadable tool checksums. The development command
+reads it from the checkout; it does not query a remote latest version or build images.
+New installations retain their own copy. Updating this file or the CLI never changes
+an existing installation's saved selection.
 
-The tracked [development runtime](../runtime/releases/0.1.0-dev.json) currently names
-locally built Docker image IDs and checksum-pinned OpenShell tools under ignored
-`runtime/tools/0.0.116/`. It works on the prepared development machine; it is **not a
-published, clean-machine release**. Definitions belong in the tracked directories
-above. Compiled images, binaries and test artifacts are not source definitions.
+After publication, the workflow copies the verified release manifest into this file
+and commits it to `main`. Pulling that commit updates the development command's
+selection. [Promotion](../scripts/release/advance-runtime.ts) requires a newer version
+and the same selection the candidate was built against; an identical repeat is a no-op.
+A changed pin or concurrent Git update fails visibly instead of overwriting another
+selection. The promotion job can be retried independently of publication. Repository
+rules must permit the release workflow's bot to push this commit to `main`.
 
-The current platform is macOS arm64 with Docker Desktop. Setup validates the host,
-tools and ports; it pulls registry images by digest and downloads missing runtime tools
-when their definition supplies an HTTPS URL and SHA-256. It cannot recover a missing
-local development image ID. See the
-[installation guide](../deploy/deployment/installation.md) for diagnostics.
+For experiments with locally built images/tools, create a separate runtime bundle
+and custom recipe using [runtime assembly](#assemble-runtime-artifacts). The bundled
+recipe uses the same published artifact format in development and installed CLIs.
 
 ## Publishing structure
 
@@ -45,20 +44,14 @@ Release candidates contain:
 
 - npm `@clawscarf/cli`: compiled CLI, recipes, pack files, model catalog and runtime
   definitions. No Docker images or large OpenShell executables in npm.
-- GitHub Releases: versioned runtime tool archives, checksums and required notices.
+- GitHub Releases: standalone CLI archives with a private Node runtime and installed
+  dependencies, an installer, runtime tool archives, checksums, required notices and
+  the OpenClaw source provenance and patch series used by the image build.
 - GHCR: runtime/companion images referenced by immutable registry digest.
 
-Installing a newer CLI supplies newer recipes. Each recipe still selects an exact
-runtime; startup never resolves “latest.” Existing installations retain their
-accepted settings and runtime. Explicit configuration changes preserve unrelated
-native edits. The CLI package version and a runtime version need not be the same.
-
-New installations copy their runtime definition and tools into their own `runtime/`
-directory and retain selected pack files under `state/pack-sources/`. Removing the
-checkout, an npm cache entry or an older CLI package does not remove those files.
-Downloads are bounded, checked before becoming executable inputs, and reused on
-subsequent configuration. Corrupt retained tools fail verification rather than being
-silently replaced. Docker verifies image digests. No start command resolves latest.
+The [installation guide](../deploy/deployment/installation.md#change-an-existing-installation)
+owns retained configuration and acquisition behavior. CLI, recipe and runtime
+versions are independent; recipe versioning belongs to [recipes](../recipes/README.md).
 
 ## Build and publish
 
@@ -66,46 +59,96 @@ silently replaced. Docker verifies image digests. No start command resolves late
 with an exact version, such as `0.1.0-alpha.1`. It:
 
 1. Runs checks and tests the compiled operator outside the checkout on macOS arm64.
-2. Builds the pinned OpenClaw source and ClawScarf images on Linux arm64, checks
-   runtime capabilities and the Chromium sandbox, and pushes candidate images to GHCR.
+2. Reconstructs OpenClaw from the pinned upstream commit and the ordered
+   [patch series](../runtime/openclaw/README.md), verifies the resulting source tree,
+   then builds ClawScarf images on Linux arm64 and x86-64,
+   checks runtime capabilities and the Chromium sandbox, then starts a protected
+   installation with private LiteLLM networking, exercises native administrator
+   access through the companion, and verifies stop/start retention.
+   Both architectures must report identical OpenClaw source provenance and patch
+   archives before it publishes image indexes containing both architectures to GHCR.
 3. Downloads checksum-pinned OpenShell tools, records the image digests, and assembles
-   the runtime archive, individual executable assets, npm CLI, checksums and notices.
+   one runtime archive per host platform, individual executable assets, npm CLI,
+   checksums and notices. Candidate assembly verifies the image builds' patch archive
+   and provenance against this checkout before including them in the release.
 4. Installs the resulting npm archive into a temporary prefix and checks its CLI/catalog.
+5. Builds standalone CLI archives on macOS ARM64 and Linux ARM64/x86-64 using the
+   same npm payload and frozen production dependency lockfile. Downloads Node using
+   the checksums in [components.json](components.json), retains its license, and
+   tests the installer and packaged CLI with system Node deliberately unavailable.
+   Only after all three platform checks pass does it assemble `release-candidate`.
+
+[Standalone packaging](../scripts/release/standalone.ts) adds a private Node executable
+and a small launcher; it does not change the CLI implementation. The
+[installer](install.sh) is versioned with the release and verifies its archive.
+Its user-facing options and upgrade behavior belong to the
+[installation guide](../deploy/deployment/installation.md); archive layouts belong to
+[operator packaging](operator.md).
 
 The [image builder](../scripts/release/build-images.sh) and
 [candidate assembler](../scripts/release/candidate.ts) contain the build commands;
-Actions supplies runners and registry credentials. The source recipe pins the development
-runtime. Packaging resolves that same runtime to the candidate's immutable definition;
-it does not make recipes select latest. The first release uses the same CLI/runtime
-version. Recipe versions remain independent; bump them when defaults, pack selection
-or the selected runtime changes. Published definitions must not be overwritten.
+GitHub Actions orchestrates the build and supplies registry credentials. Image builds
+and Linux installation checks use Depot ARM64/x86-64 runners; macOS checks and packaging
+use GitHub-hosted runners. The Depot Managed Runners app connects the ClawScarf organization
+to the RAW Labs Depot organization. The image job installs Docker 29.5.3 on its
+disposable runner for the network features required by installations.
+The [patch guide](../runtime/openclaw/README.md#release-and-verification-boundaries)
+owns source identity and reconstruction. Candidate assembly packages
+[openclaw-source.json and openclaw-patches.tgz](../scripts/release/candidate.ts)
+with checksums; each runtime archive includes both. The runtime definition's `sourceRevision`
+identifies the ClawScarf commit that owns those inputs.
+Recipes reference the current manifest within their checkout or installed package.
+Candidate packaging replaces that file only in the staged package with the newly
+built manifest. It leaves source files untouched; publication advances the checkout
+as described above. Published packages and release assets remain immutable.
 
 The `release-candidate` Actions artifact is the reviewable output. Download it and test
 a fresh supported installation, administrator login, real inference and stop/start
 before publication. GitHub's macOS runner does not provide our Docker Desktop journey;
-its packaging checks alone do not establish that journey. The browser-selection bug
-remains a separate, explicit limit; the Team server recipe leaves browser disabled.
+its packaging checks alone do not establish that journey. Check the owning component
+limitations before claiming support for optional capabilities.
 
 [Publish release candidate](../.github/workflows/publish-release.yml) accepts a successful
-build run from `main`. It checks the source commit and artifact checksums, creates the
-GitHub Release and publishes the already-built npm tarball. It never rebuilds images
+build run from `main`. Before publishing anything, it checks the source commit,
+artifact checksums, current runtime pin and npm channel progression. It then creates
+the GitHub Release and publishes the already-built npm tarball. It never rebuilds images
 or packages. Prereleases use npm's `next` tag; stable versions use `latest`. Repeating
-a GitHub upload is allowed only when the existing checksums match exactly.
+a GitHub upload is allowed only when the existing checksums match exactly. An npm
+version already published with the same tarball integrity and channel is skipped
+on retry; different bytes or a newer selected version stop publication.
+A separate dependent job then advances the checkout's current runtime selection;
+a failure there leaves the published release available and can be retried without
+republishing npm or rebuilding artifacts.
 
-Repository setup before first publication:
+Repository setup:
 
 - GHCR image packages must be publicly readable; a private candidate digest is not
   usable by an unauthenticated installer. The build uses GitHub's scoped job token.
-- Configure the GitHub `release` environment and npm trusted publishing for
-  `@clawscarf/cli`, repository `clawscarf/clawscarf`, workflow [publish-release.yml](../.github/workflows/publish-release.yml),
-  environment `release`. npm ownership/initial package setup is separate from code.
-- Check transitive notices/source obligations before distributing the first images.
+- The GitHub `release` environment restricts deployment to `main`. The npm
+  organization `@clawscarf` owns the public `@clawscarf/cli` package.
+- npm trusted publishing is configured for repository `clawscarf/clawscarf`, workflow
+  [publish-release.yml](../.github/workflows/publish-release.yml), environment `release`.
+  Publication uses the workflow's short-lived identity rather than a stored npm token.
+- Transitive notices/source review remains open in [TODO.md](../TODO.md).
   Debian copyright files remain in the images; runtime assets include upstream notices
   and the image build exports its network-tool sources. Those files are not a claim of
   a completed license audit. Pinned Debian packages still depend on mirror retention.
 
-No npm/GitHub release has been published by adding these workflows. The first Actions
-run, clean-machine journey, registry access and publication remain in [TODO.md](../TODO.md).
+## Release evidence
+
+[GitHub Releases](https://github.com/clawscarf/clawscarf/releases) owns published
+versions, release notes and checksummed assets. The linked candidate CI run owns its
+build/test results. Inspect the selected release's runtime definition and
+OpenClaw source provenance to establish what actually shipped; current source docs are
+not evidence that a setting or patch is present in an older installation.
+
+Keep release-specific acceptance logs/screenshots in CI or ignored local artifacts,
+with the tested revision/image, platform and actual outcomes. Promote only the tested
+candidate; publishing reuses its bytes. Do not maintain a second release journal in
+component READMEs. Current capability limits remain with their owners:
+[browser integration](../deploy/execution/browser-node/README.md#verified-release-limits),
+[runtime boundary](../deploy/openshell/README.md), [models](../deploy/models/README.md),
+[Access](../services/access/README.md) and [Connections](../plugins/connections/README.md).
 
 ## Assemble runtime artifacts
 
@@ -118,7 +161,9 @@ clawscarf release-create --input /absolute/built-components.json \
 ```
 
 The input follows the [runtime schema](../scripts/release/definition.ts), except
-`tools.openshell.cli` and `gateway` are source executable paths. Relative inputs
+`platforms` contains exactly one host and `tools.openshell.cli` and `gateway` are
+source executable paths. The output indexes tool artifacts by platform, using the
+same format as published releases. Relative inputs
 resolve beside that input file. The result is:
 
 ```text
@@ -135,3 +180,22 @@ an existing output directory and removes incomplete output on failure. It does n
 build images, copy recipes/packs or publish artifacts. A custom recipe can point to
 the resulting runtime definition. The [component pins](components.json) record
 upstream sources; [operator packaging](operator.md) describes the CLI archive.
+
+## CLI telemetry destination
+
+[telemetry.json](telemetry.json) is copied unchanged into the compiled operator,
+npm CLI and standalone CLI payload. It selects the ClawScarf project in PostHog EU
+using `host` (the HTTPS ingestion origin) and `projectToken` (the public `phc_`
+project token). Setting the file to `null` disables reporting for that build.
+Never put a personal or project-secret API key in this public file. A loopback
+HTTP origin is accepted for local receiver tests only.
+
+The [CLI telemetry guide](../deploy/deployment/installation.md#telemetry) owns event
+fields, user opt-out, local identity and delivery limits. Destination changes need
+a new CLI build/package; they do not change running team servers or cloud-service
+configuration. Automated tests use local receivers. The destination project's
+**Settings → Privacy → Discard client IP data** must stay enabled: a null `$ip`
+property alone does not prevent PostHog from storing the connection IP. The CLI
+also disables GeoIP enrichment. When changing destinations, verify that privacy
+setting and confirm start/finish events and their properties in the target project
+before publishing. An ingestion check does not establish CLI release publication.

package/release/components.json

@@ -1,8 +1,8 @@
 {
   "openclaw": {
+    "sourceTree": "57d9c7394530b0468c0ccc3f163297c6669e0d5a",
     "version": "2026.9.4",
-    "sourceRevision": "7bc487d39dc9e059bb9b19ea08152883022f83fe",
-    "image": "clawscarf-openclaw:7bc487d39dc9e059bb9b19ea08152883022f83fe"
+    "sourceRevision": "7bc487d39dc9e059bb9b19ea08152883022f83fe"
   },
   "openshell": {
     "version": "0.0.116",
@@ -12,16 +12,40 @@
       "darwin-arm64": {
         "url": "https://github.com/NVIDIA/OpenShell/releases/download/v0.0.116/openshell-aarch64-apple-darwin.tar.gz",
         "sha256": "e582f2374053bebac8e6aaeb4a369931b7d4bb97bd55055e2c02e85502627e22"
+      },
+      "linux-arm64": {
+        "url": "https://github.com/NVIDIA/OpenShell/releases/download/v0.0.116/openshell-aarch64-unknown-linux-musl.tar.gz",
+        "sha256": "7a949c48d1e000cd280869eea1e203e24816b9cfefc575b68a8b72b939cb3f43"
+      },
+      "linux-x64": {
+        "url": "https://github.com/NVIDIA/OpenShell/releases/download/v0.0.116/openshell-x86_64-unknown-linux-musl.tar.gz",
+        "sha256": "4fb4476d80a1875a0b83547ec3aba999cf0a2e2d75f95f2f709b622e2103520e"
       }
     },
     "gateway": {
       "darwin-arm64": {
         "url": "https://github.com/NVIDIA/OpenShell/releases/download/v0.0.116/openshell-gateway-aarch64-apple-darwin.tar.gz",
         "sha256": "f192d3d737c125264e13ef73458541df2ca6a9eb2fa599736a7f2587d5d2ce8d"
+      },
+      "linux-arm64": {
+        "url": "https://github.com/NVIDIA/OpenShell/releases/download/v0.0.116/openshell-gateway-aarch64-unknown-linux-gnu.tar.gz",
+        "sha256": "292c379193a339220234ffea585350901468bb8f4076e2076bc074e8ed18974b"
+      },
+      "linux-x64": {
+        "url": "https://github.com/NVIDIA/OpenShell/releases/download/v0.0.116/openshell-gateway-x86_64-unknown-linux-gnu.tar.gz",
+        "sha256": "59c6da724eae7a00c28826f9191efbdf4fbaa5c768afdc8dea6a80a949ebcc89"
       }
     },
     "gatewayImage": "ghcr.io/nvidia/openshell/gateway:0.0.116@sha256:05cf77bbb022a739aed6f22daa0e7e164415f4ab273b5f84319e46d91eb8f645"
   },
+  "cliNode": {
+    "version": "24.19.0",
+    "archives": {
+      "darwin-arm64": "8294b7aa9b03997481c06babf1e8b270c859358f27da57a11509afe537ac381d",
+      "linux-arm64": "d28c8a5bf0a808f0ed434a1dce8c54ae98f0371c0bd86ac58abc613f73e6643f",
+      "linux-x64": "f625d97cd707df4ff96254916fbc5ff014f09c09effe5a1e0ca8f6d41a8789d4"
+    }
+  },
   "companionNode": {
     "version": "24.19.0",
     "image": "node@sha256:4196d66a565c6f195728d9952f161f4adfe2ad753052a08b7ec7f1c5a6bda42b"

package/release/operator.md

@@ -1,63 +1,37 @@
-# ClawScarf operator
+# CLI archive
 
-The operator archive contains the compiled configuration/lifecycle CLI and its controller, model and pack
-operators. It runs outside the contributor checkout. It is not the complete
-distribution: runtime/companion images and the pinned OpenShell executables are
-separate inputs. The archive includes recipes, packs, the model catalog and runtime definitions.
-The interactive menu lists those recipes; each fixes its runtime. For a published runtime it downloads missing OpenShell tools by checksum and pulls
-registry images by digest. Local development image IDs cannot be downloaded. The npm
-package is named `@clawscarf/cli` and exposes the `clawscarf` command. Development archives
-remain private; the release candidate builder makes the package publishable. [Release contents](README.md) defines the publication model.
+For normal installation and operation, use the [quickstart](../README.md#get-started)
+and [CLI guide](../deploy/deployment/installation.md). This file describes the archive
+layout; [release assembly](README.md) owns how artifacts are built and published.
+The source links refer to the repository, not additional files in this archive.
 
-## Run the archive
+## Standalone layout
 
-Verify the archive against its accompanying `SHA256SUMS`, then extract it into a new
-directory. Use Node 24.16 or later in the Node 24 line, or Node 26.1 or later, and
-pnpm 10.33.0. In the extracted `package` directory:
+The standalone archive contains `clawscarf/` with the command launcher, a private
+`node/bin/node`, Node's license, and `package/` with the CLI, installed dependencies
+and catalogs. Verify it against the same release's `SHA256SUMS`, then extract it.
+Run `./clawscarf/clawscarf configure`; moving the complete directory preserves its
+runtime and dependencies. The release installer performs this verification and
+installation for normal use.
+
+## JavaScript archive
+
+The development JavaScript archive contains compiled operator code, its production
+dependency lockfile, migrations, policy/helpers, recipes, packs and runtime definitions.
+It excludes companion servers, Docker images, OpenShell executables and installation
+state. Publisher dependencies and TypeScript sources are not runtime requirements.
+
+With Node/pnpm matching [package.json](../package.json), verify the archive against
+its `SHA256SUMS` and extract it into a new directory. Inside `package`:
 
 ```sh
 pnpm install --prod --frozen-lockfile --ignore-scripts
 node scripts/clawscarf.js --help
 node scripts/clawscarf.js configure --directory /absolute/new-team
-node scripts/clawscarf.js configure --help
-node scripts/clawscarf.js people --help
-node scripts/clawscarf.js connections --help
 ```
 
-Dependencies are installed from the included frozen lockfile. Its root importer
-contains only the production dependencies referenced by the staged operator;
-publisher and browser dependencies are omitted. Locked transitive versions are retained.
-No TypeScript compiler, contributor source or build step is needed to run the commands.
-The current local assembly supports macOS arm64 with Docker Desktop only.
-
-The installer reviews recipe settings before credentials, prepares the installation,
-and offers **Start now**. It starts Docker services and protected OpenShell containers, then exits; closing
-the terminal leaves them running. Administrator setup supplies a private sign-in link and waits for successful
-browser setup, with replacement links offered on expiry. The same public
-operations use `configure` for new or existing installations, with `--non-interactive`
-for automation. `start`, `stop`, `status` and `logs` operate the selected `--directory`.
-Validation and preview/apply are internal. See the source installation guide for
-supported retained changes and administrator setup.
-
-Recipes select runtime definitions relative to their own files. New installations
-retain the runtime and selected packs outside the package. The development descriptor
-still uses local image IDs and tools prepared separately; that development archive alone
-cannot install on a clean machine. Published candidates instead contain registry digests
-and checksummed tool download URLs. Custom recipes can point to a separately prepared
-runtime bundle. Team server supplies a basic team server, not a document workflow.
-
-Keep installation data outside this extracted package. Stop retains state; replacing
-an operator archive is not a runtime upgrade or backup. Docker services keep running after
-terminal exit; Docker must remain available. No host service is installed.
-The pack operator additionally needs the pinned Python environment from
-`scripts/packs/requirements.txt`. Models require an external LiteLLM gateway or the unified configuration’s pinned local
-LiteLLM service. This archive contains no model/provider credentials. Unified preparation
-can issue initial scoped model and Connections credentials for fresh installations;
-normal start never rotates or reactivates them. Use `configure` for capability changes;
-`connections` manages application accounts and grants.
-
-The source checkout owns full local setup, model and pack qualification instructions.
-[Third-party notices](../THIRD_PARTY_NOTICES.md) are retained verbatim; their relative source references refer
-to the source checkout, not additional runtime payload in this archive. Installed
-dependencies retain their own notices. Full binary-release license qualification
-remains separate from this operator packaging check.
+Keep installation data outside the extracted package. A development runtime that
+references local image IDs needs those images prepared separately; see
+[custom runtime assembly](README.md#assemble-runtime-artifacts).
+The optional pack operator also needs its [Python dependencies](../packs/README.md#requirements-and-bindings).
+Required [notices](../THIRD_PARTY_NOTICES.md) and dependency licenses accompany the payload.

package/release/telemetry.json

@@ -0,0 +1,4 @@
+{
+  "host": "https://eu.i.posthog.com",
+  "projectToken": "phc_ncR7uw53sKnhNVnfhXruCnS3WPyRTzm8AxHPbsRFeHxK"
+}

package/runtime/configuration.js

@@ -13,6 +13,12 @@ export const configurationInput = z
     publicOrigin: origin,
     widgetOrigin: origin,
     standaloneNavigation: z.boolean().default(true),
+    agentName: z
+        .string()
+        .trim()
+        .min(1)
+        .max(50)
+        .refine((value) => [...value].every((character) => character.charCodeAt(0) >= 32 && character.charCodeAt(0) !== 127), "Use an agent name without control characters."),
     administratorIdentity: z
         .string()
         .min(1)
@@ -28,12 +34,14 @@ export function initialConfiguration(input) {
     const settings = configurationInput.parse(input);
     const identity = settings.administratorIdentity;
     return {
+        marketplace: { enabled: false },
         gateway: {
             publicOrigin: settings.publicOrigin,
             mode: "local",
             bind: "loopback",
             port: 18789,
             terminal: { enabled: false },
+            cliAgents: { enabled: false },
             trustedProxies: ["127.0.0.1"],
             controlUi: {
                 allowedOrigins: [settings.publicOrigin],
@@ -62,13 +70,19 @@ export function initialConfiguration(input) {
                     member: {
                         agents: "*",
                         scopes: ["operator.read", "operator.write", "operator.talk"],
-                        sessions: { others: "none" },
+                        sessions: { others: "view" },
                         sandbox: "inherit",
                     },
                 },
             },
         },
         agents: {
+            entries: {
+                main: {
+                    name: settings.agentName,
+                    identity: { name: settings.agentName },
+                },
+            },
             defaults: {
                 workspace: "/home/node/.openclaw/workspace",
                 sandbox: { mode: "off" },

package/runtime/current.json

@@ -0,0 +1,63 @@
+{
+  "schemaVersion": 1,
+  "version": "0.1.0-alpha.10",
+  "sourceRevision": "c7b49a1ec290de743a0cc2ec2708efadbfaeb802",
+  "platforms": [
+    "darwin-arm64",
+    "linux-arm64",
+    "linux-x64"
+  ],
+  "images": {
+    "postgres": "postgres@sha256:742f40ea20b9ff2ff31db5458d127452988a2164df9e17441e191f3b72252193",
+    "gateway": "ghcr.io/clawscarf/clawscarf/runtime@sha256:77911d585b22c653528fa878fa29e9ddbcf09be18bc7fe5a68a2f1bcc4f3ea29",
+    "companion": "ghcr.io/clawscarf/clawscarf/companion@sha256:25bf114473a4ef37c91fd3df97d52c8855c103ace03fb46bb62baf52780d9bfc",
+    "openshellClient": "ghcr.io/clawscarf/clawscarf/openshell-client@sha256:b85a20b8add9375272d325fa26db80c9159f92771ca0cfb17b472bdf09e71d00",
+    "relay": "ghcr.io/clawscarf/clawscarf/browser-relay@sha256:4ef193a9c7d9f4e062c8a4a8a70855787d73039e617d855646cacf2660049fdc",
+    "models": "ghcr.io/berriai/litellm:v1.100.1@sha256:a3715fa7ad8387941ab697259bd2881d68931657247a41984f90fae6d11c62bf",
+    "browser": {
+      "chromium": "ghcr.io/clawscarf/clawscarf/browser@sha256:0c456d3d5f8df2d28a292280f9af94999c8bd850de3283ff61c22540fbae6fc0",
+      "node": "ghcr.io/clawscarf/clawscarf/browser-node@sha256:6b5db704249f0af97bf055d88789ae15f83e5e1c73c669b7ea0b8f81946b2dee",
+      "dns": "ghcr.io/clawscarf/clawscarf/browser-dns@sha256:9dc584fd4b9cde7d7d854d24bb701da15d1bb795241d32083269ab04d881dced",
+      "egress": "ghcr.io/clawscarf/clawscarf/browser-egress@sha256:2d72e59d6b3cd8bf0bf47a930f4a92db5b4c8586c01cdc428bf0a09a38f95a58"
+    }
+  },
+  "tools": {
+    "openshell": {
+      "version": "0.0.116",
+      "cli": {
+        "darwin-arm64": {
+          "file": "tools/darwin-arm64/openshell",
+          "sha256": "0baeeffe0e4c184b08fde910ac9e8815fb0b8cfb808e49c0e634d7db65fb03bb",
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.10/openshell-darwin-arm64"
+        },
+        "linux-arm64": {
+          "file": "tools/linux-arm64/openshell",
+          "sha256": "84df9f059b16b66c83748606cc87d9edcda84b57effea19543f5c368aba7eb18",
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.10/openshell-linux-arm64"
+        },
+        "linux-x64": {
+          "file": "tools/linux-x64/openshell",
+          "sha256": "24e85062073d512d1951c76cd3890b7bce1ab01cc36a08f88b3b43c067a402da",
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.10/openshell-linux-x64"
+        }
+      },
+      "gateway": {
+        "darwin-arm64": {
+          "file": "tools/darwin-arm64/openshell-gateway",
+          "sha256": "298706259ef18350f334c222e981e91583558511d50bce22727c689d261203e6",
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.10/openshell-gateway-darwin-arm64"
+        },
+        "linux-arm64": {
+          "file": "tools/linux-arm64/openshell-gateway",
+          "sha256": "0e660428e655e7481f34ba8a4b351554400baf791863d32555c98dddb3f09ae2",
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.10/openshell-gateway-linux-arm64"
+        },
+        "linux-x64": {
+          "file": "tools/linux-x64/openshell-gateway",
+          "sha256": "780fc7ad871e2163f3fb866a2d0254ee682fc0d83e6261a84b350c8dcdd9f47b",
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.10/openshell-gateway-linux-x64"
+        }
+      }
+    }
+  }
+}

package/scripts/clawscarf.js

@@ -8,7 +8,11 @@ import { LocalSetupError } from "./deployment/process.js";
 import { LocalDatabaseError } from "./deployment/database.js";
 import { InstallerCancelled } from "./installation/installer/prompts.js";
 import { installationCommand } from "./installation/command.js";
-const program = installationCommand();
+import { CliTelemetry } from "./telemetry.js";
+const telemetry = new CliTelemetry();
+const program = installationCommand(telemetry);
+program.hook("preAction", async (_program, command) => telemetry.start(command));
+let failureCode;
 const commands = [program];
 for (const command of commands) {
     command.exitOverride().configureOutput({ outputError: () => { } });
@@ -85,8 +89,12 @@ catch (error) {
                                 ? error.message
                                 : "Check the configuration, file permissions and local prerequisites. No operation was automatically retried."),
     };
+    failureCode = failure.code;
     process.stderr.write((program.opts().json
         ? JSON.stringify(failure)
         : `Error: ${failure.detail}`) + "\n");
     process.exitCode = error instanceof InstallerCancelled ? 130 : 1;
 }
+finally {
+    await telemetry.finish(process.exitCode, failureCode);
+}