@clawscarf/cli 0.1.0-alpha.2 → 0.1.0-alpha.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -1,3 +1,112 @@
1
- # ClawScarf operator
1
+ # ClawScarf 🧣
2
2
 
3
- Read the [operator instructions](release/operator.md).
3
+ ### OpenClaw, ready for your team.
4
+
5
+ Give your team a shared OpenClaw server—with individual logins, your choice of AI
6
+ models, connected accounts, and execution protected by NVIDIA OpenShell.
7
+ **Self-hosted. Open source. OpenClaw’s own interface.**
8
+
9
+ [Get started](#get-started) · [Installation guide](https://github.com/clawscarf/clawscarf/blob/main/deploy/deployment/installation.md) · [Releases](https://github.com/clawscarf/clawscarf/releases) · [Contribute](https://github.com/clawscarf/clawscarf/blob/main/CONTRIBUTING.md)
10
+
11
+ ## Get started
12
+
13
+ ```sh
14
+ curl -fsSL https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.3/install.sh | sh
15
+ export PATH="$HOME/.local/bin:$PATH"
16
+ clawscarf configure
17
+ ```
18
+
19
+ **Choose Team server. Pick a model. Sign in. Start your server.**
20
+
21
+ The terminal setup walks you through it, downloads the runtime, and opens OpenClaw
22
+ in your browser. Your sign-in becomes the first administrator account. No checkout,
23
+ Docker configuration files or separate OpenClaw installation required.
24
+
25
+ You’ll need **Docker Engine 29+ with Compose** (or Docker Desktop) and an **API key
26
+ for your chosen model provider**. The CLI includes its own Node runtime.
27
+ Available for **macOS Apple Silicon and Linux ARM64/x86-64**; Windows runs through
28
+ **WSL2, currently experimental**. Add `~/.local/bin` to your shell's PATH to keep
29
+ the command available in new terminals. The installer requires no sudo.
30
+ [Full platform requirements →](https://github.com/clawscarf/clawscarf/blob/main/deploy/deployment/installation.md)
31
+
32
+ <details>
33
+ <summary>Prefer npm?</summary>
34
+
35
+ ```sh
36
+ npm install -g @clawscarf/cli@next
37
+ clawscarf configure
38
+ ```
39
+
40
+ This alternative uses your own Node installation: Node 24.16+ within 24.x or 26.1+.
41
+ The `next` tag installs the current alpha.
42
+
43
+ </details>
44
+
45
+ ## Make it your team’s workspace
46
+
47
+ | What you want to do | Where to do it |
48
+ | -------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------- |
49
+ | **Start working with an agent** | Open a chat in OpenClaw. Create and configure agents using its native settings. |
50
+ | **Bring in your teammates** | Open **People**, create an invitation link, and assign native OpenClaw roles. Administrators can remove access there too. |
51
+ | **Connect Outlook and other services** | Open **Connections**, link an account, and choose which agents can use it. Connections is included in Team server and can be turned off during setup. |
52
+ | **Use your preferred models** | Choose the provider, model and reasoning level in setup. Run `clawscarf configure` again to change them. |
53
+
54
+ The default recipe uses **GPT-6 Astra through OpenAI, with medium reasoning**.
55
+ Choose another provider or model in the menu; usage is billed by your provider.
56
+ Your provider API key stays outside OpenClaw, in the model gateway.
57
+
58
+ Setup opens **[http://127.0.0.1:18800](http://127.0.0.1:18800)** by default.
59
+ That address is local to your machine. To share the server with teammates, use a
60
+ reachable HTTPS address; the [installation guide](https://github.com/clawscarf/clawscarf/blob/main/deploy/deployment/installation.md#configuration-options)
61
+ covers the public URL and company SSO settings.
62
+
63
+ OpenShell applies filesystem and network policy to the whole OpenClaw runtime,
64
+ including plugins, shell commands and local tools. Recipes bring login, models and
65
+ optional Connections together in one setup; you keep OpenClaw’s native agents,
66
+ conversations, skills and settings.
67
+
68
+ ## Everyday commands
69
+
70
+ ```sh
71
+ clawscarf status # Check the server
72
+ clawscarf stop # Stop it, keeping your data
73
+ clawscarf start # Start it again
74
+ clawscarf configure # Change its configuration
75
+ ```
76
+
77
+ The default installation directory is `~/clawscarf-team`. Use
78
+ `--directory ~/another-team` to create or manage a separate installation.
79
+ Chats, files and settings survive stop/start. Closing the terminal leaves the server
80
+ running; Docker must stay running while it is in use.
81
+
82
+ For automation, the same configuration choices are available as command-line flags
83
+ with `--non-interactive`, and commands support `--json`.
84
+ [CLI reference and examples →](https://github.com/clawscarf/clawscarf/blob/main/deploy/deployment/installation.md#configure-without-prompts)
85
+
86
+ ## Your server, your team
87
+
88
+ An installation serves **one trusted team**: separate logins and roles, shared
89
+ execution files and browser accounts. Native roles control application permissions;
90
+ people allowed to run code share the Gateway’s authority. Use separate installations
91
+ for teams that must be isolated from one another.
92
+
93
+ Default login and optional Connections use **ClawScarf Cloud**. You can use your own
94
+ OIDC provider and disable Connections to run without those hosted services. Original
95
+ model-provider keys and Connections management credentials stay outside OpenClaw.
96
+
97
+ ClawScarf is in alpha. Browser automation is off by default while an upstream routing
98
+ issue remains; retained data still needs backups. See the [security boundaries](https://github.com/clawscarf/clawscarf/blob/main/deploy/openshell/README.md),
99
+ [browser support](https://github.com/clawscarf/clawscarf/blob/main/deploy/execution/browser-node/README.md) and [open work](https://github.com/clawscarf/clawscarf/blob/main/TODO.md)
100
+ for details.
101
+
102
+ ## Explore and contribute
103
+
104
+ - **Using ClawScarf:** [Installation](https://github.com/clawscarf/clawscarf/blob/main/deploy/deployment/installation.md) · [People](https://github.com/clawscarf/clawscarf/blob/main/plugins/access/README.md) · [Connections](https://github.com/clawscarf/clawscarf/blob/main/plugins/connections/README.md) · [Models](https://github.com/clawscarf/clawscarf/blob/main/deploy/models/README.md)
105
+ - **Customizing it:** [Recipes](https://github.com/clawscarf/clawscarf/blob/main/recipes/README.md) · [Packs](https://github.com/clawscarf/clawscarf/blob/main/packs/README.md) · [Runtime architecture](https://github.com/clawscarf/clawscarf/blob/main/runtime/README.md)
106
+ - **Helping build it:** [Contributing](https://github.com/clawscarf/clawscarf/blob/main/CONTRIBUTING.md) · [Development setup](https://github.com/clawscarf/clawscarf/blob/main/scripts/README.md) · [Report a bug](https://github.com/clawscarf/clawscarf/issues)
107
+
108
+ Built on [OpenClaw](https://github.com/openclaw/openclaw),
109
+ [NVIDIA OpenShell](https://github.com/NVIDIA/OpenShell) and
110
+ [LiteLLM](https://github.com/BerriAI/litellm).
111
+ [MIT licensed](https://github.com/clawscarf/clawscarf/blob/main/LICENSE), with [third-party notices](https://github.com/clawscarf/clawscarf/blob/main/THIRD_PARTY_NOTICES.md).
112
+ ClawScarf is an independent project.
@@ -28,6 +28,11 @@ are recorded in lockfiles; upstream source is not vendored here.
28
28
  The terminal installer uses MIT-licensed `@clack/prompts` 1.8.1. It is installed
29
29
  from the operator lockfile and retains its upstream license with the dependency;
30
30
  the installer does not vendor or modify the prompt library.
31
+ Standalone CLI archives include the unmodified Node.js 24.19.0 executable from
32
+ [official Node downloads](https://nodejs.org/dist/v24.19.0/), verified against the
33
+ SHA-256 pins in [release/components.json](release/components.json). Each archive
34
+ retains Node's complete upstream LICENSE, including its bundled third-party notices,
35
+ at `node/LICENSE`. JavaScript dependencies retain their licenses in `node_modules`.
31
36
  The Gateway uses unmodified upstream commit `7bc487d39dc9e059bb9b19ea08152883022f83fe`;
32
37
  the [image build instructions](deploy/images/README.md) own source packaging.
33
38
  OpenClaw's upstream [license](https://github.com/openclaw/openclaw/blob/7bc487d39dc9e059bb9b19ea08152883022f83fe/LICENSE)
package/package.json CHANGED
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": "0.1.0-alpha.2",
2
+ "version": "0.1.0-alpha.3",
3
3
  "engines": {
4
4
  "node": ">=24.16.0 <25 || >=26.1.0"
5
5
  },
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "id": "team-server",
3
3
  "version": "0.1.0",
4
- "runtime": "../../runtime/releases/0.1.0-alpha.2.json",
4
+ "runtime": "../../runtime/releases/0.1.0-alpha.3.json",
5
5
  "name": "Team server",
6
6
  "description": "A protected OpenClaw server for your team, with hosted login, managed models and optional Connections.",
7
7
  "maturity": "supported",
package/release/README.md CHANGED
@@ -52,7 +52,8 @@ Release candidates contain:
52
52
 
53
53
  - npm `@clawscarf/cli`: compiled CLI, recipes, pack files, model catalog and runtime
54
54
  definitions. No Docker images or large OpenShell executables in npm.
55
- - GitHub Releases: versioned runtime tool archives, checksums and required notices.
55
+ - GitHub Releases: standalone CLI archives with a private Node runtime and installed
56
+ dependencies, an installer, runtime tool archives, checksums and required notices.
56
57
  - GHCR: runtime/companion images referenced by immutable registry digest.
57
58
 
58
59
  Installing a newer CLI supplies newer recipes. Each recipe still selects an exact
@@ -81,6 +82,20 @@ with an exact version, such as `0.1.0-alpha.1`. It:
81
82
  one runtime archive per host platform, individual executable assets, npm CLI,
82
83
  checksums and notices.
83
84
  4. Installs the resulting npm archive into a temporary prefix and checks its CLI/catalog.
85
+ 5. Builds standalone CLI archives on macOS ARM64 and Linux ARM64/x86-64 using the
86
+ same npm payload and frozen production dependency lockfile. Downloads Node using
87
+ the checksums in [components.json](components.json), retains its license, and
88
+ tests the installer and packaged CLI with system Node deliberately unavailable.
89
+ Only after all three platform checks pass does it assemble `release-candidate`.
90
+
91
+ [Standalone packaging](../scripts/release/standalone.ts) adds a private Node executable
92
+ and a small launcher; it does not change the CLI implementation. The
93
+ [installer](install.sh) is versioned with each release and downloads only that
94
+ version's archive, verifies SHA-256, and installs under `~/.local` by default.
95
+ `--prefix` selects another absolute directory. It never installs a host service,
96
+ changes system Node, edits shell profiles or needs sudo. To upgrade the CLI, run
97
+ the newer release's installer; it switches the command and retains the old version.
98
+ Runtime upgrades and installation data are separate from CLI installation.
84
99
 
85
100
  The [image builder](../scripts/release/build-images.sh) and
86
101
  [candidate assembler](../scripts/release/candidate.ts) contain the build commands;
@@ -117,23 +132,30 @@ Repository setup:
117
132
  [publish-release.yml](../.github/workflows/publish-release.yml), environment `release`.
118
133
  The first tested tarball was published using the owner's authenticated npm CLI because
119
134
  npm requires a package to exist before configuring trust. Subsequent publication
120
- uses the workflow's short-lived identity rather than a stored npm token. That next
121
- workflow publication has not yet been exercised.
135
+ uses the workflow's short-lived identity rather than a stored npm token; alpha.2
136
+ was published through that workflow successfully.
122
137
  - Transitive notices/source review remains open in [TODO.md](../TODO.md).
123
138
  Debian copyright files remain in the images; runtime assets include upstream notices
124
139
  and the image build exports its network-tool sources. Those files are not a claim of
125
140
  a completed license audit. Pinned Debian packages still depend on mirror retention.
126
141
 
127
- [Candidate 35524428880](https://github.com/clawscarf/clawscarf/actions/runs/35524428880)
128
- passed its checks, compiled archive test and all eight image builds. The same artifacts
129
- are available in the [0.1.0-alpha.1 GitHub prerelease](https://github.com/clawscarf/clawscarf/releases/tag/v0.1.0-alpha.1).
130
- The identical CLI tarball is published as `@clawscarf/cli@0.1.0-alpha.1`, tagged `next`.
131
- All eight GHCR images were verified anonymously readable by digest. The packaged CLI
132
- passed fresh setup on the development Mac, staging hosted administrator login, real
133
- GPT-6 Astra inference and stop/start with retained chat history. Published tool URLs
134
- passed download and SHA-256 verification. Disposable installation containers, volumes
135
- and networks were deleted afterward. This does not establish a newly provisioned
136
- host, production first-time signup, Linux/WSL or changed-version upgrades.
142
+ [Candidate 35532613602](https://github.com/clawscarf/clawscarf/actions/runs/35532613602)
143
+ passed full checks, compiled archive installation and all eight image builds on
144
+ native ARM64 and x86-64 Depot runners. The same artifacts are available in the
145
+ [0.1.0-alpha.2 GitHub prerelease](https://github.com/clawscarf/clawscarf/releases/tag/v0.1.0-alpha.2)
146
+ and as `@clawscarf/cli@0.1.0-alpha.2`, tagged `next`.
147
+
148
+ Both Linux architectures passed protected runtime startup, native WebSocket forwarding,
149
+ authenticated TLS to the private model gateway, retained stop/start and deletion on
150
+ Docker 29.5.3. The final ARM64 images also passed real GPT-6 Astra inference and retained
151
+ restart on macOS Docker Desktop. Candidate downloads passed SHA-256 verification and
152
+ the CLI tarball installed independently of the repository. Disposable test containers,
153
+ volumes and networks were deleted afterward.
154
+
155
+ Staging hosted administrator login and the packaged interactive setup previously
156
+ passed on macOS with alpha.1. Hosted login and real provider inference on Linux,
157
+ actual Windows/WSL2 installation, production first-time signup and changed-version
158
+ upgrades remain unverified; see [TODO.md](../TODO.md).
137
159
 
138
160
  ## Assemble runtime artifacts
139
161
 
@@ -38,6 +38,14 @@
38
38
  },
39
39
  "gatewayImage": "ghcr.io/nvidia/openshell/gateway:0.0.116@sha256:05cf77bbb022a739aed6f22daa0e7e164415f4ab273b5f84319e46d91eb8f645"
40
40
  },
41
+ "cliNode": {
42
+ "version": "24.19.0",
43
+ "archives": {
44
+ "darwin-arm64": "8294b7aa9b03997481c06babf1e8b270c859358f27da57a11509afe537ac381d",
45
+ "linux-arm64": "d28c8a5bf0a808f0ed434a1dce8c54ae98f0371c0bd86ac58abc613f73e6643f",
46
+ "linux-x64": "f625d97cd707df4ff96254916fbc5ff014f09c09effe5a1e0ca8f6d41a8789d4"
47
+ }
48
+ },
41
49
  "companionNode": {
42
50
  "version": "24.19.0",
43
51
  "image": "node@sha256:4196d66a565c6f195728d9952f161f4adfe2ad753052a08b7ec7f1c5a6bda42b"
@@ -20,10 +20,24 @@ The `next` tag selects the current alpha. Use an exact version instead when need
20
20
  npm installs the CLI dependencies; runtime images and tools are fetched during setup.
21
21
  See [release contents](README.md) for supported platforms and verification.
22
22
 
23
- ## Run the archive
23
+ ## Standalone download
24
+
25
+ Standalone CLI archives include Node and installed dependencies. Download the archive
26
+ for your platform and its `SHA256SUMS` from the same GitHub Release. The release's
27
+ [installer](install.sh) selects the correct archive, verifies it and installs
28
+ `clawscarf` under `~/.local/bin`. It accepts `--prefix /absolute/directory`.
29
+ No system Node, npm or pnpm is required. These archives are separate from both the
30
+ npm package and the runtime-tool archives.
31
+
32
+ The layout is `clawscarf/` containing the launcher, `node/bin/node`, Node's LICENSE,
33
+ and `package/` with the CLI, dependencies and catalogs. You can also verify and
34
+ extract the archive yourself, then run `./clawscarf/clawscarf configure`.
35
+ Moving the whole directory preserves the bundled runtime and dependencies.
36
+
37
+ ## Run the JavaScript archive
24
38
 
25
39
  Verify the archive against its accompanying `SHA256SUMS`, then extract it into a new
26
- directory. Use Node 24.16 or later in the Node 24 line, or Node 26.1 or later, and
40
+ directory. Unlike the standalone download, this requires Node 24.16 or later in the Node 24 line, or Node 26.1 or later, and
27
41
  pnpm 10.33.0. In the extracted `package` directory:
28
42
 
29
43
  ```sh
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
- "version": "0.1.0-alpha.2",
4
- "sourceRevision": "dc08bf392bad89efabce65bdd56e93c508553203",
3
+ "version": "0.1.0-alpha.3",
4
+ "sourceRevision": "b5e0988a9dbbf28b40974cc1a8b38e1d9466e6f2",
5
5
  "platforms": [
6
6
  "darwin-arm64",
7
7
  "linux-arm64",
@@ -9,16 +9,16 @@
9
9
  ],
10
10
  "images": {
11
11
  "postgres": "postgres@sha256:742f40ea20b9ff2ff31db5458d127452988a2164df9e17441e191f3b72252193",
12
- "gateway": "ghcr.io/clawscarf/clawscarf/runtime@sha256:01105abab6d0b6330b55022187dd3367d552c2b66f6ddca5c0bb0279740a9bd3",
13
- "companion": "ghcr.io/clawscarf/clawscarf/companion@sha256:1cb04a8c4ec5a65c74095b54dfa63a0154621158348f7e8315b30e0679d8a3d0",
14
- "openshellClient": "ghcr.io/clawscarf/clawscarf/openshell-client@sha256:9aef63fd71cf55b8eb3971db1f49f2f5c9a467f782b699059f599dce2ea3beb4",
15
- "relay": "ghcr.io/clawscarf/clawscarf/browser-relay@sha256:a80196a2dcc9a7835947ba69bd75c7e704db1b5cedac28bbc8670a675eeb5dec",
12
+ "gateway": "ghcr.io/clawscarf/clawscarf/runtime@sha256:fa6cb6ee1116a17577369166e6d73391f0194b78a69743e4f8bc137dbffb1c5c",
13
+ "companion": "ghcr.io/clawscarf/clawscarf/companion@sha256:cc2a9f4caf2f9a2e97d198270b8d02cfc7fc082a97c5982eb40e223fe1d2f9a8",
14
+ "openshellClient": "ghcr.io/clawscarf/clawscarf/openshell-client@sha256:48167a723eac58247b5e07d8266495b7b71e51e72491a1ed63c45e2f1e5590d1",
15
+ "relay": "ghcr.io/clawscarf/clawscarf/browser-relay@sha256:a6958a6ee43bb6ebcbf18a0aae477a76ac1c8d8c4ed914d319a40dca40571ae7",
16
16
  "models": "ghcr.io/berriai/litellm:v1.100.1@sha256:a3715fa7ad8387941ab697259bd2881d68931657247a41984f90fae6d11c62bf",
17
17
  "browser": {
18
- "chromium": "ghcr.io/clawscarf/clawscarf/browser@sha256:6c8e0302ad8ce118440f4794772149cf4a621e9fa9d580492e24269efcc7618d",
19
- "node": "ghcr.io/clawscarf/clawscarf/browser-node@sha256:47c9f847167eb8a9956b600f4f97310ede7428833f60bdbacfd3c0f91fee7da6",
20
- "dns": "ghcr.io/clawscarf/clawscarf/browser-dns@sha256:f83d0bc00f8f71d6d809b5057eb5edbf4573b5e1565a8292dbe36021802c4c0b",
21
- "egress": "ghcr.io/clawscarf/clawscarf/browser-egress@sha256:a863dcfe890596aa8824d2c35e503afe5ddeeb763d3eef83ce582eb4ea6fa595"
18
+ "chromium": "ghcr.io/clawscarf/clawscarf/browser@sha256:b765e4698c471f26ff50d7f18d14ecf2fb903b92bb22e0299c3758a6429c2121",
19
+ "node": "ghcr.io/clawscarf/clawscarf/browser-node@sha256:c55268a56d45f65c05f1dd7c5f6a45c2b5cdaefb552606148c42fff0967a7654",
20
+ "dns": "ghcr.io/clawscarf/clawscarf/browser-dns@sha256:c9d1a557c8bb897eccd2f83693ba3bef71f8fd681e5cd4ce189942460e67e449",
21
+ "egress": "ghcr.io/clawscarf/clawscarf/browser-egress@sha256:b1b69e03629211ceaf84f7fd6c3bea7fbe659f81b4a4ab00fbc30588810cd970"
22
22
  }
23
23
  },
24
24
  "tools": {
@@ -28,34 +28,34 @@
28
28
  "darwin-arm64": {
29
29
  "file": "tools/darwin-arm64/openshell",
30
30
  "sha256": "0baeeffe0e4c184b08fde910ac9e8815fb0b8cfb808e49c0e634d7db65fb03bb",
31
- "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.2/openshell-darwin-arm64"
31
+ "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.3/openshell-darwin-arm64"
32
32
  },
33
33
  "linux-arm64": {
34
34
  "file": "tools/linux-arm64/openshell",
35
35
  "sha256": "84df9f059b16b66c83748606cc87d9edcda84b57effea19543f5c368aba7eb18",
36
- "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.2/openshell-linux-arm64"
36
+ "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.3/openshell-linux-arm64"
37
37
  },
38
38
  "linux-x64": {
39
39
  "file": "tools/linux-x64/openshell",
40
40
  "sha256": "24e85062073d512d1951c76cd3890b7bce1ab01cc36a08f88b3b43c067a402da",
41
- "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.2/openshell-linux-x64"
41
+ "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.3/openshell-linux-x64"
42
42
  }
43
43
  },
44
44
  "gateway": {
45
45
  "darwin-arm64": {
46
46
  "file": "tools/darwin-arm64/openshell-gateway",
47
47
  "sha256": "298706259ef18350f334c222e981e91583558511d50bce22727c689d261203e6",
48
- "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.2/openshell-gateway-darwin-arm64"
48
+ "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.3/openshell-gateway-darwin-arm64"
49
49
  },
50
50
  "linux-arm64": {
51
51
  "file": "tools/linux-arm64/openshell-gateway",
52
52
  "sha256": "0e660428e655e7481f34ba8a4b351554400baf791863d32555c98dddb3f09ae2",
53
- "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.2/openshell-gateway-linux-arm64"
53
+ "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.3/openshell-gateway-linux-arm64"
54
54
  },
55
55
  "linux-x64": {
56
56
  "file": "tools/linux-x64/openshell-gateway",
57
57
  "sha256": "780fc7ad871e2163f3fb866a2d0254ee682fc0d83e6261a84b350c8dcdd9f47b",
58
- "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.2/openshell-gateway-linux-x64"
58
+ "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.3/openshell-gateway-linux-x64"
59
59
  }
60
60
  }
61
61
  }