@clawscarf/cli 0.1.0-alpha.3 → 0.1.0-alpha.4

package/README.md

@@ -1,4 +1,6 @@
-# ClawScarf 🧣
+<a href="https://clawscarf.com"><img src="https://clawscarf.com/clawscarf-mark.svg" alt="ClawScarf logo" width="112" height="112" /></a>
+
+# ClawScarf
 
 ### OpenClaw, ready for your team.
 
@@ -94,8 +96,8 @@ Default login and optional Connections use **ClawScarf Cloud**. You can use your
 OIDC provider and disable Connections to run without those hosted services. Original
 model-provider keys and Connections management credentials stay outside OpenClaw.
 
-ClawScarf is in alpha. Browser automation is off by default while an upstream routing
-issue remains; retained data still needs backups. See the [security boundaries](https://github.com/clawscarf/clawscarf/blob/main/deploy/openshell/README.md),
+ClawScarf is in alpha. Browser automation is off by default pending release
+qualification; retained data still needs backups. See the [security boundaries](https://github.com/clawscarf/clawscarf/blob/main/deploy/openshell/README.md),
 [browser support](https://github.com/clawscarf/clawscarf/blob/main/deploy/execution/browser-node/README.md) and [open work](https://github.com/clawscarf/clawscarf/blob/main/TODO.md)
 for details.
 
@@ -105,6 +107,9 @@ for details.
 - **Customizing it:** [Recipes](https://github.com/clawscarf/clawscarf/blob/main/recipes/README.md) · [Packs](https://github.com/clawscarf/clawscarf/blob/main/packs/README.md) · [Runtime architecture](https://github.com/clawscarf/clawscarf/blob/main/runtime/README.md)
 - **Helping build it:** [Contributing](https://github.com/clawscarf/clawscarf/blob/main/CONTRIBUTING.md) · [Development setup](https://github.com/clawscarf/clawscarf/blob/main/scripts/README.md) · [Report a bug](https://github.com/clawscarf/clawscarf/issues)
 
+Development maintains a small [OpenClaw patch series](https://github.com/clawscarf/clawscarf/blob/main/runtime/openclaw/README.md)
+for selected fixes and optional capabilities. Published alpha.3 predates that series.
+
 Built on [OpenClaw](https://github.com/openclaw/openclaw),
 [NVIDIA OpenShell](https://github.com/NVIDIA/OpenShell) and
 [LiteLLM](https://github.com/BerriAI/litellm).

package/THIRD_PARTY_NOTICES.md

@@ -12,7 +12,7 @@ the operator, companion and Connections plugin artifacts.
 AGENTS.md is adapted from RawClaw's contributor guide at commit
 [`f37a6e786fdd88857c21bd32140567874e281a8c`](https://github.com/raw-labs/rawclaw/blob/f37a6e786fdd88857c21bd32140567874e281a8c/AGENTS.md),
 with the project owner's authorization. The Connections plugin and companion,
-access service, UI primitives and development checks also extract or adapt donor
+access service, native page flows and development checks also extract or adapt donor
 source and regressions. Their local READMEs identify the incorporated paths and
 deliberate boundary changes.
 The reviewed donor has no top-level license file; do not infer a blanket license
@@ -24,7 +24,9 @@ embedded third-party notices for each extracted component before publication.
 The runtime recipe references pinned OpenClaw and OpenShell artifacts in
 [release/components.json](release/components.json). The access adapter imports
 the published `@openclaw/gateway-client` package. Dependencies and their versions
-are recorded in lockfiles; upstream source is not vendored here.
+are recorded in lockfiles. The [downstream patch series](runtime/openclaw/README.md)
+contains selected source differences and context from MIT-licensed OpenClaw; it is
+not a complete vendored source tree.
 The terminal installer uses MIT-licensed `@clack/prompts` 1.8.1. It is installed
 from the operator lockfile and retains its upstream license with the dependency;
 the installer does not vendor or modify the prompt library.
@@ -33,8 +35,10 @@ Standalone CLI archives include the unmodified Node.js 24.19.0 executable from
 SHA-256 pins in [release/components.json](release/components.json). Each archive
 retains Node's complete upstream LICENSE, including its bundled third-party notices,
 at `node/LICENSE`. JavaScript dependencies retain their licenses in `node_modules`.
-The Gateway uses unmodified upstream commit `7bc487d39dc9e059bb9b19ea08152883022f83fe`;
-the [image build instructions](deploy/images/README.md) own source packaging.
+Gateway source builds apply the maintained patch series to upstream commit
+`7bc487d39dc9e059bb9b19ea08152883022f83fe`. Release provenance records the
+resulting tree and patch-set digest. Published alpha.3 predates these patches.
+The [image build instructions](deploy/images/README.md) own source packaging.
 OpenClaw's upstream [license](https://github.com/openclaw/openclaw/blob/7bc487d39dc9e059bb9b19ea08152883022f83fe/LICENSE)
 is MIT. NVIDIA NemoClaw's [license](https://github.com/NVIDIA/NemoClaw/blob/main/LICENSE)
 is Apache-2.0. Referencing their architecture is not incorporating their code.
@@ -63,12 +67,10 @@ qualification reports. Debian package copyright files remain under `/usr/share/d
 This initial inventory does not establish complete transitive license review;
 that release requirement remains in [TODO.md](TODO.md).
 
-The Gateway and companion image recipes copy this file and the root [license](LICENSE) verbatim
-to `/usr/share/licenses/clawscarf`. The companion recipe additionally copies the
-incorporated [shadcn notice](ui/shadcn/LICENSE.md)
-there as `shadcn-MIT.txt`. A local runtime rebuild verified the root notices against its build inputs.
-A local companion rebuild also verified the root and shadcn notices against build inputs. Relative
-source links in this file refer to the source checkout, not image filesystem paths.
+The Gateway and companion image recipes copy this file and the root [license](LICENSE)
+verbatim to `/usr/share/licenses/clawscarf`. Native plugin pages use the shared
+[page renderer](plugins/common/native-page.ts) and OpenClaw's host UI components.
+Relative source links in this file refer to the source checkout, not image filesystem paths.
 
 When bundling or adapting software, record its exact version and source, retain its
 license and required notices, and identify modifications where required. Review
@@ -90,7 +92,7 @@ provenance. Paths below are relative to that donor, not files already present he
 | Runtime/defaults and plugin packaging | runtime/openclaw/, deploy/images/hetzner/scripts/install-runtime.sh, plugins/connections/                                           | Reuse defaults, integrity checks and packaging; replace Hetzner, systemd, rootless-engine and host-path assumptions for the selected target.                 |
 | Company login and entry               | src/domains/access/, src/domains/installations/service/openclaw/entry/, src/apps/ingress/, src/composition/ingress.ts               | Reuse OIDC/session/ingress mechanics and native identity semantics; replace organization/admission/placement wiring with standalone ownership.               |
 | Connections                           | plugins/connections/, src/domains/connections/, src/composition/connections/, catalogs/connections/, scripts/connectors-catalog*.ts | Preserve REST tools, Composio adapter, callbacks, account selection and grants; extract required persistence without the fleet control plane.                |
-| Connection account UI                 | src/apps/web/domains/connections/ and its shared visual/form dependencies                                                           | Copy the working flow and visual primitives; remove organization routing through explicit standalone composition.                                            |
+| Connection account UI                 | src/apps/web/domains/connections/                                                                                                   | Adapt the account-management flow to native OpenClaw plugin pages and generated clients; omit the donor web shell.                                           |
 | Model gateway                         | runtime/ai-gateway/, deploy/ai-gateway/, src/composition/ai/ and applicable src/domains/ai/ code                                    | Reuse LiteLLM integration/configuration and tests; replace hosted-source/admission/catalog wiring where needed. Do not recreate the removed inference proxy. |
 | Acceptance                            | tests/ and corresponding helpers for identity, logout, ingress, native roles, connections, model gateway and browser flows          | Transfer regressions with each capability; adapt fixtures and run against the new runtime. Donor success is not new-target acceptance.                       |
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.0-alpha.3",
+  "version": "0.1.0-alpha.4",
   "engines": {
     "node": ">=24.16.0 <25 || >=26.1.0"
   },