@clawscarf/cli 0.1.0-alpha.3 → 0.1.0-alpha.4

package/recipes/team-server/recipe.json

@@ -1,7 +1,7 @@
 {
   "id": "team-server",
   "version": "0.1.0",
-  "runtime": "../../runtime/releases/0.1.0-alpha.3.json",
+  "runtime": "../../runtime/releases/0.1.0-alpha.4.json",
   "name": "Team server",
   "description": "A protected OpenClaw server for your team, with hosted login, managed models and optional Connections.",
   "maturity": "supported",

package/release/README.md

@@ -53,7 +53,8 @@ Release candidates contain:
 - npm `@clawscarf/cli`: compiled CLI, recipes, pack files, model catalog and runtime
   definitions. No Docker images or large OpenShell executables in npm.
 - GitHub Releases: standalone CLI archives with a private Node runtime and installed
-  dependencies, an installer, runtime tool archives, checksums and required notices.
+  dependencies, an installer, runtime tool archives, checksums, required notices and
+  the OpenClaw source provenance and patch series used by the image build.
 - GHCR: runtime/companion images referenced by immutable registry digest.
 
 Installing a newer CLI supplies newer recipes. Each recipe still selects an exact
@@ -74,13 +75,18 @@ silently replaced. Docker verifies image digests. No start command resolves late
 with an exact version, such as `0.1.0-alpha.1`. It:
 
 1. Runs checks and tests the compiled operator outside the checkout on macOS arm64.
-2. Builds the pinned OpenClaw source and ClawScarf images on Linux arm64 and x86-64,
+2. Reconstructs OpenClaw from the pinned upstream commit and the ordered
+   [patch series](../runtime/openclaw/README.md), verifies the resulting source tree,
+   then builds ClawScarf images on Linux arm64 and x86-64,
    checks runtime capabilities and the Chromium sandbox, then starts a protected
-   installation with private LiteLLM networking and verifies stop/start retention.
-   It publishes image indexes containing both architectures to GHCR.
+   installation with private LiteLLM networking, exercises native administrator
+   access through the companion, and verifies stop/start retention.
+   Both architectures must report identical OpenClaw source provenance and patch
+   archives before it publishes image indexes containing both architectures to GHCR.
 3. Downloads checksum-pinned OpenShell tools, records the image digests, and assembles
    one runtime archive per host platform, individual executable assets, npm CLI,
-   checksums and notices.
+   checksums and notices. Candidate assembly verifies the image builds' patch archive
+   and provenance against this checkout before including them in the release.
 4. Installs the resulting npm archive into a temporary prefix and checks its CLI/catalog.
 5. Builds standalone CLI archives on macOS ARM64 and Linux ARM64/x86-64 using the
    same npm payload and frozen production dependency lockfile. Downloads Node using
@@ -104,6 +110,15 @@ and Linux installation checks use Depot ARM64/x86-64 runners; macOS checks and p
 use GitHub-hosted runners. The Depot Managed Runners app connects the ClawScarf organization
 to the RAW Labs Depot organization. The image job installs Docker 29.5.3 on its
 disposable runner for the network features required by installations.
+The generated source-provenance JSON records the upstream commit, reconstructed commit, source tree,
+ordered patch and intent hashes, and the complete patch-set digest.
+`openclaw-patches.tgz` contains the exact `series`, patches and their regeneration
+instructions. Both files are checksummed candidate assets and included in each runtime
+archive. The runtime definition's `sourceRevision` still identifies the ClawScarf
+commit, which owns those inputs; there is no second moving OpenClaw release branch.
+This provenance describes the Gateway source build; the separate browser-node image
+retains its upstream published image pin.
+See the [patch workflow](../runtime/openclaw/README.md) for editing and upgrading them.
 The source recipe pins the development
 runtime. Packaging resolves that same runtime to the candidate's immutable definition;
 it does not make recipes select latest. The first release uses the same CLI/runtime
@@ -113,8 +128,9 @@ or the selected runtime changes. Published definitions must not be overwritten.
 The `release-candidate` Actions artifact is the reviewable output. Download it and test
 a fresh supported installation, administrator login, real inference and stop/start
 before publication. GitHub's macOS runner does not provide our Docker Desktop journey;
-its packaging checks alone do not establish that journey. The browser-selection bug
-remains a separate, explicit limit; the Team server recipe leaves browser disabled.
+its packaging checks alone do not establish that journey. Model-selected browsing
+through the patched release images still needs qualification; the Team server recipe
+leaves browser disabled.
 
 [Publish release candidate](../.github/workflows/publish-release.yml) accepts a successful
 build run from `main`. It checks the source commit and artifact checksums, creates the
@@ -130,27 +146,25 @@ Repository setup:
   organization `@clawscarf` owns the public `@clawscarf/cli` package.
 - npm trusted publishing is configured for repository `clawscarf/clawscarf`, workflow
   [publish-release.yml](../.github/workflows/publish-release.yml), environment `release`.
-  The first tested tarball was published using the owner's authenticated npm CLI because
-  npm requires a package to exist before configuring trust. Subsequent publication
-  uses the workflow's short-lived identity rather than a stored npm token; alpha.2
-  was published through that workflow successfully.
+  Publication uses the workflow's short-lived identity rather than a stored npm token.
 - Transitive notices/source review remains open in [TODO.md](../TODO.md).
   Debian copyright files remain in the images; runtime assets include upstream notices
   and the image build exports its network-tool sources. Those files are not a claim of
   a completed license audit. Pinned Debian packages still depend on mirror retention.
 
-[Candidate 35532613602](https://github.com/clawscarf/clawscarf/actions/runs/35532613602)
-passed full checks, compiled archive installation and all eight image builds on
-native ARM64 and x86-64 Depot runners. The same artifacts are available in the
-[0.1.0-alpha.2 GitHub prerelease](https://github.com/clawscarf/clawscarf/releases/tag/v0.1.0-alpha.2)
-and as `@clawscarf/cli@0.1.0-alpha.2`, tagged `next`.
+[0.1.0-alpha.3](https://github.com/clawscarf/clawscarf/releases/tag/v0.1.0-alpha.3)
+includes the standalone installer and CLI archives. Its
+[candidate build](https://github.com/clawscarf/clawscarf/actions/runs/35536122174)
+passed full checks, npm archive installation, all eight image builds on both
+architectures, and standalone installation without system Node on all three host
+platforms. The public macOS installer also passed download verification, catalog
+loading and read-only status against an existing installation.
 
 Both Linux architectures passed protected runtime startup, native WebSocket forwarding,
 authenticated TLS to the private model gateway, retained stop/start and deletion on
-Docker 29.5.3. The final ARM64 images also passed real GPT-6 Astra inference and retained
-restart on macOS Docker Desktop. Candidate downloads passed SHA-256 verification and
-the CLI tarball installed independently of the repository. Disposable test containers,
-volumes and networks were deleted afterward.
+Docker 29.5.3. Real GPT-6 Astra inference and retained restart on macOS Docker Desktop
+were verified with alpha.2. Disposable test containers, volumes and networks were
+deleted afterward.
 
 Staging hosted administrator login and the packaged interactive setup previously
 passed on macOS with alpha.1. Hosted login and real provider inference on Linux,

package/release/components.json

@@ -1,8 +1,8 @@
 {
   "openclaw": {
+    "sourceTree": "b4ea62c5851510a4914ac95878f6e657344e6caf",
     "version": "2026.9.4",
-    "sourceRevision": "7bc487d39dc9e059bb9b19ea08152883022f83fe",
-    "image": "clawscarf-openclaw:7bc487d39dc9e059bb9b19ea08152883022f83fe"
+    "sourceRevision": "7bc487d39dc9e059bb9b19ea08152883022f83fe"
   },
   "openshell": {
     "version": "0.0.116",

package/runtime/releases/{0.1.0-alpha.3.json → 0.1.0-alpha.4.json}

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "version": "0.1.0-alpha.3",
-  "sourceRevision": "b5e0988a9dbbf28b40974cc1a8b38e1d9466e6f2",
+  "version": "0.1.0-alpha.4",
+  "sourceRevision": "6ef49bb49eb9cbf67f2dc1fc9cd46bfc37769344",
   "platforms": [
     "darwin-arm64",
     "linux-arm64",
@@ -9,16 +9,16 @@
   ],
   "images": {
     "postgres": "postgres@sha256:742f40ea20b9ff2ff31db5458d127452988a2164df9e17441e191f3b72252193",
-    "gateway": "ghcr.io/clawscarf/clawscarf/runtime@sha256:fa6cb6ee1116a17577369166e6d73391f0194b78a69743e4f8bc137dbffb1c5c",
-    "companion": "ghcr.io/clawscarf/clawscarf/companion@sha256:cc2a9f4caf2f9a2e97d198270b8d02cfc7fc082a97c5982eb40e223fe1d2f9a8",
-    "openshellClient": "ghcr.io/clawscarf/clawscarf/openshell-client@sha256:48167a723eac58247b5e07d8266495b7b71e51e72491a1ed63c45e2f1e5590d1",
-    "relay": "ghcr.io/clawscarf/clawscarf/browser-relay@sha256:a6958a6ee43bb6ebcbf18a0aae477a76ac1c8d8c4ed914d319a40dca40571ae7",
+    "gateway": "ghcr.io/clawscarf/clawscarf/runtime@sha256:cd216ee3f3301da011da5b3594ffb94bf8f5b33931ba1a9359f7902beadaf172",
+    "companion": "ghcr.io/clawscarf/clawscarf/companion@sha256:355d032e5d16048b421c909e759774c01472e15f4af3db4cbbeaaafc7bde9b43",
+    "openshellClient": "ghcr.io/clawscarf/clawscarf/openshell-client@sha256:d662ce37531c007180ad08b0e20348a43ed26b7d21edf261550a02a80f1eeaac",
+    "relay": "ghcr.io/clawscarf/clawscarf/browser-relay@sha256:cb6a6021f391ee309236202fb5e7557a22f47825417cea1ebeeefbf5b4fafe78",
     "models": "ghcr.io/berriai/litellm:v1.100.1@sha256:a3715fa7ad8387941ab697259bd2881d68931657247a41984f90fae6d11c62bf",
     "browser": {
-      "chromium": "ghcr.io/clawscarf/clawscarf/browser@sha256:b765e4698c471f26ff50d7f18d14ecf2fb903b92bb22e0299c3758a6429c2121",
-      "node": "ghcr.io/clawscarf/clawscarf/browser-node@sha256:c55268a56d45f65c05f1dd7c5f6a45c2b5cdaefb552606148c42fff0967a7654",
-      "dns": "ghcr.io/clawscarf/clawscarf/browser-dns@sha256:c9d1a557c8bb897eccd2f83693ba3bef71f8fd681e5cd4ce189942460e67e449",
-      "egress": "ghcr.io/clawscarf/clawscarf/browser-egress@sha256:b1b69e03629211ceaf84f7fd6c3bea7fbe659f81b4a4ab00fbc30588810cd970"
+      "chromium": "ghcr.io/clawscarf/clawscarf/browser@sha256:783b32a513a20ca5ae81a3dc9d5e23e7ac736b7130abfd412ca04a336a9bc538",
+      "node": "ghcr.io/clawscarf/clawscarf/browser-node@sha256:89e5c96dd598363bee81f44b585a9340e5449f878daf93a334180ed096250611",
+      "dns": "ghcr.io/clawscarf/clawscarf/browser-dns@sha256:ed44079311c2c245ea303947a4295f1948a182a07d162bedc88bb16ceca81295",
+      "egress": "ghcr.io/clawscarf/clawscarf/browser-egress@sha256:a2c0c18a1a398a6a16a427b6de9aa639cea44fa676679f01b188303cd191cbd5"
     }
   },
   "tools": {
@@ -28,34 +28,34 @@
         "darwin-arm64": {
           "file": "tools/darwin-arm64/openshell",
           "sha256": "0baeeffe0e4c184b08fde910ac9e8815fb0b8cfb808e49c0e634d7db65fb03bb",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.3/openshell-darwin-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.4/openshell-darwin-arm64"
         },
         "linux-arm64": {
           "file": "tools/linux-arm64/openshell",
           "sha256": "84df9f059b16b66c83748606cc87d9edcda84b57effea19543f5c368aba7eb18",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.3/openshell-linux-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.4/openshell-linux-arm64"
         },
         "linux-x64": {
           "file": "tools/linux-x64/openshell",
           "sha256": "24e85062073d512d1951c76cd3890b7bce1ab01cc36a08f88b3b43c067a402da",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.3/openshell-linux-x64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.4/openshell-linux-x64"
         }
       },
       "gateway": {
         "darwin-arm64": {
           "file": "tools/darwin-arm64/openshell-gateway",
           "sha256": "298706259ef18350f334c222e981e91583558511d50bce22727c689d261203e6",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.3/openshell-gateway-darwin-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.4/openshell-gateway-darwin-arm64"
         },
         "linux-arm64": {
           "file": "tools/linux-arm64/openshell-gateway",
           "sha256": "0e660428e655e7481f34ba8a4b351554400baf791863d32555c98dddb3f09ae2",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.3/openshell-gateway-linux-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.4/openshell-gateway-linux-arm64"
         },
         "linux-x64": {
           "file": "tools/linux-x64/openshell-gateway",
           "sha256": "780fc7ad871e2163f3fb866a2d0254ee682fc0d83e6261a84b350c8dcdd9f47b",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.3/openshell-gateway-linux-x64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.4/openshell-gateway-linux-x64"
         }
       }
     }

package/scripts/deployment/certificates.js

@@ -32,6 +32,7 @@ export async function ensureCertificates(directory) {
         const key = createPrivateKey(await readFile(join(directory, "management-key.pem")));
         if (!cert.checkPrivateKey(key) ||
             !cert.checkHost("host.docker.internal") ||
+            !cert.checkHost("companion") ||
             !cert.checkIP("127.0.0.1") ||
             !cert.raw.equals(ca.raw) ||
             !cert.ca ||
@@ -64,7 +65,7 @@ export async function ensureCertificates(directory) {
         "-subj",
         "/CN=ClawScarf local management",
         "-addext",
-        "subjectAltName=DNS:localhost,DNS:host.docker.internal,DNS:models.clawscarf.internal,IP:127.0.0.1",
+        "subjectAltName=DNS:localhost,DNS:companion,DNS:host.docker.internal,DNS:models.clawscarf.internal,IP:127.0.0.1",
         "-addext",
         "basicConstraints=critical,CA:TRUE",
     ]);

package/scripts/deployment/configuration.js

@@ -187,9 +187,6 @@ export const localInput = z
 export function parseLocalInput(value) {
     return localInput.parse(value);
 }
-export function managementOrigin() {
-    return "https://localhost:18801";
-}
 function mountedPrivateFile(directory, path, name) {
     absolutePath.parse(path);
     if (resolve(path) !== join(directory, name))
@@ -225,7 +222,8 @@ export function generateLocalConfiguration(options) {
         },
         runtime: {
             origin: `http://application:${String(input.ports.native)}`,
-            managementOrigin: managementOrigin(),
+            // Native proxy attribution needs the real Docker peer, not a loopback client.
+            managementOrigin: "https://companion:18801",
             widgetOrigin,
             widgetUpstream: `http://widgets:${String(input.ports.nativeWidgets)}`,
         },