@clawscarf/cli 0.1.0-alpha.5 → 0.1.0-alpha.7

package/README.md

@@ -80,6 +80,9 @@ For automation, the same configuration choices are available as command-line fla
 with `--non-interactive`, and commands support `--json`.
 [CLI reference and examples →](https://github.com/clawscarf/clawscarf/blob/main/deploy/deployment/installation.md#configure-without-prompts)
 
+See [CLI telemetry](https://github.com/clawscarf/clawscarf/blob/main/deploy/deployment/installation.md#telemetry) for usage reporting
+and how to disable it.
+
 ## Your server, your team
 
 An installation serves **one trusted team**: separate logins and roles, shared
@@ -87,6 +90,11 @@ execution files and browser accounts. Native roles control application permissio
 people allowed to run code share the Gateway’s authority. Use separate installations
 for teams that must be isolated from one another.
 
+The Team server recipe enables public web access for agents and shell tools. Operators
+can turn it off; private destinations remain restricted to explicitly configured services.
+Public web access permits sending team data to public services. See the
+[network boundary](https://github.com/clawscarf/clawscarf/blob/main/deploy/openshell/README.md#public-web-access) for enforcement and limits.
+
 Default login and optional Connections use **ClawScarf Cloud**. You can use your own
 OIDC provider and disable Connections to run without those hosted services. Original
 model-provider keys and Connections management credentials stay outside OpenClaw.

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.0-alpha.5",
+  "version": "0.1.0-alpha.7",
   "engines": {
     "node": ">=24.16.0 <25 || >=26.1.0"
   },
@@ -11,6 +11,7 @@
     "node-pg-migrate": "9.0.0",
     "openid-client": "6.8.8",
     "pg": "8.23.0",
+    "posthog-node": "5.52.5",
     "proper-lockfile": "4.1.2",
     "undici": "8.10.2",
     "yaml": "2.9.1",

package/pnpm-lock.yaml

@@ -26,6 +26,9 @@ importers:
       pg:
         specifier: 8.23.0
         version: 8.23.0
+      posthog-node:
+        specifier: 5.52.5
+        version: 5.52.5
       proper-lockfile:
         specifier: 4.1.2
         version: 4.1.2
@@ -556,6 +559,18 @@ packages:
         integrity: sha512-k2ENnmBugE/rzQfEcdWHcCY+/FM3VLzH9cYEsbdsoqrvzAKRhUZeRNhAZvB8OitQJ1TBed3yqWtdjzS6wJKBwg==
       }
 
+  '@posthog/core@1.55.1':
+    resolution:
+      {
+        integrity: sha512-S76bSbCHGVC8oQa1zyue6A6WzkNf1Ue4oRvfvBNLRnFM3UoWnpWnQ4T/4IzrIEtVCQYv1OI7gk8uL8/U6Tuu7w==
+      }
+
+  '@posthog/types@1.412.4':
+    resolution:
+      {
+        integrity: sha512-Q7lV9O9TbLngjOYw1ucm3bS3tn48xb1B4ZQdDy8gv7yfKe99hCTeWYG4xZ36nJM80VxpTF9TriiJt5hngDOkBg==
+      }
+
   '@seriousme/openapi-schema-validator@2.9.1':
     resolution:
       {
@@ -1917,6 +1932,18 @@ packages:
       }
     engines: { node: '>=0.10.0' }
 
+  posthog-node@5.52.5:
+    resolution:
+      {
+        integrity: sha512-r4KRXh2MvcHYh1s3NUca022GqujkJjpmD4qbRzWOLVTu8BfN3fqZj+MyKIxvHPXsS8sKsNVX+MlKk2qzW0Y4GQ==
+      }
+    engines: { node: ^20.20.0 || >=22.22.0 }
+    peerDependencies:
+      rxjs: ^7.0.0
+    peerDependenciesMeta:
+      rxjs:
+        optional: true
+
   powershell-utils@0.1.0:
     resolution:
       {
@@ -2714,6 +2741,12 @@ snapshots:
 
   '@pinojs/redact@0.4.0': {}
 
+  '@posthog/core@1.55.1':
+    dependencies:
+      '@posthog/types': 1.412.4
+
+  '@posthog/types@1.412.4': {}
+
   '@seriousme/openapi-schema-validator@2.9.1':
     dependencies:
       ajv: 8.20.0
@@ -3526,6 +3559,10 @@ snapshots:
     dependencies:
       xtend: 4.0.2
 
+  posthog-node@5.52.5:
+    dependencies:
+      '@posthog/core': 1.55.1
+
   powershell-utils@0.1.0: {}
 
   prelude-ls@1.2.1: {}

package/recipes/README.md

@@ -21,7 +21,7 @@ no executable hooks, secrets or user identities.
 
 - `models` selects model ID, provider and reasoning from the bundled
   [model catalog](../deploy/models/catalog.json).
-- `defaults` selects resources, browser and Connections enablement.
+- `defaults` selects resources, public web access, browser and Connections enablement.
 - `packs: [{ id, members }]` selects agents from the bundled [packs](../packs/README.md).
   The installer checks members and collects required credentials after settings review.
 

package/recipes/team-server/recipe.json

@@ -1,7 +1,7 @@
 {
   "id": "team-server",
-  "version": "0.1.1",
-  "runtime": "../../runtime/releases/0.1.0-alpha.5.json",
+  "version": "0.1.2",
+  "runtime": "../../runtime/releases/0.1.0-alpha.7.json",
   "name": "Team server",
   "description": "A protected OpenClaw server for your team, with hosted login, managed models and optional Connections.",
   "maturity": "supported",
@@ -15,6 +15,7 @@
     "browser": {
       "enabled": false
     },
+    "publicWeb": true,
     "connections": {
       "enabled": true
     }

package/release/README.md

@@ -159,3 +159,22 @@ an existing output directory and removes incomplete output on failure. It does n
 build images, copy recipes/packs or publish artifacts. A custom recipe can point to
 the resulting runtime definition. The [component pins](components.json) record
 upstream sources; [operator packaging](operator.md) describes the CLI archive.
+
+## CLI telemetry destination
+
+[telemetry.json](telemetry.json) is copied unchanged into the compiled operator,
+npm CLI and standalone CLI payload. It selects the ClawScarf project in PostHog EU
+using `host` (the HTTPS ingestion origin) and `projectToken` (the public `phc_`
+project token). Setting the file to `null` disables reporting for that build.
+Never put a personal or project-secret API key in this public file. A loopback
+HTTP origin is accepted for local receiver tests only.
+
+The [CLI telemetry guide](../deploy/deployment/installation.md#telemetry) owns event
+fields, user opt-out, local identity and delivery limits. Destination changes need
+a new CLI build/package; they do not change running team servers or cloud-service
+configuration. Automated tests use local receivers. The destination project's
+**Settings → Privacy → Discard client IP data** must stay enabled: a null `$ip`
+property alone does not prevent PostHog from storing the connection IP. The CLI
+also disables GeoIP enrichment. When changing destinations, verify that privacy
+setting and confirm start/finish events and their properties in the target project
+before publishing. An ingestion check does not establish CLI release publication.

package/release/components.json

@@ -1,6 +1,6 @@
 {
   "openclaw": {
-    "sourceTree": "b4ea62c5851510a4914ac95878f6e657344e6caf",
+    "sourceTree": "57d9c7394530b0468c0ccc3f163297c6669e0d5a",
     "version": "2026.9.4",
     "sourceRevision": "7bc487d39dc9e059bb9b19ea08152883022f83fe"
   },

package/release/telemetry.json

@@ -0,0 +1,4 @@
+{
+  "host": "https://eu.i.posthog.com",
+  "projectToken": "phc_ncR7uw53sKnhNVnfhXruCnS3WPyRTzm8AxHPbsRFeHxK"
+}

package/runtime/configuration.js

@@ -35,6 +35,7 @@ export function initialConfiguration(input) {
             bind: "loopback",
             port: 18789,
             terminal: { enabled: false },
+            cliAgents: { enabled: false },
             trustedProxies: ["127.0.0.1"],
             controlUi: {
                 allowedOrigins: [settings.publicOrigin],
@@ -63,7 +64,7 @@ export function initialConfiguration(input) {
                     member: {
                         agents: "*",
                         scopes: ["operator.read", "operator.write", "operator.talk"],
-                        sessions: { others: "none" },
+                        sessions: { others: "view" },
                         sandbox: "inherit",
                     },
                 },

package/runtime/releases/{0.1.0-alpha.5.json → 0.1.0-alpha.7.json}

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "version": "0.1.0-alpha.5",
-  "sourceRevision": "42c66a0697e4f1d3ee09f5a669595d66e100e6e7",
+  "version": "0.1.0-alpha.7",
+  "sourceRevision": "681655cc3e931209cb56b9f6866c9d780055c709",
   "platforms": [
     "darwin-arm64",
     "linux-arm64",
@@ -9,16 +9,16 @@
   ],
   "images": {
     "postgres": "postgres@sha256:742f40ea20b9ff2ff31db5458d127452988a2164df9e17441e191f3b72252193",
-    "gateway": "ghcr.io/clawscarf/clawscarf/runtime@sha256:facac1180479217a9d2508512fe998eb509980b87a855d7c52a8dd7604011eea",
-    "companion": "ghcr.io/clawscarf/clawscarf/companion@sha256:597c060a40d2cb0b858d93322a157e64618e837b9fd061c78064fe8ca9e44191",
-    "openshellClient": "ghcr.io/clawscarf/clawscarf/openshell-client@sha256:a02e79a590510a3947d4930218ad8a686d37846bad1fcbd551ea02c36c4df2a1",
-    "relay": "ghcr.io/clawscarf/clawscarf/browser-relay@sha256:e0684c033305b6d2f85e808645796e5ea4b71a921560c42cf12d93d7c9b1ec10",
+    "gateway": "ghcr.io/clawscarf/clawscarf/runtime@sha256:05a2341c36ca49d4a83d24a5f3bffff74dd54944b9fc3e13b7a5113d9ecda5f0",
+    "companion": "ghcr.io/clawscarf/clawscarf/companion@sha256:94a134f1f88eaacc785d1f0b5d7715725506f5c2e9f1d822916ada86513fb3aa",
+    "openshellClient": "ghcr.io/clawscarf/clawscarf/openshell-client@sha256:1ed1c3db878f5dc11045442319e3ff667aaebbf98977e042ace7486aff6a5b7a",
+    "relay": "ghcr.io/clawscarf/clawscarf/browser-relay@sha256:96101feea8be108c25eb2df1847a99b4a4cab2ca632d9895b36ea665bbd5f5ac",
     "models": "ghcr.io/berriai/litellm:v1.100.1@sha256:a3715fa7ad8387941ab697259bd2881d68931657247a41984f90fae6d11c62bf",
     "browser": {
-      "chromium": "ghcr.io/clawscarf/clawscarf/browser@sha256:3cef37e3b2de8a8f6fbad677a191837dbe391b720484aa40a5af4ef028d61781",
-      "node": "ghcr.io/clawscarf/clawscarf/browser-node@sha256:b75b37f97b721b1aae5924b70ae78149f519196ed86ac325829f4df99acd67ff",
-      "dns": "ghcr.io/clawscarf/clawscarf/browser-dns@sha256:45b3d18efe12fff755acf00fc2629ca0d8084e215be548003645a6e8183de34f",
-      "egress": "ghcr.io/clawscarf/clawscarf/browser-egress@sha256:cd3a89ad06d35ecf14da695578500f8874362d6789a1590858db6c7f12489c9d"
+      "chromium": "ghcr.io/clawscarf/clawscarf/browser@sha256:c0b9a423829a990c805fdee6af55597ec02a9dc0a8aed35590fc43a75d5fe60f",
+      "node": "ghcr.io/clawscarf/clawscarf/browser-node@sha256:2102a3bb15cb8c828ae09c91271f67b7e963d8bacd21f848044782e7c33f9d42",
+      "dns": "ghcr.io/clawscarf/clawscarf/browser-dns@sha256:bc877b4bc0635a1dd4b4d3dba11e1142a38d0c1ff51bb90fc58ebf42fa57562d",
+      "egress": "ghcr.io/clawscarf/clawscarf/browser-egress@sha256:7519c3dc6c54afadf5104ae92ecc5f6af6983fb308e16e2c81b7df593a8c6f8d"
     }
   },
   "tools": {
@@ -28,34 +28,34 @@
         "darwin-arm64": {
           "file": "tools/darwin-arm64/openshell",
           "sha256": "0baeeffe0e4c184b08fde910ac9e8815fb0b8cfb808e49c0e634d7db65fb03bb",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.5/openshell-darwin-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.7/openshell-darwin-arm64"
         },
         "linux-arm64": {
           "file": "tools/linux-arm64/openshell",
           "sha256": "84df9f059b16b66c83748606cc87d9edcda84b57effea19543f5c368aba7eb18",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.5/openshell-linux-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.7/openshell-linux-arm64"
         },
         "linux-x64": {
           "file": "tools/linux-x64/openshell",
           "sha256": "24e85062073d512d1951c76cd3890b7bce1ab01cc36a08f88b3b43c067a402da",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.5/openshell-linux-x64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.7/openshell-linux-x64"
         }
       },
       "gateway": {
         "darwin-arm64": {
           "file": "tools/darwin-arm64/openshell-gateway",
           "sha256": "298706259ef18350f334c222e981e91583558511d50bce22727c689d261203e6",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.5/openshell-gateway-darwin-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.7/openshell-gateway-darwin-arm64"
         },
         "linux-arm64": {
           "file": "tools/linux-arm64/openshell-gateway",
           "sha256": "0e660428e655e7481f34ba8a4b351554400baf791863d32555c98dddb3f09ae2",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.5/openshell-gateway-linux-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.7/openshell-gateway-linux-arm64"
         },
         "linux-x64": {
           "file": "tools/linux-x64/openshell-gateway",
           "sha256": "780fc7ad871e2163f3fb866a2d0254ee682fc0d83e6261a84b350c8dcdd9f47b",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.5/openshell-gateway-linux-x64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.7/openshell-gateway-linux-x64"
         }
       }
     }

package/scripts/clawscarf.js

@@ -8,7 +8,11 @@ import { LocalSetupError } from "./deployment/process.js";
 import { LocalDatabaseError } from "./deployment/database.js";
 import { InstallerCancelled } from "./installation/installer/prompts.js";
 import { installationCommand } from "./installation/command.js";
-const program = installationCommand();
+import { CliTelemetry } from "./telemetry.js";
+const telemetry = new CliTelemetry();
+const program = installationCommand(telemetry);
+program.hook("preAction", async (_program, command) => telemetry.start(command));
+let failureCode;
 const commands = [program];
 for (const command of commands) {
     command.exitOverride().configureOutput({ outputError: () => { } });
@@ -85,8 +89,12 @@ catch (error) {
                                 ? error.message
                                 : "Check the configuration, file permissions and local prerequisites. No operation was automatically retried."),
     };
+    failureCode = failure.code;
     process.stderr.write((program.opts().json
         ? JSON.stringify(failure)
         : `Error: ${failure.detail}`) + "\n");
     process.exitCode = error instanceof InstallerCancelled ? 130 : 1;
 }
+finally {
+    await telemetry.finish(process.exitCode, failureCode);
+}

package/scripts/deployment/configuration.js

@@ -139,6 +139,7 @@ export const localInput = z
         .optional(),
     cpu,
     memory,
+    publicWeb: z.boolean().default(false),
     relayImage: image.optional(),
     browser: z
         .strictObject({

package/scripts/deployment/connection-settings.js

@@ -5,6 +5,7 @@ import { companionConfiguration } from "./configuration.js";
 import { loadInitialConnections, prepareInitialConnections, readInitialConnectionToken, } from "./connections.js";
 import { configureConnectionsVolume } from "./connections-runtime.js";
 import { writePrivate } from "./state.js";
+import { stageNetworkPolicyChange } from "./network-policy.js";
 import { initialRuntimePolicy } from "./policy.js";
 /** Explicit capability edit, with the installation stopped and its operator lock held. */
 export async function applyConnectionSettings(directory, state, previous, credentialFile) {
@@ -56,5 +57,7 @@ export async function applyConnectionSettings(directory, state, previous, creden
     await writePrivate(file, JSON.stringify(config));
     const rule = initialRuntimePolicy("network_policies: {}", undefined, endpoint)
         .network_policies.connections_broker ?? null;
-    await writePrivate(join(directory, "private/connection-policy-change.json"), JSON.stringify({ ownerId: state.ownerId, rule }));
+    await stageNetworkPolicyChange(directory, state, {
+        connections_broker: rule,
+    });
 }

package/scripts/deployment/launch.js

@@ -1,4 +1,4 @@
-import { applyConnectionPolicy } from "./connection-policy.js";
+import { applyNetworkPolicy } from "./network-policy.js";
 import { verifyRuntimeImage } from "./images.js";
 import { startBrowserNode } from "./browser-node-pairing.js";
 import { verifyBrowserNode } from "./browser-node.js";
@@ -83,7 +83,7 @@ export async function launchLocal(directoryInput, report, control = {}) {
         await waitFor(async () => {
             await run(state.input.openshellCli, ["sandbox", "list", "--gateway", name, "--output", "json"], { env, timeout: 5000 });
         });
-        await applyConnectionPolicy(directory, state, env);
+        await applyNetworkPolicy(directory, state, env);
         if (state.input.modelGateway) {
             report("Starting model gateway…");
             await compose(directory, [
@@ -113,7 +113,7 @@ export async function launchLocal(directoryInput, report, control = {}) {
             await response.body?.cancel();
         });
         await verifyRuntimeBinding(state, runtime);
-        await applyConnectionPolicy(directory, state, env, true);
+        await waitFor(() => applyNetworkPolicy(directory, state, env, true));
         if (state.input.browser) {
             report("Starting native browser node…");
             await startBrowserNode(directory, state, cancellation.signal);

package/scripts/deployment/network-policy.js

@@ -0,0 +1,120 @@
+import { isDeepStrictEqual } from "node:util";
+import { readFile, rm } from "node:fs/promises";
+import { join } from "node:path";
+import { z } from "zod";
+import { run } from "./process.js";
+import { resourceNames, writePrivate } from "./state.js";
+import { runtimeManager } from "./runtime.js";
+const connectionRuleSchema = z.object({
+    name: z.string(),
+    endpoints: z.array(z.object({ host: z.string(), port: z.number(), tls: z.string() })),
+    binaries: z.array(z.object({ path: z.string() })),
+});
+const publicRuleSchema = z.object({
+    name: z.string(),
+    endpoints: z.array(z.object({
+        ports: z.array(z.number()),
+        allowed_ips: z.array(z.string()),
+        tls: z.string(),
+    })),
+    binaries: z.array(z.object({ path: z.string() })),
+});
+const changesSchema = z.strictObject({
+    connections_broker: connectionRuleSchema.nullable().optional(),
+    public_web: publicRuleSchema.nullable().optional(),
+});
+export async function stageNetworkPolicyChange(directory, state, rules) {
+    const file = join(directory, "private/network-policy-change.json");
+    let previous = {};
+    try {
+        previous = z
+            .strictObject({ ownerId: z.literal(state.ownerId), rules: changesSchema })
+            .parse(JSON.parse(await readFile(file, "utf8"))).rules;
+    }
+    catch (error) {
+        if (!(error instanceof Error && "code" in error && error.code === "ENOENT"))
+            throw error;
+    }
+    await writePrivate(file, JSON.stringify({
+        ownerId: state.ownerId,
+        rules: changesSchema.parse({ ...previous, ...rules }),
+    }));
+}
+const policySchema = z.looseObject({
+    network_policies: z.record(z.string(), z.unknown()),
+});
+/** Apply only explicitly selected managed rules; never regenerate an operator's other policies. */
+export async function applyNetworkPolicy(directory, state, env, verify = false, command = run) {
+    const pending = join(directory, "private/network-policy-change.json");
+    let text;
+    try {
+        text = await readFile(pending, "utf8");
+    }
+    catch (error) {
+        if (error instanceof Error && "code" in error && error.code === "ENOENT")
+            return;
+        throw error;
+    }
+    const change = z
+        .strictObject({
+        ownerId: z.literal(state.ownerId),
+        rules: changesSchema,
+    })
+        .parse(JSON.parse(text));
+    const base = join(directory, "private/runtime-policy.json");
+    const update = (policy) => {
+        return {
+            ...policy,
+            network_policies: Object.fromEntries([
+                ...Object.entries(policy.network_policies).filter(([key]) => !Object.hasOwn(change.rules, key)),
+                ...Object.entries(change.rules).filter(([, rule]) => rule !== null),
+            ]),
+        };
+    };
+    const matches = (policy) => Object.entries(change.rules).every(([key, rule]) => {
+        const observed = policy.network_policies[key];
+        if (rule === null)
+            return observed === undefined;
+        const parsed = (key === "public_web" ? publicRuleSchema : connectionRuleSchema).safeParse(observed);
+        return parsed.success && isDeepStrictEqual(parsed.data, rule);
+    });
+    const name = resourceNames(state).sandbox;
+    if (!(await runtimeManager(directory, state, env, command).recorded()).receipt) {
+        if (verify)
+            throw Error("The configured runtime has not been recorded.");
+        await writePrivate(base, JSON.stringify(update(policySchema.parse(JSON.parse(await readFile(base, "utf8"))))));
+        return;
+    }
+    const observed = z
+        .object({
+        sandbox: z.literal(name),
+        policy_source: z.literal("sandbox"),
+        version: z.number().int(),
+        active_version: z.number().int(),
+        status: z.string(),
+        policy: policySchema,
+    })
+        .parse(JSON.parse(await command(state.input.openshellCli, [
+        "policy",
+        "get",
+        name,
+        "--gateway",
+        name,
+        "--base",
+        "--output",
+        "json",
+    ], { env })));
+    if (matches(observed.policy)) {
+        if (verify) {
+            if (observed.active_version !== observed.version ||
+                observed.status !== "effective")
+                throw Error("The selected network policy has not become effective in the runtime.");
+            await rm(pending);
+        }
+        return;
+    }
+    if (verify)
+        throw Error("The selected network policy was not confirmed. The installation remains unavailable.");
+    await writePrivate(base, JSON.stringify(update(observed.policy)));
+    await command(state.input.openshellCli, ["policy", "set", name, "--gateway", name, "--policy", base], { env });
+}

package/scripts/deployment/policy.js

@@ -4,7 +4,8 @@ import { parseDocument } from "yaml";
 import { z } from "zod";
 import { LocalSetupError } from "./process.js";
 import { ensurePrivateFile } from "./state.js";
-export function initialRuntimePolicy(source, models, connections) {
+import { publicWebPolicy } from "./public-web.js";
+export function initialRuntimePolicy(source, models, connections, publicWeb = false) {
     const document = parseDocument(source);
     if (document.errors.length || document.warnings.length)
         throw new LocalSetupError("invalid_runtime_policy", "The shipped runtime policy is invalid.");
@@ -17,6 +18,7 @@ export function initialRuntimePolicy(source, models, connections) {
     return {
         ...parsed.data,
         network_policies: {
+            ...(publicWeb ? { public_web: publicWebPolicy(true) } : {}),
             ...(connections
                 ? {
                     connections_broker: {
@@ -50,7 +52,7 @@ export function initialRuntimePolicy(source, models, connections) {
         },
     };
 }
-export async function prepareRuntimePolicy(directory, models, connections) {
-    const policy = initialRuntimePolicy(await readFile(new URL("../../deploy/openshell/policy.yaml", import.meta.url), "utf8"), models, connections);
+export async function prepareRuntimePolicy(directory, models, connections, publicWeb = false) {
+    const policy = initialRuntimePolicy(await readFile(new URL("../../deploy/openshell/policy.yaml", import.meta.url), "utf8"), models, connections, publicWeb);
     await ensurePrivateFile(join(directory, "private/runtime-policy.json"), JSON.stringify(policy));
 }

package/scripts/deployment/prepare.js

@@ -93,7 +93,7 @@ export async function prepareLocal(directoryInput, inputValue, capabilities) {
         : 0), null, 2));
     await prepareModelCredential(directory, state);
     const models = await prepareInitialModels(directory, input.models);
-    await prepareRuntimePolicy(directory, models, connectionsEndpoint);
+    await prepareRuntimePolicy(directory, models, connectionsEndpoint, state.input.publicWeb);
     await withPreparedDatabase(directory, state, async (pool, runtimeUrl) => {
         const store = new PostgresAccessStore(pool, await readFile(join(privateDirectory, "encryption.key")), {
             issuer: input.team.issuer,