@clawscarf/cli 0.1.0-alpha.7 → 0.1.0-alpha.8

package/README.md

@@ -13,7 +13,7 @@ models, connected accounts, and execution protected by NVIDIA OpenShell.
 ## Get started
 
 ```sh
-curl -fsSL https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.5/install.sh | sh
+curl -fsSL https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.7/install.sh | sh
 export PATH="$HOME/.local/bin:$PATH"
 clawscarf configure
 ```

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.0-alpha.7",
+  "version": "0.1.0-alpha.8",
   "engines": {
     "node": ">=24.16.0 <25 || >=26.1.0"
   },

package/pnpm-lock.yaml

@@ -620,6 +620,12 @@ packages:
         integrity: sha512-3xSjTp3v03X/lSQLkczaN9UIEwJMoMCA1+Nb5HfbJEQWogdeQIyVtTvxPXDQjZ5zws8rFQfVfRdz03ARihPJgw==
       }
 
+  '@types/semver@7.8.0':
+    resolution:
+      {
+        integrity: sha512-1mAINjtQCXXeLkJ9ehXkwOcBpqtLxiVtKhpUf83DdRNdQKV0iXZpaHYqRr7nj+wvxuJzoAmAwXI+sCNMv1CzLQ==
+      }
+
   '@types/ws@8.18.1':
     resolution:
       {
@@ -2776,6 +2782,8 @@ snapshots:
 
   '@types/retry@0.12.5': {}
 
+  '@types/semver@7.8.0': {}
+
   '@types/ws@8.18.1':
     dependencies:
       '@types/node': 24.10.13

package/recipes/README.md

@@ -5,13 +5,15 @@ Recipes are bundled with the CLI. Each folder contains a [recipe.json](team-serv
 
 ```text
 recipes/team-server/recipe.json
-runtime/releases/0.1.0-dev.json
+runtime/current.json
 packs/research-team/pack.json
 ```
 
 Each recipe has an ID and a version. Accepted installations retain that provenance
 alongside their actual settings; a CLI update never reapplies new defaults. Bump the
-recipe version when its defaults, pack selections or runtime pin change.
+recipe version when its defaults, pack selections or explicit runtime reference change.
+The resolved runtime release is retained separately; automatic advancement of the
+[current selection](../release/README.md#published-and-development-use) does not change recipe defaults.
 
 A recipe's `runtime` points to an exact runtime definition, relative to the recipe
 file. Runtime images and tools are fixed; its other fields are defaults that users

package/recipes/team-server/recipe.json

@@ -1,7 +1,5 @@
 {
   "id": "team-server",
-  "version": "0.1.2",
-  "runtime": "../../runtime/releases/0.1.0-alpha.7.json",
   "name": "Team server",
   "description": "A protected OpenClaw server for your team, with hosted login, managed models and optional Connections.",
   "maturity": "supported",
@@ -15,15 +13,16 @@
     "browser": {
       "enabled": false
     },
-    "publicWeb": true,
     "connections": {
       "enabled": true
-    }
+    },
+    "publicWeb": true
   },
   "models": {
     "model": "gpt-6-astra",
     "provider": "openai",
     "reasoning": "medium"
   },
-  "packs": []
+  "runtime": "../../runtime/current.json",
+  "version": "0.1.3"
 }

package/release/README.md

@@ -2,11 +2,11 @@
 
 These have separate responsibilities:
 
-| Definition      | Owns                                                                                             | Location                                               |
-| --------------- | ------------------------------------------------------------------------------------------------ | ------------------------------------------------------ |
-| Runtime release | Exact software images, OpenShell executables, checksums and supported platforms                  | [runtime/releases](../runtime/releases/0.1.0-dev.json) |
-| Recipe          | A fixed runtime reference plus editable model, reasoning, resource, capability and pack defaults | [recipes](../recipes/README.md)                        |
-| Pack            | Native agent, skill and workflow files with declared prerequisites                               | [packs](../packs/README.md)                            |
+| Definition      | Owns                                                                                             | Location                                        |
+| --------------- | ------------------------------------------------------------------------------------------------ | ----------------------------------------------- |
+| Runtime release | Exact software images, OpenShell executables, checksums and supported platforms                  | [runtime/current.json](../runtime/current.json) |
+| Recipe          | A fixed runtime reference plus editable model, reasoning, resource, capability and pack defaults | [recipes](../recipes/README.md)                 |
+| Pack            | Native agent, skill and workflow files with declared prerequisites                               | [packs](../packs/README.md)                     |
 
 Several recipes can use the same runtime. A runtime contains no recipes, model
 catalog or pack selections. Changing a recipe does not require rebuilding its runtime.
@@ -20,10 +20,23 @@ Use the [installation guide](../deploy/deployment/installation.md) for published
 CLI installation, platform requirements and runtime downloads. Use the
 [development command](../scripts/README.md#development-command) for this checkout.
 
-The tracked [development runtime](../runtime/releases/0.1.0-dev.json) is an input
-for a prepared development environment, not a clean-machine release. Its exact
-images and executable paths are data in that definition. Packaging resolves those
-inputs to immutable candidate artifacts; runtime startup never selects latest.
+The tracked [current runtime](../runtime/current.json) selects a published release
+by exact image digests and downloadable tool checksums. The development command
+reads it from the checkout; it does not query a remote latest version or build images.
+New installations retain their own copy. Updating this file or the CLI never changes
+an existing installation's saved selection.
+
+After publication, the workflow copies the verified release manifest into this file
+and commits it to `main`. Pulling that commit updates the development command's
+selection. [Promotion](../scripts/release/advance-runtime.ts) requires a newer version
+and the same selection the candidate was built against; an identical repeat is a no-op.
+A changed pin or concurrent Git update fails visibly instead of overwriting another
+selection. The promotion job can be retried independently of publication. Repository
+rules must permit the release workflow's bot to push this commit to `main`.
+
+For experiments with locally built images/tools, create a separate runtime bundle
+and custom recipe using [runtime assembly](#assemble-runtime-artifacts). The bundled
+recipe uses the same published artifact format in development and installed CLIs.
 
 ## Publishing structure
 
@@ -84,9 +97,10 @@ owns source identity and reconstruction. Candidate assembly packages
 [openclaw-source.json and openclaw-patches.tgz](../scripts/release/candidate.ts)
 with checksums; each runtime archive includes both. The runtime definition's `sourceRevision`
 identifies the ClawScarf commit that owns those inputs.
-The source recipe pins the development
-runtime. Packaging resolves that same runtime to the candidate's immutable definition;
-it does not make recipes select latest. Published definitions must not be overwritten.
+Recipes reference the current manifest within their checkout or installed package.
+Candidate packaging replaces that file only in the staged package with the newly
+built manifest. It leaves source files untouched; publication advances the checkout
+as described above. Published packages and release assets remain immutable.
 
 The `release-candidate` Actions artifact is the reviewable output. Download it and test
 a fresh supported installation, administrator login, real inference and stop/start
@@ -99,6 +113,9 @@ build run from `main`. It checks the source commit and artifact checksums, creat
 GitHub Release and publishes the already-built npm tarball. It never rebuilds images
 or packages. Prereleases use npm's `next` tag; stable versions use `latest`. Repeating
 a GitHub upload is allowed only when the existing checksums match exactly.
+A separate dependent job then advances the checkout's current runtime selection;
+a failure there leaves the published release available and can be retried without
+republishing npm or rebuilding artifacts.
 
 Repository setup:
 

package/release/operator.md

@@ -32,6 +32,6 @@ node scripts/clawscarf.js configure --directory /absolute/new-team
 
 Keep installation data outside the extracted package. A development runtime that
 references local image IDs needs those images prepared separately; see
-[development releases](README.md#published-and-development-use).
+[custom runtime assembly](README.md#assemble-runtime-artifacts).
 The optional pack operator also needs its [Python dependencies](../packs/README.md#requirements-and-bindings).
 Required [notices](../THIRD_PARTY_NOTICES.md) and dependency licenses accompany the payload.

package/runtime/{releases/0.1.0-alpha.7.json → current.json}

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "version": "0.1.0-alpha.7",
-  "sourceRevision": "681655cc3e931209cb56b9f6866c9d780055c709",
+  "version": "0.1.0-alpha.8",
+  "sourceRevision": "dc1a8fc480b3a55841e2a1c1aea58bad9811402c",
   "platforms": [
     "darwin-arm64",
     "linux-arm64",
@@ -9,16 +9,16 @@
   ],
   "images": {
     "postgres": "postgres@sha256:742f40ea20b9ff2ff31db5458d127452988a2164df9e17441e191f3b72252193",
-    "gateway": "ghcr.io/clawscarf/clawscarf/runtime@sha256:05a2341c36ca49d4a83d24a5f3bffff74dd54944b9fc3e13b7a5113d9ecda5f0",
-    "companion": "ghcr.io/clawscarf/clawscarf/companion@sha256:94a134f1f88eaacc785d1f0b5d7715725506f5c2e9f1d822916ada86513fb3aa",
-    "openshellClient": "ghcr.io/clawscarf/clawscarf/openshell-client@sha256:1ed1c3db878f5dc11045442319e3ff667aaebbf98977e042ace7486aff6a5b7a",
-    "relay": "ghcr.io/clawscarf/clawscarf/browser-relay@sha256:96101feea8be108c25eb2df1847a99b4a4cab2ca632d9895b36ea665bbd5f5ac",
+    "gateway": "ghcr.io/clawscarf/clawscarf/runtime@sha256:a942812602fc1bdf40421d0ddcfda89aa87b9412b0616adba9a3da4e2a8a9a91",
+    "companion": "ghcr.io/clawscarf/clawscarf/companion@sha256:fea91c1beda96cf811cfc952c77fd7ac17df8374704da926984ec65df8de49af",
+    "openshellClient": "ghcr.io/clawscarf/clawscarf/openshell-client@sha256:419510bc89b4beee1763ad4b4a86ec490546e4cc1e645d054ef05a5cf654f27d",
+    "relay": "ghcr.io/clawscarf/clawscarf/browser-relay@sha256:602226e11f463fd811378173caedc0bea017f556d3fe94d17f4a752aaabd7171",
     "models": "ghcr.io/berriai/litellm:v1.100.1@sha256:a3715fa7ad8387941ab697259bd2881d68931657247a41984f90fae6d11c62bf",
     "browser": {
-      "chromium": "ghcr.io/clawscarf/clawscarf/browser@sha256:c0b9a423829a990c805fdee6af55597ec02a9dc0a8aed35590fc43a75d5fe60f",
-      "node": "ghcr.io/clawscarf/clawscarf/browser-node@sha256:2102a3bb15cb8c828ae09c91271f67b7e963d8bacd21f848044782e7c33f9d42",
-      "dns": "ghcr.io/clawscarf/clawscarf/browser-dns@sha256:bc877b4bc0635a1dd4b4d3dba11e1142a38d0c1ff51bb90fc58ebf42fa57562d",
-      "egress": "ghcr.io/clawscarf/clawscarf/browser-egress@sha256:7519c3dc6c54afadf5104ae92ecc5f6af6983fb308e16e2c81b7df593a8c6f8d"
+      "chromium": "ghcr.io/clawscarf/clawscarf/browser@sha256:ce259d28f078ac5d3ff9afc0a79b0a8935873eda953e6c04dbd8f756c3eb17ac",
+      "node": "ghcr.io/clawscarf/clawscarf/browser-node@sha256:de6b364dad0010ddf17f141888569c75f72364f4c2305d96e012c0c78c34f7c2",
+      "dns": "ghcr.io/clawscarf/clawscarf/browser-dns@sha256:3b8e9364ba8cc6271a53135c2c82944f9a3be423b20ccef3dea930e38d08d8a8",
+      "egress": "ghcr.io/clawscarf/clawscarf/browser-egress@sha256:06a33c3d9a5979359c92179ae936bfc0bb991b057eb5a4dc87dcf9240b513542"
     }
   },
   "tools": {
@@ -28,34 +28,34 @@
         "darwin-arm64": {
           "file": "tools/darwin-arm64/openshell",
           "sha256": "0baeeffe0e4c184b08fde910ac9e8815fb0b8cfb808e49c0e634d7db65fb03bb",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.7/openshell-darwin-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.8/openshell-darwin-arm64"
         },
         "linux-arm64": {
           "file": "tools/linux-arm64/openshell",
           "sha256": "84df9f059b16b66c83748606cc87d9edcda84b57effea19543f5c368aba7eb18",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.7/openshell-linux-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.8/openshell-linux-arm64"
         },
         "linux-x64": {
           "file": "tools/linux-x64/openshell",
           "sha256": "24e85062073d512d1951c76cd3890b7bce1ab01cc36a08f88b3b43c067a402da",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.7/openshell-linux-x64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.8/openshell-linux-x64"
         }
       },
       "gateway": {
         "darwin-arm64": {
           "file": "tools/darwin-arm64/openshell-gateway",
           "sha256": "298706259ef18350f334c222e981e91583558511d50bce22727c689d261203e6",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.7/openshell-gateway-darwin-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.8/openshell-gateway-darwin-arm64"
         },
         "linux-arm64": {
           "file": "tools/linux-arm64/openshell-gateway",
           "sha256": "0e660428e655e7481f34ba8a4b351554400baf791863d32555c98dddb3f09ae2",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.7/openshell-gateway-linux-arm64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.8/openshell-gateway-linux-arm64"
         },
         "linux-x64": {
           "file": "tools/linux-x64/openshell-gateway",
           "sha256": "780fc7ad871e2163f3fb866a2d0254ee682fc0d83e6261a84b350c8dcdd9f47b",
-          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.7/openshell-gateway-linux-x64"
+          "url": "https://github.com/clawscarf/clawscarf/releases/download/v0.1.0-alpha.8/openshell-gateway-linux-x64"
         }
       }
     }

package/scripts/deployment/network-policy.js

@@ -4,10 +4,16 @@ import { join } from "node:path";
 import { z } from "zod";
 import { run } from "./process.js";
 import { resourceNames, writePrivate } from "./state.js";
+import { composePublicWebRules } from "./public-web.js";
 import { runtimeManager } from "./runtime.js";
 const connectionRuleSchema = z.object({
     name: z.string(),
-    endpoints: z.array(z.object({ host: z.string(), port: z.number(), tls: z.string() })),
+    endpoints: z.array(z.object({
+        host: z.string(),
+        port: z.number(),
+        tls: z.string(),
+        allowed_ips: z.array(z.string()).optional(),
+    })),
     binaries: z.array(z.object({ path: z.string() })),
 });
 const publicRuleSchema = z.object({
@@ -65,19 +71,34 @@ export async function applyNetworkPolicy(directory, state, env, verify = false,
     const update = (policy) => {
         return {
             ...policy,
-            network_policies: Object.fromEntries([
+            network_policies: composePublicWebRules(Object.fromEntries([
                 ...Object.entries(policy.network_policies).filter(([key]) => !Object.hasOwn(change.rules, key)),
                 ...Object.entries(change.rules).filter(([, rule]) => rule !== null),
-            ]),
+            ])),
         };
     };
-    const matches = (policy) => Object.entries(change.rules).every(([key, rule]) => {
-        const observed = policy.network_policies[key];
-        if (rule === null)
-            return observed === undefined;
-        const parsed = (key === "public_web" ? publicRuleSchema : connectionRuleSchema).safeParse(observed);
-        return parsed.success && isDeepStrictEqual(parsed.data, rule);
-    });
+    const matches = (policy) => {
+        const expected = update(policy).network_policies;
+        return [
+            ...new Set([
+                ...Object.keys(change.rules),
+                "connections_broker",
+                "model_gateway",
+            ]),
+        ].every((key) => {
+            const observed = policy.network_policies[key];
+            if (!Object.hasOwn(change.rules, key))
+                return isDeepStrictEqual(observed, expected[key]);
+            if (expected[key] === undefined)
+                return observed === undefined;
+            const schema = key === "public_web" ? publicRuleSchema : connectionRuleSchema;
+            const actualRule = schema.safeParse(observed);
+            const expectedRule = schema.safeParse(expected[key]);
+            return (actualRule.success &&
+                expectedRule.success &&
+                isDeepStrictEqual(actualRule.data, expectedRule.data));
+        });
+    };
     const name = resourceNames(state).sandbox;
     if (!(await runtimeManager(directory, state, env, command).recorded()).receipt) {
         if (verify)

package/scripts/deployment/policy.js

@@ -4,7 +4,7 @@ import { parseDocument } from "yaml";
 import { z } from "zod";
 import { LocalSetupError } from "./process.js";
 import { ensurePrivateFile } from "./state.js";
-import { publicWebPolicy } from "./public-web.js";
+import { publicWebPolicy, publicWebEndpointConstraints } from "./public-web.js";
 export function initialRuntimePolicy(source, models, connections, publicWeb = false) {
     const document = parseDocument(source);
     if (document.errors.length || document.warnings.length)
@@ -27,6 +27,7 @@ export function initialRuntimePolicy(source, models, connections, publicWeb = fa
                             {
                                 host: connections.network.host,
                                 port: connections.network.port,
+                                ...publicWebEndpointConstraints(connections.network.port, publicWeb),
                                 tls: "skip",
                             },
                         ],
@@ -42,6 +43,7 @@ export function initialRuntimePolicy(source, models, connections, publicWeb = fa
                             {
                                 host: models.network.host,
                                 port: models.network.port,
+                                ...publicWebEndpointConstraints(models.network.port, publicWeb),
                                 tls: "skip",
                             },
                         ],

package/scripts/deployment/public-web.js

@@ -1,3 +1,6 @@
+import { isDeepStrictEqual } from "node:util";
+import { z } from "zod";
+import { LocalSetupError } from "./process.js";
 // Public unicast ranges, excluding private and special-use destinations.
 // Keep aligned with the browser egress boundary in deploy/execution/network/squid.conf.
 export const publicWebAddresses = [
@@ -174,3 +177,46 @@ export function publicWebPolicy(enabled) {
         }
         : null;
 }
+/** OpenShell requires overlapping endpoints to have identical IP constraints. */
+export function publicWebEndpointConstraints(port, enabled) {
+    return enabled && (port === 80 || port === 443)
+        ? { allowed_ips: publicWebAddresses }
+        : {};
+}
+const managedRuleSchema = z.looseObject({
+    endpoints: z.array(z.looseObject({
+        port: z.number(),
+        allowed_ips: z.array(z.string()).optional(),
+    })),
+});
+/** Compose managed service rules with public web without broadening private access. */
+export function composePublicWebRules(rules) {
+    const enabled = rules.public_web !== undefined;
+    const result = { ...rules };
+    for (const key of ["connections_broker", "model_gateway"]) {
+        const rule = result[key];
+        if (rule === undefined)
+            continue;
+        const parsed = managedRuleSchema.safeParse(rule);
+        if (!parsed.success)
+            throw new LocalSetupError("invalid_runtime_policy", "A managed service network rule has been edited into an unsupported shape. Review its policy before changing public web access.");
+        result[key] = {
+            ...parsed.data,
+            endpoints: parsed.data.endpoints.map((endpoint) => {
+                if (endpoint.port !== 80 && endpoint.port !== 443)
+                    return endpoint;
+                const managed = isDeepStrictEqual(endpoint.allowed_ips, publicWebAddresses);
+                if (enabled && endpoint.allowed_ips?.length && !managed)
+                    throw new LocalSetupError("invalid_runtime_policy", "Public web overlaps a managed service's custom IP restrictions on port 80 or 443. Keep public web off or reconcile those restrictions explicitly.");
+                if (!enabled && !managed)
+                    return endpoint;
+                const { allowed_ips: _previous, ...rest } = endpoint;
+                return {
+                    ...rest,
+                    ...publicWebEndpointConstraints(endpoint.port, enabled),
+                };
+            }),
+        };
+    }
+    return result;
+}

package/scripts/installation/installer/prompts.js

@@ -95,7 +95,7 @@ export async function progress(message, work, options = {}) {
     const report = (detail) => {
         if (spinner && detail.includes("\n")) {
             spinner.stop(message);
-            process.stderr.write(detail + "\n");
+            clack.log.info(detail, { output: process.stderr });
             spinner.start(message);
         }
         else if (spinner)

package/scripts/release/definition.js

@@ -55,6 +55,15 @@ export const releaseSchema = z.strictObject({
         }),
     }),
 });
+/** Published manifests must work without checkout-local images or executables. */
+export function assertPublishedRuntime(runtime) {
+    if (JSON.stringify(runtime.images).includes('"sha256:') ||
+        runtime.platforms.some((platform) => {
+            const tools = releaseTools(runtime, platform);
+            return !tools.cli.url || !tools.gateway.url;
+        }))
+        throw Error("Published runtimes require registry digests and downloadable tools.");
+}
 /** Single-platform development bundles and multi-platform published bundles share resolution. */
 export function releaseTools(release, platform = `${process.platform}-${process.arch}`) {
     const host = hostPlatformSchema.parse(platform);