@relaymessenger/openclaw-plugin 0.4.0-staging.0 → 0.4.0-staging.1

package/README.md

@@ -3,6 +3,10 @@
 `@relaymessenger/openclaw-plugin` is the native Relay channel for OpenClaw
 `2026.8.1`.
 
+Source is maintained in
+[`RelayMessenger/Relay-SDK`](https://github.com/RelayMessenger/Relay-SDK/tree/main/packages/openclaw)
+under `packages/openclaw`.
+
 It connects an OpenClaw gateway to Relay with a Relay Agent Token. Relay
 delivers events over its v1 WebSocket, and the plugin sends replies through
 the Relay v1 REST Message API. The plugin imports `@relaymessenger/sdk`; it
@@ -159,7 +163,7 @@ durable ACK and idempotent REST reply.
 release: Relay Server
 `9b4d5bb32cc749c6fd271969948c385300d404d6`, OpenAPI SHA-256
 `f62f431fc0daa48500926bf87753f81c3fdda25ab463b130ca97f2896367e0a5`,
-and the exact `@relaymessenger/sdk@0.3.0-staging.4` registry integrity, source
+and the exact `@relaymessenger/sdk@0.3.0-staging.5` registry integrity, source
 commit `8570546ce30ab39d702409893006dbccd351f2b4`, REST operations, and WebSocket
 frames consumed by the plugin.
 
@@ -167,10 +171,10 @@ Public CI hashes the checked-in `contracts/relay-openapi.yaml` fixture and
 requires the locked digest above. The retained private release receipt also
 sets `RELAY_SERVER_SOURCE_DIR` to an exact checkout of Server `9b4d5bb32cc7`
 and proves that the fixture bytes match that commit before packaging. The
-public repository does not require credentials for the private Server source
-and does not overstate what npm metadata can attest.
+public Relay-SDK monorepo does not require credentials for the private Server
+source and does not overstate what npm metadata can attest.
 
-`contracts/relay-sdk-0.3.0-staging.4.registry.json` records immutable npm
+`contracts/relay-sdk-0.3.0-staging.5.registry.json` records immutable npm
 publication metadata and tarball digests. Validation downloads the registry
 tarball, verifies SHA-1, SHA-256, and SHA-512 integrity, checks the installed
 SDK, and compares its package metadata with exact SDK commit `8570546`.

package/contracts/relay-sdk-0.3.0-staging.5.registry.json

@@ -0,0 +1,69 @@
+{
+  "schema": "relay-sdk-registry-receipt/v1",
+  "source": {
+    "repository": "RelayMessenger/Relay-SDK",
+    "commit": "776a9a7873f41c0c9947439c44444674a7d55c5d",
+    "packageJsonPath": "packages/sdk/package.json",
+    "packageJsonSha256": "2cd3b01e65725ab55d5b520ded6c1235e1f4c74af0ff07478d3ba029d67eda1a",
+    "contractPath": "contracts/relay-v1-openapi.yaml",
+    "contractSha256": "f62f431fc0daa48500926bf87753f81c3fdda25ab463b130ca97f2896367e0a5"
+  },
+  "registry": {
+    "packumentUrl": "https://registry.npmjs.org/@relaymessenger%2fsdk",
+    "package": "@relaymessenger/sdk",
+    "version": "0.3.0-staging.5",
+    "publishedAt": "2026-09-01T18:08:51.723Z",
+    "repository": {
+      "type": "git",
+      "url": "git+https://github.com/RelayMessenger/Relay-SDK.git",
+      "directory": "packages/sdk"
+    },
+    "publishConfig": {
+      "access": "public",
+      "registry": "https://registry.npmjs.org/",
+      "tag": "staging"
+    },
+    "distTagsObserved": {
+      "latest": "0.3.0-staging.4",
+      "staging": "0.3.0-staging.5",
+      "mutable": true
+    },
+    "dist": {
+      "tarball": "https://registry.npmjs.org/@relaymessenger/sdk/-/sdk-0.3.0-staging.5.tgz",
+      "integrity": "sha512-mVtK8Tv8WVKCkZLzZMbAbazlrf8VrVtu6UcQE4wY685UPLrHqlYm/2XoQstyTP6unik9xiVQC9L5CwR4lxP70w==",
+      "shasum": "7549747779b301a0dc60259fa64729e9e7d7db6a",
+      "sha256": "ac9336350a82590a0c0d9960ef971858e5ad77413078fe7e82ad5f99a1a3cc9e",
+      "bytes": 36545,
+      "fileCount": 37,
+      "unpackedSize": 167814,
+      "signatureMetadata": [
+        {
+          "keyid": "SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U",
+          "sig": "MEYCIQC/HnUppjEuFAkql79k8scZSDgECdY5clQ19ufRu6WkXQIhAK1iXKe+bjI3+us+VmA2j/KMpXbwkbaYzlKh4yzLwCZ6"
+        }
+      ],
+      "attestations": {
+        "url": "https://registry.npmjs.org/-/npm/v1/attestations/@relaymessenger%2fsdk@0.3.0-staging.5",
+        "provenance": {
+          "predicateType": "https://slsa.dev/provenance/v1"
+        }
+      }
+    },
+    "installedArtifact": {
+      "packageJsonSha256": "2cd3b01e65725ab55d5b520ded6c1235e1f4c74af0ff07478d3ba029d67eda1a",
+      "typesSha256": "efa163145777ad4df93263d87605794ca099dd8db6fe1b36cc71d0873377a653"
+    }
+  },
+  "provenanceBoundary": {
+    "registryGitHead": null,
+    "registryAttestations": {
+      "url": "https://registry.npmjs.org/-/npm/v1/attestations/@relaymessenger%2fsdk@0.3.0-staging.5",
+      "provenance": {
+        "predicateType": "https://slsa.dev/provenance/v1"
+      }
+    },
+    "attestationEndpoint": "https://registry.npmjs.org/-/npm/v1/attestations/@relaymessenger%2fsdk@0.3.0-staging.5",
+    "attestationEndpointObservedStatus": 200,
+    "claim": "The exact registry tarball, npm signature, and SLSA provenance metadata are recorded. The package.json bytes match the Relay-SDK 776a9a7 release commit; the receipt does not claim that the registry attestation independently proves the source commit."
+  }
+}

package/contracts/relay-v1.lock.json

@@ -7,13 +7,13 @@
   },
   "relaySdk": {
     "package": "@relaymessenger/sdk",
-    "version": "0.3.0-staging.4",
-    "integrity": "sha512-S47nMr+igXPIgLOgkKGUSOU7WpSQZZqsByZhbavUz87C3j0Zevy6jv9IT2t+ZS40TuLqjS9FTPnQ/MpMfLdngQ==",
+    "version": "0.3.0-staging.5",
+    "integrity": "sha512-mVtK8Tv8WVKCkZLzZMbAbazlrf8VrVtu6UcQE4wY685UPLrHqlYm/2XoQstyTP6unik9xiVQC9L5CwR4lxP70w==",
     "operationsSha256": "8429a056605fa9555fcb34067bbb34f7e364ed18c17ec7786b2c1621044012f1",
-    "registryReceipt": "contracts/relay-sdk-0.3.0-staging.4.registry.json",
+    "registryReceipt": "contracts/relay-sdk-0.3.0-staging.5.registry.json",
     "source": {
       "repository": "RelayMessenger/Relay-SDK",
-      "commit": "8570546ce30ab39d702409893006dbccd351f2b4",
+      "commit": "776a9a7873f41c0c9947439c44444674a7d55c5d",
       "carriedOpenapiSha256": "f62f431fc0daa48500926bf87753f81c3fdda25ab463b130ca97f2896367e0a5"
     },
     "usedOperations": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@relaymessenger/openclaw-plugin",
-  "version": "0.4.0-staging.0",
+  "version": "0.4.0-staging.1",
   "description": "Native Relay channel plugin for OpenClaw",
   "license": "MIT",
   "type": "module",
@@ -15,7 +15,7 @@
     "LICENSE",
     "README.md",
     "contracts/relay-v1.lock.json",
-    "contracts/relay-sdk-0.3.0-staging.4.registry.json",
+    "contracts/relay-sdk-0.3.0-staging.5.registry.json",
     "openclaw.plugin.json",
     "index.ts",
     "setup-entry.ts",
@@ -38,7 +38,7 @@
     "prepack": "npm run build"
   },
   "dependencies": {
-    "@relaymessenger/sdk": "0.3.0-staging.4"
+    "@relaymessenger/sdk": "0.3.0-staging.5"
   },
   "devDependencies": {
     "@types/node": "^26.0.0",
@@ -61,11 +61,12 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/RelayMessenger/Relay-OpenClaw.git"
+    "url": "git+https://github.com/RelayMessenger/Relay-SDK.git",
+    "directory": "packages/openclaw"
   },
   "homepage": "https://docs.relayapp.im/integrations/openclaw",
   "bugs": {
-    "url": "https://github.com/RelayMessenger/Relay-OpenClaw/issues"
+    "url": "https://github.com/RelayMessenger/Relay-SDK/issues"
   },
   "keywords": [
     "openclaw",

package/contracts/relay-sdk-0.3.0-staging.4.registry.json

@@ -1,58 +0,0 @@
-{
-  "schema": "relay-sdk-registry-receipt/v1",
-  "source": {
-    "repository": "RelayMessenger/Relay-SDK",
-    "commit": "8570546ce30ab39d702409893006dbccd351f2b4",
-    "packageJsonPath": "packages/sdk/package.json",
-    "packageJsonSha256": "b9d0f5bba2c5ba5eea904ca4ad490795c01b0a67bd5592d7fdbea50a7ed8b29b",
-    "contractPath": "contracts/relay-v1-openapi.yaml",
-    "contractSha256": "f62f431fc0daa48500926bf87753f81c3fdda25ab463b130ca97f2896367e0a5"
-  },
-  "registry": {
-    "packumentUrl": "https://registry.npmjs.org/@relaymessenger%2fsdk",
-    "package": "@relaymessenger/sdk",
-    "version": "0.3.0-staging.4",
-    "publishedAt": "2026-09-01T03:05:27.371Z",
-    "repository": {
-      "type": "git",
-      "url": "git+https://github.com/RelayMessenger/Relay-SDK.git",
-      "directory": "packages/sdk"
-    },
-    "publishConfig": {
-      "access": "public",
-      "registry": "https://registry.npmjs.org/",
-      "tag": "staging"
-    },
-    "distTagsObserved": {
-      "latest": "0.2.0",
-      "staging": "0.3.0-staging.4",
-      "mutable": true
-    },
-    "dist": {
-      "tarball": "https://registry.npmjs.org/@relaymessenger/sdk/-/sdk-0.3.0-staging.4.tgz",
-      "integrity": "sha512-S47nMr+igXPIgLOgkKGUSOU7WpSQZZqsByZhbavUz87C3j0Zevy6jv9IT2t+ZS40TuLqjS9FTPnQ/MpMfLdngQ==",
-      "shasum": "fa1356cfb37b8d64683b0734c054c4afbacbfe1d",
-      "sha256": "73ffd16c0ed4b07d9ff4b90d7efc5e1bf1b2fb82e833089d097b6757c4e94848",
-      "bytes": 36322,
-      "fileCount": 37,
-      "unpackedSize": 167419,
-      "signatureMetadata": [
-        {
-          "keyid": "SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U",
-          "sig": "MEUCIDyZ96e+A/d85Ay57ET/5PGqltJRBpF5//j9GkhnqE2EAiEAoytprMukWmB1BlSxp5sCENpI8YC1kKwRaNzAvLHjqhY="
-        }
-      ]
-    },
-    "installedArtifact": {
-      "packageJsonSha256": "b9d0f5bba2c5ba5eea904ca4ad490795c01b0a67bd5592d7fdbea50a7ed8b29b",
-      "typesSha256": "efa163145777ad4df93263d87605794ca099dd8db6fe1b36cc71d0873377a653"
-    }
-  },
-  "provenanceBoundary": {
-    "registryGitHead": null,
-    "registryAttestations": null,
-    "attestationEndpoint": "https://registry.npmjs.org/-/npm/v1/attestations/@relaymessenger%2fsdk@0.3.0-staging.4",
-    "attestationEndpointObservedStatus": 404,
-    "claim": "The exact registry tarball integrity and publication metadata are verified, and its package.json bytes match Relay-SDK commit 8570546ce30ab39d702409893006dbccd351f2b4. npm registry metadata exposes neither gitHead nor an attestation for this version, so this receipt does not claim cryptographic source-to-tarball provenance."
-  }
-}