@relaymessenger/openclaw-plugin 0.4.0-staging.0 → 0.4.0-staging.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/README.md +19 -14
  2. package/contracts/relay-sdk-0.3.0-staging.6.registry.json +92 -0
  3. package/contracts/relay-v1.lock.json +8 -7
  4. package/package.json +6 -5
  5. package/contracts/relay-sdk-0.3.0-staging.4.registry.json +0 -58
package/README.md CHANGED
@@ -3,6 +3,10 @@
3
3
  `@relaymessenger/openclaw-plugin` is the native Relay channel for OpenClaw
4
4
  `2026.8.1`.
5
5
 
6
+ Source is maintained in
7
+ [`RelayMessenger/Relay-SDK`](https://github.com/RelayMessenger/Relay-SDK/tree/main/packages/openclaw)
8
+ under `packages/openclaw`.
9
+
6
10
  It connects an OpenClaw gateway to Relay with a Relay Agent Token. Relay
7
11
  delivers events over its v1 WebSocket, and the plugin sends replies through
8
12
  the Relay v1 REST Message API. The plugin imports `@relaymessenger/sdk`; it
@@ -157,24 +161,25 @@ durable ACK and idempotent REST reply.
157
161
 
158
162
  `contracts/relay-v1.lock.json` records the compatibility boundary used by this
159
163
  release: Relay Server
160
- `9b4d5bb32cc749c6fd271969948c385300d404d6`, OpenAPI SHA-256
161
- `f62f431fc0daa48500926bf87753f81c3fdda25ab463b130ca97f2896367e0a5`,
162
- and the exact `@relaymessenger/sdk@0.3.0-staging.4` registry integrity, source
163
- commit `8570546ce30ab39d702409893006dbccd351f2b4`, REST operations, and WebSocket
164
+ `ddcbccb44b9f85e8c2e3e63fead9b81d52f2bd15`, OpenAPI SHA-256
165
+ `26a6bc047286e09df6ef95f3c6b09f0437260ecc94e12c5fb3ce1704910f8ba1`,
166
+ public `ChatHandle.image_url` and `ChatHandle.about` fields with no legacy
167
+ aliases,
168
+ and the exact `@relaymessenger/sdk@0.3.0-staging.6` registry integrity, source
169
+ commit `d3a8ae02143120868e304e3a1213148e53eac80b`, REST operations, and WebSocket
164
170
  frames consumed by the plugin.
165
171
 
166
172
  Public CI hashes the checked-in `contracts/relay-openapi.yaml` fixture and
167
173
  requires the locked digest above. The retained private release receipt also
168
- sets `RELAY_SERVER_SOURCE_DIR` to an exact checkout of Server `9b4d5bb32cc7`
169
- and proves that the fixture bytes match that commit before packaging. The
170
- public repository does not require credentials for the private Server source
171
- and does not overstate what npm metadata can attest.
174
+ sets `RELAY_SERVER_SOURCE_DIR` to an exact checkout of Server `ddcbccb44b9f`
175
+ and proves that the fixture bytes exactly match the locked Server commit before
176
+ packaging. The public Relay-SDK monorepo does not require credentials for the
177
+ private Server source and does not overstate what npm metadata can attest.
172
178
 
173
- `contracts/relay-sdk-0.3.0-staging.4.registry.json` records immutable npm
179
+ `contracts/relay-sdk-0.3.0-staging.6.registry.json` records immutable npm
174
180
  publication metadata and tarball digests. Validation downloads the registry
175
181
  tarball, verifies SHA-1, SHA-256, and SHA-512 integrity, checks the installed
176
- SDK, and compares its package metadata with exact SDK commit `8570546`.
177
- The npm metadata has no `gitHead` or attestation for this version, so the
178
- receipt deliberately does not claim cryptographic source-to-tarball
179
- provenance. These are local artifact compatibility checks, not a claim of a
180
- hosted Relay deployment test.
182
+ SDK, and compares its package metadata with exact SDK commit `d3a8ae0`. The
183
+ npm SLSA statement binds the published tarball digest to that commit through
184
+ the trusted staging publish workflow. These are artifact compatibility and
185
+ source-provenance checks, not a claim of a hosted Relay deployment test.
package/contracts/relay-sdk-0.3.0-staging.6.registry.json ADDED
@@ -0,0 +1,92 @@
1
+ {
2
+ "schema": "relay-sdk-registry-receipt/v1",
3
+ "source": {
4
+ "repository": "RelayMessenger/Relay-SDK",
5
+ "commit": "d3a8ae02143120868e304e3a1213148e53eac80b",
6
+ "packageJsonPath": "packages/sdk/package.json",
7
+ "packageJsonSha256": "34393027f926748851320b832404eedb7d825368031f84ac2c1448fcbdbed3ab",
8
+ "contractPath": "contracts/relay-v1-openapi.yaml",
9
+ "contractSha256": "86163217bb7273d7d438d9861fb4456978df587d941e5803c97e43eb1ee00682"
10
+ },
11
+ "registry": {
12
+ "packumentUrl": "https://registry.npmjs.org/@relaymessenger%2fsdk",
13
+ "package": "@relaymessenger/sdk",
14
+ "version": "0.3.0-staging.6",
15
+ "publishedAt": "2026-09-02T04:09:01.747Z",
16
+ "repository": {
17
+ "type": "git",
18
+ "url": "git+https://github.com/RelayMessenger/Relay-SDK.git",
19
+ "directory": "packages/sdk"
20
+ },
21
+ "publishConfig": {
22
+ "access": "public",
23
+ "registry": "https://registry.npmjs.org/",
24
+ "tag": "staging"
25
+ },
26
+ "distTagsObserved": {
27
+ "latest": "0.3.0-staging.4",
28
+ "staging": "0.3.0-staging.6",
29
+ "mutable": true
30
+ },
31
+ "dist": {
32
+ "tarball": "https://registry.npmjs.org/@relaymessenger/sdk/-/sdk-0.3.0-staging.6.tgz",
33
+ "integrity": "sha512-sPVEeTOnRd+xpwXQLJSxtkUSiBXMuNMBg6YyRGMLFl9VzwUcwgfwmorMd+RUxpEVKyM5GACnCwFRLf2gqMJ0uw==",
34
+ "shasum": "edc8d12f4e84ef34a1c5c56865a1d8c3d782f02c",
35
+ "sha256": "301ae48d90454c0e9746f190ccc03cb578141defb7072cde82284b2b8bb86b57",
36
+ "bytes": 36542,
37
+ "fileCount": 37,
38
+ "unpackedSize": 167811,
39
+ "signatureMetadata": [
40
+ {
41
+ "keyid": "SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U",
42
+ "sig": "MEYCIQDWDuLDwVUQLWiPOztKcK+Yc07hOlapJhZRvePXqJP42gIhAI6voXpb17AV2x3jWPlI6nfdIx9uaLQClKtX26vZvfKA"
43
+ }
44
+ ],
45
+ "attestations": {
46
+ "url": "https://registry.npmjs.org/-/npm/v1/attestations/@relaymessenger%2fsdk@0.3.0-staging.6",
47
+ "provenance": {
48
+ "predicateType": "https://slsa.dev/provenance/v1"
49
+ }
50
+ }
51
+ },
52
+ "installedArtifact": {
53
+ "packageJsonSha256": "34393027f926748851320b832404eedb7d825368031f84ac2c1448fcbdbed3ab",
54
+ "typesSha256": "f7098a911f0a84877b1efb64b90ca99c662060ff392231ddfffec152dd04c8ed"
55
+ }
56
+ },
57
+ "provenanceBoundary": {
58
+ "registryGitHead": null,
59
+ "registryAttestations": {
60
+ "url": "https://registry.npmjs.org/-/npm/v1/attestations/@relaymessenger%2fsdk@0.3.0-staging.6",
61
+ "provenance": {
62
+ "predicateType": "https://slsa.dev/provenance/v1"
63
+ }
64
+ },
65
+ "attestationEndpoint": "https://registry.npmjs.org/-/npm/v1/attestations/@relaymessenger%2fsdk@0.3.0-staging.6",
66
+ "attestationEndpointObservedStatus": 200,
67
+ "attestationJsonSha256": "9e1700a87f6707deb401e648a67afd03032e6d9ba61c49a73d14cb56176a5746",
68
+ "slsa": {
69
+ "predicateType": "https://slsa.dev/provenance/v1",
70
+ "subject": {
71
+ "name": "pkg:npm/%40relaymessenger/sdk@0.3.0-staging.6",
72
+ "digest": {
73
+ "sha512": "b0f5447933a745dfb1a705d02c94b1b645128815ccb8d30183a63244630b165f55cf051cc207f09a8acc77e454c691152b23391800a70b01512dfda0a8c274bb"
74
+ }
75
+ },
76
+ "workflow": {
77
+ "ref": "refs/heads/staging",
78
+ "repository": "https://github.com/RelayMessenger/Relay-SDK",
79
+ "path": ".github/workflows/publish-package-staging.yml"
80
+ },
81
+ "resolvedDependency": {
82
+ "uri": "git+https://github.com/RelayMessenger/Relay-SDK@refs/heads/staging",
83
+ "digest": {
84
+ "gitCommit": "d3a8ae02143120868e304e3a1213148e53eac80b"
85
+ }
86
+ },
87
+ "builder": "https://github.com/actions/runner/github-hosted",
88
+ "invocationId": "https://github.com/RelayMessenger/Relay-SDK/actions/runs/33589602413/attempts/1"
89
+ },
90
+ "claim": "The exact registry tarball, npm signature, and SLSA provenance are recorded. The SLSA statement binds the published tarball digest to Relay-SDK staging commit d3a8ae02143120868e304e3a1213148e53eac80b through the trusted staging publish workflow, and the package.json bytes match that commit."
91
+ }
92
+ }
package/contracts/relay-v1.lock.json CHANGED
@@ -1,20 +1,21 @@
1
1
  {
2
2
  "relayServer": {
3
3
  "repository": "RelayMessenger/Relay-Server",
4
- "commit": "9b4d5bb32cc749c6fd271969948c385300d404d6",
4
+ "commit": "ddcbccb44b9f85e8c2e3e63fead9b81d52f2bd15",
5
5
  "openapiPath": "contracts/developer/openapi.yaml",
6
- "sha256": "f62f431fc0daa48500926bf87753f81c3fdda25ab463b130ca97f2896367e0a5"
6
+ "sha256": "26a6bc047286e09df6ef95f3c6b09f0437260ecc94e12c5fb3ce1704910f8ba1"
7
7
  },
8
8
  "relaySdk": {
9
9
  "package": "@relaymessenger/sdk",
10
- "version": "0.3.0-staging.4",
11
- "integrity": "sha512-S47nMr+igXPIgLOgkKGUSOU7WpSQZZqsByZhbavUz87C3j0Zevy6jv9IT2t+ZS40TuLqjS9FTPnQ/MpMfLdngQ==",
10
+ "version": "0.3.0-staging.6",
11
+ "integrity": "sha512-sPVEeTOnRd+xpwXQLJSxtkUSiBXMuNMBg6YyRGMLFl9VzwUcwgfwmorMd+RUxpEVKyM5GACnCwFRLf2gqMJ0uw==",
12
12
  "operationsSha256": "8429a056605fa9555fcb34067bbb34f7e364ed18c17ec7786b2c1621044012f1",
13
- "registryReceipt": "contracts/relay-sdk-0.3.0-staging.4.registry.json",
13
+ "registryReceipt": "contracts/relay-sdk-0.3.0-staging.6.registry.json",
14
+ "workspaceOpenapiSha256": "26a6bc047286e09df6ef95f3c6b09f0437260ecc94e12c5fb3ce1704910f8ba1",
14
15
  "source": {
15
16
  "repository": "RelayMessenger/Relay-SDK",
16
- "commit": "8570546ce30ab39d702409893006dbccd351f2b4",
17
- "carriedOpenapiSha256": "f62f431fc0daa48500926bf87753f81c3fdda25ab463b130ca97f2896367e0a5"
17
+ "commit": "d3a8ae02143120868e304e3a1213148e53eac80b",
18
+ "carriedOpenapiSha256": "86163217bb7273d7d438d9861fb4456978df587d941e5803c97e43eb1ee00682"
18
19
  },
19
20
  "usedOperations": [
20
21
  {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@relaymessenger/openclaw-plugin",
3
- "version": "0.4.0-staging.0",
3
+ "version": "0.4.0-staging.2",
4
4
  "description": "Native Relay channel plugin for OpenClaw",
5
5
  "license": "MIT",
6
6
  "type": "module",
@@ -15,7 +15,7 @@
15
15
  "LICENSE",
16
16
  "README.md",
17
17
  "contracts/relay-v1.lock.json",
18
- "contracts/relay-sdk-0.3.0-staging.4.registry.json",
18
+ "contracts/relay-sdk-0.3.0-staging.6.registry.json",
19
19
  "openclaw.plugin.json",
20
20
  "index.ts",
21
21
  "setup-entry.ts",
@@ -38,7 +38,7 @@
38
38
  "prepack": "npm run build"
39
39
  },
40
40
  "dependencies": {
41
- "@relaymessenger/sdk": "0.3.0-staging.4"
41
+ "@relaymessenger/sdk": "0.3.0-staging.6"
42
42
  },
43
43
  "devDependencies": {
44
44
  "@types/node": "^26.0.0",
@@ -61,11 +61,12 @@
61
61
  },
62
62
  "repository": {
63
63
  "type": "git",
64
- "url": "git+https://github.com/RelayMessenger/Relay-OpenClaw.git"
64
+ "url": "git+https://github.com/RelayMessenger/Relay-SDK.git",
65
+ "directory": "packages/openclaw"
65
66
  },
66
67
  "homepage": "https://docs.relayapp.im/integrations/openclaw",
67
68
  "bugs": {
68
- "url": "https://github.com/RelayMessenger/Relay-OpenClaw/issues"
69
+ "url": "https://github.com/RelayMessenger/Relay-SDK/issues"
69
70
  },
70
71
  "keywords": [
71
72
  "openclaw",
package/contracts/relay-sdk-0.3.0-staging.4.registry.json DELETED
@@ -1,58 +0,0 @@
1
- {
2
- "schema": "relay-sdk-registry-receipt/v1",
3
- "source": {
4
- "repository": "RelayMessenger/Relay-SDK",
5
- "commit": "8570546ce30ab39d702409893006dbccd351f2b4",
6
- "packageJsonPath": "packages/sdk/package.json",
7
- "packageJsonSha256": "b9d0f5bba2c5ba5eea904ca4ad490795c01b0a67bd5592d7fdbea50a7ed8b29b",
8
- "contractPath": "contracts/relay-v1-openapi.yaml",
9
- "contractSha256": "f62f431fc0daa48500926bf87753f81c3fdda25ab463b130ca97f2896367e0a5"
10
- },
11
- "registry": {
12
- "packumentUrl": "https://registry.npmjs.org/@relaymessenger%2fsdk",
13
- "package": "@relaymessenger/sdk",
14
- "version": "0.3.0-staging.4",
15
- "publishedAt": "2026-09-01T03:05:27.371Z",
16
- "repository": {
17
- "type": "git",
18
- "url": "git+https://github.com/RelayMessenger/Relay-SDK.git",
19
- "directory": "packages/sdk"
20
- },
21
- "publishConfig": {
22
- "access": "public",
23
- "registry": "https://registry.npmjs.org/",
24
- "tag": "staging"
25
- },
26
- "distTagsObserved": {
27
- "latest": "0.2.0",
28
- "staging": "0.3.0-staging.4",
29
- "mutable": true
30
- },
31
- "dist": {
32
- "tarball": "https://registry.npmjs.org/@relaymessenger/sdk/-/sdk-0.3.0-staging.4.tgz",
33
- "integrity": "sha512-S47nMr+igXPIgLOgkKGUSOU7WpSQZZqsByZhbavUz87C3j0Zevy6jv9IT2t+ZS40TuLqjS9FTPnQ/MpMfLdngQ==",
34
- "shasum": "fa1356cfb37b8d64683b0734c054c4afbacbfe1d",
35
- "sha256": "73ffd16c0ed4b07d9ff4b90d7efc5e1bf1b2fb82e833089d097b6757c4e94848",
36
- "bytes": 36322,
37
- "fileCount": 37,
38
- "unpackedSize": 167419,
39
- "signatureMetadata": [
40
- {
41
- "keyid": "SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U",
42
- "sig": "MEUCIDyZ96e+A/d85Ay57ET/5PGqltJRBpF5//j9GkhnqE2EAiEAoytprMukWmB1BlSxp5sCENpI8YC1kKwRaNzAvLHjqhY="
43
- }
44
- ]
45
- },
46
- "installedArtifact": {
47
- "packageJsonSha256": "b9d0f5bba2c5ba5eea904ca4ad490795c01b0a67bd5592d7fdbea50a7ed8b29b",
48
- "typesSha256": "efa163145777ad4df93263d87605794ca099dd8db6fe1b36cc71d0873377a653"
49
- }
50
- },
51
- "provenanceBoundary": {
52
- "registryGitHead": null,
53
- "registryAttestations": null,
54
- "attestationEndpoint": "https://registry.npmjs.org/-/npm/v1/attestations/@relaymessenger%2fsdk@0.3.0-staging.4",
55
- "attestationEndpointObservedStatus": 404,
56
- "claim": "The exact registry tarball integrity and publication metadata are verified, and its package.json bytes match Relay-SDK commit 8570546ce30ab39d702409893006dbccd351f2b4. npm registry metadata exposes neither gitHead nor an attestation for this version, so this receipt does not claim cryptographic source-to-tarball provenance."
57
- }
58
- }