@relaymessenger/openclaw-plugin 0.4.0-staging.1 → 0.4.0-staging.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/README.md +15 -14
  2. package/contracts/relay-sdk-0.3.0-staging.7.registry.json +92 -0
  3. package/contracts/relay-v1.lock.json +8 -7
  4. package/package.json +3 -3
  5. package/contracts/relay-sdk-0.3.0-staging.5.registry.json +0 -69
package/README.md CHANGED
@@ -161,24 +161,25 @@ durable ACK and idempotent REST reply.
161
161
 
162
162
  `contracts/relay-v1.lock.json` records the compatibility boundary used by this
163
163
  release: Relay Server
164
- `9b4d5bb32cc749c6fd271969948c385300d404d6`, OpenAPI SHA-256
165
- `f62f431fc0daa48500926bf87753f81c3fdda25ab463b130ca97f2896367e0a5`,
166
- and the exact `@relaymessenger/sdk@0.3.0-staging.5` registry integrity, source
167
- commit `8570546ce30ab39d702409893006dbccd351f2b4`, REST operations, and WebSocket
164
+ `ddcbccb44b9f85e8c2e3e63fead9b81d52f2bd15`, OpenAPI SHA-256
165
+ `26a6bc047286e09df6ef95f3c6b09f0437260ecc94e12c5fb3ce1704910f8ba1`,
166
+ public `ChatHandle.image_url` and `ChatHandle.about` fields with no legacy
167
+ aliases,
168
+ and the exact `@relaymessenger/sdk@0.3.0-staging.7` registry integrity, source
169
+ commit `ddb78e385800d82b041441698985fafab3d9aba9`, REST operations, and WebSocket
168
170
  frames consumed by the plugin.
169
171
 
170
172
  Public CI hashes the checked-in `contracts/relay-openapi.yaml` fixture and
171
173
  requires the locked digest above. The retained private release receipt also
172
- sets `RELAY_SERVER_SOURCE_DIR` to an exact checkout of Server `9b4d5bb32cc7`
173
- and proves that the fixture bytes match that commit before packaging. The
174
- public Relay-SDK monorepo does not require credentials for the private Server
175
- source and does not overstate what npm metadata can attest.
174
+ sets `RELAY_SERVER_SOURCE_DIR` to an exact checkout of Server `ddcbccb44b9f`
175
+ and proves that the fixture bytes exactly match the locked Server commit before
176
+ packaging. The public Relay-SDK monorepo does not require credentials for the
177
+ private Server source and does not overstate what npm metadata can attest.
176
178
 
177
- `contracts/relay-sdk-0.3.0-staging.5.registry.json` records immutable npm
179
+ `contracts/relay-sdk-0.3.0-staging.7.registry.json` records immutable npm
178
180
  publication metadata and tarball digests. Validation downloads the registry
179
181
  tarball, verifies SHA-1, SHA-256, and SHA-512 integrity, checks the installed
180
- SDK, and compares its package metadata with exact SDK commit `8570546`.
181
- The npm metadata has no `gitHead` or attestation for this version, so the
182
- receipt deliberately does not claim cryptographic source-to-tarball
183
- provenance. These are local artifact compatibility checks, not a claim of a
184
- hosted Relay deployment test.
182
+ SDK, and compares its package metadata with exact SDK commit `ddb78e3`. The
183
+ npm SLSA statement binds the published tarball digest to that commit through
184
+ the trusted staging publish workflow. These are artifact compatibility and
185
+ source-provenance checks, not a claim of a hosted Relay deployment test.
package/contracts/relay-sdk-0.3.0-staging.7.registry.json ADDED
@@ -0,0 +1,92 @@
1
+ {
2
+ "schema": "relay-sdk-registry-receipt/v1",
3
+ "source": {
4
+ "repository": "RelayMessenger/Relay-SDK",
5
+ "commit": "ddb78e385800d82b041441698985fafab3d9aba9",
6
+ "packageJsonPath": "packages/sdk/package.json",
7
+ "packageJsonSha256": "f57b019076ba12d6637a60674c9271fbd0bc688b16eceb5b8a101bb9c3c1fb07",
8
+ "contractPath": "contracts/relay-v1-openapi.yaml",
9
+ "contractSha256": "26a6bc047286e09df6ef95f3c6b09f0437260ecc94e12c5fb3ce1704910f8ba1"
10
+ },
11
+ "registry": {
12
+ "packumentUrl": "https://registry.npmjs.org/@relaymessenger%2fsdk",
13
+ "package": "@relaymessenger/sdk",
14
+ "version": "0.3.0-staging.7",
15
+ "publishedAt": "2026-09-02T05:02:18.813Z",
16
+ "repository": {
17
+ "type": "git",
18
+ "url": "git+https://github.com/RelayMessenger/Relay-SDK.git",
19
+ "directory": "packages/sdk"
20
+ },
21
+ "publishConfig": {
22
+ "access": "public",
23
+ "registry": "https://registry.npmjs.org/",
24
+ "tag": "staging"
25
+ },
26
+ "distTagsObserved": {
27
+ "latest": "0.3.0-staging.4",
28
+ "staging": "0.3.0-staging.7",
29
+ "mutable": true
30
+ },
31
+ "dist": {
32
+ "tarball": "https://registry.npmjs.org/@relaymessenger/sdk/-/sdk-0.3.0-staging.7.tgz",
33
+ "integrity": "sha512-ACbl5sKw/Y1A8AjZgs/Nicao7RntN7HgpRblcnqVP8Fpe8yHINqhJ8Um4XBBvzp8nk9xGapKbsxuflrHyaPGrw==",
34
+ "shasum": "90d8048226d912b8d590f11cab1c62c7471aea0f",
35
+ "sha256": "68bc18811c838fd7cf401612cf4e0df7906911374661ac3a8e40961c807fe137",
36
+ "bytes": 36876,
37
+ "fileCount": 37,
38
+ "unpackedSize": 168634,
39
+ "signatureMetadata": [
40
+ {
41
+ "keyid": "SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U",
42
+ "sig": "MEQCIDtotaGcmq/gkaMNE1L2ScHmJJk9FPN3HgvUprlNq96VAiBFVK7VxltJvu+g5eeZYEOHLLvnNmyUbe3JVFbkMZNrMA=="
43
+ }
44
+ ],
45
+ "attestations": {
46
+ "url": "https://registry.npmjs.org/-/npm/v1/attestations/@relaymessenger%2fsdk@0.3.0-staging.7",
47
+ "provenance": {
48
+ "predicateType": "https://slsa.dev/provenance/v1"
49
+ }
50
+ }
51
+ },
52
+ "installedArtifact": {
53
+ "packageJsonSha256": "f57b019076ba12d6637a60674c9271fbd0bc688b16eceb5b8a101bb9c3c1fb07",
54
+ "typesSha256": "a755aaf89415fde85b73678b1966ac909f3ed0ce42b886d1fc8c0a47a8b39604"
55
+ }
56
+ },
57
+ "provenanceBoundary": {
58
+ "registryGitHead": null,
59
+ "registryAttestations": {
60
+ "url": "https://registry.npmjs.org/-/npm/v1/attestations/@relaymessenger%2fsdk@0.3.0-staging.7",
61
+ "provenance": {
62
+ "predicateType": "https://slsa.dev/provenance/v1"
63
+ }
64
+ },
65
+ "attestationEndpoint": "https://registry.npmjs.org/-/npm/v1/attestations/@relaymessenger%2fsdk@0.3.0-staging.7",
66
+ "attestationEndpointObservedStatus": 200,
67
+ "attestationJsonSha256": "b74a2b6125fd1a23353c850ab1f0cb58ad00cdc3308b511100009a44d099faed",
68
+ "slsa": {
69
+ "predicateType": "https://slsa.dev/provenance/v1",
70
+ "subject": {
71
+ "name": "pkg:npm/%40relaymessenger/sdk@0.3.0-staging.7",
72
+ "digest": {
73
+ "sha512": "0026e5e6c2b0fd8d40f008d982cfcd89c6a8ed19ed37b1e0a516e5727a953fc1697bcc8720daa127c526e17041bf3a7c9e4f7119aa4a6ecc6e7e5ac7c9a3c6af"
74
+ }
75
+ },
76
+ "workflow": {
77
+ "ref": "refs/heads/staging",
78
+ "repository": "https://github.com/RelayMessenger/Relay-SDK",
79
+ "path": ".github/workflows/publish-package-staging.yml"
80
+ },
81
+ "resolvedDependency": {
82
+ "uri": "git+https://github.com/RelayMessenger/Relay-SDK@refs/heads/staging",
83
+ "digest": {
84
+ "gitCommit": "ddb78e385800d82b041441698985fafab3d9aba9"
85
+ }
86
+ },
87
+ "builder": "https://github.com/actions/runner/github-hosted",
88
+ "invocationId": "https://github.com/RelayMessenger/Relay-SDK/actions/runs/33592991619/attempts/1"
89
+ },
90
+ "claim": "The exact registry tarball, npm signature, and SLSA provenance are recorded. The SLSA statement binds the published tarball digest to Relay-SDK staging commit ddb78e385800d82b041441698985fafab3d9aba9 through the trusted staging publish workflow, and the package.json bytes match that commit."
91
+ }
92
+ }
package/contracts/relay-v1.lock.json CHANGED
@@ -1,20 +1,21 @@
1
1
  {
2
2
  "relayServer": {
3
3
  "repository": "RelayMessenger/Relay-Server",
4
- "commit": "9b4d5bb32cc749c6fd271969948c385300d404d6",
4
+ "commit": "ddcbccb44b9f85e8c2e3e63fead9b81d52f2bd15",
5
5
  "openapiPath": "contracts/developer/openapi.yaml",
6
- "sha256": "f62f431fc0daa48500926bf87753f81c3fdda25ab463b130ca97f2896367e0a5"
6
+ "sha256": "26a6bc047286e09df6ef95f3c6b09f0437260ecc94e12c5fb3ce1704910f8ba1"
7
7
  },
8
8
  "relaySdk": {
9
9
  "package": "@relaymessenger/sdk",
10
- "version": "0.3.0-staging.5",
11
- "integrity": "sha512-mVtK8Tv8WVKCkZLzZMbAbazlrf8VrVtu6UcQE4wY685UPLrHqlYm/2XoQstyTP6unik9xiVQC9L5CwR4lxP70w==",
10
+ "version": "0.3.0-staging.7",
11
+ "integrity": "sha512-ACbl5sKw/Y1A8AjZgs/Nicao7RntN7HgpRblcnqVP8Fpe8yHINqhJ8Um4XBBvzp8nk9xGapKbsxuflrHyaPGrw==",
12
12
  "operationsSha256": "8429a056605fa9555fcb34067bbb34f7e364ed18c17ec7786b2c1621044012f1",
13
- "registryReceipt": "contracts/relay-sdk-0.3.0-staging.5.registry.json",
13
+ "registryReceipt": "contracts/relay-sdk-0.3.0-staging.7.registry.json",
14
+ "workspaceOpenapiSha256": "26a6bc047286e09df6ef95f3c6b09f0437260ecc94e12c5fb3ce1704910f8ba1",
14
15
  "source": {
15
16
  "repository": "RelayMessenger/Relay-SDK",
16
- "commit": "776a9a7873f41c0c9947439c44444674a7d55c5d",
17
- "carriedOpenapiSha256": "f62f431fc0daa48500926bf87753f81c3fdda25ab463b130ca97f2896367e0a5"
17
+ "commit": "ddb78e385800d82b041441698985fafab3d9aba9",
18
+ "carriedOpenapiSha256": "26a6bc047286e09df6ef95f3c6b09f0437260ecc94e12c5fb3ce1704910f8ba1"
18
19
  },
19
20
  "usedOperations": [
20
21
  {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@relaymessenger/openclaw-plugin",
3
- "version": "0.4.0-staging.1",
3
+ "version": "0.4.0-staging.3",
4
4
  "description": "Native Relay channel plugin for OpenClaw",
5
5
  "license": "MIT",
6
6
  "type": "module",
@@ -15,7 +15,7 @@
15
15
  "LICENSE",
16
16
  "README.md",
17
17
  "contracts/relay-v1.lock.json",
18
- "contracts/relay-sdk-0.3.0-staging.5.registry.json",
18
+ "contracts/relay-sdk-0.3.0-staging.7.registry.json",
19
19
  "openclaw.plugin.json",
20
20
  "index.ts",
21
21
  "setup-entry.ts",
@@ -38,7 +38,7 @@
38
38
  "prepack": "npm run build"
39
39
  },
40
40
  "dependencies": {
41
- "@relaymessenger/sdk": "0.3.0-staging.5"
41
+ "@relaymessenger/sdk": "0.3.0-staging.7"
42
42
  },
43
43
  "devDependencies": {
44
44
  "@types/node": "^26.0.0",
package/contracts/relay-sdk-0.3.0-staging.5.registry.json DELETED
@@ -1,69 +0,0 @@
1
- {
2
- "schema": "relay-sdk-registry-receipt/v1",
3
- "source": {
4
- "repository": "RelayMessenger/Relay-SDK",
5
- "commit": "776a9a7873f41c0c9947439c44444674a7d55c5d",
6
- "packageJsonPath": "packages/sdk/package.json",
7
- "packageJsonSha256": "2cd3b01e65725ab55d5b520ded6c1235e1f4c74af0ff07478d3ba029d67eda1a",
8
- "contractPath": "contracts/relay-v1-openapi.yaml",
9
- "contractSha256": "f62f431fc0daa48500926bf87753f81c3fdda25ab463b130ca97f2896367e0a5"
10
- },
11
- "registry": {
12
- "packumentUrl": "https://registry.npmjs.org/@relaymessenger%2fsdk",
13
- "package": "@relaymessenger/sdk",
14
- "version": "0.3.0-staging.5",
15
- "publishedAt": "2026-09-01T18:08:51.723Z",
16
- "repository": {
17
- "type": "git",
18
- "url": "git+https://github.com/RelayMessenger/Relay-SDK.git",
19
- "directory": "packages/sdk"
20
- },
21
- "publishConfig": {
22
- "access": "public",
23
- "registry": "https://registry.npmjs.org/",
24
- "tag": "staging"
25
- },
26
- "distTagsObserved": {
27
- "latest": "0.3.0-staging.4",
28
- "staging": "0.3.0-staging.5",
29
- "mutable": true
30
- },
31
- "dist": {
32
- "tarball": "https://registry.npmjs.org/@relaymessenger/sdk/-/sdk-0.3.0-staging.5.tgz",
33
- "integrity": "sha512-mVtK8Tv8WVKCkZLzZMbAbazlrf8VrVtu6UcQE4wY685UPLrHqlYm/2XoQstyTP6unik9xiVQC9L5CwR4lxP70w==",
34
- "shasum": "7549747779b301a0dc60259fa64729e9e7d7db6a",
35
- "sha256": "ac9336350a82590a0c0d9960ef971858e5ad77413078fe7e82ad5f99a1a3cc9e",
36
- "bytes": 36545,
37
- "fileCount": 37,
38
- "unpackedSize": 167814,
39
- "signatureMetadata": [
40
- {
41
- "keyid": "SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U",
42
- "sig": "MEYCIQC/HnUppjEuFAkql79k8scZSDgECdY5clQ19ufRu6WkXQIhAK1iXKe+bjI3+us+VmA2j/KMpXbwkbaYzlKh4yzLwCZ6"
43
- }
44
- ],
45
- "attestations": {
46
- "url": "https://registry.npmjs.org/-/npm/v1/attestations/@relaymessenger%2fsdk@0.3.0-staging.5",
47
- "provenance": {
48
- "predicateType": "https://slsa.dev/provenance/v1"
49
- }
50
- }
51
- },
52
- "installedArtifact": {
53
- "packageJsonSha256": "2cd3b01e65725ab55d5b520ded6c1235e1f4c74af0ff07478d3ba029d67eda1a",
54
- "typesSha256": "efa163145777ad4df93263d87605794ca099dd8db6fe1b36cc71d0873377a653"
55
- }
56
- },
57
- "provenanceBoundary": {
58
- "registryGitHead": null,
59
- "registryAttestations": {
60
- "url": "https://registry.npmjs.org/-/npm/v1/attestations/@relaymessenger%2fsdk@0.3.0-staging.5",
61
- "provenance": {
62
- "predicateType": "https://slsa.dev/provenance/v1"
63
- }
64
- },
65
- "attestationEndpoint": "https://registry.npmjs.org/-/npm/v1/attestations/@relaymessenger%2fsdk@0.3.0-staging.5",
66
- "attestationEndpointObservedStatus": 200,
67
- "claim": "The exact registry tarball, npm signature, and SLSA provenance metadata are recorded. The package.json bytes match the Relay-SDK 776a9a7 release commit; the receipt does not claim that the registry attestation independently proves the source commit."
68
- }
69
- }