@sdotwinter/openclaw-deterministic 0.17.0 → 0.17.2

package/bin/cli.js

@@ -30,11 +30,15 @@ switch (command) {
   case "revert":
     require(path.join(__dirname, "revert"));
     break;
-  
+
   case "audit":
     require(path.join(__dirname, "audit"));
     break;
 
+  case "upgrade":
+    require(path.join(__dirname, "upgrade"));
+    break;
+
   case "--version":
   case "-v":
     console.log(`openclaw-deterministic v${pkg.version}`);
@@ -59,6 +63,7 @@ function showHelp() {
   console.log("  oc-deterministic init");
   console.log("  oc-deterministic doctor");
   console.log("  oc-deterministic install");
+  console.log("  oc-deterministic upgrade");
   console.log("  oc-deterministic enable");
   console.log("  oc-deterministic revert");
   console.log("  oc-deterministic audit");

package/bin/install.js

@@ -3,7 +3,6 @@
 const fs = require("fs");
 const os = require("os");
 const path = require("path");
-const crypto = require("crypto");
 
 // -----------------------------
 // Args
@@ -91,10 +90,6 @@ function timestamp() {
   return new Date().toISOString().replace(/:/g, "-");
 }
 
-function sha256(content) {
-  return crypto.createHash("sha256").update(content).digest("hex");
-}
-
 function backupSnapshot(pathsToBackup) {
   if (DRY_RUN) {
     console.log("[DRY-RUN] Would create backup snapshot.");
@@ -124,12 +119,11 @@ function backupSnapshot(pathsToBackup) {
 function copyWithVersionStamp(src, dest) {
   const raw = readFile(src);
   const clean = raw.replace(/^\uFEFF/, "");
-  const hash = sha256(clean);
-
-  const stamped = `${VERSION_STAMP}
-<!-- Canonical-Hash: SHA256:${hash} -->
 
-${clean}`;
+  // IMPORTANT:
+  // Do NOT generate or modify canonical hash.
+  // Template already contains canonical hash header.
+  const stamped = `${VERSION_STAMP}\n${clean}`;
 
   writeFile(dest, stamped);
 

package/bin/upgrade.js

@@ -0,0 +1,84 @@
+#!/usr/bin/env node
+
+const fs = require("fs");
+const os = require("os");
+const path = require("path");
+
+const args = process.argv.slice(2);
+const DRY_RUN = args.includes("--dry-run");
+
+const pkg = require(path.join(__dirname, "..", "package.json"));
+const CLI_VERSION = pkg.version;
+
+const home = os.homedir();
+const openclawRoot = path.join(home, ".openclaw");
+const workspace = path.join(openclawRoot, "workspace");
+
+const VERSION_REGEX = /Installed by openclaw-deterministic v([0-9.]+)/;
+
+const files = [
+  "OPERATING_RULES.md",
+  "SOUL.deterministic.md",
+  "skills/memory-compactor/SKILL.md",
+];
+
+function exists(p) {
+  try {
+    fs.accessSync(p);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function read(p) {
+  return fs.readFileSync(p, "utf8");
+}
+
+function write(p, content) {
+  if (DRY_RUN) {
+    console.log(`[DRY-RUN] Would write: ${p}`);
+    return;
+  }
+  fs.writeFileSync(p, content, "utf8");
+}
+
+function getInstalledVersion(content) {
+  const match = content.match(VERSION_REGEX);
+  return match ? match[1] : null;
+}
+
+function upgradeFile(relPath) {
+  const targetPath = path.join(workspace, relPath);
+  const templatePath = path.join(__dirname, "..", "templates", relPath);
+
+  if (!exists(targetPath)) return;
+
+  const installed = read(targetPath);
+  const template = read(templatePath);
+
+  const installedVersion = getInstalledVersion(installed);
+
+  if (installedVersion === CLI_VERSION) {
+    console.log(`✓ ${relPath} already up to date.`);
+    return;
+  }
+
+  console.log(`Upgrading ${relPath} from v${installedVersion} → v${CLI_VERSION}`);
+
+  const stamped = `<!-- Installed by openclaw-deterministic v${CLI_VERSION} -->\n${template}`;
+
+  write(targetPath, stamped);
+}
+
+if (!exists(openclawRoot) || !exists(workspace)) {
+  console.error("OpenClaw workspace not found.");
+  process.exit(1);
+}
+
+console.log(`Running deterministic upgrade → CLI v${CLI_VERSION}\n`);
+
+files.forEach(upgradeFile);
+
+console.log("\nUpgrade complete.\n");
+process.exit(0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sdotwinter/openclaw-deterministic",
-  "version": "0.17.0",
+  "version": "0.17.2",
   "description": "Deterministic governance and memory compaction layer for OpenClaw",
   "keywords": [
     "openclaw",