@silicaclaw/cli 2026.3.19-7 → 2026.3.19-9

package/node_modules/vary/README.md

@@ -0,0 +1,101 @@
+# vary
+
+[![NPM Version][npm-image]][npm-url]
+[![NPM Downloads][downloads-image]][downloads-url]
+[![Node.js Version][node-version-image]][node-version-url]
+[![Build Status][travis-image]][travis-url]
+[![Test Coverage][coveralls-image]][coveralls-url]
+
+Manipulate the HTTP Vary header
+
+## Installation
+
+This is a [Node.js](https://nodejs.org/en/) module available through the
+[npm registry](https://www.npmjs.com/). Installation is done using the
+[`npm install` command](https://docs.npmjs.com/getting-started/installing-npm-packages-locally): 
+
+```sh
+$ npm install vary
+```
+
+## API
+
+<!-- eslint-disable no-unused-vars -->
+
+```js
+var vary = require('vary')
+```
+
+### vary(res, field)
+
+Adds the given header `field` to the `Vary` response header of `res`.
+This can be a string of a single field, a string of a valid `Vary`
+header, or an array of multiple fields.
+
+This will append the header if not already listed, otherwise leaves
+it listed in the current location.
+
+<!-- eslint-disable no-undef -->
+
+```js
+// Append "Origin" to the Vary header of the response
+vary(res, 'Origin')
+```
+
+### vary.append(header, field)
+
+Adds the given header `field` to the `Vary` response header string `header`.
+This can be a string of a single field, a string of a valid `Vary` header,
+or an array of multiple fields.
+
+This will append the header if not already listed, otherwise leaves
+it listed in the current location. The new header string is returned.
+
+<!-- eslint-disable no-undef -->
+
+```js
+// Get header string appending "Origin" to "Accept, User-Agent"
+vary.append('Accept, User-Agent', 'Origin')
+```
+
+## Examples
+
+### Updating the Vary header when content is based on it
+
+```js
+var http = require('http')
+var vary = require('vary')
+
+http.createServer(function onRequest (req, res) {
+  // about to user-agent sniff
+  vary(res, 'User-Agent')
+
+  var ua = req.headers['user-agent'] || ''
+  var isMobile = /mobi|android|touch|mini/i.test(ua)
+
+  // serve site, depending on isMobile
+  res.setHeader('Content-Type', 'text/html')
+  res.end('You are (probably) ' + (isMobile ? '' : 'not ') + 'a mobile user')
+})
+```
+
+## Testing
+
+```sh
+$ npm test
+```
+
+## License
+
+[MIT](LICENSE)
+
+[npm-image]: https://img.shields.io/npm/v/vary.svg
+[npm-url]: https://npmjs.org/package/vary
+[node-version-image]: https://img.shields.io/node/v/vary.svg
+[node-version-url]: https://nodejs.org/en/download
+[travis-image]: https://img.shields.io/travis/jshttp/vary/master.svg
+[travis-url]: https://travis-ci.org/jshttp/vary
+[coveralls-image]: https://img.shields.io/coveralls/jshttp/vary/master.svg
+[coveralls-url]: https://coveralls.io/r/jshttp/vary
+[downloads-image]: https://img.shields.io/npm/dm/vary.svg
+[downloads-url]: https://npmjs.org/package/vary

package/node_modules/vary/index.js

@@ -0,0 +1,149 @@
+/*!
+ * vary
+ * Copyright(c) 2014-2017 Douglas Christopher Wilson
+ * MIT Licensed
+ */
+
+'use strict'
+
+/**
+ * Module exports.
+ */
+
+module.exports = vary
+module.exports.append = append
+
+/**
+ * RegExp to match field-name in RFC 7230 sec 3.2
+ *
+ * field-name    = token
+ * token         = 1*tchar
+ * tchar         = "!" / "#" / "$" / "%" / "&" / "'" / "*"
+ *               / "+" / "-" / "." / "^" / "_" / "`" / "|" / "~"
+ *               / DIGIT / ALPHA
+ *               ; any VCHAR, except delimiters
+ */
+
+var FIELD_NAME_REGEXP = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/
+
+/**
+ * Append a field to a vary header.
+ *
+ * @param {String} header
+ * @param {String|Array} field
+ * @return {String}
+ * @public
+ */
+
+function append (header, field) {
+  if (typeof header !== 'string') {
+    throw new TypeError('header argument is required')
+  }
+
+  if (!field) {
+    throw new TypeError('field argument is required')
+  }
+
+  // get fields array
+  var fields = !Array.isArray(field)
+    ? parse(String(field))
+    : field
+
+  // assert on invalid field names
+  for (var j = 0; j < fields.length; j++) {
+    if (!FIELD_NAME_REGEXP.test(fields[j])) {
+      throw new TypeError('field argument contains an invalid header name')
+    }
+  }
+
+  // existing, unspecified vary
+  if (header === '*') {
+    return header
+  }
+
+  // enumerate current values
+  var val = header
+  var vals = parse(header.toLowerCase())
+
+  // unspecified vary
+  if (fields.indexOf('*') !== -1 || vals.indexOf('*') !== -1) {
+    return '*'
+  }
+
+  for (var i = 0; i < fields.length; i++) {
+    var fld = fields[i].toLowerCase()
+
+    // append value (case-preserving)
+    if (vals.indexOf(fld) === -1) {
+      vals.push(fld)
+      val = val
+        ? val + ', ' + fields[i]
+        : fields[i]
+    }
+  }
+
+  return val
+}
+
+/**
+ * Parse a vary header into an array.
+ *
+ * @param {String} header
+ * @return {Array}
+ * @private
+ */
+
+function parse (header) {
+  var end = 0
+  var list = []
+  var start = 0
+
+  // gather tokens
+  for (var i = 0, len = header.length; i < len; i++) {
+    switch (header.charCodeAt(i)) {
+      case 0x20: /*   */
+        if (start === end) {
+          start = end = i + 1
+        }
+        break
+      case 0x2c: /* , */
+        list.push(header.substring(start, end))
+        start = end = i + 1
+        break
+      default:
+        end = i + 1
+        break
+    }
+  }
+
+  // final token
+  list.push(header.substring(start, end))
+
+  return list
+}
+
+/**
+ * Mark that a request is varied on a header field.
+ *
+ * @param {Object} res
+ * @param {String|Array} field
+ * @public
+ */
+
+function vary (res, field) {
+  if (!res || !res.getHeader || !res.setHeader) {
+    // quack quack
+    throw new TypeError('res argument is required')
+  }
+
+  // get existing header
+  var val = res.getHeader('Vary') || ''
+  var header = Array.isArray(val)
+    ? val.join(', ')
+    : String(val)
+
+  // set new header
+  if ((val = append(header, field))) {
+    res.setHeader('Vary', val)
+  }
+}

package/node_modules/vary/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "vary",
+  "description": "Manipulate the HTTP Vary header",
+  "version": "1.1.2",
+  "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
+  "license": "MIT",
+  "keywords": [
+    "http",
+    "res",
+    "vary"
+  ],
+  "repository": "jshttp/vary",
+  "devDependencies": {
+    "beautify-benchmark": "0.2.4",
+    "benchmark": "2.1.4",
+    "eslint": "3.19.0",
+    "eslint-config-standard": "10.2.1",
+    "eslint-plugin-import": "2.7.0",
+    "eslint-plugin-markdown": "1.0.0-beta.6",
+    "eslint-plugin-node": "5.1.1",
+    "eslint-plugin-promise": "3.5.0",
+    "eslint-plugin-standard": "3.0.1",
+    "istanbul": "0.4.5",
+    "mocha": "2.5.3",
+    "supertest": "1.1.0"
+  },
+  "files": [
+    "HISTORY.md",
+    "LICENSE",
+    "README.md",
+    "index.js"
+  ],
+  "engines": {
+    "node": ">= 0.8"
+  },
+  "scripts": {
+    "bench": "node benchmark/index.js",
+    "lint": "eslint --plugin markdown --ext js,md .",
+    "test": "mocha --reporter spec --bail --check-leaks test/",
+    "test-cov": "istanbul cover node_modules/mocha/bin/_mocha -- --reporter dot --check-leaks test/",
+    "test-travis": "istanbul cover node_modules/mocha/bin/_mocha --report lcovonly -- --reporter spec --check-leaks test/"
+  }
+}

package/openclaw-skills/silicaclaw-broadcast/VERSION

@@ -1 +1 @@
-2026.3.19-7
+2026.3.19-9

package/openclaw-skills/silicaclaw-broadcast/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "silicaclaw-broadcast",
-  "version": "2026.3.19-7",
+  "version": "2026.3.19-9",
   "display_name": "SilicaClaw Broadcast",
   "description": "OpenClaw skill for reading SilicaClaw public broadcasts, publishing public broadcasts, and forwarding relevant updates to the owner through OpenClaw's native social channel.",
   "entrypoints": {

package/package.json

@@ -1,16 +1,18 @@
 {
   "name": "@silicaclaw/cli",
-  "version": "2026.3.19-7",
+  "version": "2026.3.19-9",
   "private": false,
   "publishConfig": {
     "access": "public"
   },
   "files": [
     "apps/local-console/package.json",
+    "apps/local-console/dist/**",
     "apps/local-console/public/**",
     "apps/local-console/src/**",
     "apps/local-console/tsconfig.json",
     "apps/public-explorer/package.json",
+    "apps/public-explorer/dist/**",
     "apps/public-explorer/public/**",
     "apps/public-explorer/src/**",
     "apps/public-explorer/tsconfig.json",
@@ -51,18 +53,34 @@
   "scripts": {
     "prepack": "npm run build",
     "build": "npm run -ws build",
+    "release:check": "node scripts/release-pack.mjs --dry-run",
+    "release:pack": "node scripts/release-pack.mjs",
     "dev": "npm run --workspace @silicaclaw/local-console dev",
     "onboard": "node scripts/silicaclaw-cli.mjs onboard",
     "quickstart": "bash scripts/quickstart.sh",
     "gateway": "node scripts/silicaclaw-gateway.mjs",
     "local-console": "npm run --workspace @silicaclaw/local-console start",
-    "public-explorer": "npm run --workspace @silicaclaw/public-explorer dev",
+    "public-explorer": "npm run --workspace @silicaclaw/public-explorer start",
     "logo": "bash scripts/install-logo.sh",
     "webrtc-signaling": "node scripts/webrtc-signaling-server.mjs",
     "check": "npm run -ws check",
     "functional-check": "node scripts/functional-check.mjs",
     "health": "npm run check && npm run build && npm run functional-check"
   },
+  "dependencies": {
+    "@silicaclaw/core": "file:packages/core",
+    "@silicaclaw/network": "file:packages/network",
+    "@silicaclaw/storage": "file:packages/storage",
+    "cors": "^2.8.5",
+    "express": "^4.21.2"
+  },
+  "bundleDependencies": [
+    "@silicaclaw/core",
+    "@silicaclaw/network",
+    "@silicaclaw/storage",
+    "cors",
+    "express"
+  ],
   "devDependencies": {
     "@types/node": "^22.13.10",
     "typescript": "^5.8.2"

package/scripts/release-pack.mjs

@@ -0,0 +1,89 @@
+#!/usr/bin/env node
+
+import { spawnSync } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import { resolve } from "node:path";
+
+const ROOT_DIR = resolve(new URL("..", import.meta.url).pathname);
+const args = process.argv.slice(2);
+const dryRun = args.includes("--dry-run");
+
+function readJson(filePath) {
+  return JSON.parse(readFileSync(filePath, "utf8"));
+}
+
+function readText(filePath) {
+  return readFileSync(filePath, "utf8").trim();
+}
+
+function normalizeVersion(value) {
+  const text = String(value || "").trim();
+  return text.startsWith("v") ? text.slice(1) : text;
+}
+
+function assert(condition, message) {
+  if (!condition) {
+    console.error(message);
+    process.exit(1);
+  }
+}
+
+function run(cmd, cmdArgs, extraEnv = {}) {
+  const result = spawnSync(cmd, cmdArgs, {
+    cwd: ROOT_DIR,
+    stdio: "inherit",
+    env: {
+      ...process.env,
+      npm_config_cache: resolve(ROOT_DIR, ".npm-cache"),
+      ...extraEnv,
+    },
+  });
+  if (result.error) {
+    console.error(result.error.message);
+    process.exit(1);
+  }
+  if ((result.status ?? 1) !== 0) {
+    process.exit(result.status ?? 1);
+  }
+}
+
+function verifyVersionSync() {
+  const pkg = readJson(resolve(ROOT_DIR, "package.json"));
+  const lock = readJson(resolve(ROOT_DIR, "package-lock.json"));
+  const rootVersionFile = readText(resolve(ROOT_DIR, "VERSION"));
+  const skillVersionFile = readText(resolve(ROOT_DIR, "openclaw-skills", "silicaclaw-broadcast", "VERSION"));
+  const skillManifest = readJson(resolve(ROOT_DIR, "openclaw-skills", "silicaclaw-broadcast", "manifest.json"));
+
+  const expected = normalizeVersion(pkg.version);
+  const checks = [
+    ["package.json", normalizeVersion(pkg.version)],
+    ["package-lock.json", normalizeVersion(lock.version)],
+    ['package-lock.json packages[""]', normalizeVersion(lock.packages?.[""]?.version)],
+    ["VERSION", normalizeVersion(rootVersionFile)],
+    ["skill VERSION", normalizeVersion(skillVersionFile)],
+    ["skill manifest", normalizeVersion(skillManifest.version)],
+  ];
+
+  for (const [label, actual] of checks) {
+    assert(Boolean(actual), `Missing version in ${label}`);
+    assert(actual === expected, `Version mismatch: ${label}=${actual}, expected ${expected}`);
+  }
+
+  console.log(`Version sync OK: ${expected}`);
+}
+
+function main() {
+  assert(existsSync(resolve(ROOT_DIR, "package.json")), "package.json not found");
+  verifyVersionSync();
+
+  console.log("Building workspaces...");
+  run("npm", ["run", "build"]);
+
+  console.log("Validating bundled OpenClaw skill...");
+  run("node", [resolve(ROOT_DIR, "scripts", "validate-openclaw-skill.mjs")]);
+
+  console.log(dryRun ? "Running npm pack dry-run..." : "Packing npm tarball...");
+  run("npm", ["pack", ...(dryRun ? ["--dry-run"] : [])]);
+}
+
+main();

package/scripts/silicaclaw-gateway.mjs

@@ -669,32 +669,6 @@ async function startAll() {
   const room = parseFlag("room", process.env.WEBRTC_ROOM || "silicaclaw-global-preview");
   const shouldDisableSignaling = hasFlag("no-signaling");
 
-  const currentLocalPid = readPid(CONSOLE_PID_FILE);
-  const currentSigPid = readPid(SIGNALING_PID_FILE);
-  const currentListener = listeningProcessOnPort(4310);
-  if (currentListener && isOwnedListener(currentListener, "local-console") && !isRunning(currentLocalPid)) {
-    writeFileSync(CONSOLE_PID_FILE, String(currentListener.pid));
-  }
-
-  let localPid = readPid(CONSOLE_PID_FILE);
-  if (!isRunning(localPid)) {
-    removeFileIfExists(CONSOLE_PID_FILE);
-    const env = {
-      NETWORK_ADAPTER: adapter,
-      NETWORK_MODE: mode,
-      WEBRTC_SIGNALING_URL: signalingUrl,
-      WEBRTC_ROOM: room,
-    };
-    localPid = spawnBackground(
-      process.execPath,
-      ["--import", "tsx", "src/server.ts"],
-      env,
-      CONSOLE_LOG_FILE,
-      CONSOLE_PID_FILE,
-      LOCAL_CONSOLE_DIR,
-    );
-  }
-
   const { host, port } = parseUrlHostPort(signalingUrl);
   const shouldAutoStartSignaling =
     mode === "global-preview" &&
@@ -750,6 +724,37 @@ async function startAll() {
     return { localPid: null, signalingPid: null };
   }
 
+  const currentLocalPid = readPid(CONSOLE_PID_FILE);
+  const currentSigPid = readPid(SIGNALING_PID_FILE);
+  const currentListener = listeningProcessOnPort(4310);
+  if (currentListener && isOwnedListener(currentListener, "local-console") && !isRunning(currentLocalPid)) {
+    writeFileSync(CONSOLE_PID_FILE, String(currentListener.pid));
+  }
+
+  let localPid = readPid(CONSOLE_PID_FILE);
+  if (!isRunning(localPid)) {
+    removeFileIfExists(CONSOLE_PID_FILE);
+    await drainOwnedListener(4310, "local-console", 8000);
+    const remainingLocalListener = listeningProcessOnPort(4310);
+    if (remainingLocalListener) {
+      throw new Error(`port 4310 is occupied by pid=${remainingLocalListener.pid}`);
+    }
+    const env = {
+      NETWORK_ADAPTER: adapter,
+      NETWORK_MODE: mode,
+      WEBRTC_SIGNALING_URL: signalingUrl,
+      WEBRTC_ROOM: room,
+    };
+    localPid = spawnBackground(
+      process.execPath,
+      ["dist/apps/local-console/src/server.js"],
+      env,
+      CONSOLE_LOG_FILE,
+      CONSOLE_PID_FILE,
+      LOCAL_CONSOLE_DIR,
+    );
+  }
+
   let signalingPid = currentSigPid;
   if (shouldAutoStartSignaling) {
     if (!isRunning(currentSigPid)) {