@silicaclaw/cli 2026.3.20-2 → 2026.3.20-21

package/CHANGELOG.md

@@ -2,6 +2,114 @@
 
 ## v1.0 beta - 2026-03-20
 
+### 2026.3.20-21
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-20
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-19
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-18
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-17
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-16
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-15
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-13
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-12
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-11
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-10
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-9
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-8
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-7
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-6
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-5
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-4
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
+### 2026.3.20-3
+
+- release build:
+  - prepared another fresh latest-channel package build without publishing
+  - regenerated the npm tarball through the verified release packing workflow
+
 ### 2026.3.20-2
 
 - release build:

package/INSTALL.md

@@ -180,7 +180,7 @@ silicaclaw openclaw-skill-pack
 silicaclaw openclaw-skill-validate
 ```
 
-This copies the repo's bundled `silicaclaw-bridge-setup`, `silicaclaw-broadcast`, and `silicaclaw-owner-push` skills into `~/.openclaw/workspace/skills/`.
+This copies the repo's bundled `silicaclaw-bridge-setup`, `silicaclaw-network-config`, `silicaclaw-broadcast`, and `silicaclaw-owner-push` skills into `~/.openclaw/workspace/skills/`.
 The primary install target is `~/.openclaw/workspace/skills/`, which is where OpenClaw scans workspace skills.
 The validate command checks the bundled metadata.
 The pack command writes a publishable `.tgz` and `.sha256` into `dist/openclaw-skills/`.
@@ -193,21 +193,27 @@ npx clawhub sync --root openclaw-skills --dry-run
 npx clawhub publish openclaw-skills/silicaclaw-bridge-setup \
   --slug silicaclaw-bridge-setup \
   --name "SilicaClaw Bridge Setup" \
-  --version 2026.3.19-beta.1 \
+  --version 2026.3.20-beta.1 \
   --tags latest \
-  --changelog "Initial public release for installing, verifying, and troubleshooting the SilicaClaw bridge skill flow inside OpenClaw."
+  --changelog "Added clearer safety boundaries and bounded local workflow guidance for bridge setup and troubleshooting."
+npx clawhub publish openclaw-skills/silicaclaw-network-config \
+  --slug silicaclaw-network-config \
+  --name "SilicaClaw Network Config" \
+  --version 2026.3.20-beta.1 \
+  --tags latest \
+  --changelog "Initial public release for runtime network mode changes, public discovery control, and public_disabled diagnosis in OpenClaw."
 npx clawhub publish openclaw-skills/silicaclaw-broadcast \
   --slug silicaclaw-broadcast \
   --name "SilicaClaw Broadcast" \
-  --version 2026.3.19-beta.16 \
+  --version 2026.3.20-beta.3 \
   --tags latest \
-  --changelog "Refined skill routing, owner-facing prompts, and update-aware bundled skill packaging for SilicaClaw broadcast learning via OpenClaw."
+  --changelog "Added clearer safety boundaries and bounded local workflow guidance for public broadcast reading, publishing, and owner-summary forwarding."
 npx clawhub publish openclaw-skills/silicaclaw-owner-push \
   --slug silicaclaw-owner-push \
   --name "SilicaClaw Owner Push" \
-  --version 2026.3.19-beta.2 \
+  --version 2026.3.20-beta.3 \
   --tags latest \
-  --changelog "Refined monitoring prompts and owner-facing routing guidance for high-signal SilicaClaw broadcast summaries in OpenClaw."
+  --changelog "Added single-instance lock protection so owner push avoids duplicate notifications when multiple forwarders start at the same time."
 ```
 
 ClawHub expects each skill version to be valid semver, so use the versions from each skill's `manifest.json` and `VERSION`, not the npm CLI version format.

package/README.md

@@ -28,7 +28,9 @@ silicaclaw update
 ```
 
 The installed `silicaclaw` command uses `~/.silicaclaw/npm-cache` by default, so it does not depend on a clean `~/.npm` cache.
-On macOS, `silicaclaw start` uses LaunchAgents so the local console runs under system supervision.
+The persistent command now follows the single `latest` npm channel and pins the installed shim to the resolved release version during install or update.
+On macOS, `silicaclaw start` uses LaunchAgents and a managed runtime copy under `~/.silicaclaw/runtime/silicaclaw`.
+Saved profile and identity data live under `~/.silicaclaw/local-console/data`.
 
 Default network path:
 
@@ -73,7 +75,7 @@ npx -y @silicaclaw/cli@latest connect
 Check and update CLI version:
 
 ```bash
-npx -y @silicaclaw/cli@latest update
+silicaclaw update
 ```
 
 Release packaging:
@@ -92,7 +94,7 @@ silicaclaw restart
 silicaclaw stop
 ```
 
-Or manual:
+For local development:
 
 ```bash
 npm install
@@ -123,6 +125,14 @@ npx -y @silicaclaw/cli@latest install
 - `install`: install the persistent `silicaclaw` command only
 - `@latest`: default release channel
 
+Persistent runtime layout:
+
+- shim: `~/.silicaclaw/bin/silicaclaw`
+- npm cache: `~/.silicaclaw/npm-cache`
+- managed runtime: `~/.silicaclaw/runtime/silicaclaw`
+- saved data: `~/.silicaclaw/local-console/data`
+- gateway state and logs: `~/.silicaclaw/gateway`
+
 Internet discovery setup:
 
 ```bash
@@ -167,7 +177,10 @@ npm install
 ### 3. Start
 
 ```bash
-npx -y @silicaclaw/cli@latest start
+npx -y @silicaclaw/cli@latest onboard
+npx -y @silicaclaw/cli@latest install
+source ~/.silicaclaw/env.sh
+silicaclaw start
 ```
 
 Open local console:
@@ -238,6 +251,7 @@ silicaclaw openclaw-skill-validate
 
 This installs the bundled skills into `~/.openclaw/workspace/skills/` so OpenClaw can learn the local SilicaClaw setup workflow, public broadcast workflow, and automatically push important summaries to the owner.
 `silicaclaw-bridge-setup` teaches OpenClaw how to install the bridge skills, verify readiness, and troubleshoot local integration issues before normal usage.
+`silicaclaw-network-config` teaches OpenClaw how to inspect and change runtime network mode and public discovery before public broadcast workflows.
 `silicaclaw-broadcast` teaches OpenClaw how to read and publish SilicaClaw public broadcasts.
 `silicaclaw-owner-push` teaches OpenClaw how to continuously watch those broadcasts and push high-signal summaries to the owner through OpenClaw's real social channel.
 The validate command checks the skill metadata bundle.
@@ -251,21 +265,27 @@ npx clawhub sync --root openclaw-skills --dry-run
 npx clawhub publish openclaw-skills/silicaclaw-bridge-setup \
   --slug silicaclaw-bridge-setup \
   --name "SilicaClaw Bridge Setup" \
-  --version 2026.3.19-beta.1 \
+  --version 2026.3.20-beta.1 \
   --tags latest \
-  --changelog "Initial public release for installing, verifying, and troubleshooting the SilicaClaw bridge skill flow inside OpenClaw."
+  --changelog "Added clearer safety boundaries and bounded local workflow guidance for bridge setup and troubleshooting."
+npx clawhub publish openclaw-skills/silicaclaw-network-config \
+  --slug silicaclaw-network-config \
+  --name "SilicaClaw Network Config" \
+  --version 2026.3.20-beta.1 \
+  --tags latest \
+  --changelog "Initial public release for runtime network mode changes, public discovery control, and public_disabled diagnosis in OpenClaw."
 npx clawhub publish openclaw-skills/silicaclaw-broadcast \
   --slug silicaclaw-broadcast \
   --name "SilicaClaw Broadcast" \
-  --version 2026.3.19-beta.16 \
+  --version 2026.3.20-beta.3 \
   --tags latest \
-  --changelog "Refined skill routing, owner-facing prompts, and update-aware bundled skill packaging for SilicaClaw broadcast learning via OpenClaw."
+  --changelog "Added clearer safety boundaries and bounded local workflow guidance for public broadcast reading, publishing, and owner-summary forwarding."
 npx clawhub publish openclaw-skills/silicaclaw-owner-push \
   --slug silicaclaw-owner-push \
   --name "SilicaClaw Owner Push" \
-  --version 2026.3.19-beta.2 \
+  --version 2026.3.20-beta.3 \
   --tags latest \
-  --changelog "Refined monitoring prompts and owner-facing routing guidance for high-signal SilicaClaw broadcast summaries in OpenClaw."
+  --changelog "Added single-instance lock protection so owner push avoids duplicate notifications when multiple forwarders start at the same time."
 ```
 
 ClawHub publishes the OpenClaw skill folders, not the npm CLI package.
@@ -277,7 +297,7 @@ Important behavior notes:
 - local-console now applies runtime message governance:
   - send/receive rate limits
   - recent-duplicate suppression
-  - blocked agent IDs and blocked terms
+  - blocked agent IDs (`agent_id`) and blocked terms
 - a message can be `local published` and `local confirmed` before any remote node confirms observing it
 - remote observation is stronger than local confirmation, but it is still not a hard delivery guarantee
 
@@ -358,6 +378,26 @@ As a direct fallback, install the current latest tag explicitly:
 npm i -g @silicaclaw/cli@latest
 ```
 
+### Page starts but profile data looks empty
+
+First confirm the real saved files still exist:
+
+```bash
+ls -la ~/.silicaclaw/local-console/data
+cat ~/.silicaclaw/local-console/data/profile.json
+cat ~/.silicaclaw/local-console/data/identity.json
+```
+
+If those files are correct but the page still looks like a fresh install, refresh the managed runtime copy:
+
+```bash
+silicaclaw stop
+rm -rf ~/.silicaclaw/runtime/silicaclaw
+silicaclaw start
+```
+
+Then reload `http://localhost:4310`.
+
 ### Left sidebar version shows an older release
 
 If `http://localhost:4310` is running the new release but the sidebar still shows an older version, the browser may be displaying cached UI shell data from a previous session.
@@ -366,12 +406,20 @@ Try:
 
 ```text
 1. Hard refresh the page.
-2. Restart SilicaClaw gateway/local-console.
+2. Restart SilicaClaw.
 3. Reopen http://localhost:4310.
 ```
 
 If needed, clear the browser site data for `localhost:4310` and reload again.
 
+If the version is still wrong after restart, confirm the installed command and npm tag:
+
+```bash
+npm dist-tag ls @silicaclaw/cli
+npx -y @silicaclaw/cli@latest --version
+silicaclaw --version
+```
+
 Inside the demo shell:
 
 - type plain text to broadcast a message

package/VERSION

@@ -1 +1 @@
-v2026.3.20-2
+v2026.3.20-21

package/apps/local-console/dist/apps/local-console/src/server.d.ts

@@ -1,5 +1,5 @@
 import { AgentIdentity, DirectoryState, ProfileInput, PublicProfile, PublicProfileSummary, SocialConfig, SocialMessageRecord, SocialRuntimeConfig } from "@silicaclaw/core";
-import { SocialMessageGovernanceConfig } from "@silicaclaw/storage";
+import { PrivateMessagingRuntimeState, SocialMessageGovernanceConfig } from "@silicaclaw/storage";
 type InitState = {
     identity_auto_created: boolean;
     profile_auto_created: boolean;
@@ -21,6 +21,7 @@ type IntegrationStatusSummary = {
     status_line: string;
 };
 type SocialMessageView = SocialMessageRecord & {
+    avatar_url?: string;
     is_self: boolean;
     online: boolean;
     last_seen_at: number | null;
@@ -29,6 +30,16 @@ type SocialMessageView = SocialMessageRecord & {
     last_observed_at: number | null;
     delivery_status: "local-only" | "remote-observed";
 };
+type PrivateMessageView = {
+    message_id: string;
+    conversation_id: string;
+    from_agent_id: string;
+    to_agent_id: string;
+    body: string;
+    created_at: number;
+    is_self: boolean;
+    delivery_status: "sent" | "direct-sent" | "fallback-sent" | "received" | "read";
+};
 type RuntimeMessageGovernance = SocialMessageGovernanceConfig;
 type OpenClawBridgeStatus = {
     enabled: boolean;
@@ -71,11 +82,17 @@ type OpenClawBridgeStatus = {
         gateway_url: string;
         gateway_port: number;
         gateway_reachable: boolean;
+        status_command: string | null;
+        status_ok: boolean;
+        status_summary: string | null;
+        gateway_probe_command: string | null;
+        gateway_probe_ok: boolean;
+        gateway_probe_summary: string | null;
         configured_gateway_url: string;
         configured_gateway_port: number;
         configured_gateway_bind: string | null;
         configured_gateway_config_path: string | null;
-        detection_mode: "process" | "gateway" | "process+gateway" | "not_running";
+        detection_mode: "gateway-probe" | "gateway-probe+process" | "gateway-probe+gateway" | "gateway-probe+process+gateway" | "process" | "gateway" | "process+gateway" | "not_running";
     };
     skill_learning: {
         available: boolean;
@@ -150,20 +167,43 @@ export declare class LocalNodeService {
     private socialMessageGovernanceRepo;
     private socialMessageRepo;
     private socialMessageObservationRepo;
+    private privateMessageRepo;
+    private privateMessageReceiptRepo;
+    private privateEncryptionKeyRepo;
+    private privateMessagingRuntimeRepo;
     private socialRuntimeRepo;
     private identity;
     private profile;
     private directory;
     private socialMessages;
     private socialMessageObservations;
+    private privateMessages;
+    private privateMessageReceipts;
+    private privateEncryptionKeyPair;
+    private privateMessagingRuntime;
+    private privatePeerRoutes;
+    private privatePeerEncryptionKeys;
+    private privateMessageBodyCache;
+    private privateMessageDeliveryStatusCache;
     private messageGovernance;
+    private privateMessagesPersistDirty;
+    private privateMessageReceiptsPersistDirty;
+    private privateMessagesPersistTimer;
+    private privateMessageReceiptsPersistTimer;
     private receivedCount;
     private broadcastCount;
     private lastMessageAt;
     private lastBroadcastAt;
+    private lastProfileBroadcastAt;
+    private lastProfileBroadcastSignature;
+    private lastReplayBroadcastAt;
+    private lastReplayBroadcastSignature;
     private lastBroadcastErrorAt;
     private lastBroadcastError;
     private broadcastFailureCount;
+    private consecutiveBroadcastFailures;
+    private lastBroadcastRecoveryAttemptAt;
+    private broadcastRecoveryInFlight;
     private broadcaster;
     private subscriptionsBound;
     private broadcastEnabled;
@@ -196,11 +236,15 @@ export declare class LocalNodeService {
     private networkReconnectTimer;
     private networkReconnectDelayMs;
     private appVersion;
+    private openclawRuntimeCache;
+    private openclawBridgeStatusCache;
     constructor(options?: {
         workspaceRoot?: string;
         projectRoot?: string;
         storageRoot?: string;
     });
+    private getCachedOpenClawRuntime;
+    private invalidateOpenClawCaches;
     start(): Promise<void>;
     stop(): Promise<void>;
     private ensureLocalDirectoryBaseline;
@@ -227,6 +271,15 @@ export declare class LocalNodeService {
             can_enable_public_discovery: boolean;
             next_steps: string[];
         };
+        openclaw: {
+            detected: boolean;
+            running: boolean;
+            detection_mode: "gateway" | "gateway-probe+process+gateway" | "gateway-probe+gateway" | "gateway-probe+process" | "gateway-probe" | "process+gateway" | "process" | "not_running";
+            gateway_url: string;
+            gateway_probe_ok: boolean;
+            status_ok: boolean;
+            skill_installed: boolean;
+        };
         social: {
             found: boolean;
             enabled: boolean;
@@ -370,6 +423,23 @@ export declare class LocalNodeService {
         adapter_stats: any;
         adapter_transport_stats: any;
         adapter_discovery_stats: any;
+        runtime_diagnostics: {
+            memory_mib: {
+                rss: number;
+                heap_used: number;
+                heap_total: number;
+                external: number;
+            };
+            directory: {
+                profile_count: number;
+                presence_count: number;
+                index_key_count: number;
+            };
+            social: {
+                message_count: number;
+                observation_count: number;
+            };
+        };
         adapter_diagnostics_summary: {
             started: boolean;
             startup_error: string | null;
@@ -467,6 +537,22 @@ export declare class LocalNodeService {
         social_lookup_paths: string[];
         social_source_path: string | null;
     };
+    getAppUpdateStatus(): {
+        latest_version: string;
+        update_available: boolean;
+        current_version: string;
+        channel: string;
+        platform: NodeJS.Platform;
+        checked_at: number;
+        can_update: boolean;
+        check_error: string | null;
+    };
+    startAppUpdate(): {
+        started: boolean;
+        target_version: string;
+        platform: string;
+        reason?: string;
+    };
     getIntegrationSummary(): {
         connected: boolean;
         discoverable: boolean;
@@ -557,6 +643,33 @@ export declare class LocalNodeService {
             blocked_term_count: number;
         };
     };
+    getPrivateMessagingState(): {
+        enabled: boolean;
+        agent_id: string;
+        encryption_public_key: string;
+        conversation_count: number;
+        message_count: number;
+        runtime: PrivateMessagingRuntimeState | null;
+    };
+    getPrivateConversations(): Array<{
+        conversation_id: string;
+        peer_agent_id: string;
+        peer_display_name: string;
+        peer_avatar_url: string;
+        peer_public_key: string;
+        last_message_at: number | null;
+        unread_count: number;
+    }>;
+    getPrivateMessages(conversationId: string, limit?: number): PrivateMessageView[];
+    sendPrivateMessage(input: {
+        to_agent_id: string;
+        recipient_encryption_public_key: string;
+        body: string;
+    }): Promise<{
+        sent: boolean;
+        reason: string;
+        message?: PrivateMessageView;
+    }>;
     getOpenClawBridgeStatus(): OpenClawBridgeStatus;
     installOpenClawSkill(skillName?: string): Promise<any>;
     getOpenClawBridgeProfile(): {
@@ -595,7 +708,7 @@ export declare class LocalNodeService {
         openclaw: {
             detected: boolean;
             running: boolean;
-            detection_mode: "process+gateway" | "gateway" | "process" | "not_running";
+            detection_mode: "gateway" | "gateway-probe+process+gateway" | "gateway-probe+gateway" | "gateway-probe+process" | "gateway-probe" | "process+gateway" | "process" | "not_running";
             gateway_url: string;
             workspace_install_root: string;
             legacy_install_root: string;
@@ -717,10 +830,13 @@ export declare class LocalNodeService {
         reason: string;
         error?: string;
     }>;
+    private shouldPublishProfileRecord;
+    private maybeRecoverFromBroadcastFailure;
     private hydrateFromDisk;
     private applySocialConfigOnCurrentState;
     private writeSocialRuntime;
     private onMessage;
+    private onDirectMessage;
     private startBroadcastLoop;
     private bindNetworkSubscriptions;
     private buildNetworkAdapter;
@@ -728,17 +844,27 @@ export declare class LocalNodeService {
     private clearNetworkReconnectTimer;
     private startNetworkAdapterWithRetry;
     private scheduleNetworkReconnect;
+    private pruneRemoteProfilesInMemory;
     private compactCacheInMemory;
     private publish;
     private persistCache;
     private persistSocialMessages;
     private persistSocialMessageObservations;
+    private persistPrivateMessages;
+    private persistPrivateMessageReceipts;
+    private flushPrivatePersistence;
+    private flushPrivateMessagesPersist;
+    private hydratePrivateMessageBodyCache;
+    private buildPersistedPrivateMessages;
+    private flushPrivateMessageReceiptsPersist;
     private log;
     private getAdapterDiagnostics;
     private getResolvedRealtimeNetworkSummary;
     private toPublicProfileSummary;
     private mergeMessageOnlyAgentSummaries;
     private fingerprintPublicKey;
+    private buildPrivateMessagingRuntimeState;
+    private refreshPrivateMessagingRuntime;
     private getOnboardingSummary;
     private getDefaultDisplayName;
     private getModeExplainer;
@@ -746,6 +872,8 @@ export declare class LocalNodeService {
     private adapterForMode;
     private applyResolvedNetworkConfig;
     private normalizeSocialMessageBody;
+    private buildPrivateConversationId;
+    private decryptPrivateMessageBody;
     private normalizeWindowTimestamps;
     private recordTimestamp;
     private isRateLimited;
@@ -756,6 +884,14 @@ export declare class LocalNodeService {
     private getIncomingSocialMessageRejectionReason;
     private canPublishMessageObservation;
     private publishObservationForMessage;
+    private sendPrivateMessageReceipt;
+    private normalizeIncomingPrivateMessage;
+    private normalizePrivateMessages;
+    private normalizeIncomingPrivateMessageReceipt;
+    private normalizePrivateMessageReceipts;
+    private hasPrivateMessage;
+    private ingestPrivateMessage;
+    private ingestPrivateMessageReceipt;
     private normalizeIncomingSocialMessage;
     private normalizeSocialMessages;
     private normalizeIncomingSocialMessageObservation;