clawdi 0.12.9 → 0.12.10-beta.0

package/README.md

@@ -295,8 +295,9 @@ Each agent has a dedicated adapter in [`packages/cli/src/adapters`](https://gith
 | Command | What it does |
 | --- | --- |
 | `clawdi auth login` / `logout` | Authenticate this machine |
+| `clawdi auth status [--json]` | Show credential source without printing secrets |
 | `clawdi status [--json]` | Show auth and sync state |
-| `clawdi config list/get/set/unset` | Read or write CLI configuration |
+| `clawdi config list/get/set/unset/paths` | Read/write CLI configuration and inspect local/runtime paths |
 | `clawdi setup [--agent <type>] [--no-daemon]` | Register local agents, install MCP, install the bundled skill, and install/start the singleton daemon by default |
 | `clawdi teardown [--agent <type>]` | Remove Clawdi's local agent wiring |
 | `clawdi daemon run/install/status/logs/doctor/restart/uninstall/ping/rotate-token` | Run, inspect, and control the singleton background sync daemon (`serve` remains a legacy alias) |
@@ -323,6 +324,32 @@ Auto-update is enabled by default for all newer releases, including majors. Huma
 
 Every command supports `--help`.
 
+### Advanced Runtime Operators
+
+These commands are for controlled hosted or self-hosted runtime envelopes. They
+are not part of normal laptop onboarding.
+
+| Command | What it does |
+| --- | --- |
+| `clawdi capabilities [--json]` | Show CLI feature surface, runtime mode, and hosted policy restrictions |
+| `clawdi runtime init --non-interactive [--json]` | Run one cloud-init-style hosted runtime convergence pass |
+| `clawdi runtime status [--json]` | Read the last runtime boot result from service-state files |
+| `clawdi runtime doctor [--json]` | Diagnose hosted policy, service state, HOME, tmpfs runtime state, and last boot status |
+
+Hosted runtime mode is detected from host policy or runtime credentials. In
+hosted mode, `/etc/clawdi/host-policy.json` can deny local-user commands such
+as `setup`, `teardown`, `update`, `config set`, and `auth login`, while keeping
+agent-facing commands such as `mcp`, `daemon run`, `read`, `inject`, and `run`
+available. Local self-update is skipped in hosted mode; hosted CLI updates are
+expected to be system-managed through the standard npm package installation.
+The target hosted shape is a read-only `/usr/local/bin/clawdi` launcher shim
+that installs/execs the npm-managed entrypoint at `/var/lib/clawdi/bin/clawdi`
+from the root-owned prefix `/var/lib/clawdi/npm`. The ordinary runtime user can
+execute the CLI but cannot modify the managed install or config.
+
+For the hosted runtime design, profile matrix, and runtime image contract, see
+[`docs/hosted-runtime.md`](https://github.com/Clawdi-AI/clawdi/blob/main/docs/hosted-runtime.md).
+
 App connections are configured in the [Clawdi Cloud dashboard](https://clawdi.ai) and surface inside agents automatically over MCP — there is no CLI command to manage them.
 
 ## Development

package/clawdi-mitm-broker/manifest.json

@@ -0,0 +1,10 @@
+{
+  "schemaVersion": "clawdi.mitmBrokerBundle.v1",
+  "kind": "native-go",
+  "entrypoint": "bin/clawdi-mitm-broker",
+  "source": "native/mitm-broker",
+  "go": "go version go1.26.4 linux/amd64",
+  "cgoEnabled": "0",
+  "goos": null,
+  "goarch": null
+}