chore(release): prepare v0.41.0 - #1214
Conversation
|
Codex review: needs real behavior proof before merge. Reviewed August 3, 2026, 12:38 PM ET / 16:38 UTC. ClawSweeper reviewWhat this changesPrepares the v0.41.0 release by dating the changelog, updating Worker package and lockfile versions, and adding a deliberately blocked source-authorization record for the later signed-tag gate. Merge readiness⛔ Blocked until stronger real behavior proof is added - 3 items remain Keep open: this active release-preparation PR now incorporates the exact current Priority: P2 Review scores
Verification
How this fits togetherCrabbox's release-preparation path turns the current mainline changes into versioned release metadata before any candidate build or publication can occur. The changelog and Worker metadata describe the proposed release, while the protected source record controls whether later release tooling may proceed. flowchart LR
A[Current main changes] --> B[Release preparation]
B --> C[Changelog and Worker version]
B --> D[Blocked source record]
D --> E[Signed tag authorization]
E --> F[Candidate build gate]
F --> G[Draft and publication gates]
Before merge
Agent review detailsSecurityNone. Review metrics
Merge-risk optionsMaintainer options:
Technical reviewBest possible solution: Attach a redacted terminal transcript or runtime log proving the blocked source gate fails as intended, then land the preparation and perform the documented signed-tag authorization and publication gates separately. Do we have a high-confidence way to reproduce the issue? Not applicable: this is a release-preparation PR rather than a report of broken runtime behavior. Current source and ancestry checks do confirm that the branch includes the stated current-main baseline. Is this the best way to solve the issue? Yes, subject to proof: rebasing through a merge from current main, preserving all release notes, and keeping the source record blocked until a signed tag exists is the narrow release-safe approach defined by repository policy. AGENTS.md: found and applied where relevant. Codex review notes: model internal, reasoning high; reviewed against 81c0a60d0f06. LabelsLabel changes:
Label justifications:
EvidenceWhat I checked:
Likely related people:
Rank-up movesOptional improvements that raise the rating; they are not merge blockers.
Rating scale
Overall follows the weaker of proof and patch quality. Workflow
HistoryReview history (18 earlier review cycles; latest 8 shown)
|
|
Updated the release preparation from exact current
Exact-head CI is now running. No release mutation beyond this branch push occurred. @clawsweeper re-review Direct blocked-gate transcriptThe proof used redacted 40-character placeholder identities in a temporary copy of the tracked blocked record so execution reached the publication-status gate. It created no tag and performed no remote mutation. |
|
🦞🧹 I asked ClawSweeper to review this item again. Re-review progress:
|
|
The requested redacted after-change gate transcript is now appended to the existing proof comment: #1214 (comment) @clawsweeper re-review |
|
🦞👀 Command router queued. I will update this comment with the next step. |
vincentkoc
left a comment
There was a problem hiding this comment.
Reviewed exact head 933ef0e55aff25e8a1fbe681ce9d02c20f324b9e against current main 81c0a60d0f062f85561593b77343091a6f9f8968.
The effective diff is limited to the complete v0.41.0 changelog, Worker version metadata, and an intentionally blocked source record. Release tooling tests pass 44/44, the blocked publishability gate is directly proven in the PR evidence, and fresh autoreview reported no findings. No tag or release mutation has occurred.
|
Land-ready at exact head
Merging with a merge commit to preserve the signed commit series, as requested. |
Related: #1208
What Problem This Solves
Crabbox 0.40.0 predates the broker fallback, image reuse, fleet reconciliation, Blacksmith inventory, Daytona snapshot, Azure recovery, and SSH resilience work now required by the live OpenClaw routing policy. The earlier 0.40.1 preparation was never tagged or published, and this release branch had drifted behind current
main.Why This Change Was Made
Prepare v0.41.0 from exact current
mainwith one complete dated changelog, Worker package metadata at 0.41.0, and a deliberately blocked protected source record. The branch preserves the abandoned 0.40.1 preparation as unpublished and carries its user-visible changes into the first actual successor release.The signed branch history merges
81c0a60d0f062f85561593b77343091a6f9f8968without rebasing. The effective PR diff remains limited toCHANGELOG.md,worker/package.json, both root lockfile version entries, andrelease/records/v0.41.0.json.User Impact
After the later serialized release gates complete, operators can install a Crabbox CLI that exposes all-organization Blacksmith inventory and the current broker recovery/image behavior required by capacity-aware routing. This preparation PR does not create a tag, release draft, published release, or Homebrew update.
Evidence
933ef0e55aff25e8a1fbe681ce9d02c20f324b9e.ab91bc9add291aee0fbcebab42a7b95d2a366724, parents132b02ee27db382bd3d08c2489191dbbb6b72b86and current-main81c0a60d0f062f85561593b77343091a6f9f8968.CHANGELOG.mdnow records 0.40.1 as unpublished.GOTOOLCHAIN=go1.26.5 node --test scripts/release*.test.js scripts/homebrew-release.test.js: 44/44 passed.REQUIRE_PUBLISHABLE=1invocation ofscripts/verify-release-source.shrejected the blocked v0.41.0 record with the expectedrelease v0.41.0 is blockederror before tag verification.git diff --check origin/main...HEAD: passed.No tag, candidate build, signing, notarization, draft creation, publication, or Homebrew mutation was performed. Those remain separate serialized gates under
docs/RELEASING.mdafter this PR merges.