Skip to content

Release v0.12.0

Latest

Choose a tag to compare

@github-actions github-actions released this 02 Aug 05:24
· 3 commits to main since this release

ClawFix 0.12.0

This release makes ClawFix repairs fail closed, ships independently verified standalone TUI artifacts, and adds bounded production-continuity checks.

What changed

  • Expanded the guarded repair catalog from one entry to five.
  • Routes executable repairs through preflight, apply, verify, and rollback semantics.
  • Rejects failed, malformed, timed-out, aborted, truncated, partial, or ambiguous process results before verification can report success.
  • Preserves explicitly present invalid terminal metadata so adapters cannot normalize failures into clean defaults.
  • Ships a chat-first OpenTUI interface as separate Linux x64, baseline, and musl/Alpine artifacts.
  • Preserves executable modes and validates final downloaded artifacts under real, explicitly sized PTYs.
  • Strictly validates production SSE framing, ordering, completion identity, terminal-event uniqueness, and useful non-whitespace output.
  • Keeps synthetic canaries out of public and fallback statistics, including after database rehydration.

Install

Use the reviewed installer at clawfix.dev. It pins clawfix@0.12.0, fetches npm integrity metadata, verifies the package before extraction, and keeps previous versions for rollback.

The standalone TUI is not bundled with npm. Download the appropriate archive below and verify it against TUI-SHA256SUMS.

Provenance and verification

  • Exact release source: 5df94480b7b3a43eed4ac76e27471e7b73e28ca6
  • npm package: clawfix@0.12.0, published through npm Trusted Publishing with SLSA provenance
  • CLI publication workflow
  • TUI publication workflow
  • Post-merge main CI
  • Production deployment: https://clawfix.dev, version 0.12.0
  • Post-release clean-room result: POST_RELEASE_CLEANROOM=PASS

The clean-room run installed the public npm package through the live installer, confirmed the fail-closed repair contract, downloaded all three release archives, checked their checksums and executable modes, and exercised each extracted TUI under its native glibc or Alpine runtime with real PTY input.

No paid production canary was used for this release verification.

Full changelog: v0.11.2...v0.12.0