v0.1.2

Install via npm

Crabwise is now available on npm — no manual downloads needed.

Quick try (no install):

npx crabwise@latest version --plain

Global install:

npm i -g crabwise

The curl install script is still available as a fallback.

What's new

• npm/npx distribution — platform-specific packages for macOS (x64, arm64) and Linux (x64, arm64) with an auto-detecting launcher
• Automated npm release pipeline — versions and publishes to npm automatically on each GitHub release
• Improved docs — clearer setup instructions for config init, CA trust, and OpenClaw support

v0.1.1-alpha

Crabwise is a local-first daemon + CLI that gives you visibility and control over your AI agents. It watches Claude Code, Codex CLI, and OpenClaw sessions, enforces local policies, and keeps a hash-chained audit trail — all on your machine.

What's new in v0.1.1-alpha

• Shorter paths everywhere — the start and watch TUIs now display ~/ instead of your full home directory path, keeping the UI clean and readable
• Refreshed README — updated structure, clearer docs, and the request flow diagram now loads properly from local assets
• Logo and branding polish — adjusted sizing and fixed image references so everything renders correctly on GitHub

This is a small quality-of-life release focused on tidying up the developer experience. No breaking changes.

---

Install or upgrade:

curl -sSfL https://raw.githubusercontent.com/crabwise-ai/crabwise/main/install.sh | bash

v0.1.0-alpha.19

Cleanup Release

v0.1.0-alpha.18

Crabwise is a local-first daemon that monitors AI agent activity. It watches Claude Code and Codex CLI sessions, builds a hash-chained audit trail in SQLite, and lets you query or stream events in real time.

What's in this release

Changelog

• 349e21c fix: update ASCII art in CrabArt for better visual representation
• 1751183 fix: update CrabArt ASCII representation in banner.go for improved visual clarity
• fd61033 fix: use temp dir in gh CLI install to prevent glob collisions

v0.1.0-alpha.17

Response-side enforcement, token usage tracking, and fluid TUI.

What's new

Response-side enforcement

Crabwise now inspects LLM responses (not just requests) to enforce policy on tool use blocks before they reach the agent. Works for both streaming and non-streaming responses.

• Pre-buffers streaming responses, extracts tool use blocks, and evaluates them against gate commandments before forwarding
• Supports OpenAI-compatible and Anthropic response formats
• gate.evaluate IPC method for external PEP callers (custom integrations, hooks)
• stream_max_buffer config for controlling pre-buffer size
• Argument parsers for Bash/Write/Edit/Read tool targets

Token usage tracking

Audit system now tracks token usage instead of cost. Cost calculation planned for a future release.

• crabwise audit reports token summaries per session/agent
• Data structures updated from cost to token semantics

Fluid TUI layout

Table and feed heights in the TUI now resize dynamically with the terminal window.

Other

• GNU AGPL v3 license added
• Enforcement architecture design docs
• Concurrency fix for OpenClaw status snapshot (RWMutex data race)

Included work

#26 Token usage tracking
#27 Fluid TUI table height
#28 Response-side enforcement
#29 PR #28 review fixes

v0.1.0-alpha.16

This release adds first-class OpenClaw support and a new crabwise service command for persistent proxy injection into system services.

What's new

OpenClaw governance

Crabwise now treats OpenClaw as a first-class monitored agent. A new read-only Gateway observer connects to the local OpenClaw Gateway over WebSocket, tracks live sessions and runs, and uses that data to enrich proxy audit events with accurate OpenClaw identity — so blocked and warned events are attributed to the right OpenClaw session, not just a generic proxy event.

• crabwise agents lists OpenClaw sessions alongside Claude Code and Codex
• crabwise watch shows OpenClaw observer events and OpenClaw-attributed proxy enforcement
• crabwise audit --agent openclaw filters by OpenClaw activity
• crabwise status reports Gateway connection health and correlation counts
• Degrades gracefully: proxy enforcement continues even if the Gateway is unavailable

Enable with:

adapters:
  openclaw:
    enabled: true
    gateway_url: ws://127.0.0.1:18789

Then run agents through the proxy as usual:

crabwise wrap -- openclaw gateway

crabwise service — persistent proxy injection

New command to inject the Crabwise proxy into systemd (Linux) or launchd (macOS) service definitions. Unlike crabwise wrap, this survives reboots.

# Inject into a system service (requires root)
sudo crabwise service inject --agent openclaw --restart

# Inject into a user service (no root needed)
crabwise service inject --scope user --agent my-agent --restart

# Check status or remove
crabwise service status --agent openclaw
sudo crabwise service remove --agent openclaw --restart

Included work

#19 OpenClaw governance adapter
#20 OTel SDK dependency update (1.34 → 1.40)

v0.1.0-alpha.15

This release introduces a major terminal UI refresh to make Crabwise easier to use day to day.

Highlights

• New full-window TUI experience for core interactive commands.
• Refreshed visual system and banner treatment across CLI views.
• Improved consistency across status, audit, agents, commandments, and watch interfaces.
• Quality pass on tests and CI fixes related to the new TUI behavior.

Included work

#15 feat/tui-revamp

v0.1.0-alpha.14

This release wraps up the M3.5 prototype work and includes follow-up reliability fixes from production CI.

What’s new

• M3.5 prototype scope completed across observability, streaming robustness, benchmark gates, and release polish.
• OpenTelemetry export path for GenAI spans is now wired (config-gated via otel.enabled).
• Watch dashboard improvements: event filtering, clear warn/block indicators, and stronger test coverage.
• Install hardening: release installer now verifies checksums and supports Linux + macOS paths cleanly.
• Sustained benchmark coverage added for proxy, queue, and SQLite throughput behavior.

Reliability improvements in this patch

• Fixed CI lint blockers (errcheck/staticcheck updates).
• Stabilized flaky proxy integration tests by retrying transient transport reset errors in test-only request paths.

Why this matters

This release is focused on making Crabwise easier to trust in day-to-day use: better visibility (OTel + watch), stronger safety checks (installer verification), and more reliable CI/test gates.

Upgrade

curl -sSfL https://raw.githubusercontent.com/crabwise-ai/crabwise/main/install.sh | VERSION=0.1.0-alpha.14 bash

v0.1.0-alpha.13

🚀 Crabwise v0.1.0-alpha.13

This release focuses on faster policy enforcement, better reliability, and a friendlier live monitoring experience.

What’s new

• New live Watch dashboard (Bubble Tea UI)

  • crabwise watch now opens a clearer, real-time terminal dashboard for recent events, queue depth, drops, uptime, and trigger rate.
  • Added reconnect behavior and clearer failure guidance.
  • Prefer plain logs? Use: crabwise watch --text.

• M3 performance gates in CI

  • Added automated latency gates for:
    • commandment evaluation latency
    • proxy round-trip latency
    • proxy first-token latency
  • This keeps core guardrails fast as the codebase evolves.

• Proxy end-to-end enforcement smoke tests

  • Added daemon-level proxy E2E tests that verify both:
    • allow path (request is forwarded)
    • block path (policy stops request before upstream)

• Proxy race-condition hardening

  • Fixed a server lifecycle race in the proxy adapter by guarding HTTP server start/stop access with a mutex.

Why this matters

You should see a better day-to-day ops experience (especially with watch), with stronger confidence that policy enforcement remains correct and low-latency under change.

Notes

• PR: #12

v0.1.0-alpha.12

This release makes Crabwise proxying more reliable and easier to use in day-to-day tooling.

What's new:

• Stronger forward-proxy behavior so wrapped traffic is intercepted more consistently.
• Better handling for streamed responses (including SSE) in MITM proxy paths.
• Improved proxy connection error handling for smoother, more predictable behavior.
• A small CLI polish update to root icon text.

If you use crabwise wrap or crabwise env, this release helps reduce proxy bypass edge cases and improves overall stability.