v0.1.0-alpha.16

This release adds first-class OpenClaw support and a new crabwise service command for persistent proxy injection into system services.

What's new

OpenClaw governance

Crabwise now treats OpenClaw as a first-class monitored agent. A new read-only Gateway observer connects to the local OpenClaw Gateway over WebSocket, tracks live sessions and runs, and uses that data to enrich proxy audit events with accurate OpenClaw identity — so blocked and warned events are attributed to the right OpenClaw session, not just a generic proxy event.

• crabwise agents lists OpenClaw sessions alongside Claude Code and Codex
• crabwise watch shows OpenClaw observer events and OpenClaw-attributed proxy enforcement
• crabwise audit --agent openclaw filters by OpenClaw activity
• crabwise status reports Gateway connection health and correlation counts
• Degrades gracefully: proxy enforcement continues even if the Gateway is unavailable

Enable with:

adapters:
  openclaw:
    enabled: true
    gateway_url: ws://127.0.0.1:18789

Then run agents through the proxy as usual:

crabwise wrap -- openclaw gateway

crabwise service — persistent proxy injection

New command to inject the Crabwise proxy into systemd (Linux) or launchd (macOS) service definitions. Unlike crabwise wrap, this survives reboots.

# Inject into a system service (requires root)
sudo crabwise service inject --agent openclaw --restart

# Inject into a user service (no root needed)
crabwise service inject --scope user --agent my-agent --restart

# Check status or remove
crabwise service status --agent openclaw
sudo crabwise service remove --agent openclaw --restart

Included work

#19 OpenClaw governance adapter
#20 OTel SDK dependency update (1.34 → 1.40)