Skip to content

chore(msix): rename download files to OpenClaw - #1444

Merged
karkarl merged 1 commit into
openclaw:mainfrom
natalie-aguinaldo:user/natalie-aguinaldo/msix-download-rename
Sep 18, 2026
Merged

karkarl merged 1 commit into
openclaw:mainfrom
natalie-aguinaldo:user/natalie-aguinaldo/msix-download-rename

Conversation

@natalie-aguinaldo

@natalie-aguinaldo natalie-aguinaldo commented Sep 18, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Rename only the MSIX download files from OpenClawCompanion to OpenClaw.

  • Store: OpenClaw-x64.msix, OpenClaw-arm64.msix.
  • Dev: OpenClaw-Dev-x64.msix, OpenClaw-Dev-arm64.msix.
  • Update metadata archive names, generated installation instructions, CI upload paths, alpha-release staging/notes, documentation, and exact-name regression tests together.

This is the rename-only change from commit 19da0469, applied independently to upstream main. It contains no temporary branch exceptions or version overrides. Package identities, display names, capabilities, signing, MSIX version calculation, EXE installer names, and artifact ZIP labels remain unchanged. Existing downloads are not renamed.

The permanent encoded-versioning work belongs in a separate PR.

Required proof pools

  • none: artifact filename and matching reference changes only. No package payload, native dependency, install/upgrade logic, UI, or runtime behavior changes. Hosted CI covers x64 and ARM64 package production. No custom-host runtime claims are made.

Validation

Current-head hosted CI passed: Build and Test run 35369292102, including CI Gate and both native MSIX packaging/export jobs:

  • x64 MSIX job: passed.
  • Native ARM64 MSIX job: passed.
  • Core/CLI, Tray/setup/integration, UI/accessibility, setup/connect E2E, revocation E2E, network E2E, and x64 release publish smoke passed. The PR-only ARM64 portable publish and tag-only release steps were correctly skipped.

Completed on the final rename source tree against main at 0246e33f:

  • .\build.ps1: all projects passed.
  • dotnet test .\tests\OpenClaw.Shared.Tests\OpenClaw.Shared.Tests.csproj --no-restore: 3,983 passed, 33 skipped, 0 failed.
  • dotnet test .\tests\OpenClaw.Tray.Tests\OpenClaw.Tray.Tests.csproj --no-restore: 2,979 passed, 0 failed.
  • .\scripts\test-msix-ci-artifacts.ps1: passed.
  • .\scripts\test-ci-workflow-contract.ps1: passed.
  • .\scripts\test-msix-alpha-release.ps1: passed.
  • .\scripts\validate-docs.ps1: passed.
  • git diff --cached --check: passed.

Tests used isolated tray settings and an environment-only official NuGet source configuration.

Real behavior proof

Current-head real Windows packages, not fixtures

Downloaded and inspected all four real artifacts from run 35369292102. The artifact API identifies reviewed PR head e87cd49cdf27cbd0565138218bbf2c741a463adf. All four metadata files record clean source commit d279299f5cba0ddaaeee7a28c2a5992e39ee650c, the CI PR-merge checkout. Its tree SHA 47d3a5c249dbbd3698345a360674c1d67fa3d9e7 exactly matches the reviewed head's tree.

Kind Architecture Actual package inside the download Manifest and metadata version Current-head artifact
Unsigned Store x64 OpenClaw-x64.msix 2026.9.5.0 Download
Unsigned Store ARM64 OpenClaw-arm64.msix 2026.9.5.0 Download
Dev-signed tester x64 OpenClaw-Dev-x64.msix 2026.9.5.3266 Download
Dev-signed tester ARM64 OpenClaw-Dev-arm64.msix 2026.9.5.3266 Download

These are this rename-only PR's normal GitVersion versions, not the earlier experimental 400 version-override artifacts.

Verified directly against the downloaded files:

  • Each Store artifact contains exactly its renamed MSIX and msix-metadata.json.
  • Each Dev artifact contains exactly its renamed MSIX, msix-metadata.json, public-only OpenClaw-Dev.cer, and INSTALL.txt.
  • Every metadata archive equals the actual renamed filename; package SHA-256, embedded manifest identity/publisher/architecture/version, and clean source provenance all match.
  • Store packages retain OpenClawFoundation.OpenClaw and have no AppxSignature.p7x. Dev packages retain OpenClawFoundation.OpenClaw.Dev.
  • Both embedded Dev CMS signatures verify cryptographically, and their signer thumbprints match the exported public certificates and metadata. The exporter separately required a valid, trusted signature on each CI runner. The local proof did not install or trust the disposable CI certificates.
  • The actual Dev INSTALL.txt files contain the correct commands:
Add-AppxPackage -Path .\OpenClaw-Dev-x64.msix
Add-AppxPackage -Path .\OpenClaw-Dev-arm64.msix
Verified SHA-256 values of the MSIX files inside the downloads
OpenClaw-x64.msix
f6baf8638ea82ea4983de330030f429f81f0dd54163edb5ac4a4d2aa1d592b9e

OpenClaw-arm64.msix
78b539adeae43657b966733ec8af221712afa2060de27c8c33e006839acc68de

OpenClaw-Dev-x64.msix
c28da97bd66cbc3117fc8a2db828dc862bb11deae23bdf38d6cdd35832ea770d

OpenClaw-Dev-arm64.msix
ee2bf167c8c2f1e25f105c44ee6190cb3d82fc9a2df11eb849ceb8451e9886f6

Alpha stager exercised with the real Store packages

Ran the unchanged, current-head production stager locally against the downloaded x64 and ARM64 Store artifacts:

.\scripts\Stage-StoreMsixReleaseAssets.ps1 `
  -ArtifactDirectory $downloadedArtifacts `
  -OutputDirectory $proofStagingDirectory `
  -Version '2026.9.5-alpha.0' `
  -ExpectedSourceCommit 'd279299f5cba0ddaaeee7a28c2a5992e39ee650c'

Here, 2026.9.5-alpha.0 is only an alpha-format argument for exercising the stager against the already-built 2026.9.5.0 packages. No such tag or release was created, and neither package version nor metadata was rewritten.

Actual output:

OpenClaw-x64.msix
OpenClaw-arm64.msix
OpenClaw-x64.msix-metadata.json
OpenClaw-arm64.msix-metadata.json

PASS: exact four renamed files.
PASS: both staged package hashes equal the original downloaded package hashes above.
PASS: both staged metadata sidecars are byte-identical to their original msix-metadata.json.
PASS: generated release notes name OpenClaw-x64.msix and OpenClaw-arm64.msix.

This demonstrates actual Store build output, signed Dev export output, installation-command naming, and byte-preserving Store asset staging for both architectures. It does not claim a tagged release was published.

Not verified / blocked

  • ClawSweeper's source review of this head found no actionable code defects and requested the real-output proof supplied above. Re-review of that proof is pending.
  • The local structured-review command python .agents\skills\autoreview\scripts\autoreview --mode local remains unavailable because the Codex executable is missing. No local helper success is claimed.
  • No Store submission, installed-app lifecycle proof, or public release was performed.
  • UI/MCP/gateway proof is not applicable because those surfaces are unchanged.

Reapply the rename-only change from 19da046 on current upstream main. Update both Store and Dev filenames, metadata, installation instructions, alpha staging, CI upload paths, documentation, and tests without changing package versions, identities, UI, signing, or EXE names.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: cb0e5a80-d2cf-41b0-9fb0-21eb32623526
@clawsweeper

clawsweeper Bot commented Sep 18, 2026 •

Copy link
Copy Markdown

🦞👀
ClawSweeper picked this up.

Pull request received. I will update this pull request when review starts.

ClawSweeper review complete

ClawSweeper finished reviewing this revision. The review result is being finalized.

View the workflow run.

@clawsweeper clawsweeper Bot added P3 Low-risk cleanup, docs, polish, ergonomics, or speculative feature. rating: 🦪 silver shellfish Thin PR readiness signal; proof, validation, or implementation needs work. status: 📣 needs proof The PR needs real behavior proof before ClawSweeper can clear the contributor ask. labels Sep 18, 2026
@clawsweeper

clawsweeper Bot commented Sep 18, 2026 •

Copy link
Copy Markdown

Codex review: needs maintainer review before merge. Reviewed September 18, 2026, 2:12 PM ET / 18:12 UTC (Revision 3).

ClawSweeper review

What this changes

Renames Windows MSIX downloads to OpenClaw and updates packaging, CI uploads, release staging, documentation, and filename tests.

Merge readiness

✅ Ready for maintainer review

The change remains useful because main still uses the previous filenames. No actionable defects remain, the real artifact proof is sufficient, and the previous draft blocker is resolved.

Priority: P3
Reviewed head: e87cd49cdf27cbd0565138218bbf2c741a463adf

Review scores

Measure Result What it means
Overall readiness 🐚 platinum hermit (4/6) A focused, consistent patch with strong real-output evidence and no remaining actionable findings.
Proof confidence 🦞 diamond lobster (5/6) Sufficient (terminal): The supplied transcript ties the Store builder, Dev exporter, and release stager to actual x64 and ARM64 Windows outputs with matching filenames, metadata, installation commands, and preserved staged bytes; GitHub artifact provenance matches the reviewed head.
Patch quality 🐚 platinum hermit (4/6) No actionable review findings were identified.

Verification

Check Result Evidence
Real behavior Verified Sufficient (terminal): The supplied transcript ties the Store builder, Dev exporter, and release stager to actual x64 and ARM64 Windows outputs with matching filenames, metadata, installation commands, and preserved staged bytes; GitHub artifact provenance matches the reviewed head.
Evidence reviewed 8 items Main still needs the rename: Current main's Store stager expects OpenClawCompanion filenames, so this PR is not redundant.
Consistent production references: Read all three production scripts: renamed filenames feed metadata.archive, generated installation commands, and validated release staging. Signing, package identities, version calculation, and validation remain unchanged.
Real package and staging proof: The complete supplied body and contributor comment #1444 (comment) report inspection of four actual Windows packages, matching filenames and metadata, correct Dev installation commands, and byte-preserving production staging of both Store packages. This directly exercises the changed output behavior; no installation or public release is claimed.
Findings None None.
Security None None.

How this fits together

The Windows packaging pipeline produces unsigned Store packages and signed development packages for x64 and ARM64. Export scripts attach provenance and installation instructions before CI uploads or alpha-release staging.

flowchart TD
  A[Windows package builds] --> B{Package kind}
  B --> C[Unsigned Store export]
  B --> D[Signed development export]
  C --> E[Named packages and metadata]
  D --> E
  E --> F[CI downloads]
  F --> G[Store alpha release staging]
Loading

Before merge

None.

Agent review details

Security

None.

Review metrics

Metric Value Why it matters
Real output coverage 4 packages across 2 architectures The supplied evidence covers both Store and Dev exports plus Store release staging.

Technical review

Best possible solution:

Keep the existing packaging pipeline and use consistent OpenClaw filenames throughout export, download instructions, and release staging.

Do we have a high-confidence way to reproduce the issue?

Not applicable: this is a filename cleanup, and main's previous naming is directly visible in source.

Is this the best way to solve the issue?

Yes. Updating the existing producers and consumers together avoids a parallel packaging path, and real output proof covers the resulting names.

AGENTS.md: found and applied where relevant.

Codex review notes: model internal, reasoning medium; reviewed against 0246e33f6e8f.

Labels

Label justifications:

  • P3: This is a bounded download-naming cleanup with unchanged installed application behavior.
  • rating: 🐚 platinum hermit: Overall readiness is 🐚 platinum hermit; proof is 🦞 diamond lobster and patch quality is 🐚 platinum hermit.
  • status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Sufficient (terminal): The supplied transcript ties the Store builder, Dev exporter, and release stager to actual x64 and ARM64 Windows outputs with matching filenames, metadata, installation commands, and preserved staged bytes; GitHub artifact provenance matches the reviewed head.
  • proof: sufficient: Contributor real behavior proof is sufficient. The supplied transcript ties the Store builder, Dev exporter, and release stager to actual x64 and ARM64 Windows outputs with matching filenames, metadata, installation commands, and preserved staged bytes; GitHub artifact provenance matches the reviewed head.

Evidence

What I checked:

  • Main still needs the rename: Current main's Store stager expects OpenClawCompanion filenames, so this PR is not redundant. (scripts/Stage-StoreMsixReleaseAssets.ps1:35, 0246e33f6e8f)
  • Consistent production references: Read all three production scripts: renamed filenames feed metadata.archive, generated installation commands, and validated release staging. Signing, package identities, version calculation, and validation remain unchanged. (scripts/Export-DevMsixArtifact.ps1:80, e87cd49cdf27)
  • Real package and staging proof: The complete supplied body and contributor comment chore(msix): rename download files to OpenClaw #1444 (comment) report inspection of four actual Windows packages, matching filenames and metadata, correct Dev installation commands, and byte-preserving production staging of both Store packages. This directly exercises the changed output behavior; no installation or public release is claimed. (e87cd49cdf27)
  • Artifact provenance independently checked: GitHub lists all four cited MSIX artifacts as unexpired and associates them with the reviewed PR head. Local git also confirms the recorded CI merge and PR head have identical trees, 47d3a5c249dbbd3698345a360674c1d67fa3d9e7. (e87cd49cdf27)
  • Previous blocker resolved: The previous review had no findings and requested leaving draft state. The live API now reports draft=false, the same reviewed head, and mergeable=true; ordinary repository merge gates remain authoritative. (e87cd49cdf27)
  • Related merged packaging work: GitHub verifies chore(ci): build MSIX artifacts and publish Store alpha assets #1403 (chore(ci): build MSIX artifacts and publish Store alpha assets) as merged with author natalie-aguinaldo. Main history and exporter blame connect that prior work to this subsystem; its raw parent lacks the exporter file. (scripts/Export-DevMsixArtifact.ps1:45, 33839971e315)

Likely related people:

  • Natalie Aguinaldo: Raw commit 3383997 adds scripts/Export-DevMsixArtifact.ps1:45 relative to its recorded parents. This identifies author metadata, not feature responsibility or a PR merger. (role: source-line author; confidence: high; commits: 33839971e315; files: scripts/Export-DevMsixArtifact.ps1)

Rating scale

Score Internal tier Crab rank Meaning
6/6 S 🦀 challenger crab Exceptional readiness
5/6 A 🦞 diamond lobster Very strong readiness
4/6 B 🐚 platinum hermit Good normal PR; ordinary maintainer review
3/6 C 🦐 gold shrimp Useful, but confidence is limited
2/6 D 🦪 silver shellfish Proof or implementation needs work
1/6 F 🧂 unranked krab Not merge-ready
N/A NA 🌊 off-meta tidepool Rating does not apply

Overall follows the weaker of proof and patch quality.
Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics.

Workflow

  • ClawSweeper keeps one durable marker-backed review comment per issue or PR.
  • Re-runs edit this comment so the latest verdict, findings, and automation markers stay together instead of adding duplicate bot comments.
  • A fresh review can be triggered by eligible @clawsweeper re-review comments, exact-item GitHub events, scheduled/background review runs, or manual workflow dispatch.
  • PR/issue authors and users with repository write access can comment @clawsweeper re-review or @clawsweeper re-run on an open PR or issue to request a fresh review only.
  • Maintainers can also comment @clawsweeper review to request a fresh review only.
  • Fresh-review commands do not start repair, autofix, rebase, CI repair, or automerge.
  • Maintainer-only repair and merge flows require explicit commands such as @clawsweeper autofix, @clawsweeper automerge, @clawsweeper fix ci, or @clawsweeper address review.
  • Maintainers can comment @clawsweeper explain to ask for more context, or @clawsweeper stop to stop active automation.

History

Review history (2 earlier review cycles)
  • reviewed 2026-09-18T16:36:59.011Z sha e87cd49 :: needs real behavior proof before merge. :: none
  • reviewed 2026-09-18T17:36:34.905Z sha e87cd49 :: needs changes before merge. :: none

@natalie-aguinaldo

Copy link
Copy Markdown
Contributor Author

@clawsweeper re-review

Added real current-head package-output evidence to the PR body for reviewed head e87cd49cdf27cbd0565138218bbf2c741a463adf. No source changes were needed.

CI run 35369292102 is green, including both native MSIX jobs and CI Gate. I downloaded and inspected its four actual artifacts:

Output Real artifact
OpenClaw-x64.msix Unsigned Store x64
OpenClaw-arm64.msix Unsigned Store ARM64
OpenClaw-Dev-x64.msix Signed Dev x64
OpenClaw-Dev-arm64.msix Signed Dev ARM64

All four renamed filenames match metadata.archive; package hashes and embedded manifest identity/architecture/version match their metadata. Both Dev public certificates match the embedded cryptographically verified signers. Their actual INSTALL.txt files contain:

Add-AppxPackage -Path .\OpenClaw-Dev-x64.msix
Add-AppxPackage -Path .\OpenClaw-Dev-arm64.msix

I also ran the current production Stage-StoreMsixReleaseAssets.ps1 against these real Store inputs. It produced exactly:

OpenClaw-x64.msix
OpenClaw-arm64.msix
OpenClaw-x64.msix-metadata.json
OpenClaw-arm64.msix-metadata.json

Both packages and both metadata files were preserved byte-for-byte. Full hashes and the staging invocation are in the updated body. The alpha-format argument was a local stager input only, not a created tag or published release.

Provenance: all four packages record clean CI merge commit d279299f5cba0ddaaeee7a28c2a5992e39ee650c; GitHub confirms its tree is identical to reviewed head e87cd49c. This is not evidence borrowed from the earlier 400 branch or synthetic package fixtures.

No installation, certificate-trust changes, Partner Center submission, or release publication was performed.

@clawsweeper

clawsweeper Bot commented Sep 18, 2026 •

Copy link
Copy Markdown

🦞🧹
ClawSweeper re-review requested.

I asked ClawSweeper to review this item again.
Action: item re-review queued (workflow sweep.yml, event exact_review_queue).
Result: when the review finishes, ClawSweeper will create the durable review comment if needed or update the existing comment in place.

@clawsweeper clawsweeper Bot added proof: sufficient Contributor real behavior proof is sufficient. rating: 🐚 platinum hermit Good normal PR readiness with ordinary maintainer review expected. status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR. and removed status: 📣 needs proof The PR needs real behavior proof before ClawSweeper can clear the contributor ask. rating: 🦪 silver shellfish Thin PR readiness signal; proof, validation, or implementation needs work. labels Sep 18, 2026
@natalie-aguinaldo
natalie-aguinaldo marked this pull request as ready for review September 18, 2026 18:10

@karkarl karkarl left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved. Independent adversarial reviews by Claude Opus 4.8 and GPT-5.3 Codex found no actionable issues or disagreements at e87cd49.

The MSIX filename rename is consistent across Store/Dev package producers, CI uploads, metadata, release staging, documentation, and tests. Package identities, versions, and EXE installer filenames remain unchanged.

Validation passed:

  • scripts/test-ci-workflow-contract.ps1
  • scripts/test-msix-alpha-release.ps1
  • scripts/test-msix-ci-artifacts.ps1

The alpha test passed after selecting the existing full Git installation on PATH. Review limitations: no full build, Shared/Tray test suites, or real MSIX packaging/install run.

@karkarl
karkarl merged commit 84efd07 into openclaw:main Sep 18, 2026
32 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

P3 Low-risk cleanup, docs, polish, ergonomics, or speculative feature. proof: sufficient Contributor real behavior proof is sufficient. rating: 🐚 platinum hermit Good normal PR readiness with ordinary maintainer review expected. status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants