@clawops/cli 0.2.0 → 1.1.0

package/README.md

@@ -1,52 +1,85 @@
 # clawops
 
-**clawops** is a provider-agnostic CLI for deploying and operating self-hosted [OpenClaw](https://github.com/openclaw/openclaw) instances across AWS, GCP, Azure, and local VMs. It uses the [Pulumi Automation API](https://www.pulumi.com/docs/using-pulumi/automation-api/) (embedded — no `pulumi` binary required) for idempotent infrastructure management and exposes every operation as both a CLI command and an [MCP](https://modelcontextprotocol.io/) tool, so Claude Code, Cursor, and other AI agents can drive deployments deterministically.
+Deploy OpenClaw once. Operate it from your terminal or Claude Code.
 
-```bash
-npm install -g @clawops/cli
-clawops init --provider aws
-clawops plan --out /tmp/my-plan.json   # generate + review
-clawops apply /tmp/my-plan.json        # apply after review
-clawops logs -f
-```
+**clawops** is a CLI and [MCP](https://modelcontextprotocol.io/) server for deploying and operating
+self-hosted [OpenClaw](https://github.com/openclaw/openclaw) instances. Provision on AWS, GCP,
+Azure, or any Linux VM — then manage day-to-day operations from the terminal, or let Claude Code
+and Cursor drive them through typed MCP tools with explicit safety controls.
 
 ---
 
-## Why clawops?
+## Who this is for
 
-Every existing OpenClaw deployment path is cloud-specific, Kubernetes-bound, or fully managed SaaS. No open-source tool unifies provisioning + lifecycle management + remote agent interaction across providers under a single CLI with first-class AI agent integration.
-
-| Capability | clawops |
-|---|---|
-| AWS, GCP, Azure, local VM | ✓ |
-| Idempotent infra via Pulumi (embedded) | ✓ |
-| SSH transport (pure Node — no system `ssh`) | ✓ |
-| MCP server (stdio + HTTP) | ✓ |
-| Plan → review → apply discipline | ✓ |
-| JSON output everywhere (`--json`) | ✓ |
-| No credentials in config | ✓ |
+- **OpenClaw users** who want the simplest path to self-hosting across cloud or local VMs, with
+  reliable deploy, status checks, logs, backups, and upgrades in a single CLI.
+- **Claude Code / Cursor / MCP users** looking for a real-world reference implementation of safe
+  infrastructure operations through MCP — typed tool schemas, read-only mode, destructive-action
+  confirmation, and audit logs.
+- **Self-hosted AI and local-first developers** who want to run their own AI assistant without
+  committing to Kubernetes, a managed SaaS platform, or a single cloud provider.
 
 ---
 
-## Quick Start
+## What clawops does
+
+- Provisions and tears down OpenClaw infrastructure on **AWS, GCP, Azure, and local VMs** using
+  the Pulumi Automation API (embedded — no `pulumi` binary required).
+- Manages day-to-day operations: status, logs, SSH, tunnels, config, agents, gateway, backups.
+- Exposes every operation as a **typed MCP tool** so AI agents can drive ops safely.
+- Enforces a **plan → review → apply** discipline for cloud deployments.
+- Emits **JSON output everywhere** (`--json`) for scripting and automation.
+- Never stores cloud credentials — reads them from your environment's existing CLI profiles.
+
+## What clawops does not do
 
-### Prerequisites
+- **No high availability or clustering.** Optimized for single-node deployments.
+- **No Kubernetes.** It deploys to VMs, not container orchestration platforms.
+- **No OpenClaw skill/agent authoring.** clawops manages infrastructure; what runs on it is up to
+  you and OpenClaw.
+- **No TLS or domain automation** (yet). Bring your own reverse proxy or see
+  [`docs/limitations.md`](docs/limitations.md) for the manual path.
+- **No credential storage.** Cloud credentials must be configured in your environment before using
+  clawops. They are never written to `~/.clawops/config.json`.
+- **No native Windows.** WSL2 is fully supported; see [`docs/support-matrix.md`](docs/support-matrix.md).
 
-- **Node.js ≥ 22** (LTS)
-- Cloud credentials available in the environment (see [Configuration](#configuration))
+---
+
+## Quick Start — local VM (fastest path)
 
-### Install
+The local provider needs only a Linux host reachable over SSH — no cloud account required.
+
+**Prerequisites:** Node.js ≥ 22, an SSH key, a Linux host (Ubuntu/Debian/RHEL) you can reach.
 
 ```bash
 npm install -g @clawops/cli
-# or without a global install:
-npx @clawops/cli
+
+# Check your environment
+clawops doctor
+
+# Configure clawops for a local host
+clawops init --provider local --host 192.168.1.50 --user ubuntu --key-path ~/.ssh/id_ed25519
+
+# Bootstrap OpenClaw on the host (installs Docker + OpenClaw over SSH)
+clawops up
+
+# Verify it's running
+clawops status
+
+# Start the MCP server for Claude Code
+clawops mcp serve
 ```
 
-### Provision on AWS
+See [`docs/examples/local-vm.md`](docs/examples/local-vm.md) for the full walkthrough including
+SSH prerequisites, firewall setup, and troubleshooting.
+
+## Quick Start — cloud (AWS)
 
 ```bash
-# Write ~/.clawops/config.json and generate an SSH key pair
+npm install -g @clawops/cli
+# or: npx @clawops/cli
+
+# Requires AWS credentials in your environment (AWS_PROFILE or ~/.aws/credentials)
 clawops init --provider aws
 
 # Edit ~/.clawops/config.json — set stateUrl to your S3 bucket:
@@ -55,19 +88,44 @@ clawops init --provider aws
 # Generate a deploy plan (runs pulumi preview internally)
 clawops plan --provider aws --stack default --out /tmp/plan.json
 
-# Review the plan JSON, then apply
+# Review the plan, then apply
 clawops apply /tmp/plan.json
+```
 
-# Or preview + apply in one step (no plan file needed)
-clawops up
+---
+
+## Connect Claude Code
+
+Add to your Claude Code MCP config (`~/.claude.json` or project `.mcp.json`):
+
+```json
+{
+  "mcpServers": {
+    "clawops": {
+      "command": "clawops",
+      "args": ["mcp", "serve", "--read-only"]
+    }
+  }
+}
 ```
 
-### Day-to-day operations
+**Start with `--read-only`** — it enables status, logs, config reads, and diagnostics while
+blocking any operation that mutates infrastructure. Remove `--read-only` only once you understand
+which tools are destructive and have reviewed [`docs/security/mcp-safety.md`](docs/security/mcp-safety.md).
+
+Destructive tools (`clawops_destroy`, `clawops_up`, `clawops_config_set`, etc.) require explicit
+confirmation from the agent before executing — they will never run silently.
+
+For Cursor, VS Code, or HTTP mode setup see [`docs/mcp/`](docs/mcp/).
+
+---
+
+## Day-to-day operations
 
 ```bash
-clawops status              # Show stack outputs: IP, gateway URL, SSH info
+clawops status              # Stack outputs: IP, gateway URL, SSH info
 clawops logs -f             # Tail OpenClaw logs over SSH
-clawops ssh                 # Open an interactive SSH session
+clawops ssh                 # Interactive SSH session
 clawops ssh --command "docker ps"
 
 clawops config get maxAgents
@@ -75,7 +133,7 @@ clawops config set maxAgents 8
 
 clawops tunnel              # Port-forward gateway UI to localhost
 
-clawops destroy --yes       # Destroy cloud-provider stack (AWS/GCP/Azure)
+clawops destroy --yes       # Destroy cloud-provider stack
 clawops down --yes          # Destroy local-provider stack
 ```
 
@@ -90,7 +148,7 @@ clawops down --yes          # Destroy local-provider stack
 | `down` | Destroy local-provider stack (requires `--yes`; `--dry-run` shows current outputs) |
 | `destroy` | Destroy cloud-provider stack with confirmation prompt (`--dry-run` shows current outputs) |
 | `status` | Show stack outputs: IP, gateway URL, region, provisioned time |
-| `plan` | Generate a Maker deploy-plan JSON artifact (dry-run safe) |
+| `plan` | Generate a deploy-plan JSON artifact (dry-run safe) |
 | `apply` | Apply a previously reviewed plan file (`--dry-run` validates and shows diff without applying) |
 | `ssh` | Interactive SSH session or run a remote command |
 | `logs` | Stream OpenClaw logs (`-f`, `--tail N`, `--since 5m`) |
@@ -115,7 +173,7 @@ For non-local providers, clawops enforces a review-before-apply discipline:
 # 1. Generate a plan — runs `pulumi preview` internally, produces JSON
 clawops plan --provider aws --region us-east-1 --out /tmp/plan.json
 
-# 2. Review plan.json — it shows exactly which resources will change
+# 2. Review plan.json — the `diff` field shows projected changes at plan-generation time
 cat /tmp/plan.json | jq .diff
 
 # 3. Apply — reads and validates the plan file, then runs `pulumi up`
@@ -125,24 +183,28 @@ clawops apply /tmp/plan.json
 clawops apply /tmp/plan.json --yes    # skip prompt in automation
 ```
 
-The plan JSON conforms to `spec/deploy-plan.schema.json` (AJV-validated). Plans are portable — generated on one machine, applied on another.
+The plan JSON conforms to `spec/deploy-plan.schema.json` (AJV-validated) and captures reviewed
+intent: provider, region, instance type, CIDR ranges, and OpenClaw version. `apply` re-runs
+`pulumi up` using those parameters against the current live state — it does not replay a locked
+execution artifact. Review and apply in the same session to minimize drift risk.
+
+See [`docs/plan-apply.md`](docs/plan-apply.md) for full semantics, drift guidance, and the safe CI pattern.
 
 ---
 
 ## MCP server
 
-clawops ships an embedded [MCP](https://modelcontextprotocol.io/) server. Claude Code, Cursor, and any MCP-compatible agent can drive deployments without leaving the chat interface.
+clawops ships an embedded [MCP](https://modelcontextprotocol.io/) server. Claude Code, Cursor, and
+any MCP-compatible agent can drive deployments without leaving the chat interface.
 
 ### Stdio mode (Claude Code / VS Code)
 
-Add to your Claude Code MCP config (`~/.claude.json` or project `.mcp.json`):
-
 ```json
 {
   "mcpServers": {
     "clawops": {
       "command": "clawops",
-      "args": ["mcp", "serve"]
+      "args": ["mcp", "serve", "--read-only"]
     }
   }
 }
@@ -155,27 +217,31 @@ clawops mcp serve --http --port 3333 --bind 127.0.0.1
 # MCP HTTP server listening on 127.0.0.1:3333
 ```
 
-Point your MCP client at `http://127.0.0.1:3333`.
+Do not bind to a non-loopback address without additional authentication controls in front of it.
 
 ### Available tools
 
 | Tool | Toolset | Description |
 |---|---|---|
-| `clawops_up` | cli | Provision or update a stack |
 | `clawops_status` | read | Show stack outputs |
 | `clawops_logs_tail` | read | Tail OpenClaw logs |
-| `clawops_ssh_exec` | cli | Run a command over SSH |
-| `clawops_plan` | cli | Generate a deploy plan |
-| `clawops_apply` | cli | Apply a plan file |
-| `clawops_destroy` | cli | Destroy a stack (elicits confirmation) |
 | `clawops_config_get` | read | Read a remote config value |
-| `clawops_config_set` | cli | Write a remote config value |
 | `clawops_agents_list` | read | List running agents |
-| `clawops_stacks_list` | admin | List all stacks and their state |
 | `clawops_task_status` | read | Poll a long-running task |
+| `clawops_stacks_list` | admin | List all stacks and their state |
+| `clawops_up` | cli | Provision or update a stack |
+| `clawops_plan` | cli | Generate a deploy plan |
+| `clawops_apply` | cli | Apply a plan file |
+| `clawops_ssh_exec` | cli | Run a command over SSH |
+| `clawops_config_set` | cli | Write a remote config value |
+| `clawops_destroy` | cli | Destroy a stack (elicits confirmation) |
 | `clawops_workflow_deploy_app` | workflow | End-to-end deploy: plan → confirm → apply → status |
 
-Destructive tools require explicit confirmation (R19 elicitation) unless `yes: true` is passed.
+`read` toolset tools are available in `--read-only` mode. All other toolsets require full mode.
+Destructive tools require explicit confirmation (elicitation) unless `yes: true` is passed.
+
+See [`docs/security/tool-risk-matrix.md`](docs/security/tool-risk-matrix.md) for the full risk
+classification of every tool.
 
 ---
 
@@ -215,6 +281,17 @@ Config lives at `~/.clawops/config.json` (override with `$CLAWOPS_HOME`).
 
 ---
 
+## Known limitations
+
+See [`docs/limitations.md`](docs/limitations.md) for the full list. Key points:
+
+- **Single-node deployments only** — not a high-availability or clustering platform.
+- **`clawops apply` is not an immutable plan execution** — see [`docs/plan-apply.md`](docs/plan-apply.md).
+- **No TLS/domain automation** in the current release.
+- **MCP tools execute privileged operations** — use `--read-only` for first evaluation.
+
+---
+
 ## Architecture
 
 ```
@@ -241,7 +318,7 @@ Key design decisions:
 - **State in cloud blob storage:** GCS (`gs://`), S3 (`s3://`), Azure Blob — no local state files, no `pulumi.yaml`
 - **SSH via `ssh2`:** never shells out to `/usr/bin/ssh`; TOFU host verification against `~/.clawops/known_hosts`; connection pool with 5-min idle TTL
 - **Plan → apply discipline:** every non-local deployment goes through `generatePlan()` → review → `applyPlan()`; destructive changes always require human review of the plan JSON
-- **MCP-first:** every CLI operation has a typed MCP tool; schemas generated from `spec/mcp-tools.yaml`; all destructive tools use R19 elicitation
+- **MCP-first:** every CLI operation has a typed MCP tool; schemas generated from `spec/mcp-tools.yaml`; all destructive tools use elicitation
 
 See [`docs/architecture.md`](docs/architecture.md) for a full narrative, and [`docs/decisions/`](docs/decisions/) for ADRs.
 
@@ -264,8 +341,9 @@ pnpm dev doctor        # verify toolchain
 ```bash
 pnpm dev                   # run CLI from src/ via tsx
 pnpm build                 # tsup → dist/
-pnpm test                  # vitest (356 tests, ~2s)
+pnpm test                  # vitest (476 tests, ~2s)
 pnpm test:changed          # vitest --changed (fast edit loop)
+pnpm test:integration      # Docker-based SSH integration tests
 pnpm typecheck             # tsc --noEmit
 pnpm lint                  # eslint src/ tests/ scripts/ (--max-warnings=0)
 pnpm gen:schemas           # regenerate src/providers/types.ts + src/mcp/tools/_generated.ts
@@ -281,7 +359,10 @@ pnpm changeset             # record a release note before merging
 | `SPEC.md` | Full technical specification (milestones, rules, schemas) |
 | `DESIGN_RULES.md` | 25 normative rules (R1–R25) referenced throughout the codebase |
 | `docs/architecture.md` | Narrative system overview |
+| `docs/plan-apply.md` | Plan/apply semantics, drift guidance, CI pattern |
 | `docs/ci.md` | CI integration guide: OIDC, env vars, plan → apply in CI |
+| `docs/security/` | MCP safety model, tool risk matrix, redaction, audit logs |
+| `docs/providers/matrix.md` | Per-provider capability matrix |
 | `docs/decisions/` | Architecture Decision Records |
 | `.claude/skills/` | Invokable procedures: `/add-provider`, `/release`, `/tdd`, `/mcp-tool` |
 | `.claude/rules/` | Path-scoped lint rules loaded by Claude Code |
@@ -326,7 +407,9 @@ Use `pnpm changeset` to record a release note before merging a `feat` or `fix`.
 | M4 — Local VM | ✅ | Local adapter (SSH bootstrap, no Pulumi); `doctor` |
 | M5 — MCP Layer | ✅ | `mcp serve` (stdio), all CLI ops as MCP tools, progress tracking |
 | M6 — Plan/Apply | ✅ | `plan` + `apply`; deploy-plan schema; MCP HTTP transport; `workflow_deploy_app` |
-| M7 — v1.0 Polish | ✅ | Full `doctor` surface; `destroy` command; `--dry-run` on `up`/`down`/`destroy`/`apply`/`config`; `release.yml`; CI integration guide |
+| M7 — v1.0 Polish | ✅ | Full `doctor` surface; `destroy` command; `--dry-run` across commands; CI guide |
+
+See [`docs/roadmap.md`](docs/roadmap.md) for the public roadmap and upcoming work.
 
 ---
 

package/dist/{apply-GTVALBAY.js → apply-DPS23GLL.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   applyPlan
-} from "./chunk-RZE35FQF.js";
+} from "./chunk-UCIVU24B.js";
 import "./chunk-PERSDQMT.js";
 import "./chunk-PRYLTCS4.js";
 import "./chunk-YTH4L2GN.js";

package/dist/{bootstrap-NRIDVS5F.js → bootstrap-7ZS2GLFJ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   acquireSession
-} from "./chunk-5XEZAU7V.js";
+} from "./chunk-BA6MDFZK.js";
 import {
   writeLocalState
 } from "./chunk-PRYLTCS4.js";

package/dist/{chunk-5XEZAU7V.js → chunk-BA6MDFZK.js}

@@ -116,6 +116,10 @@ async function connect(opts) {
     );
   }
   return new Promise((resolve, reject) => {
+    if (opts.signal?.aborted) {
+      reject(new NetworkError("Connection aborted"));
+      return;
+    }
     const client = new Client();
     const onAbort = () => {
       client.destroy();

package/dist/{chunk-ENQY5OW2.js → chunk-D4UAHAKI.js}

@@ -45,7 +45,7 @@ async function generatePlan(intent, _opts) {
       "plan/apply is not supported for the local provider. Use `clawops up` directly."
     );
   }
-  const { version } = await import("./package-YZFYSSQM.js");
+  const { version } = await import("./package-FA6UOG2I.js");
   const config = getConfig();
   const instanceType = intent.instanceType ?? "small";
   const openclawVersion = intent.openclawVersion ?? "latest";

package/dist/{chunk-RZE35FQF.js → chunk-UCIVU24B.js}

@@ -34,7 +34,7 @@ ${validation.errors.join("\n")}`
   }
   await stack.setConfig("openclawVersion", { value: plan.spec.openclaw.version });
   const start = Date.now();
-  const result = await stack.up({ onOutput: opts?.onOutput });
+  const result = await stack.up({ onOutput: opts?.onOutput, signal: opts?.signal });
   const outputs = Object.fromEntries(
     Object.entries(result.outputs).map(([k, v]) => [k, v.value])
   );

package/dist/cli.js

@@ -213,7 +213,7 @@ var up_default = defineCommand2({
         );
       }
       const { localOpts } = stackConfig;
-      const { localBootstrap } = await import("./bootstrap-NRIDVS5F.js");
+      const { localBootstrap } = await import("./bootstrap-7ZS2GLFJ.js");
       const abortController = new AbortController();
       process3.on("SIGINT", () => abortController.abort());
       process3.on("SIGTERM", () => abortController.abort());
@@ -445,7 +445,7 @@ var plan_default = defineCommand5({
   },
   async run({ args }) {
     const { buildContext } = await import("./context-T52JWL3P.js");
-    const { generatePlan } = await import("./generate-Y6O465VB.js");
+    const { generatePlan } = await import("./generate-55MITRXU.js");
     const ctx = buildContext(args);
     if (ctx.adapter.name === "local") {
       throw new UsageError(
@@ -523,7 +523,7 @@ var apply_default = defineCommand6({
   },
   async run({ args }) {
     const { validatePlan } = await import("./validate-T5M5EHSJ.js");
-    const { applyPlan } = await import("./apply-GTVALBAY.js");
+    const { applyPlan } = await import("./apply-DPS23GLL.js");
     const planPath = args._?.[0];
     if (!planPath) {
       throw new UsageError("Usage: clawops apply <plan.json>");
@@ -696,7 +696,7 @@ var ssh_default = defineCommand8({
   },
   async run({ args }) {
     const { buildContext } = await import("./context-T52JWL3P.js");
-    const { acquireSession, drainPool } = await import("./pool-D4JCUA2V.js");
+    const { acquireSession, drainPool } = await import("./pool-FAVU7WCW.js");
     const ctx = buildContext(args);
     let conn;
     if (ctx.adapter.name === "local") {
@@ -784,7 +784,7 @@ var tunnel_default = defineCommand9({
   async run({ args }) {
     const { buildContext } = await import("./context-T52JWL3P.js");
     const { extractBaseOutputs } = await import("./outputs-6DAVEEAZ.js");
-    const { acquireSession } = await import("./pool-D4JCUA2V.js");
+    const { acquireSession } = await import("./pool-FAVU7WCW.js");
     const ctx = buildContext(args);
     const stack = await ctx.getStack();
     const outputMap = await stack.outputs();
@@ -852,7 +852,7 @@ var logs_default = defineCommand10({
   async run({ args }) {
     const { buildContext } = await import("./context-T52JWL3P.js");
     const { extractBaseOutputs } = await import("./outputs-6DAVEEAZ.js");
-    const { acquireSession, drainPool } = await import("./pool-D4JCUA2V.js");
+    const { acquireSession, drainPool } = await import("./pool-FAVU7WCW.js");
     const ctx = buildContext(args);
     const stack = await ctx.getStack();
     const outputMap = await stack.outputs();
@@ -969,7 +969,7 @@ var config_default = defineCommand11({
   async run({ args }) {
     const { buildContext } = await import("./context-T52JWL3P.js");
     const { extractBaseOutputs } = await import("./outputs-6DAVEEAZ.js");
-    const { acquireSession, drainPool } = await import("./pool-D4JCUA2V.js");
+    const { acquireSession, drainPool } = await import("./pool-FAVU7WCW.js");
     const [action, key, value] = args._ ?? [];
     if (!action || !["get", "set", "unset"].includes(action)) {
       failure("Usage: clawops config <get [key] | set key value | unset key>");
@@ -1084,7 +1084,7 @@ var agents_default = defineCommand12({
   async run({ args }) {
     const { buildContext } = await import("./context-T52JWL3P.js");
     const { extractBaseOutputs } = await import("./outputs-6DAVEEAZ.js");
-    const { acquireSession, drainPool } = await import("./pool-D4JCUA2V.js");
+    const { acquireSession, drainPool } = await import("./pool-FAVU7WCW.js");
     const [action, name] = args._ ?? [];
     if (!action || !["list", "restart", "logs"].includes(action)) {
       failure("Usage: clawops agents <list | restart [name] | logs <name>>");
@@ -1188,7 +1188,7 @@ var gateway_default = defineCommand13({
   async run({ args }) {
     const { buildContext } = await import("./context-T52JWL3P.js");
     const { extractBaseOutputs } = await import("./outputs-6DAVEEAZ.js");
-    const { acquireSession, drainPool } = await import("./pool-D4JCUA2V.js");
+    const { acquireSession, drainPool } = await import("./pool-FAVU7WCW.js");
     const [action, versionArg] = args._ ?? [];
     if (!action || !["status", "restart", "update"].includes(action)) {
       failure("Usage: clawops gateway <status | restart | update [version]>");
@@ -1300,7 +1300,7 @@ var backup_default = defineCommand14({
   },
   async run({ args }) {
     const { buildContext } = await import("./context-T52JWL3P.js");
-    const { acquireSession, drainPool } = await import("./pool-D4JCUA2V.js");
+    const { acquireSession, drainPool } = await import("./pool-FAVU7WCW.js");
     const action = args.action;
     if (action !== "create" && action !== "restore") {
       throw new UsageError(`Unknown action: ${action}. Use "create" or "restore"`);
@@ -1635,7 +1635,7 @@ var mcp_default = defineCommand17({
       }
       return;
     }
-    const { serveMcp } = await import("./server-TKDURITQ.js");
+    const { serveMcp } = await import("./server-V5ZFL76Y.js");
     await serveMcp({
       port: args.http ? Number(args.http) : void 0,
       bind: args.bind,
@@ -1653,13 +1653,14 @@ var CLAWOPS_ENTRY = {
 };
 function getConfigPath(client) {
   const home = os.homedir();
+  const isLinux = process.platform === "linux";
   switch (client) {
     case "claude":
-      return path3.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
+      return isLinux ? path3.join(home, ".config", "Claude", "claude_desktop_config.json") : path3.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
     case "cursor":
       return path3.join(home, ".cursor", "mcp.json");
     case "vscode":
-      return path3.join(home, "Library", "Application Support", "Code", "User", "mcp.json");
+      return isLinux ? path3.join(home, ".config", "Code", "User", "mcp.json") : path3.join(home, "Library", "Application Support", "Code", "User", "mcp.json");
     case "windsurf":
       return path3.join(home, ".codeium", "windsurf", "mcp_config.json");
     case "zed":

package/dist/{generate-Y6O465VB.js → generate-55MITRXU.js}

@@ -2,7 +2,7 @@
 import {
   generatePlan,
   planId
-} from "./chunk-ENQY5OW2.js";
+} from "./chunk-D4UAHAKI.js";
 import "./chunk-PERSDQMT.js";
 import "./chunk-PRYLTCS4.js";
 import "./chunk-YTH4L2GN.js";

package/dist/{package-YZFYSSQM.js → package-FA6UOG2I.js}

@@ -2,7 +2,7 @@
 
 // package.json
 var name = "@clawops/cli";
-var version = "0.2.0";
+var version = "1.1.0";
 var description = "Deploy and manage self-hosted OpenClaw instances across clouds";
 var type = "module";
 var bin = {
@@ -14,6 +14,15 @@ var exports = {
 var files = [
   "dist"
 ];
+var repository = {
+  type: "git",
+  url: "git+https://github.com/dfridkin/clawops.git"
+};
+var mcpName = "io.github.dfridkin/clawops";
+var publishConfig = {
+  access: "public",
+  provenance: true
+};
 var engines = {
   node: ">=22"
 };
@@ -24,7 +33,8 @@ var scripts = {
   test: "vitest run",
   "test:pulumi": "vitest run tests/providers/aws/program.test.ts tests/providers/azure/program.test.ts",
   "test:changed": "vitest --changed",
-  typecheck: "tsc --noEmit",
+  "test:integration": "vitest run --config vitest.integration.config.ts",
+  typecheck: "NODE_OPTIONS=--max-old-space-size=4096 tsc --noEmit",
   lint: "eslint --max-warnings=0 src tests scripts",
   "gen:schemas": "tsx scripts/gen-schemas.ts",
   changeset: "changeset",
@@ -49,15 +59,16 @@ var dependencies = {
   zod: "^3.0.0"
 };
 var devDependencies = {
-  "aws-sdk-client-mock": "^4.0.0",
   "@changesets/cli": "^2.0.0",
   "@types/js-yaml": "^4.0.0",
   "@types/node": "^22.0.0",
   "@types/ssh2": "^1.0.0",
   "@vitest/coverage-v8": "^2.0.0",
+  "aws-sdk-client-mock": "^4.0.0",
   eslint: "^9.0.0",
   "js-yaml": "^4.0.0",
   nock: "^14.0.0",
+  testcontainers: "^11.14.0",
   tsup: "^8.0.0",
   tsx: "^4.0.0",
   typescript: "^5.0.0",
@@ -84,6 +95,9 @@ var package_default = {
   bin,
   exports,
   files,
+  repository,
+  mcpName,
+  publishConfig,
   engines,
   packageManager,
   scripts,
@@ -100,9 +114,12 @@ export {
   engines,
   exports,
   files,
+  mcpName,
   name,
   packageManager,
   pnpm,
+  publishConfig,
+  repository,
   scripts,
   type,
   version

package/dist/{pool-D4JCUA2V.js → pool-FAVU7WCW.js}

@@ -2,7 +2,7 @@
 import {
   acquireSession,
   drainPool
-} from "./chunk-5XEZAU7V.js";
+} from "./chunk-BA6MDFZK.js";
 import "./chunk-ZSE4QRKE.js";
 export {
   acquireSession,

package/dist/{server-TKDURITQ.js → server-V5ZFL76Y.js}

@@ -2,16 +2,16 @@
 import {
   acquireSession,
   drainPool
-} from "./chunk-5XEZAU7V.js";
+} from "./chunk-BA6MDFZK.js";
 import {
   extractBaseOutputs
 } from "./chunk-LT24GUUO.js";
 import {
   generatePlan
-} from "./chunk-ENQY5OW2.js";
+} from "./chunk-D4UAHAKI.js";
 import {
   applyPlan
-} from "./chunk-RZE35FQF.js";
+} from "./chunk-UCIVU24B.js";
 import {
   buildContext
 } from "./chunk-PERSDQMT.js";
@@ -701,7 +701,7 @@ async function handleUp(input, server) {
       );
     }
     const { localOpts } = stackConfig;
-    const { localBootstrap } = await import("./bootstrap-NRIDVS5F.js");
+    const { localBootstrap } = await import("./bootstrap-7ZS2GLFJ.js");
     const ac = new AbortController();
     const state = await localBootstrap({
       host: localOpts.host,
@@ -1317,7 +1317,7 @@ If none of the above resolves the issue:
 
 // src/mcp/server.ts
 async function serveMcp(opts) {
-  const { version } = await import("./package-YZFYSSQM.js");
+  const { version } = await import("./package-FA6UOG2I.js");
   const server = new McpServer({ name: "clawops", version });
   registerTools(server, opts);
   registerResources(server);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawops/cli",
-  "version": "0.2.0",
+  "version": "1.1.0",
   "description": "Deploy and manage self-hosted OpenClaw instances across clouds",
   "type": "module",
   "bin": {
@@ -12,22 +12,18 @@
   "files": [
     "dist"
   ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/dfridkin/clawops.git"
+  },
+  "mcpName": "io.github.dfridkin/clawops",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "engines": {
     "node": ">=22"
   },
-  "packageManager": "pnpm@10.12.1",
-  "scripts": {
-    "dev": "tsx src/cli/index.ts",
-    "build": "tsup",
-    "test": "vitest run",
-    "test:pulumi": "vitest run tests/providers/aws/program.test.ts tests/providers/azure/program.test.ts",
-    "test:changed": "vitest --changed",
-    "typecheck": "tsc --noEmit",
-    "lint": "eslint --max-warnings=0 src tests scripts",
-    "gen:schemas": "tsx scripts/gen-schemas.ts",
-    "changeset": "changeset",
-    "release": "pnpm build && changeset publish"
-  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
     "@pulumi/aws": "^6.0.0",
@@ -47,31 +43,33 @@
     "zod": "^3.0.0"
   },
   "devDependencies": {
-    "aws-sdk-client-mock": "^4.0.0",
     "@changesets/cli": "^2.0.0",
     "@types/js-yaml": "^4.0.0",
     "@types/node": "^22.0.0",
     "@types/ssh2": "^1.0.0",
     "@vitest/coverage-v8": "^2.0.0",
+    "aws-sdk-client-mock": "^4.0.0",
     "eslint": "^9.0.0",
     "js-yaml": "^4.0.0",
     "nock": "^14.0.0",
+    "testcontainers": "^11.14.0",
     "tsup": "^8.0.0",
     "tsx": "^4.0.0",
     "typescript": "^5.0.0",
     "typescript-eslint": "^8.0.0",
     "vitest": "^2.0.0"
   },
-  "pnpm": {
-    "overrides": {
-      "@pulumi/pulumi": "^3.0.0"
-    },
-    "onlyBuiltDependencies": [
-      "@pulumi/command",
-      "cpu-features",
-      "esbuild",
-      "protobufjs",
-      "ssh2"
-    ]
+  "scripts": {
+    "dev": "tsx src/cli/index.ts",
+    "build": "tsup",
+    "test": "vitest run",
+    "test:pulumi": "vitest run tests/providers/aws/program.test.ts tests/providers/azure/program.test.ts",
+    "test:changed": "vitest --changed",
+    "test:integration": "vitest run --config vitest.integration.config.ts",
+    "typecheck": "NODE_OPTIONS=--max-old-space-size=4096 tsc --noEmit",
+    "lint": "eslint --max-warnings=0 src tests scripts",
+    "gen:schemas": "tsx scripts/gen-schemas.ts",
+    "changeset": "changeset",
+    "release": "pnpm build && changeset publish"
   }
-}
+}