@clawops/cli 1.1.0 → 1.2.1

package/dist/mcp-apps-KY44ED3Y.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import {
+  MCP_APPS,
+  buildMcpEntry,
+  writeAppConfigs
+} from "./chunk-OIGTOLB3.js";
+export {
+  MCP_APPS,
+  buildMcpEntry,
+  writeAppConfigs
+};

package/dist/{outputs-6DAVEEAZ.js → outputs-DJHBY7EE.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   extractBaseOutputs
-} from "./chunk-LT24GUUO.js";
-import "./chunk-ZSE4QRKE.js";
+} from "./chunk-3QJBNAHW.js";
+import "./chunk-KGXPLI7W.js";
 export {
   extractBaseOutputs
 };

package/dist/{package-FA6UOG2I.js → package-SE3M4NJA.js}

@@ -2,7 +2,7 @@
 
 // package.json
 var name = "@clawops/cli";
-var version = "1.1.0";
+var version = "1.2.1";
 var description = "Deploy and manage self-hosted OpenClaw instances across clouds";
 var type = "module";
 var bin = {

package/dist/{pool-FAVU7WCW.js → pool-FBFHATDG.js}

@@ -2,8 +2,9 @@
 import {
   acquireSession,
   drainPool
-} from "./chunk-BA6MDFZK.js";
-import "./chunk-ZSE4QRKE.js";
+} from "./chunk-ZVOEQCNW.js";
+import "./chunk-4U3LTLWZ.js";
+import "./chunk-KGXPLI7W.js";
 export {
   acquireSession,
   drainPool

package/dist/remote-config-JQ77SRC2.js

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+import {
+  OPENCLAW_CONFIG,
+  OPENCLAW_CONFIG_LINUX,
+  OPENCLAW_CONFIG_MACOS,
+  OPENCLAW_TMP,
+  atomicWriteConfig,
+  deepMerge,
+  readRemoteConfig,
+  restartGateway
+} from "./chunk-UDNZUSKA.js";
+export {
+  OPENCLAW_CONFIG,
+  OPENCLAW_CONFIG_LINUX,
+  OPENCLAW_CONFIG_MACOS,
+  OPENCLAW_TMP,
+  atomicWriteConfig,
+  deepMerge,
+  readRemoteConfig,
+  restartGateway
+};

package/dist/secrets-SVZWNAPK.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import {
+  resolveSecrets
+} from "./chunk-BOPSG2LI.js";
+export {
+  resolveSecrets
+};

package/dist/{server-V5ZFL76Y.js → server-4DNHLGEG.js}

@@ -1,32 +1,44 @@
 #!/usr/bin/env node
-import {
-  acquireSession,
-  drainPool
-} from "./chunk-BA6MDFZK.js";
-import {
-  extractBaseOutputs
-} from "./chunk-LT24GUUO.js";
 import {
   generatePlan
-} from "./chunk-D4UAHAKI.js";
+} from "./chunk-SSB6SGPQ.js";
 import {
   applyPlan
-} from "./chunk-UCIVU24B.js";
-import {
-  buildContext
-} from "./chunk-PERSDQMT.js";
-import "./chunk-PRYLTCS4.js";
+} from "./chunk-LU63NZD3.js";
 import {
   validatePlan
 } from "./chunk-YTH4L2GN.js";
+import "./chunk-BOPSG2LI.js";
+import {
+  extractBaseOutputs
+} from "./chunk-3QJBNAHW.js";
+import {
+  errText,
+  handleConfigGet,
+  handleConfigSet,
+  handleConfigUnset,
+  handleConfigValidate,
+  okText,
+  resolveConn
+} from "./chunk-QJ6ERXHN.js";
+import {
+  buildContext
+} from "./chunk-ACYJBSLJ.js";
+import "./chunk-BRPU7AQC.js";
+import {
+  acquireSession,
+  drainPool
+} from "./chunk-ZVOEQCNW.js";
+import "./chunk-4U3LTLWZ.js";
+import "./chunk-UDNZUSKA.js";
 import {
   getConfig,
   getConfigDir
-} from "./chunk-ALSUDYA7.js";
+} from "./chunk-CX5SL5HP.js";
 import {
   StateError,
   UsageError
-} from "./chunk-ZSE4QRKE.js";
+} from "./chunk-KGXPLI7W.js";
 
 // src/mcp/server.ts
 import { createServer } from "http";
@@ -45,7 +57,7 @@ function getSessionId() {
   if (!_sessionId) _sessionId = randomUUID();
   return _sessionId;
 }
-var SENSITIVE_KEYS = ["token", "secret", "password", "connectionstring", "authorization"];
+var SENSITIVE_KEYS = ["token", "secret", "key", "password", "connectionstring", "authorization"];
 var EXEMPT_KEYS = ["keyname", "keypath", "privateKeyPath", "knownHostsPath"];
 var ARN_RE = /arn:aws:[a-z0-9\-*]+:[a-z0-9\-]*:[0-9]*:[^\s,'"]+/gi;
 function sanitize(args) {
@@ -60,6 +72,10 @@ function sanitize(args) {
       result[k] = v.replace(ARN_RE, "arn:aws:***:<region>:<account>:***");
     } else if (v !== null && typeof v === "object" && !Array.isArray(v)) {
       result[k] = sanitize(v);
+    } else if (Array.isArray(v)) {
+      result[k] = v.map(
+        (item) => item !== null && typeof item === "object" && !Array.isArray(item) ? sanitize(item) : item
+      );
     } else {
       result[k] = v;
     }
@@ -145,7 +161,7 @@ var clawops_stacks_listAnnotations = {
 };
 var clawops_config_getSchema = z.object({
   stackName: z.string().optional(),
-  key: z.string()
+  key: z.string().optional()
 });
 var clawops_config_getAnnotations = {
   title: "Get OpenClaw Config Value",
@@ -235,6 +251,30 @@ var clawops_config_setAnnotations = {
   openWorldHint: true,
   toolsets: ["cli"]
 };
+var clawops_config_unsetSchema = z.object({
+  stackName: z.string().optional(),
+  key: z.string(),
+  restart: z.boolean().default(false)
+});
+var clawops_config_unsetAnnotations = {
+  title: "Unset OpenClaw Config Key",
+  readOnlyHint: false,
+  destructiveHint: true,
+  idempotentHint: true,
+  openWorldHint: true,
+  toolsets: ["cli"]
+};
+var clawops_config_validateSchema = z.object({
+  stackName: z.string().optional()
+});
+var clawops_config_validateAnnotations = {
+  title: "Validate OpenClaw Config",
+  readOnlyHint: true,
+  destructiveHint: false,
+  idempotentHint: true,
+  openWorldHint: true,
+  toolsets: ["cli", "read"]
+};
 var clawops_agents_restartSchema = z.object({
   stackName: z.string().optional(),
   agentId: z.string()
@@ -305,6 +345,8 @@ var TOOLSETS = {
     "clawops_apply",
     "clawops_plan",
     "clawops_config_set",
+    "clawops_config_unset",
+    "clawops_config_validate",
     "clawops_agents_restart",
     "clawops_gateway_restart",
     "clawops_task_status"
@@ -320,6 +362,7 @@ var TOOLSETS = {
     "clawops_config_get",
     "clawops_agents_list",
     "clawops_plan",
+    "clawops_config_validate",
     "clawops_workflow_recover",
     "clawops_task_status"
   ],
@@ -360,42 +403,6 @@ function text(t) {
   return { content: [{ type: "text", text: t }] };
 }
 
-// src/mcp/tools/_conn.ts
-async function resolveConn(ctx) {
-  if (ctx.adapter.name === "local") {
-    const state = ctx.localState;
-    if (!state) throw new StateError("Stack has no local state \u2014 run `clawops up` first.");
-    return {
-      host: state.sshHost,
-      port: state.sshPort,
-      user: state.sshUser,
-      privateKeyPath: state.privateKeyPath,
-      knownHostsPath: state.knownHostsPath
-    };
-  }
-  const { extractBaseOutputs: extractBaseOutputs2 } = await import("./outputs-6DAVEEAZ.js");
-  const stack = await ctx.getStack();
-  const outputMap = await stack.outputs();
-  const outputs = Object.fromEntries(
-    Object.entries(outputMap).map(([k, v]) => [k, v.value])
-  );
-  if (!outputs["publicIp"]) {
-    throw new StateError("Stack has no outputs \u2014 run `clawops up` first.");
-  }
-  const base = extractBaseOutputs2(outputs);
-  return ctx.adapter.getConnectionInfo({
-    ...base,
-    privateKeyPath: ctx.config.ssh.keyPath,
-    knownHostsPath: ctx.config.ssh.knownHostsPath
-  });
-}
-function errText(message) {
-  return { content: [{ type: "text", text: message }], isError: true };
-}
-function okText(t) {
-  return { content: [{ type: "text", text: t }] };
-}
-
 // src/mcp/tools/cli/logs.ts
 var MAX_BYTES = 8 * 1024;
 async function handleLogsTail(input, _server) {
@@ -444,101 +451,6 @@ async function handleStacksList(_input, _server) {
   return { content: [{ type: "text", text: JSON.stringify({ stacks }, null, 2) }] };
 }
 
-// src/mcp/tools/cli/config.ts
-var OPENCLAW_CONFIG = "/home/clawops/openclaw.json";
-var OPENCLAW_TMP = "/tmp/clawops-config.json.tmp";
-async function handleConfigGet(input, _server) {
-  const ctx = buildContext({ stack: input.stackName });
-  const conn = await resolveConn(ctx);
-  const { session, release } = await acquireSession(conn);
-  try {
-    const result = await session.exec(`cat ${OPENCLAW_CONFIG}`);
-    let cfg;
-    try {
-      cfg = JSON.parse(result.stdout);
-    } catch {
-      return errText(`Cannot parse ${OPENCLAW_CONFIG}: ${result.stderr || result.stdout}`);
-    }
-    const value = input.key ? getPath(cfg, input.key) : cfg;
-    return okText(JSON.stringify(value, null, 2));
-  } finally {
-    release();
-    drainPool();
-  }
-}
-async function handleConfigSet(input, server) {
-  const elicit = await server.server.elicitInput({
-    message: `Set ${input.key} = ${input.value} on stack "${input.stackName ?? "default"}"?`,
-    requestedSchema: {
-      type: "object",
-      properties: { confirmed: { type: "boolean", title: "Confirm config change" } },
-      required: ["confirmed"]
-    }
-  });
-  if (elicit.action !== "accept" || !elicit.content?.["confirmed"]) {
-    return okText("Config change cancelled.");
-  }
-  const ctx = buildContext({ stack: input.stackName });
-  const conn = await resolveConn(ctx);
-  const { session, release } = await acquireSession(conn);
-  try {
-    const readResult = await session.exec(`cat ${OPENCLAW_CONFIG}`);
-    let cfg;
-    try {
-      cfg = JSON.parse(readResult.stdout);
-    } catch {
-      return errText(`Cannot parse ${OPENCLAW_CONFIG}: ${readResult.stderr}`);
-    }
-    let parsedValue = input.value;
-    try {
-      parsedValue = JSON.parse(input.value);
-    } catch {
-    }
-    setPath(cfg, input.key, parsedValue);
-    const json = JSON.stringify(cfg, null, 2);
-    const b64 = Buffer.from(json, "utf-8").toString("base64");
-    const writeCmd = `echo '${b64}' | base64 -d > ${OPENCLAW_TMP} && mv ${OPENCLAW_TMP} ${OPENCLAW_CONFIG} && chown clawops:clawops ${OPENCLAW_CONFIG}`;
-    const writeResult = await session.exec(writeCmd);
-    if (writeResult.code !== 0) {
-      return errText(`Failed to write config: ${writeResult.stderr}`);
-    }
-    let note = "";
-    if (input.restart) {
-      const imgResult = await session.exec(
-        `docker inspect openclaw --format '{{.Config.Image}}' 2>/dev/null || echo 'ghcr.io/openclaw/openclaw:stable'`
-      );
-      const image = imgResult.stdout.trim();
-      const restartCmd = [
-        "docker stop openclaw 2>/dev/null || true",
-        "docker rm openclaw 2>/dev/null || true",
-        `docker run -d --name openclaw --restart unless-stopped -p 18789:18789 -v ${OPENCLAW_CONFIG}:/app/config.json:ro ${image}`
-      ].join(" && ");
-      await session.exec(restartCmd);
-      note = " (gateway restarted)";
-    }
-    return okText(`Config set: ${input.key}${note}`);
-  } finally {
-    release();
-    drainPool();
-  }
-}
-function getPath(obj, dotKey) {
-  return dotKey.split(".").reduce((cur, k) => {
-    if (cur !== null && typeof cur === "object") return cur[k];
-    return void 0;
-  }, obj);
-}
-function setPath(obj, dotKey, value) {
-  const keys = dotKey.split(".");
-  let cur = obj;
-  for (let i = 0; i < keys.length - 1; i++) {
-    const k = keys[i];
-    if (typeof cur[k] !== "object" || cur[k] === null) cur[k] = {};
-    cur = cur[k];
-  }
-  cur[keys[keys.length - 1]] = value;
-}
-
 // src/mcp/tools/cli/agents.ts
 async function handleAgentsList(input, _server) {
   const ctx = buildContext({ stack: input.stackName });
@@ -701,7 +613,7 @@ async function handleUp(input, server) {
       );
     }
     const { localOpts } = stackConfig;
-    const { localBootstrap } = await import("./bootstrap-7ZS2GLFJ.js");
+    const { localBootstrap } = await import("./bootstrap-UYCOEJQX.js");
     const ac = new AbortController();
     const state = await localBootstrap({
       host: localOpts.host,
@@ -1042,6 +954,8 @@ var TOOL_REGISTRY = {
   clawops_apply: makeEntry(clawops_applySchema, clawops_applyAnnotations, handleApply),
   clawops_plan: makeEntry(clawops_planSchema, clawops_planAnnotations, handlePlan),
   clawops_config_set: makeEntry(clawops_config_setSchema, clawops_config_setAnnotations, handleConfigSet),
+  clawops_config_unset: makeEntry(clawops_config_unsetSchema, clawops_config_unsetAnnotations, handleConfigUnset),
+  clawops_config_validate: makeEntry(clawops_config_validateSchema, clawops_config_validateAnnotations, handleConfigValidate),
   clawops_agents_restart: makeEntry(clawops_agents_restartSchema, clawops_agents_restartAnnotations, handleAgentsRestart),
   clawops_gateway_restart: makeEntry(clawops_gateway_restartSchema, clawops_gateway_restartAnnotations, handleGatewayRestart),
   clawops_workflow_deploy_app: makeEntry(clawops_workflow_deploy_appSchema, clawops_workflow_deploy_appAnnotations, handleWorkflowDeployApp),
@@ -1317,7 +1231,7 @@ If none of the above resolves the issue:
 
 // src/mcp/server.ts
 async function serveMcp(opts) {
-  const { version } = await import("./package-FA6UOG2I.js");
+  const { version } = await import("./package-SE3M4NJA.js");
   const server = new McpServer({ name: "clawops", version });
   registerTools(server, opts);
   registerResources(server);

package/dist/ssh-IQXNME3D.js

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+import {
+  connect
+} from "./chunk-4U3LTLWZ.js";
+import "./chunk-KGXPLI7W.js";
+export {
+  connect
+};

package/dist/{store-ARJ2EO6L.js → store-SDUR52Z5.js}

@@ -5,8 +5,8 @@ import {
   getConfigPath,
   requireConfig,
   setConfig
-} from "./chunk-ALSUDYA7.js";
-import "./chunk-ZSE4QRKE.js";
+} from "./chunk-CX5SL5HP.js";
+import "./chunk-KGXPLI7W.js";
 export {
   getConfig,
   getConfigDir,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawops/cli",
-  "version": "1.1.0",
+  "version": "1.2.1",
   "description": "Deploy and manage self-hosted OpenClaw instances across clouds",
   "type": "module",
   "bin": {

package/dist/apply-DPS23GLL.js

@@ -1,12 +0,0 @@
-#!/usr/bin/env node
-import {
-  applyPlan
-} from "./chunk-UCIVU24B.js";
-import "./chunk-PERSDQMT.js";
-import "./chunk-PRYLTCS4.js";
-import "./chunk-YTH4L2GN.js";
-import "./chunk-ALSUDYA7.js";
-import "./chunk-ZSE4QRKE.js";
-export {
-  applyPlan
-};

package/dist/chunk-UCIVU24B.js

@@ -1,56 +0,0 @@
-#!/usr/bin/env node
-import {
-  buildContext
-} from "./chunk-PERSDQMT.js";
-import {
-  validatePlan
-} from "./chunk-YTH4L2GN.js";
-import {
-  UsageError
-} from "./chunk-ZSE4QRKE.js";
-
-// src/plan/apply.ts
-async function applyPlan(plan, opts) {
-  const validation = validatePlan(plan);
-  if (!validation.ok) {
-    throw new UsageError(
-      `Invalid deploy plan:
-${validation.errors.join("\n")}`
-    );
-  }
-  if (plan.spec.provider === "local") {
-    throw new UsageError(
-      "plan/apply is not supported for the local provider. Use `clawops up` directly."
-    );
-  }
-  const ctx = buildContext({
-    stack: plan.spec.stackName,
-    provider: plan.spec.provider
-  });
-  const stack = await ctx.getStack();
-  await stack.setConfig("instanceType", { value: plan.spec.instanceType });
-  if (plan.spec.region) {
-    await stack.setConfig("region", { value: plan.spec.region });
-  }
-  await stack.setConfig("openclawVersion", { value: plan.spec.openclaw.version });
-  const start = Date.now();
-  const result = await stack.up({ onOutput: opts?.onOutput, signal: opts?.signal });
-  const outputs = Object.fromEntries(
-    Object.entries(result.outputs).map(([k, v]) => [k, v.value])
-  );
-  const changeSummary = {};
-  if (result.summary.resourceChanges) {
-    for (const [op, count] of Object.entries(result.summary.resourceChanges)) {
-      changeSummary[op] = count;
-    }
-  }
-  return {
-    outputs,
-    changeSummary,
-    durationMs: Date.now() - start
-  };
-}
-
-export {
-  applyPlan
-};

package/dist/context-T52JWL3P.js

@@ -1,10 +0,0 @@
-#!/usr/bin/env node
-import {
-  buildContext
-} from "./chunk-PERSDQMT.js";
-import "./chunk-PRYLTCS4.js";
-import "./chunk-ALSUDYA7.js";
-import "./chunk-ZSE4QRKE.js";
-export {
-  buildContext
-};

package/dist/generate-55MITRXU.js

@@ -1,14 +0,0 @@
-#!/usr/bin/env node
-import {
-  generatePlan,
-  planId
-} from "./chunk-D4UAHAKI.js";
-import "./chunk-PERSDQMT.js";
-import "./chunk-PRYLTCS4.js";
-import "./chunk-YTH4L2GN.js";
-import "./chunk-ALSUDYA7.js";
-import "./chunk-ZSE4QRKE.js";
-export {
-  generatePlan,
-  planId
-};