@clawops/cli 1.3.0 → 1.4.0

package/dist/{chunk-JDN6PLH2.js → chunk-T5EX55GP.js}

@@ -56,17 +56,17 @@ function makeProviderProxy(name) {
     if (resolved) return resolved;
     switch (name) {
       case "gcp": {
-        const mod = await import("./gcp-SKURG3L6.js");
+        const mod = await import("./gcp-BXDTC6EK.js");
         resolved = mod.default;
         return resolved;
       }
       case "aws": {
-        const mod = await import("./aws-KQBWY43W.js");
+        const mod = await import("./aws-FRE2JVAZ.js");
         resolved = mod.default;
         return resolved;
       }
       case "azure": {
-        const mod = await import("./azure-4EJFVJZL.js");
+        const mod = await import("./azure-PVC3AQVC.js");
         resolved = mod.default;
         return resolved;
       }

package/dist/{chunk-ZDPBBYYV.js → chunk-UAA6YOOP.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-YTH4L2GN.js";
 import {
   buildContext
-} from "./chunk-JDN6PLH2.js";
+} from "./chunk-T5EX55GP.js";
 import {
   getConfig
 } from "./chunk-CX5SL5HP.js";
@@ -45,7 +45,7 @@ async function generatePlan(intent, _opts) {
       "plan/apply is not supported for the local provider. Use `clawops up` directly."
     );
   }
-  const { version } = await import("./package-AFUTH62F.js");
+  const { version } = await import("./package-WAJRGBBM.js");
   const config = getConfig();
   const instanceType = intent.instanceType ?? "small";
   const openclawVersion = intent.openclawVersion ?? "latest";

package/dist/{chunk-UDNZUSKA.js → chunk-ZFNPM2WG.js}

@@ -20,7 +20,7 @@ async function execWithFallbackSudo(session, cmd, signal) {
 async function readRemoteConfig(session, signal) {
   const os = await detectOS(session, signal);
   const configPath = configPathForOS(os);
-  const result = await session.exec(`cat ${configPath}`, signal);
+  const result = os === "Darwin" ? await session.exec(`cat ${configPath}`, signal) : await execWithFallbackSudo(session, `cat ${configPath}`, signal);
   if (result.code !== 0) {
     throw new Error(`Cannot read ${configPath}: ${result.stderr}`);
   }

package/dist/{chunk-JCUZU5BH.js → chunk-ZONXY3C6.js}

@@ -10,13 +10,13 @@ import {
 } from "./chunk-BOPSG2LI.js";
 import {
   buildContext
-} from "./chunk-JDN6PLH2.js";
+} from "./chunk-T5EX55GP.js";
 import {
   atomicWriteConfig,
   deepMerge,
   readRemoteConfig,
   restartGateway
-} from "./chunk-UDNZUSKA.js";
+} from "./chunk-ZFNPM2WG.js";
 import {
   UsageError
 } from "./chunk-KGXPLI7W.js";

package/dist/cli.js

@@ -5,12 +5,19 @@ import {
   writeAppConfigs
 } from "./chunk-OIGTOLB3.js";
 import {
-  validateOpenclawConfig
-} from "./chunk-LVIIYY27.js";
-import "./chunk-JDN6PLH2.js";
+  chalk,
+  failure,
+  info,
+  monitor_default,
+  spinner,
+  success,
+  validateOpenclawConfig,
+  warn
+} from "./chunk-JYQZJMD3.js";
+import "./chunk-T5EX55GP.js";
 import "./chunk-ZVOEQCNW.js";
 import "./chunk-4U3LTLWZ.js";
-import "./chunk-UDNZUSKA.js";
+import "./chunk-ZFNPM2WG.js";
 import "./chunk-A2I76FTA.js";
 import {
   getConfig,
@@ -32,27 +39,6 @@ import { generateKeyPairSync } from "crypto";
 import { writeFileSync, mkdirSync, existsSync } from "fs";
 import path from "path";
 import process2 from "process";
-
-// src/output/human.ts
-import chalk from "chalk";
-import ora from "ora";
-function success(msg) {
-  console.log(chalk.green("\u2713") + "  " + msg);
-}
-function failure(msg) {
-  console.error(chalk.red("\u2717") + "  " + msg);
-}
-function warn(msg) {
-  console.warn(chalk.yellow("\u26A0") + "  " + msg);
-}
-function info(msg) {
-  console.log(chalk.blue("\u2139") + "  " + msg);
-}
-function spinner(text) {
-  return ora(text).start();
-}
-
-// src/cli/commands/init.ts
 var SUPPORTED_PROVIDERS = ["gcp", "aws", "azure", "local"];
 var PROVIDER_DEFAULTS = {
   gcp: { region: "us-central1", credEnv: "GOOGLE_APPLICATION_CREDENTIALS", stateScheme: "gs://" },
@@ -217,7 +203,7 @@ var up_default = defineCommand2({
     config: { type: "string", description: "Path to openclaw config overlay JSON (local provider only)" }
   },
   async run({ args }) {
-    const { buildContext } = await import("./context-M2RMDHX6.js");
+    const { buildContext } = await import("./context-PSGEX2D7.js");
     const ctx = buildContext(args);
     const openclawVersion = typeof args["openclaw-version"] === "string" ? args["openclaw-version"] : "stable";
     if (ctx.adapter.name === "local") {
@@ -323,7 +309,7 @@ var up_default = defineCommand2({
 async function applyLocalConfigOverlay(opts) {
   const { connect } = await import("./ssh-IQXNME3D.js");
   const { resolveSecrets } = await import("./secrets-SVZWNAPK.js");
-  const { readRemoteConfig, atomicWriteConfig, restartGateway, deepMerge } = await import("./remote-config-JQ77SRC2.js");
+  const { readRemoteConfig, atomicWriteConfig, restartGateway, deepMerge } = await import("./remote-config-QF5TT7GU.js");
   let overlay;
   try {
     overlay = JSON.parse(readFileSync(opts.configPath, "utf-8"));
@@ -363,7 +349,7 @@ var down_default = defineCommand3({
     "dry-run": { type: "boolean", description: "Show what would be destroyed without destroying" }
   },
   async run({ args }) {
-    const { buildContext } = await import("./context-M2RMDHX6.js");
+    const { buildContext } = await import("./context-PSGEX2D7.js");
     const ctx = buildContext(args);
     if (args["dry-run"]) {
       info(`Dry run \u2014 would destroy stack "${ctx.stackName}"`);
@@ -427,7 +413,7 @@ var status_default = defineCommand4({
     json: { type: "boolean", description: "Emit JSON" }
   },
   async run({ args }) {
-    const { buildContext } = await import("./context-M2RMDHX6.js");
+    const { buildContext } = await import("./context-PSGEX2D7.js");
     const ctx = buildContext(args);
     if (ctx.adapter.name === "local") {
       const state = ctx.localState;
@@ -499,8 +485,8 @@ var plan_default = defineCommand5({
     out: { type: "string", description: "Write plan JSON to this absolute path (default: stdout)" }
   },
   async run({ args }) {
-    const { buildContext } = await import("./context-M2RMDHX6.js");
-    const { generatePlan } = await import("./generate-U7PJ5LRG.js");
+    const { buildContext } = await import("./context-PSGEX2D7.js");
+    const { generatePlan } = await import("./generate-Z7DBMANX.js");
     const ctx = buildContext(args);
     if (ctx.adapter.name === "local") {
       throw new UsageError(
@@ -590,7 +576,7 @@ var apply_default = defineCommand6({
   },
   async run({ args }) {
     const { validatePlan } = await import("./validate-T5M5EHSJ.js");
-    const { applyPlan } = await import("./apply-DLNE2JYZ.js");
+    const { applyPlan } = await import("./apply-5RREMN3L.js");
     const planPath = args._?.[0];
     if (!planPath) {
       throw new UsageError("Usage: clawops apply <plan.json>");
@@ -706,7 +692,7 @@ var destroy_default = defineCommand7({
     "dry-run": { type: "boolean", description: "Show what would be destroyed without destroying" }
   },
   async run({ args }) {
-    const { buildContext } = await import("./context-M2RMDHX6.js");
+    const { buildContext } = await import("./context-PSGEX2D7.js");
     const ctx = buildContext(args);
     if (ctx.adapter.name === "local") {
       throw new UsageError(
@@ -773,7 +759,7 @@ var ssh_default = defineCommand8({
     command: { type: "string", description: "Remote command to run (instead of interactive shell)" }
   },
   async run({ args }) {
-    const { buildContext } = await import("./context-M2RMDHX6.js");
+    const { buildContext } = await import("./context-PSGEX2D7.js");
     const { acquireSession, drainPool } = await import("./pool-FBFHATDG.js");
     const ctx = buildContext(args);
     let conn;
@@ -860,7 +846,7 @@ var tunnel_default = defineCommand9({
     "no-open": { type: "boolean", description: "Do not open browser after tunnel is ready" }
   },
   async run({ args }) {
-    const { buildContext } = await import("./context-M2RMDHX6.js");
+    const { buildContext } = await import("./context-PSGEX2D7.js");
     const { extractBaseOutputs } = await import("./outputs-DJHBY7EE.js");
     const { acquireSession } = await import("./pool-FBFHATDG.js");
     const ctx = buildContext(args);
@@ -928,7 +914,7 @@ var logs_default = defineCommand10({
     since: { type: "string", description: "Show logs since duration (e.g. 5m, 1h)" }
   },
   async run({ args }) {
-    const { buildContext } = await import("./context-M2RMDHX6.js");
+    const { buildContext } = await import("./context-PSGEX2D7.js");
     const { extractBaseOutputs } = await import("./outputs-DJHBY7EE.js");
     const { acquireSession, drainPool } = await import("./pool-FBFHATDG.js");
     const ctx = buildContext(args);
@@ -1045,7 +1031,7 @@ var config_default = defineCommand11({
     "dry-run": { type: "boolean", description: "Show what would change without writing" }
   },
   async run({ args }) {
-    const { buildContext } = await import("./context-M2RMDHX6.js");
+    const { buildContext } = await import("./context-PSGEX2D7.js");
     const { extractBaseOutputs } = await import("./outputs-DJHBY7EE.js");
     const { acquireSession, drainPool } = await import("./pool-FBFHATDG.js");
     const [action, key, value] = args._ ?? [];
@@ -1171,7 +1157,7 @@ var agents_default = defineCommand12({
     json: { type: "boolean", description: "Emit JSON (for list)" }
   },
   async run({ args }) {
-    const { buildContext } = await import("./context-M2RMDHX6.js");
+    const { buildContext } = await import("./context-PSGEX2D7.js");
     const { extractBaseOutputs } = await import("./outputs-DJHBY7EE.js");
     const { acquireSession, drainPool } = await import("./pool-FBFHATDG.js");
     const [action, name] = args._ ?? [];
@@ -1275,7 +1261,7 @@ var gateway_default = defineCommand13({
     json: { type: "boolean", description: "Emit JSON (for status)" }
   },
   async run({ args }) {
-    const { buildContext } = await import("./context-M2RMDHX6.js");
+    const { buildContext } = await import("./context-PSGEX2D7.js");
     const { extractBaseOutputs } = await import("./outputs-DJHBY7EE.js");
     const { acquireSession, drainPool } = await import("./pool-FBFHATDG.js");
     const [action, versionArg] = args._ ?? [];
@@ -1388,7 +1374,7 @@ var backup_default = defineCommand14({
     yes: { type: "boolean", description: "[restore] Skip confirmation prompt" }
   },
   async run({ args }) {
-    const { buildContext } = await import("./context-M2RMDHX6.js");
+    const { buildContext } = await import("./context-PSGEX2D7.js");
     const { acquireSession, drainPool } = await import("./pool-FBFHATDG.js");
     const action = args.action;
     if (action !== "create" && action !== "restore") {
@@ -1500,7 +1486,7 @@ var stacks_default = defineCommand15({
   args: {
     json: { type: "boolean", description: "Emit JSON (for list)" },
     yes: { type: "boolean", description: "Skip confirmation prompt on delete" },
-    force: { type: "boolean", description: "Allow deleting the default stack" }
+    force: { type: "boolean", description: "Skip safety checks (allow deleting default or still-deployed stacks)" }
   },
   async run({ args }) {
     const [action, name] = args._ ?? [];
@@ -1558,6 +1544,31 @@ var stacks_default = defineCommand15({
         `"${name}" is the default stack. Use --force to delete it (clawops will switch the default to another stack).`
       );
     }
+    let isDeployed = false;
+    if (!args.force) {
+      try {
+        const { buildContext } = await import("./context-PSGEX2D7.js");
+        const ctx = buildContext({ stack: name });
+        if (ctx.adapter.name === "local") {
+          isDeployed = !!ctx.localState;
+        } else {
+          const stack = await ctx.getStack();
+          const outputMap = await stack.outputs();
+          const outputs = Object.fromEntries(
+            Object.entries(outputMap).map(([k, v]) => [k, v.value])
+          );
+          isDeployed = !!outputs["publicIp"];
+        }
+      } catch {
+        warn(`Could not verify deployment status for "${name}" \u2014 proceeding anyway.`);
+      }
+    }
+    if (isDeployed) {
+      failure(
+        `Stack "${name}" is still deployed. Run \`clawops down --stack ${name}\` first to destroy cloud resources, or pass --force to remove from registry only.`
+      );
+      process17.exit(1);
+    }
     warn(
       `This removes "${name}" from clawops config only. Cloud resources are NOT destroyed. Run \`clawops destroy --stack ` + name + "` first if you want to remove cloud resources."
     );
@@ -1657,9 +1668,9 @@ var doctor_default = defineCommand16({
       info("Credential checks skipped \u2014 no config");
     } else {
       const { getProvider } = await import("./providers-2OABPW2E.js");
-      await import("./aws-KQBWY43W.js");
-      await import("./gcp-SKURG3L6.js");
-      await import("./azure-4EJFVJZL.js");
+      await import("./aws-FRE2JVAZ.js");
+      await import("./gcp-BXDTC6EK.js");
+      await import("./azure-PVC3AQVC.js");
       await import("./local-DXBEVZ5C.js");
       const checkedProviders = /* @__PURE__ */ new Set();
       for (const [stackName, stackCfg] of Object.entries(config.stacks)) {
@@ -1694,7 +1705,7 @@ var doctor_default = defineCommand16({
         info("Remote health skipped \u2014 no config");
       } else {
         try {
-          const { buildContext } = await import("./context-M2RMDHX6.js");
+          const { buildContext } = await import("./context-PSGEX2D7.js");
           const { extractBaseOutputs } = await import("./outputs-DJHBY7EE.js");
           const { acquireSession, drainPool } = await import("./pool-FBFHATDG.js");
           const ctx = buildContext({ stack: args.stack });
@@ -1802,7 +1813,7 @@ var serveCmd = defineCommand17({
     inspector: { type: "boolean", description: "Enable MCP inspector" }
   },
   async run({ args }) {
-    const { serveMcp } = await import("./server-I62UES5V.js");
+    const { serveMcp } = await import("./server-IWLZJ4EU.js");
     await serveMcp({
       port: args.http ? Number(args.http) : void 0,
       bind: args.bind,
@@ -2303,7 +2314,7 @@ var setup_default = defineCommand18({
         default: false
       }]);
       if (applyNow) {
-        const { applyPlan } = await import("./apply-DLNE2JYZ.js");
+        const { applyPlan } = await import("./apply-5RREMN3L.js");
         const plan = JSON.parse(readFileSync3(outputPath, "utf-8"));
         try {
           await applyPlan(plan, {
@@ -2327,7 +2338,7 @@ async function runLocalDeploy(opts) {
   const { setConfig: setConfig2, getConfig: getConfig2, getConfigDir: getConfigDir2 } = await import("./store-SDUR52Z5.js");
   const { localBootstrap } = await import("./bootstrap-G4UZ2FKH.js");
   const { connect } = await import("./ssh-IQXNME3D.js");
-  const { readRemoteConfig, atomicWriteConfig, restartGateway, deepMerge } = await import("./remote-config-JQ77SRC2.js");
+  const { readRemoteConfig, atomicWriteConfig, restartGateway, deepMerge } = await import("./remote-config-QF5TT7GU.js");
   const { resolveSecrets } = await import("./secrets-SVZWNAPK.js");
   const knownHostsPath = path3.join(getConfigDir2(), "known_hosts");
   const existing = getConfig2();
@@ -3012,8 +3023,8 @@ var rotateCmd = defineCommand19({
     }
     info(`Re-applying config overlay to stack "${targetStack}"\u2026`);
     try {
-      const { buildContext } = await import("./context-M2RMDHX6.js");
-      const { readRemoteConfig, atomicWriteConfig, restartGateway, deepMerge } = await import("./remote-config-JQ77SRC2.js");
+      const { buildContext } = await import("./context-PSGEX2D7.js");
+      const { readRemoteConfig, atomicWriteConfig, restartGateway, deepMerge } = await import("./remote-config-QF5TT7GU.js");
       const { resolveSecrets } = await import("./secrets-SVZWNAPK.js");
       const { acquireSession, drainPool } = await import("./pool-FBFHATDG.js");
       const { localStateToConnectionInfo } = await import("./state-PRBIIN7I.js");
@@ -3142,6 +3153,7 @@ var COMMANDS = [
   ["doctor", "Check Node version, config, SSH key, provider credentials, and Pulumi home"],
   ["mcp", "MCP server operations (mcp serve | mcp install)"],
   ["secret", "Manage secrets (secret list | set | delete | rotate | audit)"],
+  ["monitor", "Live dashboard: gateway health, container status, resource usage, log tail"],
   ["help", "Show this help message"]
 ];
 var GLOBAL_FLAGS = [
@@ -3245,6 +3257,7 @@ var main = defineCommand21({
     mcp: mcp_default,
     setup: setup_default,
     secret: secret_default,
+    monitor: monitor_default,
     help: help_default
   }
 });

package/dist/{context-M2RMDHX6.js → context-PSGEX2D7.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   buildContext
-} from "./chunk-JDN6PLH2.js";
+} from "./chunk-T5EX55GP.js";
 import "./chunk-A2I76FTA.js";
 import "./chunk-CX5SL5HP.js";
 import "./chunk-KGXPLI7W.js";

package/dist/{gcp-SKURG3L6.js → gcp-BXDTC6EK.js}

@@ -1,21 +1,40 @@
 #!/usr/bin/env node
 
 // src/providers/gcp/index.ts
-import process from "process";
+import process2 from "process";
 
 // src/providers/gcp/program.ts
 var GATEWAY_PORT = 18789;
 var SSH_PORT = 22;
 var gcpProgram = async () => {
-  const [pulumi, gcp] = await Promise.all([
+  const [pulumi, gcp, { resolveIngressCidrs, detectEgressIp }] = await Promise.all([
     import("@pulumi/pulumi"),
-    import("@pulumi/gcp")
+    import("@pulumi/gcp"),
+    import("./firewall-YYDOWDDP.js")
   ]);
   const cfg = new pulumi.Config();
   const instanceType = cfg.get("instanceType") ?? "e2-standard-2";
   const region = cfg.get("region") ?? "us-central1";
   const openclawVersion = cfg.get("openclawVersion") ?? "latest";
   const zone = cfg.get("zone") ?? `${region}-a`;
+  const accessMode = cfg.get("accessMode") ?? "restricted";
+  const allowedCidrs = cfg.get("allowedCidrs") ?? "";
+  const sshCidrs = cfg.get("sshCidrs") ?? "";
+  const gatewayCidrs = cfg.get("gatewayCidrs") ?? "";
+  const sshPublicKey = cfg.get("sshPublicKey");
+  if (!sshPublicKey) {
+    throw new Error(
+      'Stack config "sshPublicKey" is required for the GCP adapter. Set it with: pulumi config set --stack <name> sshPublicKey "ssh-ed25519 ..."'
+    );
+  }
+  const detectedIp = accessMode === "auto" ? await detectEgressIp("https://checkip.amazonaws.com") : "";
+  if (accessMode === "open") {
+    process.stderr.write(
+      "[clawops] WARNING: accessMode=open allows 0.0.0.0/0 on SSH and gateway ports. Only use this for development/sandbox stacks.\n"
+    );
+  }
+  const sshIngressCidrs = resolveIngressCidrs(accessMode, allowedCidrs, sshCidrs, detectedIp);
+  const gatewayIngressCidrs = resolveIngressCidrs(accessMode, allowedCidrs, gatewayCidrs, detectedIp);
   const network = new gcp.compute.Network("clawops-network", {
     autoCreateSubnetworks: false,
     description: "clawops managed network"
@@ -25,17 +44,22 @@ var gcpProgram = async () => {
     region,
     network: network.id
   });
-  new gcp.compute.Firewall("clawops-firewall", {
-    network: network.selfLink,
-    allows: [
-      {
-        protocol: "tcp",
-        ports: [String(SSH_PORT), String(GATEWAY_PORT)]
-      }
-    ],
-    sourceRanges: ["0.0.0.0/0"],
-    targetTags: ["clawops"]
-  });
+  if (sshIngressCidrs.length > 0) {
+    new gcp.compute.Firewall("clawops-firewall-ssh", {
+      network: network.selfLink,
+      allows: [{ protocol: "tcp", ports: [String(SSH_PORT)] }],
+      sourceRanges: sshIngressCidrs,
+      targetTags: ["clawops"]
+    });
+  }
+  if (gatewayIngressCidrs.length > 0) {
+    new gcp.compute.Firewall("clawops-firewall-gateway", {
+      network: network.selfLink,
+      allows: [{ protocol: "tcp", ports: [String(GATEWAY_PORT)] }],
+      sourceRanges: gatewayIngressCidrs,
+      targetTags: ["clawops"]
+    });
+  }
   const address = new gcp.compute.Address("clawops-address", { region });
   const instance = new gcp.compute.Instance("clawops-instance", {
     machineType: instanceType,
@@ -60,6 +84,8 @@ var gcpProgram = async () => {
       }
     ],
     metadata: {
+      // GCP guest agent reads 'ssh-keys' and populates /home/<user>/.ssh/authorized_keys
+      "ssh-keys": `clawops:${sshPublicKey}`,
       "startup-script": makeStartupScript(openclawVersion)
     },
     serviceAccount: {
@@ -154,6 +180,11 @@ var gcpAdapter = {
     };
   },
   normalizeInstanceType(alias) {
+    if (alias === "gpu") {
+      throw new Error(
+        "GPU instances are not yet supported on GCP. Use --provider aws (g4dn.xlarge) or --provider azure (Standard_NC6s_v3) for GPU workloads."
+      );
+    }
     const mapped = INSTANCE_TYPE_MAP[alias];
     if (!mapped) throw new Error(`Unknown instance alias: ${alias}`);
     return mapped;
@@ -166,9 +197,10 @@ var gcpAdapter = {
   },
   async validateConfig() {
     const errors = [];
-    const hasKeyFile = Boolean(process.env["GOOGLE_APPLICATION_CREDENTIALS"]);
-    const hasUserCreds = Boolean(process.env["CLOUDSDK_AUTH_ACCESS_TOKEN"]);
-    if (!hasKeyFile && !hasUserCreds) {
+    const hasKeyFile = Boolean(process2.env["GOOGLE_APPLICATION_CREDENTIALS"]);
+    const hasToken = Boolean(process2.env["GOOGLE_OAUTH_ACCESS_TOKEN"]);
+    const hasAdcFile = await checkAdcFile();
+    if (!hasKeyFile && !hasToken && !hasAdcFile) {
       const onGcp = await checkInstanceMetadata();
       if (!onGcp) {
         errors.push(
@@ -179,6 +211,17 @@ var gcpAdapter = {
     return { ok: errors.length === 0, errors };
   }
 };
+async function checkAdcFile() {
+  try {
+    const { accessSync } = await import("fs");
+    const { join } = await import("path");
+    const home = process2.env["HOME"] ?? process2.env["USERPROFILE"] ?? "";
+    accessSync(join(home, ".config", "gcloud", "application_default_credentials.json"));
+    return true;
+  } catch {
+    return false;
+  }
+}
 async function checkInstanceMetadata() {
   try {
     const res = await fetch(

package/dist/{generate-U7PJ5LRG.js → generate-Z7DBMANX.js}

@@ -2,9 +2,9 @@
 import {
   generatePlan,
   planId
-} from "./chunk-ZDPBBYYV.js";
+} from "./chunk-UAA6YOOP.js";
 import "./chunk-YTH4L2GN.js";
-import "./chunk-JDN6PLH2.js";
+import "./chunk-T5EX55GP.js";
 import "./chunk-A2I76FTA.js";
 import "./chunk-CX5SL5HP.js";
 import "./chunk-KGXPLI7W.js";

package/dist/{package-AFUTH62F.js → package-WAJRGBBM.js}

@@ -2,7 +2,7 @@
 
 // package.json
 var name = "@clawops/cli";
-var version = "1.3.0";
+var version = "1.4.0";
 var description = "Deploy and manage self-hosted OpenClaw instances across clouds";
 var type = "module";
 var bin = {
@@ -48,6 +48,7 @@ var dependencies = {
   "@pulumi/docker": "^4.0.0",
   "@pulumi/gcp": "^7.0.0",
   "@pulumi/pulumi": "^3.0.0",
+  "@pulumi/random": "^4.20.0",
   ajv: "^8.0.0",
   "ajv-formats": "^3.0.0",
   chalk: "^5.0.0",

package/dist/{remote-config-JQ77SRC2.js → remote-config-QF5TT7GU.js}

@@ -8,7 +8,7 @@ import {
   deepMerge,
   readRemoteConfig,
   restartGateway
-} from "./chunk-UDNZUSKA.js";
+} from "./chunk-ZFNPM2WG.js";
 export {
   OPENCLAW_CONFIG,
   OPENCLAW_CONFIG_LINUX,