@clawops/cli 1.7.1 → 1.7.2

package/spec/openclaw-versions.yaml

@@ -0,0 +1,67 @@
+# OpenClaw Version Compatibility Matrix
+# Enforced by src/openclaw/versions.ts — `doctor`, `plan`, `up` and `apply` refuse
+# an OpenClaw version outside this range. Update via /openclaw-config skill.
+#
+# This is the clawops 1.x line: it supports the pre-2.0 OpenClaw runtime contract only.
+# OpenClaw 2026.8.1 ("OpenClaw 2.0") changed that contract — state moved into SQLite,
+# config moved to a writable path, and provider plugins became install-gated. Deploying
+# it from this line produces a crash-looping gateway (exit 78). Use clawops 2.x instead.
+
+version: 1
+
+# Minimum and maximum versions clawops supports
+support:
+  min: "2026.4.5"
+  max: "2026.7.1-2"   # last release before the 2.0 runtime contract
+  recommended: "2026.7.1-2"
+
+# Provider-specific quirks discovered through testing
+quirks:
+  - id: aws-bedrock-aws-profile
+    description: |
+      OpenClaw 2026.4.5+ ignores `auth: "aws-sdk"` in openclaw.json's Bedrock
+      provider config. Instead, AWS_PROFILE must be set in the systemd
+      EnvironmentFile so the AWS SDK resolves credentials via IMDS.
+    affected:
+      versions: ">=2026.4.5"
+      providers: [aws]
+      configs: [openclaw.models.providers.amazon-bedrock]
+    workaround: |
+      AWS adapter MUST emit BOTH:
+      1. openclaw.json with `auth: "aws-sdk"` (for older versions, ignored by newer)
+      2. systemd EnvironmentFile with `AWS_PROFILE=default` (or the profile name)
+      Adapter should test the rendered systemd unit includes the EnvironmentFile.
+    discoveredFrom: aws-samples/sample-OpenClaw-on-AWS-with-Bedrock troubleshooting docs
+
+  - id: pnpm-pulumi-hoisting
+    description: |
+      pnpm's default hoisting strategy can place @pulumi/pulumi at a depth that
+      breaks the Automation API's worker spawn. Pin @pulumi/pulumi at the workspace
+      root and add a .npmrc entry: `public-hoist-pattern[]=@pulumi/*`
+    affected:
+      versions: "*"
+      providers: ["*"]
+    workaround: See docs/decisions/0003-pulumi-pnpm.md
+
+# Tested combinations — populated by CI matrix
+tested:
+  - openclawVersion: "2026.4.5"
+    providers: [aws, gcp, local]
+    nodeVersions: ["20.x", "22.x"]
+    lastTestedAt: "2026-04-15"
+
+# Known incompatible combinations
+incompatible:
+  - openclawVersionRange: "<2026.4.5"
+    reason: "Below clawops's declared minimum support. Earlier OpenClaw versions used different config paths and channel registration semantics."
+  - openclawVersionRange: ">=2026.8.1"
+    reason: |
+      OpenClaw 2.0 changed the container runtime contract. Verified against 2026.8.1:
+        - No gateway token on first boot => "Refusing to bind gateway to auto without
+          auth", exit 78, crash-loop under --restart unless-stopped.
+        - Sessions, transcripts and credentials moved into SQLite under the state
+          directory, which this line does not mount => total state loss on restart.
+        - Provider plugins (Bedrock included) are install-gated; a configured but
+          uninstalled provider prevents startup entirely.
+      Use clawops 2.x, which targets OpenClaw >= 2026.9.1.
+    useInstead: "@clawops/cli@2"

package/spec/providers.schema.json

@@ -0,0 +1,120 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://clawops.dev/schemas/provider.json",
+  "title": "ProviderAdapter",
+  "description": "Contract every cloud provider adapter must satisfy. Source of truth for src/providers/types.ts (generated). Per R-meta-1.",
+  "type": "object",
+  "required": ["name", "credentials", "regions", "instanceTypes", "stateBackend", "operations"],
+  "properties": {
+    "name": {
+      "type": "string",
+      "enum": ["aws", "gcp", "azure", "local"],
+      "description": "Lowercase provider id"
+    },
+    "credentials": {
+      "type": "object",
+      "description": "How this provider's credentials are sourced (R6: never in tool args)",
+      "required": ["source"],
+      "properties": {
+        "source": {
+          "enum": ["env", "cli-profile", "file", "instance-metadata"],
+          "description": "Credential resolution mechanism"
+        },
+        "envVars": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Environment variables checked at startup (e.g., AWS_PROFILE)"
+        },
+        "profileName": {
+          "type": "string",
+          "description": "When source=cli-profile, the profile name in the cloud CLI's config"
+        },
+        "filePath": {
+          "type": "string",
+          "description": "When source=file, absolute path to credentials file"
+        }
+      }
+    },
+    "regions": {
+      "type": "array",
+      "items": { "type": "string" },
+      "minItems": 1,
+      "description": "Region IDs supported by this adapter (e.g., us-east-1, us-central1, eastus)"
+    },
+    "instanceTypes": {
+      "type": "array",
+      "minItems": 1,
+      "description": "Mapping from clawops aliases to provider-native instance types",
+      "items": {
+        "type": "object",
+        "required": ["alias", "nativeId", "vcpu", "memoryGB", "arch"],
+        "properties": {
+          "alias": {
+            "enum": ["micro", "small", "medium", "large", "gpu"],
+            "description": "Normalized clawops alias"
+          },
+          "nativeId": {
+            "type": "string",
+            "description": "Provider-native instance type (e.g., t3.small, e2-small, Standard_B2s)"
+          },
+          "vcpu": { "type": "number", "minimum": 1 },
+          "memoryGB": { "type": "number", "minimum": 0.5 },
+          "arch": { "enum": ["x86_64", "arm64"] }
+        }
+      }
+    },
+    "stateBackend": {
+      "type": "object",
+      "required": ["scheme", "urlPattern"],
+      "properties": {
+        "scheme": {
+          "enum": ["s3", "gs", "azblob", "file"],
+          "description": "Pulumi state backend URL scheme"
+        },
+        "urlPattern": {
+          "type": "string",
+          "description": "URL template like 's3://{bucket}/clawops'"
+        }
+      }
+    },
+    "operations": {
+      "type": "object",
+      "required": ["provision", "destroy", "describe"],
+      "description": "Lifecycle operations every adapter must implement",
+      "properties": {
+        "provision": { "$ref": "#/$defs/Operation" },
+        "destroy": { "$ref": "#/$defs/Operation" },
+        "describe": { "$ref": "#/$defs/Operation" },
+        "refresh": { "$ref": "#/$defs/Operation" }
+      }
+    },
+    "supportedOpenclawVersions": {
+      "type": "object",
+      "properties": {
+        "min": { "type": "string", "description": "semver, e.g., 2026.4.5" },
+        "max": { "type": "string" },
+        "tested": { "type": "array", "items": { "type": "string" } }
+      }
+    }
+  },
+  "$defs": {
+    "Operation": {
+      "type": "object",
+      "required": ["estimatedDurationSec", "idempotent", "destructive"],
+      "properties": {
+        "estimatedDurationSec": {
+          "type": "object",
+          "properties": {
+            "min": { "type": "number" },
+            "max": { "type": "number" },
+            "median": { "type": "number" }
+          },
+          "description": "Used by R12 to pick streaming tier (sync / progress / Tasks)"
+        },
+        "idempotent": { "type": "boolean" },
+        "destructive": { "type": "boolean" },
+        "supportsCancellation": { "type": "boolean", "default": true }
+      }
+    }
+  }
+}