@clawops/cli 1.7.4 → 1.7.5

package/README.md

@@ -275,7 +275,7 @@ clawops down --yes          # Destroy local-provider stack
 | `config` | Get/set remote OpenClaw config values (`--dry-run` shows would-write JSON) |
 | `agents` | List or restart OpenClaw agents |
 | `gateway` | Restart the OpenClaw gateway service |
-| `backup` | Create or restore an OpenClaw state backup |
+| `backup` | Create an OpenClaw state backup (`restore` returns in clawops 2.x — see [limitations](docs/limitations.md#backup-and-restore)) |
 | `stacks` | List named stacks and their state |
 | `doctor` | Check Node version, config, SSH key, provider credentials, and Pulumi home |
 | `secret` | Manage secrets: `list`, `set`, `delete`, `rotate`, `audit` |

package/dist/{apply-PZ5IIU7Z.js → apply-GBZ2H2IK.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   applyPlan
-} from "./chunk-5SPESD5N.js";
+} from "./chunk-S76W2ANQ.js";
 import "./chunk-6ZFIFDBJ.js";
 import "./chunk-BOPSG2LI.js";
 import "./chunk-6X45DDGH.js";
-import "./chunk-O3F7OGH7.js";
+import "./chunk-3NTYPOLR.js";
 import "./chunk-P5LKWRPL.js";
 import "./chunk-PVUVI35Y.js";
 import "./chunk-A2I76FTA.js";

package/dist/{chunk-O3F7OGH7.js → chunk-3NTYPOLR.js}

@@ -7,6 +7,16 @@ var CONFIG_PATH_ENV = `-e OPENCLAW_CONFIG_PATH=${CONFIG_MOUNT_PATH}`;
 var ADD_HOST_FLAG = "--add-host=host.docker.internal:host-gateway";
 var PORT_PIN = `--port ${GATEWAY_PORT}`;
 var COMMON_RUN_FLAGS = `${CONFIG_PATH_ENV} ${ADD_HOST_FLAG}`;
+var ENV_FILE_PATH = "/home/clawops/openclaw.env";
+function gatewayRunCommand(opts) {
+  const { image, configPath, envFilePath = ENV_FILE_PATH, pathPrefix = "" } = opts;
+  const envFileArg = `$([ -s ${envFilePath} ] && echo --env-file ${envFilePath})`;
+  return pathPrefix + [
+    "docker stop openclaw 2>/dev/null || true",
+    "docker rm   openclaw 2>/dev/null || true",
+    `docker run -d --name openclaw --restart unless-stopped -p ${GATEWAY_PORT}:${GATEWAY_PORT} ${COMMON_RUN_FLAGS} ${envFileArg} -v ${configPath}:${CONFIG_MOUNT_PATH}:ro ${image} node openclaw.mjs gateway run --allow-unconfigured ${PORT_PIN}`
+  ].join(" && ");
+}
 
 // src/plan/remote-config.ts
 var OPENCLAW_CONFIG_LINUX = "/home/clawops/openclaw.json";
@@ -69,22 +79,11 @@ async function restartGateway(session, signal) {
   const imgCmd = `${pathPrefix}docker inspect openclaw --format '{{.Config.Image}}' 2>/dev/null || echo 'ghcr.io/openclaw/openclaw:latest'`;
   const imgResult = os === "Darwin" ? await session.exec(imgCmd, signal) : await execWithFallbackSudo(session, imgCmd, signal);
   const image = imgResult.stdout.trim();
-  const cfgResult = await session.exec(`cat ${configPath}`, signal);
-  let gatewayCmd = `node openclaw.mjs gateway run --allow-unconfigured ${PORT_PIN}`;
-  try {
-    const cfg = JSON.parse(cfgResult.stdout);
-    const token = cfg?.["gateway"]?.["auth"];
-    const tokenVal = token?.["token"];
-    if (tokenVal) {
-      gatewayCmd = `node openclaw.mjs gateway run --allow-unconfigured ${PORT_PIN} --token '${tokenVal}'`;
-    }
-  } catch {
-  }
-  const restartCmd = pathPrefix + [
-    "docker stop openclaw 2>/dev/null || true",
-    "docker rm openclaw 2>/dev/null || true",
-    `docker run -d --name openclaw --restart unless-stopped -p ${GATEWAY_PORT}:${GATEWAY_PORT} ${COMMON_RUN_FLAGS} -v ${configPath}:/app/config.json:ro ${image} ${gatewayCmd}`
-  ].join(" && ");
+  const restartCmd = gatewayRunCommand({
+    image,
+    configPath,
+    pathPrefix
+  });
   const result = os === "Darwin" ? await session.exec(restartCmd, signal) : await execWithFallbackSudo(session, restartCmd, signal);
   if (result.code !== 0) {
     throw new Error(`Gateway restart failed: ${result.stderr}`);
@@ -122,6 +121,7 @@ function deepMerge(base, overlay) {
 }
 
 export {
+  gatewayRunCommand,
   OPENCLAW_CONFIG_LINUX,
   OPENCLAW_CONFIG_MACOS,
   OPENCLAW_CONFIG,

package/dist/{chunk-OPUM3FDW.js → chunk-AWZCTBV6.js}

@@ -45,7 +45,7 @@ async function generatePlan(intent, _opts) {
       "plan/apply is not supported for the local provider. Use `clawops up` directly."
     );
   }
-  const { version } = await import("./package-3RCGT5UR.js");
+  const { version } = await import("./package-6EAENRST.js");
   const config = getConfig();
   const instanceType = intent.instanceType ?? "small";
   const { guardOpenclawVersion, defaultOpenclawVersion } = await import("./version-guard-MZAO4KHS.js");

package/dist/{chunk-5SPESD5N.js → chunk-S76W2ANQ.js}

@@ -13,7 +13,7 @@ import {
   deepMerge,
   readRemoteConfig,
   restartGateway
-} from "./chunk-O3F7OGH7.js";
+} from "./chunk-3NTYPOLR.js";
 import {
   buildContext
 } from "./chunk-P5LKWRPL.js";

package/dist/{chunk-FSUWPL7Q.js → chunk-UW3XOER4.js}

@@ -7,7 +7,7 @@ import {
   OPENCLAW_CONFIG,
   atomicWriteConfig,
   restartGateway
-} from "./chunk-O3F7OGH7.js";
+} from "./chunk-3NTYPOLR.js";
 import {
   buildContext
 } from "./chunk-P5LKWRPL.js";

package/dist/cli.js

@@ -2,14 +2,16 @@
 import {
   monitor_default,
   validateOpenclawConfig
-} from "./chunk-FSUWPL7Q.js";
+} from "./chunk-UW3XOER4.js";
 import {
   MCP_APPS,
   buildMcpEntry,
   writeAppConfigs
 } from "./chunk-OIGTOLB3.js";
 import "./chunk-DQDAWNGB.js";
-import "./chunk-O3F7OGH7.js";
+import {
+  gatewayRunCommand
+} from "./chunk-3NTYPOLR.js";
 import "./chunk-P5LKWRPL.js";
 import {
   resolveSpecDir
@@ -318,7 +320,7 @@ var up_default = defineCommand2({
 async function applyLocalConfigOverlay(opts) {
   const { connect } = await import("./ssh-CNJNLM3E.js");
   const { resolveSecrets } = await import("./secrets-SVZWNAPK.js");
-  const { readRemoteConfig, atomicWriteConfig, restartGateway, deepMerge } = await import("./remote-config-PFB66RPY.js");
+  const { readRemoteConfig, atomicWriteConfig, restartGateway, deepMerge } = await import("./remote-config-MCX7UWRS.js");
   let overlay;
   try {
     overlay = JSON.parse(readFileSync(opts.configPath, "utf-8"));
@@ -495,7 +497,7 @@ var plan_default = defineCommand5({
   },
   async run({ args }) {
     const { buildContext } = await import("./context-5LCUG2QR.js");
-    const { generatePlan } = await import("./generate-DYNAQRD7.js");
+    const { generatePlan } = await import("./generate-EEJDYZVY.js");
     const ctx = buildContext(args);
     if (ctx.adapter.name === "local") {
       throw new UsageError(
@@ -585,7 +587,7 @@ var apply_default = defineCommand6({
   },
   async run({ args }) {
     const { validatePlan } = await import("./validate-CFQ4FH2T.js");
-    const { applyPlan } = await import("./apply-PZ5IIU7Z.js");
+    const { applyPlan } = await import("./apply-GBZ2H2IK.js");
     const planPath = args._?.[0];
     if (!planPath) {
       throw new UsageError("Usage: clawops apply <plan.json>");
@@ -996,11 +998,7 @@ import process13 from "process";
 var OPENCLAW_CONFIG = "/home/clawops/openclaw.json";
 var OPENCLAW_TMP = "/tmp/clawops-config.json.tmp";
 function dockerRunCmd(image) {
-  return [
-    "docker stop openclaw 2>/dev/null || true",
-    "docker rm   openclaw 2>/dev/null || true",
-    `docker run -d --name openclaw --restart unless-stopped -p 18789:18789 -e OPENCLAW_CONFIG_PATH=/app/config.json --add-host=host.docker.internal:host-gateway -v ${OPENCLAW_CONFIG}:/app/config.json:ro ${image}`
-  ].join(" && ");
+  return gatewayRunCommand({ image, configPath: OPENCLAW_CONFIG });
 }
 function getPath(obj, dotKey) {
   return dotKey.split(".").reduce((cur, k) => {
@@ -1257,7 +1255,10 @@ import { defineCommand as defineCommand13 } from "citty";
 import process15 from "process";
 var OPENCLAW_CONFIG2 = "/home/clawops/openclaw.json";
 function dockerRunCmd2(version) {
-  return `docker stop openclaw 2>/dev/null || true && docker rm   openclaw 2>/dev/null || true && docker run -d --name openclaw --restart unless-stopped -p 18789:18789 -e OPENCLAW_CONFIG_PATH=/app/config.json --add-host=host.docker.internal:host-gateway -v ${OPENCLAW_CONFIG2}:/app/config.json:ro ghcr.io/openclaw/openclaw:${version}`;
+  return gatewayRunCommand({
+    image: `ghcr.io/openclaw/openclaw:${version}`,
+    configPath: OPENCLAW_CONFIG2
+  });
 }
 var gateway_default = defineCommand13({
   meta: {
@@ -1367,18 +1368,18 @@ var gateway_default = defineCommand13({
 
 // src/cli/commands/backup.ts
 import { defineCommand as defineCommand14 } from "citty";
-import { createWriteStream, createReadStream } from "fs";
+import { createWriteStream } from "fs";
 import { pipeline } from "stream/promises";
 import process16 from "process";
 var backup_default = defineCommand14({
   meta: {
     name: "backup",
-    description: "Create or restore an OpenClaw backup (create | restore)"
+    description: "Create an OpenClaw backup (restore is unavailable on this release line)"
   },
   args: {
-    action: { type: "positional", description: "Action: create | restore", required: true },
+    action: { type: "positional", description: "Action: create (restore returns in clawops 2.x)", required: true },
     out: { type: "string", description: "[create] Local path to write the backup archive" },
-    file: { type: "string", description: "[restore] Local backup archive to restore from" },
+    file: { type: "string", description: "[restore] Local backup archive (restore is unavailable)" },
     stack: { type: "string", description: "Target stack name" },
     yes: { type: "boolean", description: "[restore] Skip confirmation prompt" }
   },
@@ -1438,44 +1439,32 @@ var backup_default = defineCommand14({
         const outPath = typeof args.out === "string" ? args.out : `openclaw-backup-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.tar.gz`;
         info(`Writing backup to ${outPath}...`);
         const spin = spinner("Creating backup on remote host...");
+        const remoteArchive = "/tmp/clawops-backup.tar.gz";
+        const createResult = await session.exec(
+          `docker exec openclaw sh -lc 'rm -f ${remoteArchive} && openclaw backup create --output ${remoteArchive} --verify --json'`,
+          abortController.signal
+        );
+        if (createResult.code !== 0) {
+          spin.stop();
+          throw new Error(`Backup failed on the remote host: ${createResult.stderr.slice(0, 300)}`);
+        }
         const backupStream = await session.stream(
-          "docker exec openclaw openclaw-ctl backup create --stdout",
+          `docker exec openclaw cat ${remoteArchive}`,
           abortController.signal
         );
         spin.stop();
         const fileStream = createWriteStream(outPath);
         await pipeline(backupStream, fileStream);
+        await session.exec(
+          `docker exec openclaw rm -f ${remoteArchive}`,
+          abortController.signal
+        );
         success(`Backup saved to ${outPath}`);
+        info("The archive contains credentials \u2014 store it accordingly.");
       } else {
-        const filePath = typeof args.file === "string" ? args.file : null;
-        if (!filePath) {
-          throw new UsageError("--file is required for backup restore");
-        }
-        if (!args.yes) {
-          const { createInterface: createInterface3 } = await import("readline/promises");
-          const rl = createInterface3({ input: process16.stdin, output: process16.stdout });
-          try {
-            const answer = await rl.question(
-              `Restore backup from "${filePath}" to stack "${ctx.stackName}"? This will overwrite existing data. (y/N) `
-            );
-            if (answer.trim().toLowerCase() !== "y") {
-              info("Restore cancelled.");
-              return;
-            }
-          } finally {
-            rl.close();
-          }
-        }
-        info(`Restoring from ${filePath}...`);
-        const spin = spinner("Transferring and restoring backup...");
-        const restoreStream = await session.stream(
-          "docker exec -i openclaw openclaw-ctl backup restore --stdin",
-          abortController.signal
+        throw new UsageError(
+          "Restore is not available on this clawops release.\nOpenClaw up to 2026.7.1-2 provides `backup create` and `backup verify` only; restore arrived in OpenClaw 2.0 and will be supported by clawops 2.x.\nTo recover manually: copy the archive to the host, then extract it into the gateway container with the gateway stopped."
         );
-        const fileStream = createReadStream(filePath);
-        await pipeline(fileStream, restoreStream);
-        spin.stop();
-        success("Backup restored successfully");
       }
     } finally {
       release();
@@ -1907,7 +1896,7 @@ var serveCmd = defineCommand17({
     inspector: { type: "boolean", description: "Enable MCP inspector" }
   },
   async run({ args }) {
-    const { serveMcp } = await import("./server-7TEMRTRY.js");
+    const { serveMcp } = await import("./server-OJJ7ICVA.js");
     await serveMcp({
       port: args.http ? Number(args.http) : void 0,
       bind: args.bind,
@@ -1985,7 +1974,7 @@ var wireCmd = defineCommand17({
     const { buildContext } = await import("./context-5LCUG2QR.js");
     const { acquireSession, drainPool } = await import("./pool-QGFQRMGU.js");
     const { extractBaseOutputs } = await import("./outputs-DJHBY7EE.js");
-    const { wireGatewayMcp } = await import("./mcp-wire-SLL4TLSC.js");
+    const { wireGatewayMcp } = await import("./mcp-wire-WDEN4BOT.js");
     const ac = new AbortController();
     process19.on("SIGINT", () => {
       ac.abort();
@@ -2506,7 +2495,7 @@ var setup_default = defineCommand18({
         default: false
       }]);
       if (applyNow) {
-        const { applyPlan } = await import("./apply-PZ5IIU7Z.js");
+        const { applyPlan } = await import("./apply-GBZ2H2IK.js");
         const plan = JSON.parse(readFileSync3(outputPath, "utf-8"));
         try {
           await applyPlan(plan, {
@@ -2537,7 +2526,7 @@ async function runLocalDeploy(opts) {
   const { setConfig: setConfig2, getConfig: getConfig2, getConfigDir: getConfigDir2 } = await import("./store-SDUR52Z5.js");
   const { localBootstrap } = await import("./bootstrap-HL4DNUNG.js");
   const { connect } = await import("./ssh-CNJNLM3E.js");
-  const { readRemoteConfig, atomicWriteConfig, restartGateway, deepMerge } = await import("./remote-config-PFB66RPY.js");
+  const { readRemoteConfig, atomicWriteConfig, restartGateway, deepMerge } = await import("./remote-config-MCX7UWRS.js");
   const { resolveSecrets } = await import("./secrets-SVZWNAPK.js");
   const knownHostsPath = path3.join(getConfigDir2(), "known_hosts");
   const existing = getConfig2();
@@ -3009,7 +2998,7 @@ async function maybeWireGatewayMcp(opts) {
   if (!wireGateway) return;
   const { connect } = await import("./ssh-CNJNLM3E.js");
   const { getConfigDir: getConfigDir2 } = await import("./store-SDUR52Z5.js");
-  const { wireGatewayMcp } = await import("./mcp-wire-SLL4TLSC.js");
+  const { wireGatewayMcp } = await import("./mcp-wire-WDEN4BOT.js");
   const knownHostsPath = path3.join(getConfigDir2(), "known_hosts");
   const spin = spinner("Wiring gateway MCP client...");
   const session = await connect({
@@ -3341,7 +3330,7 @@ var rotateCmd = defineCommand19({
     info(`Re-applying config overlay to stack "${targetStack}"\u2026`);
     try {
       const { buildContext } = await import("./context-5LCUG2QR.js");
-      const { readRemoteConfig, atomicWriteConfig, restartGateway, deepMerge } = await import("./remote-config-PFB66RPY.js");
+      const { readRemoteConfig, atomicWriteConfig, restartGateway, deepMerge } = await import("./remote-config-MCX7UWRS.js");
       const { resolveSecrets } = await import("./secrets-SVZWNAPK.js");
       const { acquireSession, drainPool } = await import("./pool-QGFQRMGU.js");
       const { localStateToConnectionInfo } = await import("./state-PRBIIN7I.js");
@@ -3527,7 +3516,7 @@ import { accessSync as accessSync2, constants as constants2 } from "fs";
 import { execSync as execSync2 } from "child_process";
 var ISSUES_URL = `${REPO_URL}/issues/new`;
 var BODY_CAP = 2e3;
-var VERSION = true ? "1.7.4" : "dev";
+var VERSION = true ? "1.7.5" : "dev";
 async function collectContext() {
   const nodeVersion = process22.version;
   const os3 = `${process22.platform} ${process22.arch}`;
@@ -3767,7 +3756,7 @@ function handleError(err) {
 }
 
 // src/cli/index.ts
-var CLI_VERSION = true ? "1.7.4" : "dev";
+var CLI_VERSION = true ? "1.7.5" : "dev";
 var main = defineCommand23({
   meta: {
     name: "clawops",

package/dist/{generate-DYNAQRD7.js → generate-EEJDYZVY.js}

@@ -2,7 +2,7 @@
 import {
   generatePlan,
   planId
-} from "./chunk-OPUM3FDW.js";
+} from "./chunk-AWZCTBV6.js";
 import "./chunk-6X45DDGH.js";
 import "./chunk-P5LKWRPL.js";
 import "./chunk-PVUVI35Y.js";

package/dist/{mcp-wire-SLL4TLSC.js → mcp-wire-WDEN4BOT.js}

@@ -4,7 +4,7 @@ import {
   deepMerge,
   readRemoteConfig,
   restartGateway
-} from "./chunk-O3F7OGH7.js";
+} from "./chunk-3NTYPOLR.js";
 
 // src/cli/mcp-wire.ts
 var GATEWAY_MCP_MIN_VERSION = "2026.4";

package/dist/{package-3RCGT5UR.js → package-6EAENRST.js}

@@ -2,7 +2,7 @@
 
 // package.json
 var name = "@clawops/cli";
-var version = "1.7.4";
+var version = "1.7.5";
 var description = "Deploy and manage self-hosted OpenClaw instances across clouds";
 var type = "module";
 var bin = {

package/dist/{remote-config-PFB66RPY.js → remote-config-MCX7UWRS.js}

@@ -9,7 +9,7 @@ import {
   normaliseGatewayPort,
   readRemoteConfig,
   restartGateway
-} from "./chunk-O3F7OGH7.js";
+} from "./chunk-3NTYPOLR.js";
 export {
   OPENCLAW_CONFIG,
   OPENCLAW_CONFIG_LINUX,

package/dist/{server-7TEMRTRY.js → server-OJJ7ICVA.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   applyPlan
-} from "./chunk-5SPESD5N.js";
+} from "./chunk-S76W2ANQ.js";
 import "./chunk-6ZFIFDBJ.js";
 import "./chunk-BOPSG2LI.js";
 import {
@@ -9,7 +9,7 @@ import {
 } from "./chunk-3QJBNAHW.js";
 import {
   generatePlan
-} from "./chunk-OPUM3FDW.js";
+} from "./chunk-AWZCTBV6.js";
 import {
   validatePlan
 } from "./chunk-6X45DDGH.js";
@@ -23,12 +23,12 @@ import {
   handleConfigValidate,
   okText,
   resolveConn
-} from "./chunk-FSUWPL7Q.js";
+} from "./chunk-UW3XOER4.js";
 import {
   acquireSession,
   drainPool
 } from "./chunk-DQDAWNGB.js";
-import "./chunk-O3F7OGH7.js";
+import "./chunk-3NTYPOLR.js";
 import {
   buildContext
 } from "./chunk-P5LKWRPL.js";
@@ -476,7 +476,7 @@ async function handleAgentsList(input, _server) {
   const conn = await resolveConn(ctx);
   const { session, release } = await acquireSession(conn);
   try {
-    const result = await session.exec('docker exec openclaw openclaw-ctl agents list --json 2>&1 || echo "[]"');
+    const result = await session.exec('docker exec openclaw openclaw agents list --json 2>&1 || echo "[]"');
     return okText(result.stdout.trim());
   } finally {
     release();
@@ -500,7 +500,7 @@ async function handleAgentsRestart(input, server) {
   const { session, release } = await acquireSession(conn);
   try {
     const result = await session.exec(
-      `docker exec openclaw openclaw-ctl agents restart ${input.agentId} 2>&1`
+      `docker exec openclaw openclaw agents restart ${input.agentId} 2>&1`
     );
     if (result.code !== 0) {
       return errText(`Failed to restart agent: ${result.stderr || result.stdout}`);
@@ -1307,7 +1307,7 @@ If none of the above resolves the issue:
 
 // src/mcp/server.ts
 async function serveMcp(opts) {
-  const { version } = await import("./package-3RCGT5UR.js");
+  const { version } = await import("./package-6EAENRST.js");
   const server = new McpServer({ name: "clawops", version });
   registerTools(server, opts);
   registerResources(server);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawops/cli",
-  "version": "1.7.4",
+  "version": "1.7.5",
   "description": "Deploy and manage self-hosted OpenClaw instances across clouds",
   "type": "module",
   "bin": {