@clawops/cli 1.7.9 → 2.0.1

package/dist/chunk-P5LKWRPL.js

@@ -1,114 +0,0 @@
-#!/usr/bin/env node
-import {
-  readLocalState
-} from "./chunk-A2I76FTA.js";
-import {
-  getConfigDir,
-  requireConfig
-} from "./chunk-CX5SL5HP.js";
-import {
-  UsageError
-} from "./chunk-KGXPLI7W.js";
-
-// src/cli/context.ts
-function buildContext(args) {
-  const config = requireConfig();
-  const stackName = typeof args.stack === "string" ? args.stack : config.defaults.stack;
-  const providerName = typeof args.provider === "string" ? args.provider : config.stacks[stackName]?.provider ?? config.defaults.provider;
-  const adapter = loadProvider(providerName);
-  const localState = providerName === "local" ? readLocalState(stackName) : void 0;
-  let stackCache = null;
-  return {
-    config,
-    adapter,
-    stackName,
-    localState,
-    async getStack() {
-      if (providerName === "local") {
-        throw new UsageError(
-          "The local provider does not use Pulumi stacks. Use `clawops up` to bootstrap the host instead."
-        );
-      }
-      if (stackCache) return stackCache;
-      const stackConfig = config.stacks[stackName];
-      if (!stackConfig) {
-        throw new UsageError(
-          `Stack "${stackName}" not found in config. Run \`clawops init\` or use \`--stack\` to specify a different stack.`
-        );
-      }
-      const { getOrCreateStack } = await import("./automation-RULUSJBW.js");
-      stackCache = await getOrCreateStack({
-        stack: stackName,
-        stateUrl: stackConfig.stateUrl,
-        program: adapter.program,
-        configDir: getConfigDir()
-      });
-      return stackCache;
-    }
-  };
-}
-function loadProvider(name) {
-  return makeProviderProxy(name);
-}
-function makeProviderProxy(name) {
-  let resolved = null;
-  const resolve = async () => {
-    if (resolved) return resolved;
-    switch (name) {
-      case "gcp": {
-        const mod = await import("./gcp-UG6AWPIZ.js");
-        resolved = mod.default;
-        return resolved;
-      }
-      case "aws": {
-        const mod = await import("./aws-L4RR2LSE.js");
-        resolved = mod.default;
-        return resolved;
-      }
-      case "azure": {
-        const mod = await import("./azure-7OXQENQL.js");
-        resolved = mod.default;
-        return resolved;
-      }
-      case "local": {
-        const mod = await import("./local-DXBEVZ5C.js");
-        resolved = mod.default;
-        return resolved;
-      }
-      default:
-        throw new UsageError(
-          `Provider "${name}" is not yet supported. Supported providers: gcp, aws, azure, local`
-        );
-    }
-  };
-  return {
-    name,
-    get program() {
-      return async () => {
-        const adapter = await resolve();
-        return adapter.program();
-      };
-    },
-    getConnectionInfo: (outputs) => {
-      if (!resolved) throw new UsageError("Provider not yet loaded. Call getStack() first.");
-      return resolved.getConnectionInfo(outputs);
-    },
-    normalizeInstanceType: (alias) => {
-      if (!resolved) throw new UsageError("Provider not yet loaded. Call getStack() first.");
-      return resolved.normalizeInstanceType(alias);
-    },
-    defaultRegion: () => {
-      if (!resolved) throw new UsageError("Provider not yet loaded. Call getStack() first.");
-      return resolved.defaultRegion();
-    },
-    stateBackendUrl: (bucket) => {
-      if (!resolved) throw new UsageError("Provider not yet loaded. Call getStack() first.");
-      return resolved.stateBackendUrl(bucket);
-    },
-    validateConfig: () => resolve().then((a) => a.validateConfig())
-  };
-}
-
-export {
-  buildContext
-};

package/dist/chunk-SEZMVVAS.js

@@ -1,156 +0,0 @@
-#!/usr/bin/env node
-import {
-  err,
-  ok
-} from "./chunk-EI7CQQ7D.js";
-
-// src/openclaw/run-flags.ts
-var CONFIG_MOUNT_PATH = "/app/config.json";
-var GATEWAY_PORT = 18789;
-var CONFIG_PATH_ENV = `-e OPENCLAW_CONFIG_PATH=${CONFIG_MOUNT_PATH}`;
-var ADD_HOST_FLAG = "--add-host=host.docker.internal:host-gateway";
-var PORT_PIN = `--port ${GATEWAY_PORT}`;
-var COMMON_RUN_FLAGS = `${CONFIG_PATH_ENV} ${ADD_HOST_FLAG}`;
-var ENV_FILE_PATH = "/home/clawops/openclaw.env";
-var IMAGE_INSPECT_CMD = `docker inspect openclaw --format '{{.Config.Image}}'`;
-function imageForRestart(inspectStdout) {
-  const image = inspectStdout.trim();
-  if (!image || image.includes("Error") || !image.includes(":")) {
-    return err(
-      "No running OpenClaw container found, so there is no image version to reuse. Deploy one with `clawops up --openclaw-version <version>`. clawops does not fall back to `latest` or `stable` here: both now point at OpenClaw 2.0, which this release line does not support."
-    );
-  }
-  return ok(image);
-}
-function versionOf(image) {
-  return image.split(":")[1] ?? "unknown";
-}
-function gatewayRunCommand(opts) {
-  const { image, configPath, envFilePath = ENV_FILE_PATH, pathPrefix = "" } = opts;
-  const envFileArg = `$([ -s ${envFilePath} ] && echo --env-file ${envFilePath})`;
-  return pathPrefix + [
-    "docker stop openclaw 2>/dev/null || true",
-    "docker rm   openclaw 2>/dev/null || true",
-    `docker run -d --name openclaw --restart unless-stopped -p ${GATEWAY_PORT}:${GATEWAY_PORT} ${COMMON_RUN_FLAGS} ${envFileArg} -v ${configPath}:${CONFIG_MOUNT_PATH}:ro ${image} node openclaw.mjs gateway run --allow-unconfigured ${PORT_PIN}`
-  ].join(" && ");
-}
-
-// src/plan/remote-config.ts
-var OPENCLAW_CONFIG_LINUX = "/home/clawops/openclaw.json";
-var OPENCLAW_CONFIG_MACOS = "~/.config/openclaw/config.json";
-var OPENCLAW_CONFIG = OPENCLAW_CONFIG_LINUX;
-var OPENCLAW_TMP = "/tmp/clawops-config.json.tmp";
-async function detectOS(session, signal) {
-  const result = await session.exec("uname -s", signal);
-  return result.stdout.trim() === "Darwin" ? "Darwin" : "Linux";
-}
-function configPathForOS(os) {
-  return os === "Darwin" ? OPENCLAW_CONFIG_MACOS : OPENCLAW_CONFIG_LINUX;
-}
-async function execWithFallbackSudo(session, cmd, signal) {
-  const result = await session.exec(cmd, signal);
-  if (result.code === 0) return result;
-  return session.exec(`sudo -n bash -c "${cmd}"`, signal);
-}
-async function readRemoteConfig(session, signal) {
-  const os = await detectOS(session, signal);
-  const configPath = configPathForOS(os);
-  const result = os === "Darwin" ? await session.exec(`cat ${configPath}`, signal) : await execWithFallbackSudo(session, `cat ${configPath}`, signal);
-  if (result.code !== 0) {
-    throw new Error(`Cannot read ${configPath}: ${result.stderr}`);
-  }
-  try {
-    return JSON.parse(result.stdout);
-  } catch {
-    throw new Error(`Cannot parse ${configPath}: invalid JSON`);
-  }
-}
-function normaliseGatewayPort(cfg) {
-  const gateway = cfg["gateway"];
-  if (!gateway || typeof gateway !== "object" || Array.isArray(gateway)) return void 0;
-  const g = gateway;
-  const current = g["port"];
-  if (typeof current === "number" && current !== GATEWAY_PORT) {
-    g["port"] = GATEWAY_PORT;
-    return current;
-  }
-  if (current === void 0) g["port"] = GATEWAY_PORT;
-  return void 0;
-}
-async function atomicWriteConfig(session, cfg, signal) {
-  const os = await detectOS(session, signal);
-  const configPath = configPathForOS(os);
-  const json = JSON.stringify(cfg, null, 2);
-  const b64 = Buffer.from(json, "utf-8").toString("base64");
-  const chown = os === "Linux" ? ` && chown clawops:clawops ${configPath}` : "";
-  const cmd = `echo '${b64}' | base64 -d > ${OPENCLAW_TMP} && mv ${OPENCLAW_TMP} ${configPath}` + chown;
-  const result = os === "Darwin" ? await session.exec(cmd, signal) : await execWithFallbackSudo(session, cmd, signal);
-  if (result.code !== 0) {
-    throw new Error(`Failed to write config: ${result.stderr}`);
-  }
-}
-async function restartGateway(session, signal) {
-  const os = await detectOS(session, signal);
-  const configPath = configPathForOS(os);
-  const pathPrefix = os === "Darwin" ? 'export PATH="/usr/local/bin:/opt/homebrew/bin:/Applications/Docker.app/Contents/Resources/bin:$PATH" && ' : "";
-  const imgCmd = `${pathPrefix}${IMAGE_INSPECT_CMD}`;
-  const imgResult = os === "Darwin" ? await session.exec(imgCmd, signal) : await execWithFallbackSudo(session, imgCmd, signal);
-  const resolved = imageForRestart(imgResult.stdout);
-  if (!resolved.ok) throw new Error(resolved.error);
-  const image = resolved.value;
-  const restartCmd = gatewayRunCommand({
-    image,
-    configPath,
-    pathPrefix
-  });
-  const result = os === "Darwin" ? await session.exec(restartCmd, signal) : await execWithFallbackSudo(session, restartCmd, signal);
-  if (result.code !== 0) {
-    throw new Error(`Gateway restart failed: ${result.stderr}`);
-  }
-  const healthy = await waitForGateway(session, pathPrefix, signal);
-  if (!healthy) {
-    throw new Error(
-      `Gateway restarted but did not become healthy on port ${GATEWAY_PORT}. The previous container has already been replaced; inspect it with \`docker logs openclaw\`. If the newly-applied config is at fault, revert it and restart \u2014 before v1.7.2 this config was never applied, so a value that has sat unused may now be taking effect.`
-    );
-  }
-}
-async function waitForGateway(session, pathPrefix, signal, attempts = 15) {
-  const probe = `${pathPrefix}curl -fsS -m 3 http://127.0.0.1:${GATEWAY_PORT}/healthz >/dev/null 2>&1 && echo ok || echo waiting`;
-  for (let i = 0; i < attempts; i++) {
-    if (signal?.aborted) return false;
-    const r = await session.exec(probe, signal);
-    if (r.stdout.trim().endsWith("ok")) return true;
-    await new Promise((resolve) => setTimeout(resolve, 2e3));
-  }
-  return false;
-}
-function deepMerge(base, overlay) {
-  const result = { ...base };
-  for (const [key, val] of Object.entries(overlay)) {
-    if (val !== null && typeof val === "object" && !Array.isArray(val) && typeof result[key] === "object" && result[key] !== null && !Array.isArray(result[key])) {
-      result[key] = deepMerge(
-        result[key],
-        val
-      );
-    } else {
-      result[key] = val;
-    }
-  }
-  return result;
-}
-
-export {
-  IMAGE_INSPECT_CMD,
-  imageForRestart,
-  versionOf,
-  gatewayRunCommand,
-  OPENCLAW_CONFIG_LINUX,
-  OPENCLAW_CONFIG_MACOS,
-  OPENCLAW_CONFIG,
-  OPENCLAW_TMP,
-  readRemoteConfig,
-  normaliseGatewayPort,
-  atomicWriteConfig,
-  restartGateway,
-  deepMerge
-};

package/dist/context-5LCUG2QR.js

@@ -1,10 +0,0 @@
-#!/usr/bin/env node
-import {
-  buildContext
-} from "./chunk-P5LKWRPL.js";
-import "./chunk-A2I76FTA.js";
-import "./chunk-CX5SL5HP.js";
-import "./chunk-KGXPLI7W.js";
-export {
-  buildContext
-};

package/dist/gcp-UG6AWPIZ.js

@@ -1,193 +0,0 @@
-#!/usr/bin/env node
-import {
-  makeStartupScript
-} from "./chunk-C5X375RO.js";
-
-// src/providers/gcp/index.ts
-import process2 from "process";
-
-// src/providers/gcp/program.ts
-var GATEWAY_PORT = 18789;
-var SSH_PORT = 22;
-var gcpProgram = async () => {
-  const [pulumi, gcp, { resolveIngressCidrs, detectEgressIp }] = await Promise.all([
-    import("@pulumi/pulumi"),
-    import("@pulumi/gcp"),
-    import("./firewall-XQGO7HWK.js")
-  ]);
-  const cfg = new pulumi.Config();
-  const instanceType = cfg.get("instanceType") ?? "e2-standard-2";
-  const region = cfg.get("region") ?? "us-central1";
-  const openclawVersion = cfg.get("openclawVersion") ?? "latest";
-  const zone = cfg.get("zone") ?? `${region}-a`;
-  const accessMode = cfg.get("accessMode") ?? "restricted";
-  const allowedCidrs = cfg.get("allowedCidrs") ?? "";
-  const sshCidrs = cfg.get("sshCidrs") ?? "";
-  const gatewayCidrs = cfg.get("gatewayCidrs") ?? "";
-  const sshPublicKey = cfg.get("sshPublicKey");
-  if (!sshPublicKey) {
-    throw new Error(
-      'Stack config "sshPublicKey" is required for the GCP adapter. Set it with: pulumi config set --stack <name> sshPublicKey "ssh-ed25519 ..."'
-    );
-  }
-  const egressResult = accessMode === "auto" ? await detectEgressIp("https://ifconfig.me") : { ok: true, ip: "" };
-  if (accessMode === "open") {
-    process.stderr.write(
-      "[clawops] WARNING: accessMode=open allows 0.0.0.0/0 on SSH and gateway ports. Only use this for development/sandbox stacks.\n"
-    );
-  }
-  const sshIngressCidrs = resolveIngressCidrs(accessMode, allowedCidrs, sshCidrs, egressResult);
-  const gatewayIngressCidrs = resolveIngressCidrs(accessMode, allowedCidrs, gatewayCidrs, egressResult);
-  const network = new gcp.compute.Network("clawops-network", {
-    autoCreateSubnetworks: false,
-    description: "clawops managed network"
-  });
-  const subnet = new gcp.compute.Subnetwork("clawops-subnet", {
-    ipCidrRange: "10.0.0.0/24",
-    region,
-    network: network.selfLink
-  });
-  if (sshIngressCidrs.length > 0) {
-    new gcp.compute.Firewall("clawops-firewall-ssh", {
-      network: network.selfLink,
-      allows: [{ protocol: "tcp", ports: [String(SSH_PORT)] }],
-      sourceRanges: sshIngressCidrs,
-      targetTags: ["clawops"]
-    });
-  }
-  if (gatewayIngressCidrs.length > 0) {
-    new gcp.compute.Firewall("clawops-firewall-gateway", {
-      network: network.selfLink,
-      allows: [{ protocol: "tcp", ports: [String(GATEWAY_PORT)] }],
-      sourceRanges: gatewayIngressCidrs,
-      targetTags: ["clawops"]
-    });
-  }
-  const address = new gcp.compute.Address("clawops-address", { region });
-  const instance = new gcp.compute.Instance("clawops-instance", {
-    machineType: instanceType,
-    zone,
-    tags: ["clawops"],
-    bootDisk: {
-      initializeParams: {
-        image: "debian-cloud/debian-12",
-        size: 20
-      }
-    },
-    networkInterfaces: [
-      {
-        network: network.selfLink,
-        subnetwork: subnet.selfLink,
-        accessConfigs: [
-          {
-            natIp: address.address,
-            networkTier: "PREMIUM"
-          }
-        ]
-      }
-    ],
-    metadata: {
-      // GCP guest agent reads 'ssh-keys' and populates /home/<user>/.ssh/authorized_keys
-      "ssh-keys": `clawops:${sshPublicKey}`,
-      "startup-script": makeStartupScript({ openclawVersion, os: "debian" })
-    },
-    serviceAccount: {
-      scopes: ["https://www.googleapis.com/auth/cloud-platform"]
-    }
-  });
-  return {
-    instanceId: instance.id,
-    publicIp: address.address,
-    gatewayUrl: pulumi.interpolate`https://${address.address}:${GATEWAY_PORT}`,
-    sshHost: address.address,
-    sshPort: SSH_PORT,
-    sshUser: "clawops",
-    region,
-    provisionedAt: (/* @__PURE__ */ new Date()).toISOString()
-  };
-};
-
-// src/providers/gcp/index.ts
-var INSTANCE_TYPE_MAP = {
-  micro: "e2-micro",
-  small: "e2-standard-2",
-  medium: "e2-standard-4",
-  large: "e2-standard-8",
-  gpu: "n1-standard-4"
-  // TODO M3: add accelerator config for GPU instances
-};
-var gcpAdapter = {
-  name: "gcp",
-  get program() {
-    return gcpProgram;
-  },
-  getConnectionInfo(outputs) {
-    return {
-      host: String(outputs["sshHost"] ?? ""),
-      port: Number(outputs["sshPort"] ?? 22),
-      user: String(outputs["sshUser"] ?? "clawops"),
-      privateKeyPath: String(outputs["privateKeyPath"] ?? ""),
-      knownHostsPath: String(outputs["knownHostsPath"] ?? "")
-    };
-  },
-  normalizeInstanceType(alias) {
-    if (alias === "gpu") {
-      throw new Error(
-        "GPU instances are not yet supported on GCP. Use --provider aws (g4dn.xlarge) or --provider azure (Standard_NC6s_v3) for GPU workloads."
-      );
-    }
-    const mapped = INSTANCE_TYPE_MAP[alias];
-    if (!mapped) throw new Error(`Unknown instance alias: ${alias}`);
-    return mapped;
-  },
-  defaultRegion() {
-    return "us-central1";
-  },
-  stateBackendUrl(bucket) {
-    return `gs://${bucket}`;
-  },
-  async validateConfig() {
-    const errors = [];
-    const hasKeyFile = Boolean(process2.env["GOOGLE_APPLICATION_CREDENTIALS"]);
-    const hasToken = Boolean(process2.env["GOOGLE_OAUTH_ACCESS_TOKEN"]);
-    const hasAdcFile = await checkAdcFile();
-    if (!hasKeyFile && !hasToken && !hasAdcFile) {
-      const onGcp = await checkInstanceMetadata();
-      if (!onGcp) {
-        errors.push(
-          "No GCP credentials found. Set GOOGLE_APPLICATION_CREDENTIALS to a service account key file, or run `gcloud auth application-default login`."
-        );
-      }
-    }
-    return { ok: errors.length === 0, errors };
-  }
-};
-async function checkAdcFile() {
-  try {
-    const { accessSync } = await import("fs");
-    const { join } = await import("path");
-    const home = process2.env["HOME"] ?? process2.env["USERPROFILE"] ?? "";
-    accessSync(join(home, ".config", "gcloud", "application_default_credentials.json"));
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function checkInstanceMetadata() {
-  try {
-    const res = await fetch(
-      "http://metadata.google.internal/computeMetadata/v1/instance/id",
-      {
-        headers: { "Metadata-Flavor": "Google" },
-        signal: AbortSignal.timeout(1e3)
-      }
-    );
-    return res.ok;
-  } catch {
-    return false;
-  }
-}
-var gcp_default = gcpAdapter;
-export {
-  gcp_default as default
-};

package/dist/generate-OAGYT3VH.js

@@ -1,15 +0,0 @@
-#!/usr/bin/env node
-import {
-  generatePlan,
-  planId
-} from "./chunk-A4QR4TXW.js";
-import "./chunk-6X45DDGH.js";
-import "./chunk-P5LKWRPL.js";
-import "./chunk-PVUVI35Y.js";
-import "./chunk-A2I76FTA.js";
-import "./chunk-CX5SL5HP.js";
-import "./chunk-KGXPLI7W.js";
-export {
-  generatePlan,
-  planId
-};

package/dist/local-DXBEVZ5C.js

@@ -1,47 +0,0 @@
-#!/usr/bin/env node
-
-// src/providers/local/index.ts
-import { accessSync } from "fs";
-var localAdapter = {
-  name: "local",
-  /** Never called — local stacks bypass Pulumi entirely. */
-  get program() {
-    return async () => ({});
-  },
-  getConnectionInfo(outputs) {
-    return {
-      host: String(outputs["sshHost"] ?? ""),
-      port: Number(outputs["sshPort"] ?? 22),
-      user: String(outputs["sshUser"] ?? "root"),
-      privateKeyPath: String(outputs["privateKeyPath"] ?? ""),
-      knownHostsPath: String(outputs["knownHostsPath"] ?? "")
-    };
-  },
-  normalizeInstanceType(_alias) {
-    return "local";
-  },
-  defaultRegion() {
-    return "local";
-  },
-  stateBackendUrl(_bucket) {
-    return "file://~/.clawops/state";
-  },
-  async validateConfig() {
-    const keyPath = process.env["CLAWOPS_SSH_KEY_PATH"];
-    if (keyPath) {
-      try {
-        accessSync(keyPath);
-      } catch {
-        return {
-          ok: false,
-          errors: [`SSH key not readable: ${keyPath}`]
-        };
-      }
-    }
-    return { ok: true, errors: [] };
-  }
-};
-var local_default = localAdapter;
-export {
-  local_default as default
-};

package/dist/server-FIZCOLHL.js

@@ -1,32 +0,0 @@
-#!/usr/bin/env node
-import {
-  MCP_HTTP_PORT,
-  authRequirement,
-  bearerFrom,
-  isLoopbackBind,
-  serveMcp
-} from "./chunk-GZN7PKP4.js";
-import "./chunk-35WVQY3X.js";
-import "./chunk-6ZFIFDBJ.js";
-import "./chunk-BOPSG2LI.js";
-import "./chunk-3QJBNAHW.js";
-import "./chunk-A4QR4TXW.js";
-import "./chunk-6X45DDGH.js";
-import "./chunk-FNS56UQY.js";
-import "./chunk-DQDAWNGB.js";
-import "./chunk-SEZMVVAS.js";
-import "./chunk-P5LKWRPL.js";
-import "./chunk-EI7CQQ7D.js";
-import "./chunk-PVUVI35Y.js";
-import "./chunk-3XK66DKK.js";
-import "./chunk-Q7NQY5HV.js";
-import "./chunk-A2I76FTA.js";
-import "./chunk-CX5SL5HP.js";
-import "./chunk-KGXPLI7W.js";
-export {
-  MCP_HTTP_PORT,
-  authRequirement,
-  bearerFrom,
-  isLoopbackBind,
-  serveMcp
-};

package/dist/ssh-CNJNLM3E.js

@@ -1,8 +0,0 @@
-#!/usr/bin/env node
-import {
-  connect
-} from "./chunk-3XK66DKK.js";
-import "./chunk-KGXPLI7W.js";
-export {
-  connect
-};

package/dist/validate-CFQ4FH2T.js

@@ -1,10 +0,0 @@
-#!/usr/bin/env node
-import {
-  assertValidPlan,
-  validatePlan
-} from "./chunk-6X45DDGH.js";
-import "./chunk-PVUVI35Y.js";
-export {
-  assertValidPlan,
-  validatePlan
-};