@clawops/cli 2.0.0 → 2.0.1

package/dist/gcp-2JBTD7ZM.js

@@ -1,204 +0,0 @@
-#!/usr/bin/env node
-import {
-  makeStartupScript
-} from "./chunk-CKSPROD5.js";
-import {
-  GATEWAY_PORT
-} from "./chunk-6TIYVHPX.js";
-import "./chunk-EI7CQQ7D.js";
-
-// src/providers/gcp/index.ts
-import process2 from "process";
-
-// src/providers/gcp/program.ts
-var SSH_PORT = 22;
-var gcpProgram = async () => {
-  const [pulumi, gcp, { resolveIngressCidrs, resolveGatewayIngressCidrs, resolveGatewayPort, detectEgressIp }] = await Promise.all([
-    import("@pulumi/pulumi"),
-    import("@pulumi/gcp"),
-    import("./firewall-T3NTPZJD.js")
-  ]);
-  const cfg = new pulumi.Config();
-  const instanceType = cfg.get("instanceType") ?? "e2-standard-2";
-  const region = cfg.get("region") ?? "us-central1";
-  const openclawVersion = cfg.get("openclawVersion") ?? "latest";
-  const publishGateway = cfg.get("publishGateway") === "all" ? "all" : "loopback";
-  const gatewayPort = resolveGatewayPort(cfg.get("gatewayPort"), GATEWAY_PORT);
-  const zone = cfg.get("zone") ?? `${region}-a`;
-  const accessMode = cfg.get("accessMode") ?? "restricted";
-  const allowedCidrs = cfg.get("allowedCidrs") ?? "";
-  const sshCidrs = cfg.get("sshCidrs") ?? "";
-  const gatewayCidrs = cfg.get("gatewayCidrs") ?? "";
-  const sshPublicKey = cfg.get("sshPublicKey");
-  if (!sshPublicKey) {
-    throw new Error(
-      'Stack config "sshPublicKey" is required for the GCP adapter. Set it with: pulumi config set --stack <name> sshPublicKey "ssh-ed25519 ..."'
-    );
-  }
-  const egressResult = accessMode === "auto" ? await detectEgressIp("https://ifconfig.me") : { ok: true, ip: "" };
-  if (accessMode === "open") {
-    process.stderr.write(
-      "[clawops] WARNING: accessMode=open allows 0.0.0.0/0 on SSH and gateway ports. Only use this for development/sandbox stacks.\n"
-    );
-  }
-  const sshIngressCidrs = resolveIngressCidrs(accessMode, allowedCidrs, sshCidrs, egressResult);
-  const gatewayIngressCidrs = resolveGatewayIngressCidrs(
-    publishGateway,
-    accessMode,
-    allowedCidrs,
-    gatewayCidrs,
-    egressResult
-  );
-  const network = new gcp.compute.Network("clawops-network", {
-    autoCreateSubnetworks: false,
-    description: "clawops managed network"
-  });
-  const subnet = new gcp.compute.Subnetwork("clawops-subnet", {
-    ipCidrRange: "10.0.0.0/24",
-    region,
-    network: network.selfLink
-  });
-  if (sshIngressCidrs.length > 0) {
-    new gcp.compute.Firewall("clawops-firewall-ssh", {
-      network: network.selfLink,
-      allows: [{ protocol: "tcp", ports: [String(SSH_PORT)] }],
-      sourceRanges: sshIngressCidrs,
-      targetTags: ["clawops"]
-    });
-  }
-  if (gatewayIngressCidrs.length > 0) {
-    new gcp.compute.Firewall("clawops-firewall-gateway", {
-      network: network.selfLink,
-      allows: [{ protocol: "tcp", ports: [String(gatewayPort)] }],
-      sourceRanges: gatewayIngressCidrs,
-      targetTags: ["clawops"]
-    });
-  }
-  const address = new gcp.compute.Address("clawops-address", { region });
-  const instance = new gcp.compute.Instance("clawops-instance", {
-    machineType: instanceType,
-    zone,
-    tags: ["clawops"],
-    bootDisk: {
-      initializeParams: {
-        image: "debian-cloud/debian-12",
-        size: 20
-      }
-    },
-    networkInterfaces: [
-      {
-        network: network.selfLink,
-        subnetwork: subnet.selfLink,
-        accessConfigs: [
-          {
-            natIp: address.address,
-            networkTier: "PREMIUM"
-          }
-        ]
-      }
-    ],
-    metadata: {
-      // GCP guest agent reads 'ssh-keys' and populates /home/<user>/.ssh/authorized_keys
-      "ssh-keys": `clawops:${sshPublicKey}`,
-      "startup-script": makeStartupScript({ openclawVersion, os: "debian", publishGateway, gatewayPort })
-    },
-    serviceAccount: {
-      scopes: ["https://www.googleapis.com/auth/cloud-platform"]
-    }
-  });
-  return {
-    instanceId: instance.id,
-    publicIp: address.address,
-    gatewayUrl: pulumi.interpolate`https://${address.address}:${gatewayPort}`,
-    sshHost: address.address,
-    sshPort: SSH_PORT,
-    sshUser: "clawops",
-    region,
-    provisionedAt: (/* @__PURE__ */ new Date()).toISOString()
-  };
-};
-
-// src/providers/gcp/index.ts
-var INSTANCE_TYPE_MAP = {
-  micro: "e2-micro",
-  small: "e2-standard-2",
-  medium: "e2-standard-4",
-  large: "e2-standard-8",
-  gpu: "n1-standard-4"
-  // TODO M3: add accelerator config for GPU instances
-};
-var gcpAdapter = {
-  name: "gcp",
-  get program() {
-    return gcpProgram;
-  },
-  getConnectionInfo(outputs) {
-    return {
-      host: String(outputs["sshHost"] ?? ""),
-      port: Number(outputs["sshPort"] ?? 22),
-      user: String(outputs["sshUser"] ?? "clawops"),
-      privateKeyPath: String(outputs["privateKeyPath"] ?? ""),
-      knownHostsPath: String(outputs["knownHostsPath"] ?? "")
-    };
-  },
-  normalizeInstanceType(alias) {
-    if (alias === "gpu") {
-      throw new Error(
-        "GPU instances are not yet supported on GCP. Use --provider aws (g4dn.xlarge) or --provider azure (Standard_NC6s_v3) for GPU workloads."
-      );
-    }
-    const mapped = INSTANCE_TYPE_MAP[alias];
-    if (!mapped) throw new Error(`Unknown instance alias: ${alias}`);
-    return mapped;
-  },
-  defaultRegion() {
-    return "us-central1";
-  },
-  stateBackendUrl(bucket) {
-    return `gs://${bucket}`;
-  },
-  async validateConfig() {
-    const errors = [];
-    const hasKeyFile = Boolean(process2.env["GOOGLE_APPLICATION_CREDENTIALS"]);
-    const hasToken = Boolean(process2.env["GOOGLE_OAUTH_ACCESS_TOKEN"]);
-    const hasAdcFile = await checkAdcFile();
-    if (!hasKeyFile && !hasToken && !hasAdcFile) {
-      const onGcp = await checkInstanceMetadata();
-      if (!onGcp) {
-        errors.push(
-          "No GCP credentials found. Set GOOGLE_APPLICATION_CREDENTIALS to a service account key file, or run `gcloud auth application-default login`."
-        );
-      }
-    }
-    return { ok: errors.length === 0, errors };
-  }
-};
-async function checkAdcFile() {
-  try {
-    const { accessSync } = await import("fs");
-    const { join } = await import("path");
-    const home = process2.env["HOME"] ?? process2.env["USERPROFILE"] ?? "";
-    accessSync(join(home, ".config", "gcloud", "application_default_credentials.json"));
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function checkInstanceMetadata() {
-  try {
-    const res = await fetch(
-      "http://metadata.google.internal/computeMetadata/v1/instance/id",
-      {
-        headers: { "Metadata-Flavor": "Google" },
-        signal: AbortSignal.timeout(1e3)
-      }
-    );
-    return res.ok;
-  } catch {
-    return false;
-  }
-}
-var gcp_default = gcpAdapter;
-export {
-  gcp_default as default
-};

package/dist/generate-2XV2GSP2.js

@@ -1,15 +0,0 @@
-#!/usr/bin/env node
-import {
-  generatePlan,
-  planId
-} from "./chunk-WHJMKDV7.js";
-import "./chunk-YR3O2I3S.js";
-import "./chunk-LU2V3LXA.js";
-import "./chunk-JW5A7E3X.js";
-import "./chunk-A2I76FTA.js";
-import "./chunk-CX5SL5HP.js";
-import "./chunk-KGXPLI7W.js";
-export {
-  generatePlan,
-  planId
-};

package/dist/local-DXBEVZ5C.js

@@ -1,47 +0,0 @@
-#!/usr/bin/env node
-
-// src/providers/local/index.ts
-import { accessSync } from "fs";
-var localAdapter = {
-  name: "local",
-  /** Never called — local stacks bypass Pulumi entirely. */
-  get program() {
-    return async () => ({});
-  },
-  getConnectionInfo(outputs) {
-    return {
-      host: String(outputs["sshHost"] ?? ""),
-      port: Number(outputs["sshPort"] ?? 22),
-      user: String(outputs["sshUser"] ?? "root"),
-      privateKeyPath: String(outputs["privateKeyPath"] ?? ""),
-      knownHostsPath: String(outputs["knownHostsPath"] ?? "")
-    };
-  },
-  normalizeInstanceType(_alias) {
-    return "local";
-  },
-  defaultRegion() {
-    return "local";
-  },
-  stateBackendUrl(_bucket) {
-    return "file://~/.clawops/state";
-  },
-  async validateConfig() {
-    const keyPath = process.env["CLAWOPS_SSH_KEY_PATH"];
-    if (keyPath) {
-      try {
-        accessSync(keyPath);
-      } catch {
-        return {
-          ok: false,
-          errors: [`SSH key not readable: ${keyPath}`]
-        };
-      }
-    }
-    return { ok: true, errors: [] };
-  }
-};
-var local_default = localAdapter;
-export {
-  local_default as default
-};

package/dist/server-A5AB67GQ.js

@@ -1,36 +0,0 @@
-#!/usr/bin/env node
-import {
-  MCP_HTTP_PORT,
-  authRequirement,
-  bearerFrom,
-  isLoopbackBind,
-  serveMcp
-} from "./chunk-AX74VXTV.js";
-import "./chunk-UFRO4H5W.js";
-import "./chunk-N44K3LHE.js";
-import "./chunk-3QJBNAHW.js";
-import "./chunk-WHJMKDV7.js";
-import "./chunk-YR3O2I3S.js";
-import "./chunk-6ZFIFDBJ.js";
-import "./chunk-3WYA2QDM.js";
-import "./chunk-AHAAEXWC.js";
-import "./chunk-BOPSG2LI.js";
-import "./chunk-LU2V3LXA.js";
-import "./chunk-GYV4KNW7.js";
-import "./chunk-SBLQH2TJ.js";
-import "./chunk-LT4XMO5D.js";
-import "./chunk-NUDIHZEH.js";
-import "./chunk-JW5A7E3X.js";
-import "./chunk-Q7NQY5HV.js";
-import "./chunk-A2I76FTA.js";
-import "./chunk-CX5SL5HP.js";
-import "./chunk-KGXPLI7W.js";
-import "./chunk-6TIYVHPX.js";
-import "./chunk-EI7CQQ7D.js";
-export {
-  MCP_HTTP_PORT,
-  authRequirement,
-  bearerFrom,
-  isLoopbackBind,
-  serveMcp
-};

package/dist/ssh-B3NZAU4I.js

@@ -1,8 +0,0 @@
-#!/usr/bin/env node
-import {
-  connect
-} from "./chunk-AHAAEXWC.js";
-import "./chunk-KGXPLI7W.js";
-export {
-  connect
-};

package/dist/{version-guard-GPSTCPT7.js → version-guard-XVYW5WFJ.js}

@@ -4,10 +4,10 @@ import {
   loadVersionSpec
 } from "./chunk-GAZPPSKU.js";
 import "./chunk-JW5A7E3X.js";
+import "./chunk-EI7CQQ7D.js";
 import {
   UsageError
 } from "./chunk-KGXPLI7W.js";
-import "./chunk-EI7CQQ7D.js";
 
 // src/cli/version-guard.ts
 async function defaultOpenclawVersion() {