@clawops/cli 2.0.0 → 2.0.1

package/dist/chunk-LEVIW2PV.js

@@ -0,0 +1,890 @@
+#!/usr/bin/env node
+import {
+  CONFIG_FILENAME,
+  CONTAINER_UID,
+  STATE_DIR_HOST_LINUX,
+  gatewayRunCommand
+} from "./chunk-GIEVAGEK.js";
+import {
+  GATEWAY_PORT
+} from "./chunk-VOEJYRIK.js";
+import {
+  INSTANCE_TYPE_MAP as INSTANCE_TYPE_MAP2
+} from "./chunk-FEK7VJAY.js";
+import {
+  azureCliAccount
+} from "./chunk-RHOWYIWT.js";
+import {
+  INSTANCE_TYPE_MAP
+} from "./chunk-N4WZLWJ4.js";
+import {
+  registerProvider
+} from "./chunk-VUFMZEIM.js";
+
+// src/providers/aws/index.ts
+import process2 from "process";
+
+// src/providers/startup.ts
+function makeStartupScript(opts) {
+  const {
+    openclawVersion,
+    os,
+    bedrockEnabled = false,
+    publishGateway = "loopback",
+    gatewayPort = GATEWAY_PORT
+  } = opts;
+  const dockerDistro = os === "ubuntu" ? "ubuntu" : "debian";
+  const bedrockEnvBlock = bedrockEnabled ? makeBedrockEnvBlock() : "";
+  return `#!/bin/bash
+set -euo pipefail
+
+# \u2500\u2500 User setup \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+id -u clawops &>/dev/null || useradd -m -s /bin/bash clawops
+mkdir -p /home/clawops/.ssh
+chmod 700 /home/clawops/.ssh
+chown clawops:clawops /home/clawops/.ssh
+
+# \u2500\u2500 Docker installation \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+if ! command -v docker &>/dev/null; then
+  export DEBIAN_FRONTEND=noninteractive
+  apt-get update -q
+  apt-get install -y -q ca-certificates curl gnupg lsb-release
+  install -m 0755 -d /etc/apt/keyrings
+  curl -fsSL https://download.docker.com/linux/${dockerDistro}/gpg \\
+    -o /etc/apt/keyrings/docker.asc
+  chmod a+r /etc/apt/keyrings/docker.asc
+  echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] \\
+    https://download.docker.com/linux/${dockerDistro} $(lsb_release -cs) stable" \\
+    > /etc/apt/sources.list.d/docker.list
+  apt-get update -q
+  apt-get install -y -q \\
+    docker-ce \\
+    docker-ce-cli \\
+    containerd.io \\
+    docker-buildx-plugin \\
+    docker-compose-plugin
+  systemctl enable --now docker
+fi
+
+usermod -aG docker clawops
+
+# \u2500\u2500 OpenClaw image \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+OPENCLAW_VERSION="${openclawVersion}"
+docker pull ghcr.io/openclaw/openclaw:\${OPENCLAW_VERSION}
+
+# \u2500\u2500 Gateway auth token \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+# OpenClaw refuses a non-loopback bind without auth, and in a container it always
+# binds 0.0.0.0. Without a token the gateway exits 78 and restart-loops.
+OPENCLAW_ENV_FILE=/home/clawops/openclaw.env
+if [ ! -s "\${OPENCLAW_ENV_FILE}" ]; then
+  OPENCLAW_TOKEN=$(openssl rand -hex 32 2>/dev/null || head -c 32 /dev/urandom | od -An -tx1 | tr -d ' \\n')
+  printf 'OPENCLAW_GATEWAY_TOKEN=%s\\n' "\${OPENCLAW_TOKEN}" > "\${OPENCLAW_ENV_FILE}"
+  chmod 600 "\${OPENCLAW_ENV_FILE}"
+  chown clawops:clawops "\${OPENCLAW_ENV_FILE}"
+fi
+
+# \u2500\u2500 State directory \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+# One directory holds config, the SQLite state and any plugins installed below.
+# Owned NUMERICALLY by the uid the container runs as: useradd clawops gets 1001 on
+# Ubuntu 24.04 (the ubuntu user already holds 1000), and a 1001-owned state dir makes the
+# gateway exit 1 with EACCES on its own SQLite WAL. There is no degraded mode.
+OPENCLAW_STATE_DIR=${STATE_DIR_HOST_LINUX}
+OPENCLAW_CONFIG="\${OPENCLAW_STATE_DIR}/${CONFIG_FILENAME}"
+mkdir -p "\${OPENCLAW_STATE_DIR}"
+
+# Migrate a pre-2.0 deployment: the config used to be a bare file in the service user's
+# home. Without this an in-place upgrade comes up with no configuration at all. Guarded on
+# the target being absent, so re-running provisioning never clobbers a later edit.
+OPENCLAW_LEGACY_CONFIG=/home/clawops/openclaw.json
+if [ -f "\${OPENCLAW_LEGACY_CONFIG}" ] && [ ! -f "\${OPENCLAW_CONFIG}" ]; then
+  cp -p "\${OPENCLAW_LEGACY_CONFIG}" "\${OPENCLAW_CONFIG}"
+  mv "\${OPENCLAW_LEGACY_CONFIG}" "\${OPENCLAW_LEGACY_CONFIG}.migrated"
+  echo "clawops: migrated config from \${OPENCLAW_LEGACY_CONFIG}"
+  OPENCLAW_MIGRATED=1
+fi
+
+# \u2500\u2500 Default config (apply.ts will overwrite with plan overlay) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+if [ ! -f "\${OPENCLAW_CONFIG}" ]; then
+  cat > "\${OPENCLAW_CONFIG}" <<'OPENCLAWJSON'
+{"meta":{"lastTouchedVersion":"2026.9"},"gateway":{"mode":"local","port":${gatewayPort},"auth":{"mode":"token"}},"models":{},"channels":{}}
+OPENCLAWJSON
+fi
+
+# Numeric, and last, so it covers the config and anything migrated above.
+chown -R ${CONTAINER_UID}:${CONTAINER_UID} "\${OPENCLAW_STATE_DIR}"
+
+# A 1.x config has no gateway.mode, and clawops no longer passes --allow-unconfigured \u2014
+# so a migrated deployment would exit 78 with "existing config is missing gateway.mode".
+# Normalised with OpenClaw's own tooling rather than by editing JSON in shell: it is
+# schema-aware, writes atomically, and applies OpenClaw's internal config migrations at the
+# same time. Runs after the chown so the container can write.
+if [ "\${OPENCLAW_MIGRATED:-0}" = "1" ]; then
+  docker run --rm -v "\${OPENCLAW_STATE_DIR}":/home/node/.openclaw \\
+    ghcr.io/openclaw/openclaw:\${OPENCLAW_VERSION} \\
+    openclaw config set gateway.mode local || \\
+    echo "clawops: WARNING could not set gateway.mode; gateway may refuse to start" >&2
+fi
+
+# \u2500\u2500 Start OpenClaw container \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+# Built by src/openclaw/runtime.ts, so this cannot drift from the restart paths.
+${gatewayRunCommand({
+    image: "ghcr.io/openclaw/openclaw:${OPENCLAW_VERSION}",
+    stateDir: '"${OPENCLAW_STATE_DIR}"',
+    envFilePath: '"${OPENCLAW_ENV_FILE}"',
+    extraArgs: bedrockEnvBlock.trim(),
+    publish: publishGateway,
+    port: gatewayPort
+  })}
+`;
+}
+function makeBedrockEnvBlock() {
+  return '  -e AWS_DEFAULT_REGION=$( \\\n      IMDS_TOKEN=$(curl -sf -X PUT \\\n        "http://169.254.169.254/latest/api/token" \\\n        -H "X-aws-ec2-metadata-token-ttl-seconds: 60") && \\\n      curl -sf \\\n        -H "X-aws-ec2-metadata-token: ${IMDS_TOKEN}" \\\n        "http://169.254.169.254/latest/meta-data/placement/region" \\\n      || echo us-east-1) \\\n';
+}
+
+// src/providers/aws/program.ts
+var SSH_PORT = 22;
+var awsProgram = async () => {
+  const [pulumi, aws, { resolveIngressCidrs, resolveGatewayIngressCidrs, resolveGatewayPort, detectEgressIp }] = await Promise.all([
+    import("@pulumi/pulumi"),
+    import("@pulumi/aws"),
+    import("./firewall-5VKZ4WBH.js")
+  ]);
+  const cfg = new pulumi.Config();
+  const instanceType = cfg.get("instanceType") ?? "t3.small";
+  const region = cfg.get("region") ?? "us-east-1";
+  const openclawVersion = cfg.get("openclawVersion") ?? "latest";
+  const publishGateway = cfg.get("publishGateway") === "all" ? "all" : "loopback";
+  const gatewayPort = resolveGatewayPort(cfg.get("gatewayPort"), GATEWAY_PORT);
+  const accessMode = cfg.get("accessMode") ?? "restricted";
+  const allowedCidrs = cfg.get("allowedCidrs") ?? "";
+  const sshCidrs = cfg.get("sshCidrs") ?? "";
+  const gatewayCidrs = cfg.get("gatewayCidrs") ?? "";
+  const bedrockEnabled = cfg.get("bedrockEnabled") === "true";
+  const pinnedAmiId = cfg.get("amiId");
+  const sshPublicKey = cfg.get("sshPublicKey");
+  if (!sshPublicKey) {
+    throw new Error(
+      'Stack config "sshPublicKey" is required for the AWS adapter. Set it with: pulumi config set --stack <name> sshPublicKey "ssh-ed25519 ..."'
+    );
+  }
+  const egressResult = accessMode === "auto" ? await detectEgressIp("https://ifconfig.me/ip") : { ok: true, ip: "" };
+  if (accessMode === "open") {
+    process.stderr.write(
+      "[clawops] WARNING: accessMode=open allows 0.0.0.0/0 on SSH and gateway ports. Only use this for development/sandbox stacks.\n"
+    );
+  }
+  const sshIngressCidrs = resolveIngressCidrs(accessMode, allowedCidrs, sshCidrs, egressResult);
+  const gatewayIngressCidrs = resolveGatewayIngressCidrs(
+    publishGateway,
+    accessMode,
+    allowedCidrs,
+    gatewayCidrs,
+    egressResult
+  );
+  const vpc = new aws.ec2.Vpc("clawops-vpc", {
+    cidrBlock: "10.0.0.0/16",
+    enableDnsHostnames: true,
+    enableDnsSupport: true,
+    tags: { Name: "clawops" }
+  });
+  const igw = new aws.ec2.InternetGateway("clawops-igw", {
+    tags: { Name: "clawops" }
+  });
+  new aws.ec2.InternetGatewayAttachment("clawops-igw-attach", {
+    vpcId: vpc.id,
+    internetGatewayId: igw.id
+  });
+  const subnet = new aws.ec2.Subnet("clawops-subnet", {
+    vpcId: vpc.id,
+    cidrBlock: "10.0.1.0/24",
+    mapPublicIpOnLaunch: false,
+    availabilityZone: pulumi.interpolate`${region}a`,
+    tags: { Name: "clawops" }
+  });
+  const routeTable = new aws.ec2.RouteTable("clawops-rt", {
+    vpcId: vpc.id,
+    tags: { Name: "clawops" }
+  });
+  new aws.ec2.Route("clawops-route", {
+    routeTableId: routeTable.id,
+    destinationCidrBlock: "0.0.0.0/0",
+    gatewayId: igw.id
+  });
+  new aws.ec2.RouteTableAssociation("clawops-rta", {
+    subnetId: subnet.id,
+    routeTableId: routeTable.id
+  });
+  const sg = new aws.ec2.SecurityGroup("clawops-sg", {
+    vpcId: vpc.id,
+    description: "clawops managed security group",
+    tags: { Name: "clawops" }
+  });
+  sshIngressCidrs.forEach((cidr, i) => {
+    new aws.vpc.SecurityGroupIngressRule(`clawops-sg-ssh-${i}`, {
+      securityGroupId: sg.id,
+      ipProtocol: "tcp",
+      fromPort: SSH_PORT,
+      toPort: SSH_PORT,
+      cidrIpv4: cidr,
+      tags: { Name: `clawops-ssh-${i}` }
+    });
+  });
+  gatewayIngressCidrs.forEach((cidr, i) => {
+    new aws.vpc.SecurityGroupIngressRule(`clawops-sg-gw-${i}`, {
+      securityGroupId: sg.id,
+      ipProtocol: "tcp",
+      fromPort: gatewayPort,
+      toPort: gatewayPort,
+      cidrIpv4: cidr,
+      tags: { Name: `clawops-gateway-${i}` }
+    });
+  });
+  new aws.vpc.SecurityGroupEgressRule("clawops-sg-egress", {
+    securityGroupId: sg.id,
+    ipProtocol: "-1",
+    cidrIpv4: "0.0.0.0/0",
+    tags: { Name: "clawops-egress" }
+  });
+  const role = new aws.iam.Role("clawops-role", {
+    assumeRolePolicy: JSON.stringify({
+      Version: "2012-10-17",
+      Statement: [{
+        Effect: "Allow",
+        Principal: { Service: "ec2.amazonaws.com" },
+        Action: "sts:AssumeRole"
+      }]
+    }),
+    tags: { Name: "clawops" }
+  });
+  new aws.iam.RolePolicyAttachment("clawops-ssm", {
+    role: role.name,
+    policyArn: "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
+  });
+  if (bedrockEnabled) {
+    new aws.iam.RolePolicy("clawops-bedrock-invoke", {
+      role: role.name,
+      policy: JSON.stringify({
+        Version: "2012-10-17",
+        Statement: [{
+          Effect: "Allow",
+          Action: [
+            "bedrock:InvokeModel",
+            "bedrock:InvokeModelWithResponseStream"
+          ],
+          Resource: "*"
+        }]
+      })
+    });
+  }
+  const instanceProfile = new aws.iam.InstanceProfile("clawops-profile", {
+    role: role.name
+  });
+  const keyPair = new aws.ec2.KeyPair("clawops-keypair", {
+    publicKey: sshPublicKey,
+    tags: { Name: "clawops" }
+  });
+  const amiId = pinnedAmiId ?? (await aws.ec2.getAmi({
+    mostRecent: true,
+    owners: ["099720109477"],
+    // Canonical
+    filters: [
+      { name: "name", values: ["ubuntu/images/hvm-ssd/ubuntu-jammy-22.04-amd64-server-*"] },
+      { name: "virtualization-type", values: ["hvm"] }
+    ]
+  })).id;
+  process.stderr.write(`[clawops] Using AMI: ${amiId}
+`);
+  const instance = new aws.ec2.Instance("clawops-instance", {
+    ami: amiId,
+    instanceType,
+    subnetId: subnet.id,
+    vpcSecurityGroupIds: [sg.id],
+    iamInstanceProfile: instanceProfile.name,
+    keyName: keyPair.keyName,
+    userData: makeStartupScript({ openclawVersion, os: "ubuntu", bedrockEnabled, publishGateway, gatewayPort }),
+    // IMDSv2 with hopLimit=2 so Docker containers on this host can reach IMDS
+    // and obtain the instance role credentials (required for Bedrock access).
+    metadataOptions: {
+      httpTokens: "required",
+      httpPutResponseHopLimit: 2
+    },
+    tags: { Name: "clawops" }
+  });
+  const eip = new aws.ec2.Eip("clawops-eip", {
+    domain: "vpc",
+    tags: { Name: "clawops" }
+  });
+  new aws.ec2.EipAssociation("clawops-eip-assoc", {
+    instanceId: instance.id,
+    allocationId: eip.id
+  });
+  return {
+    instanceId: instance.id,
+    publicIp: eip.publicIp,
+    gatewayUrl: pulumi.interpolate`https://${eip.publicIp}:${gatewayPort}`,
+    sshHost: eip.publicIp,
+    sshPort: SSH_PORT,
+    sshUser: "ubuntu",
+    region,
+    provisionedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+};
+
+// src/providers/aws/index.ts
+var awsAdapter = {
+  name: "aws",
+  get program() {
+    return awsProgram;
+  },
+  getConnectionInfo(outputs) {
+    return {
+      host: String(outputs["sshHost"] ?? ""),
+      port: Number(outputs["sshPort"] ?? 22),
+      user: String(outputs["sshUser"] ?? "ubuntu"),
+      privateKeyPath: String(outputs["privateKeyPath"] ?? ""),
+      knownHostsPath: String(outputs["knownHostsPath"] ?? "")
+    };
+  },
+  normalizeInstanceType(alias) {
+    const mapped = INSTANCE_TYPE_MAP[alias];
+    if (!mapped) throw new Error(`Unknown instance alias: ${alias}`);
+    return mapped;
+  },
+  defaultRegion() {
+    return "us-east-1";
+  },
+  stateBackendUrl(bucket) {
+    return `s3://${bucket}`;
+  },
+  async preflight(opts) {
+    const { awsPreflight } = await import("./preflight-TFD4N5ZU.js");
+    return awsPreflight(opts);
+  },
+  async validateConfig() {
+    const errors = [];
+    const hasProfile = Boolean(process2.env["AWS_PROFILE"]);
+    const hasKeyId = Boolean(process2.env["AWS_ACCESS_KEY_ID"]);
+    const hasOidc = Boolean(process2.env["AWS_ROLE_ARN"] && process2.env["AWS_WEB_IDENTITY_TOKEN_FILE"]);
+    if (!hasProfile && !hasKeyId && !hasOidc) {
+      const onAws = await checkImds();
+      if (!onAws) {
+        errors.push(
+          "No AWS credentials found. Set AWS_PROFILE, AWS_ACCESS_KEY_ID, or AWS_ROLE_ARN + AWS_WEB_IDENTITY_TOKEN_FILE, or run on an EC2 instance with an IAM instance role."
+        );
+      }
+    }
+    return { ok: errors.length === 0, errors };
+  }
+};
+async function checkImds() {
+  try {
+    const res = await fetch(
+      "http://169.254.169.254/latest/meta-data/instance-id",
+      { signal: AbortSignal.timeout(1e3) }
+    );
+    return res.ok;
+  } catch {
+    return false;
+  }
+}
+registerProvider(awsAdapter);
+
+// src/providers/gcp/index.ts
+import process3 from "process";
+
+// src/providers/gcp/program.ts
+var SSH_PORT2 = 22;
+var gcpProgram = async () => {
+  const [pulumi, gcp, { resolveIngressCidrs, resolveGatewayIngressCidrs, resolveGatewayPort, detectEgressIp }] = await Promise.all([
+    import("@pulumi/pulumi"),
+    import("@pulumi/gcp"),
+    import("./firewall-5VKZ4WBH.js")
+  ]);
+  const cfg = new pulumi.Config();
+  const instanceType = cfg.get("instanceType") ?? "e2-standard-2";
+  const region = cfg.get("region") ?? "us-central1";
+  const openclawVersion = cfg.get("openclawVersion") ?? "latest";
+  const publishGateway = cfg.get("publishGateway") === "all" ? "all" : "loopback";
+  const gatewayPort = resolveGatewayPort(cfg.get("gatewayPort"), GATEWAY_PORT);
+  const zone = cfg.get("zone") ?? `${region}-a`;
+  const accessMode = cfg.get("accessMode") ?? "restricted";
+  const allowedCidrs = cfg.get("allowedCidrs") ?? "";
+  const sshCidrs = cfg.get("sshCidrs") ?? "";
+  const gatewayCidrs = cfg.get("gatewayCidrs") ?? "";
+  const sshPublicKey = cfg.get("sshPublicKey");
+  if (!sshPublicKey) {
+    throw new Error(
+      'Stack config "sshPublicKey" is required for the GCP adapter. Set it with: pulumi config set --stack <name> sshPublicKey "ssh-ed25519 ..."'
+    );
+  }
+  const egressResult = accessMode === "auto" ? await detectEgressIp("https://ifconfig.me/ip") : { ok: true, ip: "" };
+  if (accessMode === "open") {
+    process.stderr.write(
+      "[clawops] WARNING: accessMode=open allows 0.0.0.0/0 on SSH and gateway ports. Only use this for development/sandbox stacks.\n"
+    );
+  }
+  const sshIngressCidrs = resolveIngressCidrs(accessMode, allowedCidrs, sshCidrs, egressResult);
+  const gatewayIngressCidrs = resolveGatewayIngressCidrs(
+    publishGateway,
+    accessMode,
+    allowedCidrs,
+    gatewayCidrs,
+    egressResult
+  );
+  const network = new gcp.compute.Network("clawops-network", {
+    autoCreateSubnetworks: false,
+    description: "clawops managed network"
+  });
+  const subnet = new gcp.compute.Subnetwork("clawops-subnet", {
+    ipCidrRange: "10.0.0.0/24",
+    region,
+    network: network.selfLink
+  });
+  if (sshIngressCidrs.length > 0) {
+    new gcp.compute.Firewall("clawops-firewall-ssh", {
+      network: network.selfLink,
+      allows: [{ protocol: "tcp", ports: [String(SSH_PORT2)] }],
+      sourceRanges: sshIngressCidrs,
+      targetTags: ["clawops"]
+    });
+  }
+  if (gatewayIngressCidrs.length > 0) {
+    new gcp.compute.Firewall("clawops-firewall-gateway", {
+      network: network.selfLink,
+      allows: [{ protocol: "tcp", ports: [String(gatewayPort)] }],
+      sourceRanges: gatewayIngressCidrs,
+      targetTags: ["clawops"]
+    });
+  }
+  const address = new gcp.compute.Address("clawops-address", { region });
+  const instance = new gcp.compute.Instance("clawops-instance", {
+    machineType: instanceType,
+    zone,
+    tags: ["clawops"],
+    bootDisk: {
+      initializeParams: {
+        image: "debian-cloud/debian-12",
+        size: 20
+      }
+    },
+    networkInterfaces: [
+      {
+        network: network.selfLink,
+        subnetwork: subnet.selfLink,
+        accessConfigs: [
+          {
+            natIp: address.address,
+            networkTier: "PREMIUM"
+          }
+        ]
+      }
+    ],
+    metadata: {
+      // GCP guest agent reads 'ssh-keys' and populates /home/<user>/.ssh/authorized_keys
+      "ssh-keys": `clawops:${sshPublicKey}`,
+      "startup-script": makeStartupScript({ openclawVersion, os: "debian", publishGateway, gatewayPort })
+    },
+    serviceAccount: {
+      scopes: ["https://www.googleapis.com/auth/cloud-platform"]
+    }
+  });
+  return {
+    instanceId: instance.id,
+    publicIp: address.address,
+    gatewayUrl: pulumi.interpolate`https://${address.address}:${gatewayPort}`,
+    sshHost: address.address,
+    sshPort: SSH_PORT2,
+    sshUser: "clawops",
+    region,
+    provisionedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+};
+
+// src/providers/gcp/index.ts
+var INSTANCE_TYPE_MAP3 = {
+  micro: "e2-micro",
+  small: "e2-standard-2",
+  medium: "e2-standard-4",
+  large: "e2-standard-8",
+  gpu: "n1-standard-4"
+  // TODO M3: add accelerator config for GPU instances
+};
+var gcpAdapter = {
+  name: "gcp",
+  get program() {
+    return gcpProgram;
+  },
+  getConnectionInfo(outputs) {
+    return {
+      host: String(outputs["sshHost"] ?? ""),
+      port: Number(outputs["sshPort"] ?? 22),
+      user: String(outputs["sshUser"] ?? "clawops"),
+      privateKeyPath: String(outputs["privateKeyPath"] ?? ""),
+      knownHostsPath: String(outputs["knownHostsPath"] ?? "")
+    };
+  },
+  normalizeInstanceType(alias) {
+    if (alias === "gpu") {
+      throw new Error(
+        "GPU instances are not yet supported on GCP. Use --provider aws (g4dn.xlarge) or --provider azure (Standard_NC6s_v3) for GPU workloads."
+      );
+    }
+    const mapped = INSTANCE_TYPE_MAP3[alias];
+    if (!mapped) throw new Error(`Unknown instance alias: ${alias}`);
+    return mapped;
+  },
+  defaultRegion() {
+    return "us-central1";
+  },
+  stateBackendUrl(bucket) {
+    return `gs://${bucket}`;
+  },
+  async validateConfig() {
+    const errors = [];
+    const hasKeyFile = Boolean(process3.env["GOOGLE_APPLICATION_CREDENTIALS"]);
+    const hasToken = Boolean(process3.env["GOOGLE_OAUTH_ACCESS_TOKEN"]);
+    const hasAdcFile = await checkAdcFile();
+    if (!hasKeyFile && !hasToken && !hasAdcFile) {
+      const onGcp = await checkInstanceMetadata();
+      if (!onGcp) {
+        errors.push(
+          "No GCP credentials found. Set GOOGLE_APPLICATION_CREDENTIALS to a service account key file, or run `gcloud auth application-default login`."
+        );
+      }
+    }
+    return { ok: errors.length === 0, errors };
+  },
+  async preflight(opts) {
+    const { gcpPreflight } = await import("./preflight-EF52S3WW.js");
+    return gcpPreflight(opts);
+  }
+};
+async function checkAdcFile() {
+  try {
+    const { accessSync: accessSync2 } = await import("fs");
+    const { join } = await import("path");
+    const home = process3.env["HOME"] ?? process3.env["USERPROFILE"] ?? "";
+    accessSync2(join(home, ".config", "gcloud", "application_default_credentials.json"));
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function checkInstanceMetadata() {
+  try {
+    const res = await fetch(
+      "http://metadata.google.internal/computeMetadata/v1/instance/id",
+      {
+        headers: { "Metadata-Flavor": "Google" },
+        signal: AbortSignal.timeout(1e3)
+      }
+    );
+    return res.ok;
+  } catch {
+    return false;
+  }
+}
+registerProvider(gcpAdapter);
+
+// src/providers/azure/index.ts
+import process4 from "process";
+
+// src/providers/azure/program.ts
+import { createHash } from "crypto";
+var SSH_PORT3 = 22;
+var azureProgram = async () => {
+  const [pulumi, azure, random, { resolveIngressCidrs, resolveGatewayIngressCidrs, resolveGatewayPort, detectEgressIp }] = await Promise.all([
+    import("@pulumi/pulumi"),
+    import("@pulumi/azure-native"),
+    import("@pulumi/random"),
+    import("./firewall-5VKZ4WBH.js")
+  ]);
+  const cfg = new pulumi.Config();
+  const stackName = pulumi.getStack();
+  const instanceType = cfg.get("instanceType") ?? "Standard_B2s";
+  const location = cfg.get("region") ?? "eastus";
+  const openclawVersion = cfg.get("openclawVersion") ?? "latest";
+  const publishGateway = cfg.get("publishGateway") === "all" ? "all" : "loopback";
+  const gatewayPort = resolveGatewayPort(cfg.get("gatewayPort"), GATEWAY_PORT);
+  const accessMode = cfg.get("accessMode") ?? "restricted";
+  const allowedCidrs = cfg.get("allowedCidrs") ?? "";
+  const sshCidrs = cfg.get("sshCidrs") ?? "";
+  const gatewayCidrs = cfg.get("gatewayCidrs") ?? "";
+  const keyVaultEnabled = cfg.get("keyVaultEnabled") === "true";
+  const resourceGroupName = cfg.get("resourceGroupName") ?? `clawops-${stackName}`;
+  const sshPublicKey = cfg.get("sshPublicKey");
+  if (!sshPublicKey) {
+    throw new Error(
+      'Stack config "sshPublicKey" is required for the Azure adapter. Set it with: pulumi config set --stack <name> sshPublicKey "ssh-ed25519 ..."'
+    );
+  }
+  const clientConfig = await azure.authorization.getClientConfig({});
+  const egressResult = accessMode === "auto" ? await detectEgressIp("https://ifconfig.me/ip") : { ok: true, ip: "" };
+  if (accessMode === "open") {
+    process.stderr.write(
+      "[clawops] WARNING: accessMode=open allows 0.0.0.0/0 on SSH and gateway ports. Only use this for development/sandbox stacks.\n"
+    );
+  }
+  const sshIngressCidrs = resolveIngressCidrs(accessMode, allowedCidrs, sshCidrs, egressResult);
+  const gatewayIngressCidrs = resolveGatewayIngressCidrs(
+    publishGateway,
+    accessMode,
+    allowedCidrs,
+    gatewayCidrs,
+    egressResult
+  );
+  const rg = new azure.resources.ResourceGroup("clawops-rg", {
+    resourceGroupName,
+    location
+  });
+  const vnet = new azure.network.VirtualNetwork("clawops-vnet", {
+    resourceGroupName: rg.name,
+    location: rg.location,
+    addressSpace: { addressPrefixes: ["10.0.0.0/16"] }
+  });
+  const subnet = new azure.network.Subnet("clawops-subnet", {
+    resourceGroupName: rg.name,
+    virtualNetworkName: vnet.name,
+    addressPrefix: "10.0.1.0/24"
+  });
+  const securityRules = [];
+  let priority = 100;
+  for (const cidr of sshIngressCidrs) {
+    securityRules.push({
+      name: `allow-ssh-${priority}`,
+      priority: priority++,
+      direction: "Inbound",
+      access: "Allow",
+      protocol: "Tcp",
+      sourceAddressPrefix: cidr,
+      sourcePortRange: "*",
+      destinationAddressPrefix: "*",
+      destinationPortRange: String(SSH_PORT3)
+    });
+  }
+  for (const cidr of gatewayIngressCidrs) {
+    securityRules.push({
+      name: `allow-gateway-${priority}`,
+      priority: priority++,
+      direction: "Inbound",
+      access: "Allow",
+      protocol: "Tcp",
+      sourceAddressPrefix: cidr,
+      sourcePortRange: "*",
+      destinationAddressPrefix: "*",
+      destinationPortRange: String(gatewayPort)
+    });
+  }
+  const nsg = new azure.network.NetworkSecurityGroup("clawops-nsg", {
+    resourceGroupName: rg.name,
+    location: rg.location,
+    securityRules
+  });
+  const publicIp = new azure.network.PublicIPAddress("clawops-pip", {
+    resourceGroupName: rg.name,
+    location: rg.location,
+    publicIPAllocationMethod: "Static",
+    sku: { name: "Standard" }
+  });
+  const nic = new azure.network.NetworkInterface("clawops-nic", {
+    resourceGroupName: rg.name,
+    location: rg.location,
+    networkSecurityGroup: { id: nsg.id },
+    ipConfigurations: [{
+      name: "clawops-ipconfig",
+      subnet: { id: subnet.id },
+      publicIPAddress: { id: publicIp.id },
+      privateIPAllocationMethod: "Dynamic"
+    }]
+  });
+  const vm = new azure.compute.VirtualMachine("clawops-vm", {
+    resourceGroupName: rg.name,
+    location: rg.location,
+    hardwareProfile: { vmSize: instanceType },
+    identity: { type: "SystemAssigned" },
+    osProfile: {
+      adminUsername: "clawops",
+      computerName: "clawops",
+      customData: Buffer.from(makeStartupScript({ openclawVersion, os: "ubuntu", publishGateway, gatewayPort })).toString("base64"),
+      linuxConfiguration: {
+        disablePasswordAuthentication: true,
+        ssh: {
+          publicKeys: [{
+            keyData: sshPublicKey,
+            path: "/home/clawops/.ssh/authorized_keys"
+          }]
+        }
+      }
+    },
+    storageProfile: {
+      imageReference: {
+        publisher: "Canonical",
+        // Ubuntu 22.04 LTS — Canonical migrated from the legacy 'UbuntuServer'
+        // offer to this naming scheme. 22_04-lts-gen2 is available in all regions.
+        offer: "0001-com-ubuntu-server-jammy",
+        sku: "22_04-lts-gen2",
+        version: "latest"
+      },
+      osDisk: {
+        createOption: "FromImage",
+        managedDisk: { storageAccountType: "Premium_LRS" },
+        diskSizeGB: 30
+      }
+    },
+    networkProfile: {
+      networkInterfaces: [{ id: nic.id, primary: true }]
+    }
+  });
+  if (keyVaultEnabled) {
+    const safeName = stackName.replace(/[^a-zA-Z0-9-]/g, "-");
+    const rawKvName = `clawops-${safeName}-kv`;
+    const kvName = rawKvName.length > 24 ? `cl-${createHash("sha256").update(stackName).digest("hex").slice(0, 20)}` : rawKvName;
+    const kv = new azure.keyvault.Vault("clawops-kv", {
+      resourceGroupName: rg.name,
+      location: rg.location,
+      vaultName: kvName,
+      properties: {
+        sku: { family: "A", name: "standard" },
+        tenantId: pulumi.output(vm.identity).apply((i) => i?.tenantId ?? ""),
+        enableRbacAuthorization: true
+      }
+    });
+    const kvSecretsUserRoleId = `/subscriptions/${clientConfig.subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/4633458b-17de-408a-b874-0445c86b69e6`;
+    new azure.authorization.RoleAssignment("clawops-kv-role", {
+      scope: kv.id,
+      roleDefinitionId: kvSecretsUserRoleId,
+      principalId: pulumi.output(vm.identity).apply((i) => i?.principalId ?? ""),
+      principalType: "ServicePrincipal"
+    });
+    const gatewayToken = new random.RandomPassword("clawops-kv-gateway-token", {
+      length: 32,
+      special: false
+    });
+    new azure.keyvault.Secret("clawops-gateway-token", {
+      resourceGroupName: rg.name,
+      vaultName: kv.name,
+      secretName: "gateway-token",
+      properties: { value: gatewayToken.result }
+    });
+  }
+  const resolvedIp = pulumi.output(publicIp.ipAddress).apply((ip) => ip ?? "");
+  return {
+    instanceId: vm.id,
+    publicIp: resolvedIp,
+    gatewayUrl: pulumi.interpolate`https://${resolvedIp}:${gatewayPort}`,
+    sshHost: resolvedIp,
+    sshPort: SSH_PORT3,
+    sshUser: "clawops",
+    region: location,
+    provisionedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+};
+
+// src/providers/azure/index.ts
+var azureAdapter = {
+  name: "azure",
+  get program() {
+    return azureProgram;
+  },
+  getConnectionInfo(outputs) {
+    return {
+      host: String(outputs["sshHost"] ?? ""),
+      port: Number(outputs["sshPort"] ?? 22),
+      user: String(outputs["sshUser"] ?? "clawops"),
+      privateKeyPath: String(outputs["privateKeyPath"] ?? ""),
+      knownHostsPath: String(outputs["knownHostsPath"] ?? "")
+    };
+  },
+  normalizeInstanceType(alias) {
+    const mapped = INSTANCE_TYPE_MAP2[alias];
+    if (!mapped) throw new Error(`Unknown instance alias: ${alias}`);
+    return mapped;
+  },
+  defaultRegion() {
+    return "eastus";
+  },
+  stateBackendUrl(bucket) {
+    return `azblob://${bucket}`;
+  },
+  async preflight(opts) {
+    const { azurePreflight } = await import("./preflight-MWWM5JT3.js");
+    return azurePreflight(opts);
+  },
+  async validateConfig() {
+    const errors = [];
+    const clientId = process4.env["AZURE_CLIENT_ID"];
+    const tenantId = process4.env["AZURE_TENANT_ID"];
+    const clientSecret = process4.env["AZURE_CLIENT_SECRET"];
+    const federatedToken = process4.env["AZURE_FEDERATED_TOKEN_FILE"];
+    const hasServicePrincipal = Boolean(clientId && tenantId && clientSecret);
+    const hasOidc = Boolean(clientId && tenantId && federatedToken);
+    const hasCliLogin = Boolean(azureCliAccount());
+    if (!hasServicePrincipal && !hasOidc && !hasCliLogin) {
+      const onAzure = await checkImds2();
+      if (!onAzure) {
+        errors.push(
+          "No Azure credentials found. Run `az login`, or set AZURE_CLIENT_ID + AZURE_TENANT_ID + AZURE_CLIENT_SECRET (service principal), or AZURE_CLIENT_ID + AZURE_TENANT_ID + AZURE_FEDERATED_TOKEN_FILE (OIDC), or run on an Azure VM with a managed identity."
+        );
+      }
+    }
+    return { ok: errors.length === 0, errors };
+  }
+};
+async function checkImds2() {
+  try {
+    const res = await fetch(
+      "http://169.254.169.254/metadata/instance?api-version=2021-02-01",
+      {
+        headers: { Metadata: "true" },
+        signal: AbortSignal.timeout(1e3)
+      }
+    );
+    return res.ok;
+  } catch {
+    return false;
+  }
+}
+registerProvider(azureAdapter);
+
+// src/providers/local/index.ts
+import { accessSync } from "fs";
+var localAdapter = {
+  name: "local",
+  /** Never called — local stacks bypass Pulumi entirely. */
+  get program() {
+    return async () => ({});
+  },
+  getConnectionInfo(outputs) {
+    return {
+      host: String(outputs["sshHost"] ?? ""),
+      port: Number(outputs["sshPort"] ?? 22),
+      user: String(outputs["sshUser"] ?? "root"),
+      privateKeyPath: String(outputs["privateKeyPath"] ?? ""),
+      knownHostsPath: String(outputs["knownHostsPath"] ?? "")
+    };
+  },
+  normalizeInstanceType(_alias) {
+    return "local";
+  },
+  defaultRegion() {
+    return "local";
+  },
+  stateBackendUrl(_bucket) {
+    return "file://~/.clawops/state";
+  },
+  async validateConfig() {
+    const keyPath = process.env["CLAWOPS_SSH_KEY_PATH"];
+    if (keyPath) {
+      try {
+        accessSync(keyPath);
+      } catch {
+        return {
+          ok: false,
+          errors: [`SSH key not readable: ${keyPath}`]
+        };
+      }
+    }
+    return { ok: true, errors: [] };
+  }
+};
+registerProvider(localAdapter);