@clawops/cli 2.1.2 → 2.2.0

package/dist/{chunk-T5XCMYAV.js → chunk-CQOYUWR7.js}

@@ -1,7 +1,39 @@
 #!/usr/bin/env node
+import {
+  migrationQuestion,
+  prepareMigration,
+  runMigration
+} from "./chunk-E6BRQK67.js";
+import {
+  ACTIVATED,
+  ARCHIVE_IS_A_CREDENTIAL,
+  PLUGINS_NOT_CARRIED,
+  activateStaged,
+  activatedLines,
+  activationFailureDetail,
+  createBackup,
+  defaultBackupFilename,
+  nothingChanged,
+  stageRestore
+} from "./chunk-PCSX6Y3U.js";
+import {
+  checkStackDelete,
+  deleteStackFromConfig,
+  forgetNotice
+} from "./chunk-LV7UO5CG.js";
 import {
   applyPlan
-} from "./chunk-R3DTA35B.js";
+} from "./chunk-AX65JMDZ.js";
+import {
+  resolveConn
+} from "./chunk-SX75L2T3.js";
+import {
+  DEFAULT_AGENT_LOG_LIMIT,
+  readAgentActivity
+} from "./chunk-27335SIH.js";
+import {
+  generatePlan
+} from "./chunk-66R52R7K.js";
 import {
   extractBaseOutputs
 } from "./chunk-3QJBNAHW.js";
@@ -9,46 +41,48 @@ import {
   atomicWriteConfig,
   readRemoteConfig,
   restartGateway
-} from "./chunk-2I7KCMXZ.js";
-import {
-  generatePlan
-} from "./chunk-IQQTB7ER.js";
+} from "./chunk-UAJJEDCJ.js";
 import {
   validatePlan
-} from "./chunk-XFN3YDZE.js";
+} from "./chunk-PASAVVNS.js";
+import {
+  buildContext
+} from "./chunk-AVERNLUY.js";
 import {
   acquireSession,
   drainPool
-} from "./chunk-2Z7J3ERQ.js";
-import {
-  buildContext
-} from "./chunk-QDNFADJI.js";
+} from "./chunk-TYNMOYVM.js";
 import {
+  AUDIT_CLEAN_MESSAGE,
+  AUDIT_FIX_HINT,
+  NO_SECRETS_MESSAGE,
+  SET_SECRET_HINT,
+  auditSecrets,
+  currentGatewayVersion,
+  deleteConfirmQuestion,
+  deletePreparedSecret,
   formatUptime,
+  gatewayStatus,
   gatherSnapshot,
-  runDiagnostics
-} from "./chunk-GFUK6KDR.js";
+  listSecrets,
+  prepareSecretDelete,
+  resolveUpdateVersion,
+  runDiagnostics,
+  updateGateway
+} from "./chunk-OUQVKIIA.js";
 import {
   GATEWAY_LOGS_PROBE,
   chooseLogSource,
   containerLogsCommand,
   gatewayLogsCommand
-} from "./chunk-NUL5F6YV.js";
+} from "./chunk-SOZ62ZXW.js";
 import {
   execPrivileged
-} from "./chunk-NUDIHZEH.js";
-import {
-  STATE_DIR_HOST_LINUX,
-  gatewayRunCommand
-} from "./chunk-GIEVAGEK.js";
-import {
-  IMAGE_INSPECT_CMD,
-  imageForRestart
-} from "./chunk-VOEJYRIK.js";
+} from "./chunk-WPZIJONN.js";
 import {
   getConfig,
   getConfigDir
-} from "./chunk-64PONSA5.js";
+} from "./chunk-GFIR2IIJ.js";
 import {
   StateError,
   UsageError
@@ -56,7 +90,7 @@ import {
 
 // src/mcp/server.ts
 import { createServer } from "http";
-import { randomUUID as randomUUID5, timingSafeEqual } from "crypto";
+import { randomUUID as randomUUID8, timingSafeEqual } from "crypto";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
@@ -141,7 +175,7 @@ function withAudit(toolName, handler) {
 // src/mcp/tools/_generated.ts
 import { z } from "zod";
 var clawops_statusSchema = z.object({
-  stackName: z.string().optional()
+  stackName: z.string().optional().describe("Stack name. Defaults to active stack from config.")
 });
 var clawops_statusDescription = "Get what is deployed for a clawops-managed stack: public IP, gateway URL,\nSSH user, or that nothing is deployed yet. Reads stack outputs; does not\ncontact the host.\n\nUse when: the user asks what exists for a stack, or where to reach it.\n\nDo NOT use when: the user asks whether the gateway is actually WORKING \u2014\nthat needs the host, so use clawops_doctor. Also not for live logs (use\nclawops_logs_tail) or config values (use clawops_config_get).";
 var clawops_statusAnnotations = {
@@ -153,10 +187,10 @@ var clawops_statusAnnotations = {
   toolsets: ["cli", "read"]
 };
 var clawops_doctorSchema = z.object({
-  stackName: z.string().optional(),
-  failuresOnly: z.boolean().optional().default(false)
+  stackName: z.string().optional().describe("Stack to include remote checks for. Without it, only the local machine is\nchecked \u2014 no SSH connection is made.\n"),
+  failuresOnly: z.boolean().optional().default(false).describe("Return only failing and warning checks. Passing checks are counted, not listed.")
 });
-var clawops_doctorDescription = "Run clawops's diagnostics and return the report: Node and Pulumi runtime, config,\nSSH key and known_hosts, cloud credentials per configured provider, and the\nsupported OpenClaw range. With stackName, also contacts the host for container\nstate, the deployed OpenClaw version, a real gateway health probe, whether the\nport is published to the internet, disk usage on the state directory, log\nrotation, and hardening drift.\n\nUse when: something is not working and you do not yet know what; before any\ndeploy, upgrade or migration; or to find out which OpenClaw version a gateway is\nactually running.\n\nDo NOT use when: you already know the problem and want to fix it. This tool only\nreports \u2014 it changes nothing, and never runs `openclaw doctor --fix`. No tool\nrepairs a gateway: `clawops gateway update` is CLI-only, so tell the user to run\nit themselves, after `clawops backup create`.\n\nEvery check carries a status: fail (something is wrong that clawops can name),\nwarn (worth knowing, not broken), info (did not apply). `ok` is false only when\nsomething failed \u2014 a fresh machine with no stacks is full of warnings and healthy.";
+var clawops_doctorDescription = "Run clawops's diagnostics and return the report: Node and Pulumi runtime, config,\nSSH key and known_hosts, cloud credentials per configured provider, and the\nsupported OpenClaw range. With stackName, also contacts the host for container\nstate, the deployed OpenClaw version, a real gateway health probe, whether the\nport is published to the internet, disk usage on the state directory, log\nrotation, and hardening drift.\n\nUse when: something is not working and you do not yet know what; before any\ndeploy, upgrade or migration; or to find out which OpenClaw version a gateway is\nactually running.\n\nDo NOT use when: you already know the problem and want to fix it. This tool only\nreports \u2014 it changes nothing, and never runs `openclaw doctor --fix`. To move a\ngateway to another version, use clawops_gateway_update after clawops_backup_create.\n\nEvery check carries a status: fail (something is wrong that clawops can name),\nwarn (worth knowing, not broken), info (did not apply). `ok` is false only when\nsomething failed \u2014 a fresh machine with no stacks is full of warnings and healthy.";
 var clawops_doctorAnnotations = {
   title: "Run Diagnostics",
   readOnlyHint: true,
@@ -166,9 +200,9 @@ var clawops_doctorAnnotations = {
   toolsets: ["cli", "read"]
 };
 var clawops_logs_tailSchema = z.object({
-  stackName: z.string().optional(),
-  tailLines: z.number().int().optional().default(100),
-  sinceMin: z.number().int().optional()
+  stackName: z.string().optional().describe("Which stack's gateway to read. Omitted = the default stack in ~/.clawops/config.json"),
+  tailLines: z.number().int().optional().default(100).describe("How many of the most recent lines to return. Keep it small; output is trimmed to 8KB regardless"),
+  sinceMin: z.number().int().optional().describe("Lines since N minutes ago")
 });
 var clawops_logs_tailDescription = "Tail recent gateway logs from a clawops-managed instance.\n\nUse when: the user wants to investigate recent activity or errors, or\nasks \"what's been happening\" on the gateway.\n\nDo NOT use when: the user wants real-time streaming logs (those are not\nwell-suited to tool calls; suggest the user run `clawops logs -f` directly\nin their terminal). Do NOT use for instance-level system logs: no tool runs\narbitrary remote commands, so tell the user to run `clawops ssh --command\n'journalctl ...'` themselves.";
 var clawops_logs_tailAnnotations = {
@@ -180,8 +214,8 @@ var clawops_logs_tailAnnotations = {
   toolsets: ["cli", "read"]
 };
 var clawops_monitorSchema = z.object({
-  stackName: z.string().optional(),
-  tailLines: z.number().int().optional().default(5)
+  stackName: z.string().optional().describe("Stack name. Defaults to active stack."),
+  tailLines: z.number().int().optional().default(5).describe("Log lines to include in snapshot.")
 });
 var clawops_monitorDescription = "Take a live snapshot of a running clawops stack: gateway health, container\nstatus, resource usage (CPU, memory, disk), and recent log lines.\n\nUse when: the user wants to know if the gateway is running, how much\nmemory or CPU it is using, what recent log activity looks like, or\nwants a quick health overview richer than clawops_status.\n\nDo NOT use when: the user wants real-time streaming logs (use\nclawops_logs_tail or suggest `clawops logs -f`). Do NOT use for\nconfiguration queries (use clawops_config_get).";
 var clawops_monitorAnnotations = {
@@ -203,8 +237,8 @@ var clawops_stacks_listAnnotations = {
   toolsets: ["admin", "read"]
 };
 var clawops_config_getSchema = z.object({
-  stackName: z.string().optional(),
-  key: z.string().optional()
+  stackName: z.string().optional().describe("Which stack's gateway config to read. Omitted = the default stack in ~/.clawops/config.json"),
+  key: z.string().optional().describe("Dot-path config key, e.g., gateway.auth.mode. Omit to dump the full config.")
 });
 var clawops_config_getDescription = "Read a configuration value from the remote OpenClaw gateway.\n\nUse when: the user wants to inspect current OpenClaw config (e.g., which\nmodel provider is active, which channels are enabled).\n\nDo NOT use when: the user wants to change the config \u2014 use\nclawops_config_set instead.";
 var clawops_config_getAnnotations = {
@@ -216,9 +250,9 @@ var clawops_config_getAnnotations = {
   toolsets: ["cli", "read"]
 };
 var clawops_agents_listSchema = z.object({
-  stackName: z.string().optional()
+  stackName: z.string().optional().describe("Which stack's agents to list. Omitted = the default stack in ~/.clawops/config.json")
 });
-var clawops_agents_listDescription = "List agents currently registered on the remote OpenClaw gateway.\n\nUse when: the user wants to see which agents are running, debug agent\nrouting, or count active workspaces.\n\nDo NOT use when: the user wants one agent's logs \u2014 no tool exposes those; tell\nthe user to run `clawops agents logs <name>`.";
+var clawops_agents_listDescription = "List agents currently registered on the remote OpenClaw gateway.\n\nUse when: the user wants to see which agents are running, debug agent\nrouting, or count active workspaces.\n\nDo NOT use when: the user wants one agent's activity \u2014 that is clawops_agents_logs.";
 var clawops_agents_listAnnotations = {
   title: "List OpenClaw Agents",
   readOnlyHint: true,
@@ -227,16 +261,63 @@ var clawops_agents_listAnnotations = {
   openWorldHint: true,
   toolsets: ["cli", "read"]
 };
+var clawops_agents_logsSchema = z.object({
+  stackName: z.string().optional().describe("Which stack the agent runs on. Omitted = the default stack in ~/.clawops/config.json"),
+  name: z.string().describe("The agent's name, as clawops_agents_list reports it"),
+  limit: z.number().int().optional().default(50).describe("Maximum activity records to return. Omitted = 50"),
+  cursor: z.string().optional().describe("The cursor a previous call returned, to continue from where it stopped. Omitted = the most recent records")
+});
+var clawops_agents_logsDescription = "One agent's recent activity, read from the gateway's audit log, newest last.\nPaginated: pass the returned cursor to continue.\n\nUse when: the user asks what a specific agent did, or why it behaved as it did.\n\nDo NOT use when: the user wants the gateway's own log stream \u2014 that is\nclawops_logs_tail. Do NOT use to find agent names \u2014 that is clawops_agents_list.";
+var clawops_agents_logsAnnotations = {
+  title: "Read One Agent's Activity",
+  readOnlyHint: true,
+  destructiveHint: false,
+  idempotentHint: true,
+  openWorldHint: true,
+  toolsets: ["cli", "read"]
+};
+var clawops_gateway_statusSchema = z.object({
+  stackName: z.string().optional().describe("Which stack's gateway to inspect. Omitted = the default stack in ~/.clawops/config.json")
+});
+var clawops_gateway_statusDescription = "Whether the OpenClaw gateway container is running, when it started, and which image it\nruns, as docker reports it on the host.\n\nUse when: the user asks whether the gateway is up or which OpenClaw version is deployed.\n\nDo NOT use when: the user wants a full health check \u2014 clawops_doctor probes the gateway\nitself rather than the container. Do NOT use to change anything; this only reads.";
+var clawops_gateway_statusAnnotations = {
+  title: "Gateway Container Status",
+  readOnlyHint: true,
+  destructiveHint: false,
+  idempotentHint: true,
+  openWorldHint: true,
+  toolsets: ["cli", "read"]
+};
+var clawops_secret_listSchema = z.object({});
+var clawops_secret_listDescription = "List the secrets clawops stores locally, by name and status. Never returns a value.\n\nUse when: the user asks which secrets are set, or before a deploy that references one.\n\nDo NOT use when: the user wants to set or rotate a secret. No tool does that, because the\nvalue would pass through the conversation (R6): ask the user to run\n`clawops secret set <NAME>` or `clawops secret rotate <NAME>` in a terminal.";
+var clawops_secret_listAnnotations = {
+  title: "List Stored Secrets",
+  readOnlyHint: true,
+  destructiveHint: false,
+  idempotentHint: true,
+  openWorldHint: false,
+  toolsets: ["cli", "read"]
+};
+var clawops_secret_auditSchema = z.object({});
+var clawops_secret_auditDescription = "Report secrets that stacks reference but clawops does not have, and `$secret:` references\nthat cannot be resolved. Never returns a value.\n\nUse when: a deploy or config change fails on a missing secret, or before applying a plan\nwhose config references secrets.\n\nDo NOT use when: the user wants to set the missing secret \u2014 ask them to run\n`clawops secret set <NAME>` in a terminal; no tool takes a secret value (R6).";
+var clawops_secret_auditAnnotations = {
+  title: "Audit Secret References",
+  readOnlyHint: true,
+  destructiveHint: false,
+  idempotentHint: true,
+  openWorldHint: false,
+  toolsets: ["cli", "read"]
+};
 var clawops_upSchema = z.object({
-  stackName: z.string().optional(),
-  provider: z.enum(["aws", "gcp", "azure", "local"]).optional(),
-  region: z.string().optional(),
-  instanceType: z.string().optional().default("small"),
-  sshCidr: z.string().optional(),
-  gatewayCidr: z.string().optional(),
-  publishGateway: z.enum(["loopback", "all"]).optional(),
-  openclawVersion: z.string().optional(),
-  dryRun: z.boolean().optional().default(false)
+  stackName: z.string().optional().describe("Name for the stack to provision, and the name every later command refers to it by. Omitted = the default stack in ~/.clawops/config.json"),
+  provider: z.enum(["aws", "gcp", "azure", "local"]).optional().describe("Defaults to provider configured for this stack"),
+  region: z.string().optional().describe("Cloud region to deploy into, in the provider's own spelling (us-east-1, us-central1, eastus). Omitted = the region recorded for the stack"),
+  instanceType: z.string().optional().default("small").describe("A clawops size (micro|small|medium|large|gpu) or a provider-native machine type.\nNot an enum: Azure offers SKU families per subscription, and an account offered\nnone of the five sizes clawops names would otherwise have no way to deploy.\n"),
+  sshCidr: z.string().optional().describe("CIDR(s) allowed to reach SSH, comma-separated, or 'auto' for the caller's own\naddress. Omitted means none, and nothing will be able to connect \u2014 including\nevery clawops day-two command.\n"),
+  gatewayCidr: z.string().optional().describe("CIDR(s) allowed to reach the gateway port. Requires publishGateway=all."),
+  publishGateway: z.enum(["loopback", "all"]).optional().describe("Which interface the gateway binds. 'all' serves plaintext HTTP."),
+  openclawVersion: z.string().optional().describe("semver or 'stable'/'dev'"),
+  dryRun: z.boolean().optional().default(false).describe("Show what would be created and change nothing. Use this first when the user has not yet approved a spend")
 });
 var clawops_upDescription = 'Provision and deploy a clawops stack. Idempotent \u2014 re-running with no spec\nchange produces no diff. Long-running (median 3min, p99 8min) so emits\nprogress notifications per R12.\n\nUse when: the user explicitly asks to deploy, provision, create, or "spin\nup" a stack. Always after the user has reviewed a plan\n(clawops_plan first when in doubt).\n\nDo NOT use when: the user has not yet generated a plan and is in\nexploratory/discovery mode \u2014 use clawops_plan first. Do NOT use for an\nexisting stack you only need to update; refresh first.';
 var clawops_upAnnotations = {
@@ -248,10 +329,10 @@ var clawops_upAnnotations = {
   toolsets: ["cli"]
 };
 var clawops_destroySchema = z.object({
-  stackName: z.string(),
-  yes: z.boolean().optional().default(false)
+  stackName: z.string().describe("The stack to destroy. Required, and worth repeating back to the user before calling: this deletes every resource it provisioned"),
+  yes: z.boolean().optional().default(false).describe("Skip elicitation; CI/scripted use only")
 });
-var clawops_destroyDescription = "Destroy a clawops stack. Removes ALL provisioned resources. Triggers\nelicitation confirmation showing the resource diff before execution\n(R19). Cannot be undone.\n\nUse when: the user explicitly asks to destroy, tear down, delete, or\nremove a stack. Always confirm the stack name.\n\nDo NOT use when: the user wants to stop the gateway temporarily \u2014 that is not\na destroy, and no tool stops a gateway; clawops_gateway_restart is the only\ngateway tool. Do NOT use when in doubt about which stack; list first with\nclawops_stacks_list.";
+var clawops_destroyDescription = "Destroy a clawops stack. Removes ALL provisioned resources. Triggers\nelicitation confirmation showing the resource diff before execution\n(R19). Cannot be undone.\n\nUse when: the user explicitly asks to destroy, tear down, delete, or\nremove a stack. Always confirm the stack name.\n\nDo NOT use when: the user wants to stop the gateway temporarily \u2014 that is not\na destroy, and no tool stops a gateway; clawops_gateway_restart restarts it. Do NOT use when in doubt about which stack; list first with\nclawops_stacks_list.";
 var clawops_destroyAnnotations = {
   title: "Destroy Stack (DESTRUCTIVE)",
   readOnlyHint: false,
@@ -261,8 +342,8 @@ var clawops_destroyAnnotations = {
   toolsets: ["cli"]
 };
 var clawops_applySchema = z.object({
-  planPath: z.string(),
-  yes: z.boolean().optional().default(false)
+  planPath: z.string().describe("Absolute path to plan JSON (R7)"),
+  yes: z.boolean().optional().default(false).describe("Skip the confirmation and apply immediately. Only when the user has already approved this specific plan")
 });
 var clawops_applyDescription = "Apply a previously-generated Maker plan (deploy-plan.schema.json).\nDeterministic \u2014 the plan describes exactly what will be created.\n\nUse when: the user has a plan file path and wants to apply it. This is\nthe agent-friendly path for any deploy/destroy operation.\n\nDo NOT use when: there's no plan file \u2014 generate one first with\nclawops_plan.";
 var clawops_applyAnnotations = {
@@ -274,16 +355,16 @@ var clawops_applyAnnotations = {
   toolsets: ["cli"]
 };
 var clawops_planSchema = z.object({
-  stackName: z.string().optional(),
-  provider: z.enum(["aws", "gcp", "azure", "local"]).optional(),
-  region: z.string().optional(),
-  instanceType: z.string().optional(),
-  openclawVersion: z.string().optional(),
-  sshCidr: z.string().optional(),
-  gatewayCidr: z.string().optional(),
-  publishGateway: z.enum(["loopback", "all"]).optional(),
-  privateOnly: z.boolean().optional(),
-  outPath: z.string().optional()
+  stackName: z.string().optional().describe("Which stack the plan is for. Omitted = the default stack in ~/.clawops/config.json"),
+  provider: z.enum(["aws", "gcp", "azure", "local"]).optional().describe("Cloud to plan against. Omitted = the provider recorded for the stack. 'local' has no plan/apply path and is refused"),
+  region: z.string().optional().describe("Cloud region, in the provider's own spelling (us-east-1, us-central1, eastus). Omitted = the region recorded for the stack"),
+  instanceType: z.string().optional().describe("A clawops alias (micro|small|medium|large|gpu) or a machine type the cloud names itself, e.g. t3.small"),
+  openclawVersion: z.string().optional().describe("semver, or 'stable'/'dev'"),
+  sshCidr: z.string().optional().describe("CIDR(s) allowed to reach SSH, comma-separated, or 'auto' for this machine. Omitted = none, and nothing will be able to connect"),
+  gatewayCidr: z.string().optional().describe("CIDR(s) allowed to reach the gateway port, or 'auto'. Requires publishGateway=all"),
+  publishGateway: z.enum(["loopback", "all"]).optional().describe("Which interface the gateway binds. loopback (default) keeps it off the network"),
+  privateOnly: z.boolean().optional().describe("Close public SSH and gateway access; reach the stack over its tailnet. Requires a verified tailnet address (clawops_harden with tailscale), and refuses unless that address answers SSH now"),
+  outPath: z.string().optional().describe("Absolute path to write plan; if omitted, plan returned inline")
 });
 var clawops_planDescription = "Generate a Maker deploy plan (does NOT apply). Plan is JSON conforming to\ndeploy-plan.schema.json \u2014 review before applying.\n\nUse when: the user wants to see what would be created before committing,\nor you (the agent) need a reviewable artifact for the user to approve.\n\nDo NOT use when: the user has explicitly asked to deploy and you already\nhave their approval \u2014 go directly to clawops_up.";
 var clawops_planAnnotations = {
@@ -295,10 +376,10 @@ var clawops_planAnnotations = {
   toolsets: ["cli", "read"]
 };
 var clawops_config_setSchema = z.object({
-  stackName: z.string().optional(),
-  key: z.string(),
-  value: z.string(),
-  restart: z.boolean().optional().default(false)
+  stackName: z.string().optional().describe("Which stack's gateway config to write. Omitted = the default stack in ~/.clawops/config.json"),
+  key: z.string().describe("Dotted path into the gateway config, e.g. models.provider or channels.slack.enabled"),
+  value: z.string().describe("Stringified; JSON for complex values"),
+  restart: z.boolean().optional().default(false).describe("Restart the gateway so the change takes effect. Without it the value is written and the running gateway keeps the old one")
 });
 var clawops_config_setDescription = "Set a configuration value on the remote OpenClaw gateway. Optionally\nrestarts the gateway after.\n\nUse when: the user wants to change OpenClaw configuration (model\nprovider, channel auth, gateway port).\n\nDo NOT use when: the user is reading config \u2014 use clawops_config_get.\nDo NOT bulk-edit; one key at a time so changes are auditable (R21).";
 var clawops_config_setAnnotations = {
@@ -310,9 +391,9 @@ var clawops_config_setAnnotations = {
   toolsets: ["cli"]
 };
 var clawops_config_unsetSchema = z.object({
-  stackName: z.string().optional(),
-  key: z.string(),
-  restart: z.boolean().optional().default(false)
+  stackName: z.string().optional().describe("Which stack's gateway config to write. Omitted = the default stack in ~/.clawops/config.json"),
+  key: z.string().describe("Dot-path config key to remove"),
+  restart: z.boolean().optional().default(false).describe("Restart the gateway so the removal takes effect. Without it the key is removed and the running gateway keeps the old value")
 });
 var clawops_config_unsetDescription = "Remove a configuration key from the remote OpenClaw gateway config, reverting\nit to the OpenClaw default.\n\nUse when: the user wants to delete a config key entirely (e.g., remove a\nchannel, clear an override).\n\nDo NOT use when: the user wants to set the key to a new value \u2014 use\nclawops_config_set instead.";
 var clawops_config_unsetAnnotations = {
@@ -324,7 +405,7 @@ var clawops_config_unsetAnnotations = {
   toolsets: ["cli"]
 };
 var clawops_config_validateSchema = z.object({
-  stackName: z.string().optional()
+  stackName: z.string().optional().describe("Which stack's deployed config to validate. Omitted = the default stack in ~/.clawops/config.json")
 });
 var clawops_config_validateDescription = "Validate the remote OpenClaw gateway config against the known schema. Checks\nfor structural errors (wrong types, unknown top-level keys) that would cause\nOpenClaw to fail on startup.\n\nUse when: the user wants to verify config before restarting the gateway, or\nafter editing openclaw.json manually.\n\nDo NOT use when: the user wants to change config \u2014 use clawops_config_set.";
 var clawops_config_validateAnnotations = {
@@ -336,7 +417,7 @@ var clawops_config_validateAnnotations = {
   toolsets: ["cli", "read"]
 };
 var clawops_gateway_restartSchema = z.object({
-  stackName: z.string().optional()
+  stackName: z.string().optional().describe("Which stack's gateway to restart. Omitted = the default stack in ~/.clawops/config.json")
 });
 var clawops_gateway_restartDescription = "Restart the OpenClaw gateway daemon on the remote instance.\n\nUse when: a gateway-wide config change requires reload, or the gateway is\nreported as unresponsive.\n\nNote: OpenClaw 2.0 removed per-agent restart; `gateway restart` is the only\nrestart it offers, and it affects every agent on the host. Brief downtime (~10s).";
 var clawops_gateway_restartAnnotations = {
@@ -347,13 +428,115 @@ var clawops_gateway_restartAnnotations = {
   openWorldHint: true,
   toolsets: ["cli"]
 };
+var clawops_gateway_updateSchema = z.object({
+  stackName: z.string().optional().describe("Which stack's gateway to update. Omitted = the default stack in ~/.clawops/config.json"),
+  version: z.string().describe("A concrete OpenClaw version to move to, e.g. 2026.9.2. Moving tags are refused"),
+  yes: z.boolean().optional().default(false).describe("Skip the confirmation. Only when the user has already approved this specific update")
+});
+var clawops_gateway_updateDescription = "Move the gateway to a different OpenClaw version: pull the image and restart the gateway\non it. Every agent on the host restarts with it.\n\nUse when: the user asks to upgrade or downgrade OpenClaw on a running stack, naming a\nversion.\n\nDo NOT use when: the user has not named a concrete version \u2014 moving tags such as\n`latest` are refused, as the CLI refuses them. Do NOT use without a backup the user can\nreturn to: suggest clawops_backup_create first.";
+var clawops_gateway_updateAnnotations = {
+  title: "Update OpenClaw Version",
+  readOnlyHint: false,
+  destructiveHint: true,
+  idempotentHint: true,
+  openWorldHint: true,
+  toolsets: ["cli"]
+};
+var clawops_backup_createSchema = z.object({
+  stackName: z.string().optional().describe("Which stack to back up. Omitted = the default stack in ~/.clawops/config.json"),
+  out: z.string().optional().describe("Absolute local path to write the archive to. Omitted = a timestamped file under ~/.clawops/backups")
+});
+var clawops_backup_createDescription = "Take a backup of the gateway's state (config, database, sessions, transcripts and\ninstalled plugins) and download it to a local archive. Live state is not changed.\n\nUse when: the user asks for a backup, and before anything that replaces state: a\nversion update, a migration, a restore, or a plan that replaces the instance.\n\nDo NOT use when: the user wants to back up cloud infrastructure \u2014 Pulumi state and plans\ncover that, not this.";
+var clawops_backup_createAnnotations = {
+  title: "Back Up Gateway State",
+  readOnlyHint: false,
+  destructiveHint: false,
+  idempotentHint: false,
+  openWorldHint: true,
+  toolsets: ["cli"]
+};
+var clawops_backup_restoreSchema = z.object({
+  stackName: z.string().optional().describe("Which stack to restore onto. Omitted = the default stack in ~/.clawops/config.json"),
+  file: z.string().describe("Absolute local path to the backup archive, as clawops_backup_create wrote it"),
+  activate: z.boolean().optional().default(false).describe("Put the restored state into service. Omitted = expand into a staging directory and touch nothing live"),
+  yes: z.boolean().optional().default(false).describe("Skip the confirmation. Only when the user has already approved this specific restore")
+});
+var clawops_backup_restoreDescription = "Verify a backup archive and expand it on the host beside the live state, never over it.\nWith activate: true, also put it into service: stop the gateway, swap the restored state\nin (keeping the state it replaces), restart, and roll back if the gateway does not answer.\n\nUse when: the user asks to restore or recover from a backup, naming the archive.\n\nDo NOT use when: the gateway is merely unhealthy \u2014 clawops_workflow_recover diagnoses that\nwithout discarding state. Restoring is time travel: everything since the backup is lost,\nand channel credentials may need relinking.";
+var clawops_backup_restoreAnnotations = {
+  title: "Restore Gateway State (DESTRUCTIVE with activate)",
+  readOnlyHint: false,
+  destructiveHint: true,
+  idempotentHint: false,
+  openWorldHint: true,
+  toolsets: ["cli"]
+};
+var clawops_migrateSchema = z.object({
+  stackName: z.string().optional().describe("Which stack to migrate. Omitted = the default stack in ~/.clawops/config.json"),
+  openclawVersion: z.string().optional().describe("The OpenClaw 2.x version to migrate to. Omitted = the version this clawops release defaults to"),
+  yes: z.boolean().optional().default(false).describe("Skip the confirmation. Only when the user has already approved this migration")
+});
+var clawops_migrateDescription = "Move a deployment from OpenClaw 1.x onto the 2.0 runtime contract: state ownership,\nconfig, and the gateway's run command, in the order a real migration showed works.\n\nUse when: a stack still runs OpenClaw 1.x and the user wants it on 2.x. clawops_doctor\nand clawops_gateway_status say which line a stack runs.\n\nDo NOT use when: the stack is already on 2.x \u2014 use clawops_gateway_update to change\nversions within 2.x. Take a backup first with clawops_backup_create.";
+var clawops_migrateAnnotations = {
+  title: "Migrate 1.x to 2.0 (DESTRUCTIVE)",
+  readOnlyHint: false,
+  destructiveHint: true,
+  idempotentHint: false,
+  openWorldHint: true,
+  toolsets: ["cli"]
+};
+var clawops_stacks_deleteSchema = z.object({
+  name: z.string().describe("The stack to remove from config, as clawops_stacks_list reports it"),
+  force: z.boolean().optional().default(false).describe("Skip the safety checks: allow deleting the default stack, or one still deployed. Omitted = refuse both"),
+  yes: z.boolean().optional().default(false).describe("Skip the confirmation. Only when the user has already approved this deletion")
+});
+var clawops_stacks_deleteDescription = "Remove a stack from ~/.clawops/config.json. This forgets the stack; it does not tear\ndown its infrastructure, and it refuses a stack that is still deployed unless forced.\n\nUse when: the user wants to stop tracking a stack whose resources are already gone.\n\nDo NOT use when: the user wants the infrastructure removed \u2014 that is clawops_destroy,\nfirst. Forcing the delete of a deployed stack leaves resources running and billing that\nclawops can no longer see.";
+var clawops_stacks_deleteAnnotations = {
+  title: "Forget a Stack (DESTRUCTIVE)",
+  readOnlyHint: false,
+  destructiveHint: true,
+  idempotentHint: true,
+  openWorldHint: false,
+  toolsets: ["admin"]
+};
+var clawops_secret_deleteSchema = z.object({
+  name: z.string().describe("The secret's name, as clawops_secret_list reports it"),
+  yes: z.boolean().optional().default(false).describe("Skip the confirmation. Only when the user has already approved this deletion")
+});
+var clawops_secret_deleteDescription = "Delete a locally stored secret by name. Warns when a stack still references it.\n\nUse when: the user asks to remove a secret they no longer use.\n\nDo NOT use when: the user wants to replace a value \u2014 ask them to run\n`clawops secret rotate <NAME>`; no tool takes a secret value (R6).";
+var clawops_secret_deleteAnnotations = {
+  title: "Delete a Stored Secret (DESTRUCTIVE)",
+  readOnlyHint: false,
+  destructiveHint: true,
+  idempotentHint: true,
+  openWorldHint: false,
+  toolsets: ["cli"]
+};
+var clawops_initSchema = z.object({
+  provider: z.enum(["aws", "gcp", "azure", "local"]).describe("Which cloud this stack deploys to, or 'local' for a machine you already have"),
+  stackName: z.string().optional().describe('Name for the stack, used by every later call. Omitted = "default"'),
+  stateUrl: z.string().optional().describe("Where Pulumi state lives, e.g. s3://bucket/clawops, gs://bucket/clawops, azblob://container. Omitted = clawops names one from the cloud account it can see, which needs credentials"),
+  region: z.string().optional().describe("Cloud region in the provider's own spelling. Omitted = us-east-1 (aws), us-central1 (gcp), eastus (azure)"),
+  host: z.string().optional().describe("[local only] Hostname or IP of the machine to manage. Required when provider is local"),
+  sshUser: z.string().optional().describe("[local only] SSH login user. Omitted = root"),
+  sshPort: z.number().int().optional().describe("[local only] SSH port. Omitted = 22"),
+  force: z.boolean().optional().describe("Overwrite a stack that already exists. Refused without it, because replacing a state backend orphans the state it points at")
+});
+var clawops_initDescription = "Register a stack and write ~/.clawops/config.json: the provider, the state backend, the\nregion, and an SSH key pair generated if one is not already there. Nothing is provisioned\nand nothing is charged; this only creates local configuration.\n\nUse when: any other clawops tool reports that there is no config, or the user wants to add\na second stack alongside the ones they have. This is the first call on a machine that has\nnever run clawops \u2014 a fresh container, a new laptop, a sandbox.\n\nAdding a stack is additive and safe: existing stacks are kept. Overwriting one needs\nforce: true, because changing a state backend orphans the Pulumi state it points at \u2014 the\ninfrastructure stays up and clawops can no longer see or destroy it.\n\nFor aws, gcp and azure, stateUrl can be omitted and clawops names a bucket from the\naccount it can see; that needs cloud credentials in the environment, so in a sandbox pass\nstateUrl explicitly. The local provider needs host instead, and no cloud account at all.\n\nDo NOT use when: the user wants to deploy \u2014 that is clawops_up, after this. Credentials\nare never passed here: clawops reads them from the environment (R6).";
+var clawops_initAnnotations = {
+  title: "Initialise clawops Config",
+  readOnlyHint: false,
+  destructiveHint: false,
+  idempotentHint: false,
+  openWorldHint: false,
+  toolsets: ["cli"]
+};
 var clawops_hardenSchema = z.object({
-  stackName: z.string().optional(),
-  options: z.string().optional(),
-  dryRun: z.boolean().optional().default(false),
-  tailscale: z.boolean().optional().default(false),
-  tailscaleRevert: z.boolean().optional().default(false),
-  yes: z.boolean().optional().default(false)
+  stackName: z.string().optional().describe("Which stack to harden. Omitted = the default stack in ~/.clawops/config.json"),
+  options: z.string().optional().describe("Comma-separated module IDs; default is every defaultOn module for the provider"),
+  dryRun: z.boolean().optional().default(false).describe("Report the current state, change nothing"),
+  tailscale: z.boolean().optional().default(false).describe("Join the tailnet, verify this machine reaches the host there, then use that address"),
+  tailscaleRevert: z.boolean().optional().default(false).describe("Leave the tailnet and go back to the public address"),
+  yes: z.boolean().optional().default(false).describe("Skip elicitation; CI/scripted use only")
 });
 var clawops_hardenDescription = "Apply security hardening to a deployed stack: SSH, UFW, fail2ban,\nunattended-upgrades, the Docker socket, and per-cloud checks. Optionally join\nthe stack to a Tailscale network and reach it there instead of over the public\ninternet.\n\nUse when: the user asks to harden, secure, or lock down a stack; asks what the\nhardening report says (with dryRun: true, which changes nothing); or asks to put\na stack on their tailnet.\n\ntailscale: true installs Tailscale, joins the tailnet as clawops-<stack>, and\nthen moves clawops onto that address \u2014 but only after opening an SSH session to\nit, against host keys pinned over the connection already trusted. If that fails,\nnothing is recorded and the public address stays in use. The auth key comes from\n`clawops secret set TAILSCALE_AUTH_KEY` and is never passed through this tool\n(R6).\n\ntailscaleRevert: true takes the host back off the tailnet, over its public\naddress. On a private-only stack it refuses and names the plan/apply commands\nthat reopen SSH first \u2014 relay them rather than trying to work around it.\n\nTo close the public ports afterwards, plan with privateOnly: true and apply that\nplan; this tool does not change firewall rules.\n\nDo NOT use when: the user wants to know whether a stack is healthy \u2014 that is\nclawops_doctor. Do NOT pass tailscale and tailscaleRevert together.";
 var clawops_hardenAnnotations = {
@@ -365,10 +548,10 @@ var clawops_hardenAnnotations = {
   toolsets: ["cli"]
 };
 var clawops_workflow_deploy_appSchema = z.object({
-  provider: z.enum(["aws", "gcp", "azure", "local"]),
-  region: z.string().optional(),
-  stackName: z.string().optional().default("default"),
-  instanceType: z.enum(["micro", "small", "medium", "large", "gpu"]).optional().default("small")
+  provider: z.enum(["aws", "gcp", "azure", "local"]).describe("Cloud to deploy to. Omitted = the default provider in ~/.clawops/config.json"),
+  region: z.string().optional().describe("Cloud region, in the provider's own spelling (us-east-1, us-central1, eastus). Omitted = the provider's default"),
+  stackName: z.string().optional().default("default").describe("Name for the new stack. Omitted = the default stack name in ~/.clawops/config.json"),
+  instanceType: z.enum(["micro", "small", "medium", "large", "gpu"]).optional().default("small").describe("Machine size: a clawops alias (micro|small|medium|large|gpu) or a type the cloud names itself, e.g. t3.small")
 });
 var clawops_workflow_deploy_appDescription = 'Single-tool workflow that takes a user from "I want to deploy OpenClaw\nto <provider>" to a verified, healthy gateway. Internally: plan \u2192 user\nconfirms (elicitation) \u2192 up \u2192 wait for healthy \u2192 return URL.\n\nUse when: the user expresses end-to-end deployment intent ("deploy to\nAWS", "spin up an OpenClaw on GCP for me").\n\nDo NOT use when: the user is mid-deployment and only needs one step\n(e.g., they already have a plan; use clawops_apply). Do NOT use for\ndestroying or updating \u2014 separate workflows.';
 var clawops_workflow_deploy_appAnnotations = {
@@ -380,7 +563,7 @@ var clawops_workflow_deploy_appAnnotations = {
   toolsets: ["workflow"]
 };
 var clawops_workflow_recoverSchema = z.object({
-  stackName: z.string().optional()
+  stackName: z.string().optional().describe("Which stack to diagnose. Omitted = the default stack in ~/.clawops/config.json")
 });
 var clawops_workflow_recoverDescription = `Diagnostic workflow for an unhealthy stack. Internally: status check \u2192
 gateway logs \u2192 agent logs \u2192 systemd service status \u2192 produces a structured
@@ -400,7 +583,7 @@ var clawops_workflow_recoverAnnotations = {
   toolsets: ["workflow", "read"]
 };
 var clawops_task_statusSchema = z.object({
-  taskId: z.string()
+  taskId: z.string().describe("The taskId returned by a long-running tool such as clawops_up, clawops_apply or clawops_destroy")
 });
 var clawops_task_statusDescription = "Poll the status of a long-running clawops task (returned by clawops_up,\nclawops_destroy, clawops_apply, etc.). Per R12 streaming model.\n\nUse when: the user is waiting on a long-running deploy/destroy and wants\nprogress, OR you need to check whether a previously-started operation\nfinished.\n\nDo NOT use when: there is no active taskId \u2014 start the operation first.";
 var clawops_task_statusAnnotations = {
@@ -419,6 +602,10 @@ var TOOLSETS = {
     "clawops_monitor",
     "clawops_config_get",
     "clawops_agents_list",
+    "clawops_agents_logs",
+    "clawops_gateway_status",
+    "clawops_secret_list",
+    "clawops_secret_audit",
     "clawops_up",
     "clawops_destroy",
     "clawops_apply",
@@ -427,6 +614,12 @@ var TOOLSETS = {
     "clawops_config_unset",
     "clawops_config_validate",
     "clawops_gateway_restart",
+    "clawops_gateway_update",
+    "clawops_backup_create",
+    "clawops_backup_restore",
+    "clawops_migrate",
+    "clawops_secret_delete",
+    "clawops_init",
     "clawops_harden",
     "clawops_task_status"
   ],
@@ -442,13 +635,18 @@ var TOOLSETS = {
     "clawops_stacks_list",
     "clawops_config_get",
     "clawops_agents_list",
+    "clawops_agents_logs",
+    "clawops_gateway_status",
+    "clawops_secret_list",
+    "clawops_secret_audit",
     "clawops_plan",
     "clawops_config_validate",
     "clawops_workflow_recover",
     "clawops_task_status"
   ],
   admin: [
-    "clawops_stacks_list"
+    "clawops_stacks_list",
+    "clawops_stacks_delete"
   ]
 };
 
@@ -485,34 +683,6 @@ function text(t) {
 }
 
 // src/mcp/tools/_conn.ts
-async function resolveConn(ctx) {
-  if (ctx.adapter.name === "local") {
-    const state = ctx.localState;
-    if (!state) throw new StateError("Stack has no local state \u2014 run `clawops up` first.");
-    return {
-      host: state.sshHost,
-      port: state.sshPort,
-      user: state.sshUser,
-      privateKeyPath: state.privateKeyPath,
-      knownHostsPath: state.knownHostsPath
-    };
-  }
-  const { extractBaseOutputs: extractBaseOutputs2 } = await import("./outputs-DJHBY7EE.js");
-  const stack = await ctx.getStack();
-  const outputMap = await stack.outputs();
-  const outputs = Object.fromEntries(
-    Object.entries(outputMap).map(([k, v]) => [k, v.value])
-  );
-  if (!outputs["publicIp"]) {
-    throw new StateError("Stack has no outputs \u2014 run `clawops up` first.");
-  }
-  const base = extractBaseOutputs2(outputs);
-  return ctx.adapter.getConnectionInfo({
-    ...base,
-    privateKeyPath: ctx.config.ssh.keyPath,
-    knownHostsPath: ctx.config.ssh.knownHostsPath
-  });
-}
 function errText(message) {
   return { content: [{ type: "text", text: message }], isError: true };
 }
@@ -586,6 +756,29 @@ ${result.stdout}`;
   }
 }
 
+// src/mcp/tools/_confirm.ts
+async function confirmDestructive(server, opts) {
+  const capabilities = server.server.getClientCapabilities();
+  if (!capabilities?.elicitation) {
+    return {
+      confirmed: false,
+      reason: `This client cannot show a confirmation prompt, and ${opts.what} is not something clawops will do unconfirmed. Ask the user to confirm, then call this tool again with \`yes: true\`. (The client did not declare the MCP elicitation capability.)`
+    };
+  }
+  const elicit = await server.server.elicitInput({
+    message: opts.message,
+    requestedSchema: {
+      type: "object",
+      properties: { confirmed: { type: "boolean", title: opts.title } },
+      required: ["confirmed"]
+    }
+  });
+  if (elicit.action !== "accept" || !elicit.content?.["confirmed"]) {
+    return { confirmed: false, reason: `Cancelled \u2014 ${opts.what} did not run. Nothing was changed.` };
+  }
+  return { confirmed: true };
+}
+
 // src/mcp/tools/cli/stacks.ts
 async function handleStacksList(_input, _server) {
   const config = getConfig();
@@ -601,6 +794,24 @@ async function handleStacksList(_input, _server) {
   }));
   return { content: [{ type: "text", text: JSON.stringify({ stacks }, null, 2) }] };
 }
+async function handleStacksDelete(input, server) {
+  const force = input.force === true;
+  const check = await checkStackDelete(input.name, { force });
+  if (!check.ok) return errText(check.reason);
+  if (!input.yes) {
+    const consequence = force ? "force skips the still-deployed check: if this stack is still deployed, its resources stay running and billing, and clawops can no longer see them." : check.warnings.length > 0 ? `${check.warnings.join(" ")} If it is still deployed, its resources stay running and billing.` : "clawops sees no deployment for it, so nothing should be left running.";
+    const confirmation = await confirmDestructive(server, {
+      message: `Forget stack "${input.name}"? This removes it from ~/.clawops/config.json; it does NOT tear down its infrastructure. ${consequence}` + (check.isDefault ? " It is the default stack, so another stack becomes the default." : ""),
+      title: "Confirm forgetting the stack",
+      what: `forgetting stack "${input.name}"`
+    });
+    if (!confirmation.confirmed) return okText(confirmation.reason);
+  }
+  const deleted = deleteStackFromConfig(input.name);
+  const lines = [...check.warnings, forgetNotice(input.name), deleted.message];
+  if (deleted.newDefaultMessage) lines.push(deleted.newDefaultMessage);
+  return okText(lines.join("\n"));
+}
 
 // src/mcp/tools/cli/config.ts
 async function handleConfigGet(input, _server) {
@@ -623,16 +834,13 @@ async function handleConfigGet(input, _server) {
   }
 }
 async function handleConfigSet(input, server) {
-  const elicit = await server.server.elicitInput({
+  const confirmation = await confirmDestructive(server, {
     message: `Set ${input.key} = ${input.value} on stack "${input.stackName ?? "default"}"?`,
-    requestedSchema: {
-      type: "object",
-      properties: { confirmed: { type: "boolean", title: "Confirm config change" } },
-      required: ["confirmed"]
-    }
+    title: "Confirm config change",
+    what: "changing gateway configuration"
   });
-  if (elicit.action !== "accept" || !elicit.content?.["confirmed"]) {
-    return okText("Config change cancelled.");
+  if (!confirmation.confirmed) {
+    return okText(confirmation.reason);
   }
   const ac = new AbortController();
   const ctx = buildContext({ stack: input.stackName });
@@ -672,16 +880,13 @@ async function handleConfigSet(input, server) {
   }
 }
 async function handleConfigUnset(input, server) {
-  const elicit = await server.server.elicitInput({
+  const confirmation = await confirmDestructive(server, {
     message: `Remove config key "${input.key}" on stack "${input.stackName ?? "default"}"?`,
-    requestedSchema: {
-      type: "object",
-      properties: { confirmed: { type: "boolean", title: "Confirm key removal" } },
-      required: ["confirmed"]
-    }
+    title: "Confirm key removal",
+    what: "changing gateway configuration"
   });
-  if (elicit.action !== "accept" || !elicit.content?.["confirmed"]) {
-    return okText("Config unset cancelled.");
+  if (!confirmation.confirmed) {
+    return okText(confirmation.reason);
   }
   const ac = new AbortController();
   const ctx = buildContext({ stack: input.stackName });
@@ -783,42 +988,34 @@ async function handleAgentsList(input, _server) {
     drainPool();
   }
 }
-
-// src/mcp/tools/cli/gateway.ts
-async function handleGatewayRestart(input, server) {
-  const elicit = await server.server.elicitInput({
-    message: `Restart the OpenClaw gateway on stack "${input.stackName ?? "default"}"? This will briefly interrupt connections.`,
-    requestedSchema: {
-      type: "object",
-      properties: { confirmed: { type: "boolean", title: "Confirm restart" } },
-      required: ["confirmed"]
-    }
-  });
-  if (elicit.action !== "accept" || !elicit.content?.["confirmed"]) {
-    return okText("Gateway restart cancelled.");
+async function handleAgentsLogs(input, _server) {
+  if (input.name.trim() === "") {
+    return errText("name is required: the agent name, as clawops_agents_list reports it.");
   }
   const ctx = buildContext({ stack: input.stackName });
   const conn = await resolveConn(ctx);
   const { session, release } = await acquireSession(conn);
   try {
-    const imgResult = await execPrivileged(session, IMAGE_INSPECT_CMD);
-    const image = imageForRestart(imgResult.stdout);
-    if (!image.ok) return errText(image.error);
-    const result = await execPrivileged(
-      session,
-      gatewayRunCommand({ image: image.value, stateDir: STATE_DIR_HOST_LINUX })
-    );
-    if (result.code !== 0) {
-      return errText(`Gateway restart failed: ${result.stderr}`);
-    }
-    return okText("Gateway restarted successfully.");
+    const page = await readAgentActivity(session, {
+      agentId: input.name,
+      limit: input.limit ?? DEFAULT_AGENT_LOG_LIMIT,
+      ...input.cursor ? { cursor: input.cursor } : {}
+    });
+    if (!page.ok) return errText(page.error);
+    const body = {
+      agent: input.name,
+      ...page.value.cursor ? { cursor: page.value.cursor } : {},
+      count: page.value.records.length,
+      records: page.value.records
+    };
+    return okText(trimForMcp(JSON.stringify(body, null, 2), ctx.stackName).content);
   } finally {
     release();
     drainPool();
   }
 }
 
-// src/mcp/tools/cli/up.ts
+// src/mcp/tools/cli/gateway.ts
 import { randomUUID as randomUUID2 } from "crypto";
 
 // src/mcp/progress.ts
@@ -852,19 +1049,100 @@ function makeProgressEmitter(server, progressToken) {
   };
 }
 
+// src/mcp/tools/cli/gateway.ts
+async function handleGatewayRestart(input, server) {
+  const confirmation = await confirmDestructive(server, {
+    message: `Restart the OpenClaw gateway on stack "${input.stackName ?? "default"}"? This will briefly interrupt connections.`,
+    title: "Confirm restart",
+    what: "restarting the gateway"
+  });
+  if (!confirmation.confirmed) {
+    return okText(confirmation.reason);
+  }
+  const ctx = buildContext({ stack: input.stackName });
+  const conn = await resolveConn(ctx);
+  const { session, release } = await acquireSession(conn);
+  try {
+    await restartGateway(session);
+    return okText("Gateway restarted.");
+  } catch (e) {
+    return errText(e.message);
+  } finally {
+    release();
+    drainPool();
+  }
+}
+async function handleGatewayStatus(input, _server) {
+  const ctx = buildContext({ stack: input.stackName });
+  const conn = await resolveConn(ctx);
+  const { session, release } = await acquireSession(conn);
+  try {
+    const status = await gatewayStatus(session);
+    if (!status.ok) return errText(status.error);
+    return okText(trimForMcp(JSON.stringify(status.value, null, 2), ctx.stackName).content);
+  } finally {
+    release();
+    drainPool();
+  }
+}
+async function handleGatewayUpdate(input, server) {
+  if (input.version.trim() === "") {
+    return errText("version is required: name the concrete OpenClaw version to move to, e.g. 2026.9.2.");
+  }
+  const target = await resolveUpdateVersion(input.version);
+  if (!target.ok) return errText(target.error);
+  const version = target.value;
+  const ctx = buildContext({ stack: input.stackName });
+  const conn = await resolveConn(ctx);
+  const { session, release } = await acquireSession(conn);
+  try {
+    if (!input.yes) {
+      const current = await currentGatewayVersion(session).catch(() => void 0);
+      const confirmation = await confirmDestructive(server, {
+        message: `Update the OpenClaw gateway on stack "${ctx.stackName}" ${current ? `from ${current} ` : ""}to ${version}? Every agent on the host restarts with it. A snapshot of the state database is taken first.`,
+        title: "Confirm update",
+        what: `updating the gateway to ${version}`
+      });
+      if (!confirmation.confirmed) return okText(confirmation.reason);
+    }
+    const taskId = randomUUID2();
+    const emit = makeProgressEmitter(server, void 0);
+    startTask(taskId, `clawops_gateway_update stack=${ctx.stackName} version=${version}`);
+    const notes = [];
+    try {
+      emit(`Updating gateway to ${version}...`);
+      const result = await updateGateway(session, version, {
+        onProgress: emit,
+        onNote: (text4) => {
+          notes.push(text4);
+          emit(text4);
+        }
+      });
+      const text3 = [result.message, ...result.ok ? [] : result.hint ? [result.hint] : [], ...notes].join("\n");
+      updateTask(taskId, result.ok ? "completed" : "failed", result.ok ? text3 : void 0, result.ok ? void 0 : text3);
+      const { content } = trimForMcp(text3, ctx.stackName);
+      return result.ok ? okText(content) : errText(content);
+    } catch (e) {
+      updateTask(taskId, "failed", void 0, e instanceof Error ? e.message : String(e));
+      throw e;
+    }
+  } finally {
+    release();
+    drainPool();
+  }
+}
+
 // src/mcp/tools/cli/up.ts
+import { randomUUID as randomUUID3 } from "crypto";
 async function handleUp(input, server) {
   if (!input.dryRun) {
-    const elicit = await server.server.elicitInput({
+    const confirmation = await confirmDestructive(server, {
       message: `Deploy stack "${input.stackName ?? "default"}" (provider: ${input.provider ?? "from config"}, instance: ${input.instanceType})? This will provision cloud resources.`,
-      requestedSchema: {
-        type: "object",
-        properties: { confirmed: { type: "boolean", title: "Confirm deployment" } },
-        required: ["confirmed"]
-      }
+      title: "Confirm deployment",
+      what: "provisioning cloud resources"
     });
-    if (elicit.action !== "accept" || !elicit.content?.["confirmed"]) {
-      return okText("Deployment cancelled.");
+    if (!confirmation.confirmed) {
+      return okText(confirmation.reason);
     }
   }
   const ctx = buildContext({ stack: input.stackName, provider: input.provider });
@@ -877,7 +1155,7 @@ async function handleUp(input, server) {
       );
     }
     const { localOpts } = stackConfig;
-    const { localBootstrap } = await import("./bootstrap-NN647RCY.js");
+    const { localBootstrap } = await import("./bootstrap-32TZXVDF.js");
     const ac = new AbortController();
     const state = await localBootstrap({
       host: localOpts.host,
@@ -896,12 +1174,12 @@ async function handleUp(input, server) {
   if (!validation.ok) {
     return errText(`Provider config invalid: ${validation.errors.join("; ")}`);
   }
-  const taskId = randomUUID2();
+  const taskId = randomUUID3();
   const progressToken = void 0;
   const emit = makeProgressEmitter(server, progressToken);
   startTask(taskId, `clawops_up stack=${ctx.stackName}`);
-  const { generatePlan: generatePlan2 } = await import("./generate-Q2BGVMH7.js");
-  const { applyPlan: applyPlan2 } = await import("./apply-HJ5GAKHW.js");
+  const { generatePlan: generatePlan2 } = await import("./generate-4YYNW3IU.js");
+  const { applyPlan: applyPlan2 } = await import("./apply-F5SQ2ZOS.js");
   const { resolveNetworkFlags } = await import("./network-args-PYJRJBYO.js");
   const { detectEgressIp } = await import("./firewall-5VKZ4WBH.js");
   const network = await resolveNetworkFlags(
@@ -950,26 +1228,23 @@ async function handleUp(input, server) {
 }
 
 // src/mcp/tools/cli/destroy.ts
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID4 } from "crypto";
 async function handleDestroy(input, server) {
   if (!input.yes) {
-    const elicit = await server.server.elicitInput({
+    const confirmation = await confirmDestructive(server, {
       message: `DESTROY stack "${input.stackName}"? This permanently deletes all provisioned resources and cannot be undone.`,
-      requestedSchema: {
-        type: "object",
-        properties: { confirmed: { type: "boolean", title: "Confirm destruction (irreversible)" } },
-        required: ["confirmed"]
-      }
+      title: "Confirm destruction (irreversible)",
+      what: "destroying a stack"
     });
-    if (elicit.action !== "accept" || !elicit.content?.["confirmed"]) {
-      return okText("Destruction cancelled.");
+    if (!confirmation.confirmed) {
+      return okText(confirmation.reason);
     }
   }
   const ctx = buildContext({ stack: input.stackName });
   if (ctx.adapter.name === "local") {
     return errText("Local provider stacks are destroyed with `clawops down --destroy` via SSH. Use clawops_up with the local provider instead.");
   }
-  const taskId = randomUUID3();
+  const taskId = randomUUID4();
   const emit = makeProgressEmitter(server, void 0);
   startTask(taskId, `clawops_destroy stack=${input.stackName}`);
   try {
@@ -1019,7 +1294,7 @@ async function handlePlan(input, _server) {
     let network = resolved;
     if (input.privateOnly) {
       const { privateOnlyNetwork, assertTailnetReachable } = await import("./private-only-DIA26I2E.js");
-      const { probeSsh } = await import("./tailscale-cutover-6YP2QKFM.js");
+      const { probeSsh } = await import("./tailscale-cutover-V42HO5UM.js");
       network = privateOnlyNetwork(flags, resolved, ctx.config.stacks[stackName]?.tailscale, stackName);
       await assertTailnetReachable(ctx, (conn) => probeSsh(conn));
     }
@@ -1056,30 +1331,31 @@ async function handleHarden(input, server) {
       "tailscale and tailscaleRevert do the opposite of each other; pass one, not both."
     );
   }
-  const { getConfig: getConfig2 } = await import("./store-OVB3DAJR.js");
+  const { getConfig: getConfig2 } = await import("./store-YOLQYXMB.js");
   const config = getConfig2();
-  if (!config) return errText("No clawops config found. The user needs to run `clawops init` first.");
+  if (!config) {
+    return errText(
+      "No clawops config on this machine. Call clawops_init first to register a stack; until then every clawops tool will say this."
+    );
+  }
   const ctx = buildContext({ stack: input.stackName });
   if (!input.dryRun && !input.yes) {
     const what = input.tailscaleRevert ? `Take "${ctx.stackName}" off its tailnet and go back to its public address?` : input.tailscale ? `Harden "${ctx.stackName}" and join it to your tailnet? clawops will use the tailnet address afterwards.` : `Apply hardening modules to "${ctx.stackName}"? This changes the running host.`;
-    const elicit = await server.server.elicitInput({
+    const confirmation = await confirmDestructive(server, {
       message: what,
-      requestedSchema: {
-        type: "object",
-        properties: { confirmed: { type: "boolean", title: "Confirm" } },
-        required: ["confirmed"]
-      }
+      title: "Confirm",
+      what: "changing a running host"
     });
-    if (elicit.action !== "accept" || !elicit.content?.["confirmed"]) {
-      return okText("Hardening cancelled. Nothing was changed.");
+    if (!confirmation.confirmed) {
+      return okText(confirmation.reason);
     }
   }
-  const { revertTailnet, cutOverToTailnet, connectionFor } = await import("./flows-RI7FGHAM.js");
+  const { revertTailnet, cutOverToTailnet, connectionFor } = await import("./flows-6B2I6TRW.js");
   if (input.tailscaleRevert) {
     const outcome = await revertTailnet(ctx, config);
     return outcome.ok ? okText(outcome.message) : errText(outcome.reason);
   }
-  const { MODULE_CATALOG, resolveModules, runHardening, formatHardenSummary, makeTailscaleModule } = await import("./harden-3KKCR7BL.js");
+  const { MODULE_CATALOG, resolveModules, runHardening, formatHardenSummary, makeTailscaleModule } = await import("./harden-UHAOVQMZ.js");
   const forStack = makeTailscaleModule(ctx.stackName);
   const resolved = resolveModules(MODULE_CATALOG, input.options, ctx.adapter.name).map(
     (m) => m.id === "tailscale" ? forStack : m
@@ -1121,9 +1397,35 @@ async function handleHarden(input, server) {
   return failed.length > 0 ? errText(content) : okText(content);
 }
 
+// src/mcp/tools/cli/init.ts
+async function handleInit(input, _server) {
+  const { initStack } = await import("./init-HOPXDNWY.js");
+  const result = await initStack({
+    provider: input.provider,
+    stackName: input.stackName,
+    stateUrl: input.stateUrl,
+    region: input.region,
+    force: input.force,
+    host: input.host,
+    sshUser: input.sshUser,
+    sshPort: input.sshPort
+  });
+  if (!result.ok) return errText(result.reason);
+  const lines = [
+    `Stack "${result.stackName}" registered for ${result.provider}.`,
+    `Config:        ${result.configPath}`,
+    `State backend: ${result.stateUrl}`,
+    ...result.region ? [`Region:        ${result.region}`] : [],
+    `SSH key:       ${result.keyPath}${result.keyGenerated ? " (generated now)" : " (already existed)"}`,
+    "",
+    "Nothing has been provisioned and nothing is being charged. Deploying from here needs cloud credentials in the environment clawops runs in; clawops_doctor reports which are missing."
+  ];
+  return okText(lines.join("\n"));
+}
+
 // src/mcp/tools/cli/apply.ts
 import { readFileSync } from "fs";
-import { randomUUID as randomUUID4 } from "crypto";
+import { randomUUID as randomUUID5 } from "crypto";
 async function handleApply(input, server) {
   let plan;
   try {
@@ -1142,21 +1444,18 @@ ${validation.errors.join("\n")}`);
   }
   if (!input.yes) {
     const diffLine = plan.diff ? `${plan.diff.create.length} to create, ${plan.diff.update.length} to update, ${plan.diff.delete.length} to delete` : "diff unavailable";
-    const elicit = await server.server.elicitInput({
+    const confirmation = await confirmDestructive(server, {
       message: `Apply plan for stack "${plan.spec.stackName}" (${plan.spec.provider})?
 Changes: ${diffLine}.
 This will provision cloud resources and may incur costs.`,
-      requestedSchema: {
-        type: "object",
-        properties: { confirmed: { type: "boolean", title: "Confirm plan apply" } },
-        required: ["confirmed"]
-      }
+      title: "Confirm plan apply",
+      what: "applying a plan"
     });
-    if (elicit.action !== "accept" || !elicit.content?.["confirmed"]) {
-      return okText("Apply cancelled.");
+    if (!confirmation.confirmed) {
+      return okText(confirmation.reason);
     }
   }
-  const taskId = randomUUID4();
+  const taskId = randomUUID5();
   const emit = makeProgressEmitter(server, void 0);
   startTask(taskId, `clawops_apply stack=${plan.spec.stackName}`);
   try {
@@ -1196,7 +1495,7 @@ async function handleTaskStatus(input, _server) {
 
 // src/mcp/tools/cli/monitor.ts
 async function handleMonitor(input, _server) {
-  const { acquireSession: acquireSession2, drainPool: drainPool2 } = await import("./pool-PIIKJ4L2.js");
+  const { acquireSession: acquireSession2, drainPool: drainPool2 } = await import("./pool-NT4XBSUT.js");
   const ctx = buildContext({ stack: input.stackName });
   const tailLines = input.tailLines ?? 5;
   let conn;
@@ -1250,6 +1549,255 @@ function text2(t) {
   return { content: [{ type: "text", text: t }] };
 }
 
+// src/mcp/tools/cli/backup.ts
+import { randomUUID as randomUUID6 } from "crypto";
+import { mkdirSync as mkdirSync3 } from "fs";
+import path3 from "path";
+function relativePathRefusal(param, value) {
+  return `"${param}" must be an absolute path; got "${value}". The MCP server does not resolve paths against a working directory. Pass the full path, e.g. /Users/me/backups/openclaw.tar.gz.`;
+}
+function capped(text3, stackName, isError = false) {
+  const { content } = trimForMcp(text3, stackName);
+  return isError ? errText(content) : okText(content);
+}
+async function handleBackupCreate(input, server) {
+  if (input.out !== void 0 && !path3.isAbsolute(input.out)) {
+    return errText(relativePathRefusal("out", input.out));
+  }
+  const ctx = buildContext({ stack: input.stackName });
+  let outPath = input.out;
+  if (outPath === void 0) {
+    const dir = path3.join(getConfigDir(), "backups");
+    mkdirSync3(dir, { recursive: true, mode: 448 });
+    outPath = path3.join(dir, defaultBackupFilename());
+  }
+  const taskId = randomUUID6();
+  const emit = makeProgressEmitter(server, void 0);
+  startTask(taskId, `clawops_backup_create stack=${ctx.stackName}`);
+  const ac = new AbortController();
+  const conn = await resolveConn(ctx);
+  const { session, release } = await acquireSession({ ...conn, signal: ac.signal });
+  try {
+    const created = await createBackup(session, {
+      outPath,
+      signal: ac.signal,
+      onPhase: (phase) => emit(phase === "creating" ? "Creating backup on remote host..." : `Downloading to ${outPath}...`)
+    });
+    if (!created.ok) {
+      updateTask(taskId, "failed", void 0, created.reason);
+      return capped(created.reason, ctx.stackName, true);
+    }
+    const summary = [`Backup saved to ${created.path}`, ...ARCHIVE_IS_A_CREDENTIAL].join("\n");
+    updateTask(taskId, "completed", summary);
+    return capped(summary, ctx.stackName);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    updateTask(taskId, "failed", void 0, msg);
+    return errText(`Backup failed: ${msg}`);
+  } finally {
+    release();
+    drainPool();
+  }
+}
+async function handleBackupRestore(input, server) {
+  if (!path3.isAbsolute(input.file)) {
+    return errText(relativePathRefusal("file", input.file));
+  }
+  const activate = input.activate === true;
+  const stackLabel = input.stackName ?? "default";
+  if (!input.yes) {
+    const confirmation = await confirmDestructive(server, activate ? {
+      message: `ACTIVATE the backup ${input.file} on stack "${stackLabel}"? The gateway is stopped and the restored state put into service. Everything since the backup is lost from the live gateway (the state it replaces is kept alongside it), and channel credentials may need relinking. clawops puts the previous state back if the gateway does not come up.`,
+      title: "Confirm restore and activation",
+      what: "activating a restored backup"
+    } : {
+      message: `Expand the backup ${input.file} onto stack "${stackLabel}", staging only? It is verified and expanded beside the live state; the gateway and its live state are not touched.`,
+      title: "Confirm staging-only restore",
+      what: "restoring a backup to a staging directory"
+    });
+    if (!confirmation.confirmed) return okText(confirmation.reason);
+  }
+  const ctx = buildContext({ stack: input.stackName });
+  const taskId = randomUUID6();
+  const emit = makeProgressEmitter(server, void 0);
+  startTask(taskId, `clawops_backup_restore stack=${ctx.stackName}${activate ? " activate" : ""}`);
+  const fail = (text3) => {
+    updateTask(taskId, "failed", void 0, text3);
+    return capped(text3, ctx.stackName, true);
+  };
+  const ac = new AbortController();
+  const conn = await resolveConn(ctx);
+  const { session, release } = await acquireSession({ ...conn, signal: ac.signal });
+  try {
+    const staged = await stageRestore(session, {
+      file: input.file,
+      signal: ac.signal,
+      onPhase: (phase) => emit(phase === "uploading" ? "Uploading archive..." : "Verifying and restoring to a staging directory...")
+    });
+    const raw = staged.unparsedReport !== void 0 ? [`OpenClaw reported: ${staged.unparsedReport}`] : [];
+    if (!staged.ok) {
+      return fail([
+        staged.reason,
+        ...staged.stagingOnHost ? [nothingChanged(staged.stagingOnHost)] : [],
+        ...raw
+      ].join("\n"));
+    }
+    const lines = [
+      `Archive verified and expanded to ${staged.stagingOnHost} on the host.`,
+      ...staged.entryCount !== void 0 ? [`${staged.entryCount} entries restored.`] : [],
+      ...raw,
+      // Verbatim: rolled-back approvals and channel credentials are the operator's to judge.
+      ...staged.warnings.map((w) => `Warning: ${w}`)
+    ];
+    if (!activate) {
+      lines.push(
+        "",
+        "Nothing has been activated. Call clawops_backup_restore again with activate: true to put",
+        "this state into service. The state to adopt is",
+        `  ${staged.statePath}`,
+        `(the archive holds ${staged.stateDirInArchive} under payload/posix), replacing ${staged.stateDir}.`,
+        ...PLUGINS_NOT_CARRIED
+      );
+      const text4 = lines.join("\n");
+      updateTask(taskId, "completed", text4);
+      return capped(text4, ctx.stackName);
+    }
+    const outcome = await activateStaged(session, staged, {
+      signal: ac.signal,
+      onPhase: (phase) => {
+        if (phase === "activating") emit("Activating the restored state...");
+        else if (phase === "restarting") emit("Restarting the gateway...");
+        else if (phase === "waiting") emit("Waiting for the gateway to answer...");
+      }
+    });
+    if (!outcome.ok) {
+      return fail([...lines, "", outcome.reason, ...activationFailureDetail(outcome)].join("\n"));
+    }
+    lines.push("", ACTIVATED, ...activatedLines(outcome.preserved));
+    const text3 = lines.join("\n");
+    updateTask(taskId, "completed", text3);
+    return capped(text3, ctx.stackName);
+  } catch (err) {
+    return fail(`Restore failed: ${err instanceof Error ? err.message : String(err)}`);
+  } finally {
+    release();
+    drainPool();
+  }
+}
+
+// src/mcp/tools/cli/migrate.ts
+import { randomUUID as randomUUID7 } from "crypto";
+var SYNC_WINDOW = { ms: 1e4 };
+async function handleMigrate(input, server) {
+  let target;
+  try {
+    target = await prepareMigration({ stack: input.stackName, openclawVersion: input.openclawVersion });
+  } catch (err) {
+    if (err instanceof UsageError) return errText(err.message);
+    throw err;
+  }
+  if (!input.yes) {
+    const confirmation = await confirmDestructive(server, {
+      message: migrationQuestion(target),
+      title: `Confirm migrating "${target.stackName}" to ${target.version}`,
+      what: `migrating stack "${target.stackName}"`
+    });
+    if (!confirmation.confirmed) return okText(confirmation.reason);
+  }
+  const taskId = randomUUID7();
+  const emit = makeProgressEmitter(server, void 0);
+  startTask(taskId, `clawops_migrate stack=${target.stackName} target=${target.version}`);
+  const run = runMigration(target, {
+    onStep: (text3) => {
+      emit(text3);
+      updateTask(taskId, "running", text3);
+    }
+  }).then(
+    (result) => {
+      const text3 = render(result, target.stackName);
+      updateTask(taskId, result.exitCode === 0 ? "completed" : "failed", text3, result.exitCode === 0 ? void 0 : text3);
+      return { kind: "done", result, text: text3 };
+    },
+    (err) => {
+      const msg = err instanceof Error ? err.message : String(err);
+      updateTask(taskId, "failed", void 0, msg);
+      return { kind: "error", err, msg };
+    }
+  );
+  let timer;
+  const timeout = new Promise((resolve) => {
+    timer = setTimeout(() => resolve({ kind: "pending" }), SYNC_WINDOW.ms);
+  });
+  const first = await Promise.race([run, timeout]);
+  clearTimeout(timer);
+  if (first.kind === "pending") {
+    return okText(
+      JSON.stringify(
+        {
+          taskId,
+          status: "running",
+          stack: target.stackName,
+          target: target.version,
+          message: "The migration is still running on the host. Poll clawops_task_status with this taskId for the outcome; do not start another migration of this stack meanwhile."
+        },
+        null,
+        2
+      )
+    );
+  }
+  if (first.kind === "error") {
+    if (first.err instanceof UsageError) return errText(first.msg);
+    throw first.err;
+  }
+  return first.result.exitCode === 0 ? okText(first.text) : errText(first.text);
+}
+function render(result, stackName) {
+  const text3 = result.lines.map((l) => l.text).join("\n");
+  return trimForMcp(text3, stackName).content;
+}
+
+// src/mcp/tools/cli/secret.ts
+var RESOURCE_NAME = "secrets";
+function capped2(payload) {
+  const { content } = trimForMcp(JSON.stringify(payload, null, 2), RESOURCE_NAME);
+  return okText(content);
+}
+async function handleSecretList(_input, _server) {
+  const secrets = listSecrets();
+  if (secrets.length === 0) {
+    return capped2({ secrets, message: `${NO_SECRETS_MESSAGE} ${SET_SECRET_HINT}` });
+  }
+  return capped2({ secrets });
+}
+async function handleSecretAudit(_input, _server) {
+  const report = auditSecrets();
+  return capped2({
+    ...report,
+    message: report.ok ? AUDIT_CLEAN_MESSAGE : AUDIT_FIX_HINT
+  });
+}
+async function handleSecretDelete(input, server) {
+  const prepared = prepareSecretDelete(input.name);
+  if (!prepared.ok) return errText(prepared.reason);
+  if (!input.yes) {
+    const confirmation = await confirmDestructive(server, {
+      message: [deleteConfirmQuestion(prepared.name), ...prepared.warnings].join("\n"),
+      title: `Delete secret "${prepared.name}"`,
+      what: `deleting secret "${prepared.name}"`
+    });
+    if (!confirmation.confirmed) {
+      return okText([confirmation.reason, ...prepared.warnings].join("\n"));
+    }
+  }
+  const message = deletePreparedSecret(prepared);
+  return capped2({
+    deleted: prepared.name,
+    message,
+    referencingStacks: prepared.referencingStacks,
+    warnings: prepared.warnings
+  });
+}
+
 // src/mcp/tools/workflow/deploy_app.ts
 async function handleWorkflowDeployApp(input, server) {
   const parts = [`## Deployment Workflow \u2014 ${input.provider} / ${input.stackName}
@@ -1282,17 +1830,14 @@ Falling back to direct deployment.`);
     );
   }
   const diffLine = plan.diff ? `${plan.diff.create.length} to create, ${plan.diff.update.length} to update, ${plan.diff.delete.length} to delete` : "? changes";
-  const elicit = await server.server.elicitInput({
+  const confirmation = await confirmDestructive(server, {
     message: `Deploy OpenClaw on ${provider} (stack: "${input.stackName}", instance: ${input.instanceType}${input.region ? `, region: ${input.region}` : ""})?
 Changes: ${diffLine}. This will provision cloud resources and may incur costs.`,
-    requestedSchema: {
-      type: "object",
-      properties: { confirmed: { type: "boolean", title: "Confirm end-to-end deployment" } },
-      required: ["confirmed"]
-    }
+    title: "Confirm end-to-end deployment",
+    what: "provisioning cloud resources"
   });
-  if (elicit.action !== "accept" || !elicit.content?.["confirmed"]) {
-    return okText("Deployment workflow cancelled.");
+  if (!confirmation.confirmed) {
+    return okText(confirmation.reason);
   }
   parts.push("### Step 2: Apply");
   const emit = makeProgressEmitter(server, void 0);
@@ -1371,11 +1916,22 @@ var TOOL_REGISTRY = {
   clawops_destroy: makeEntry(clawops_destroySchema, clawops_destroyAnnotations, handleDestroy, clawops_destroyDescription),
   clawops_apply: makeEntry(clawops_applySchema, clawops_applyAnnotations, handleApply, clawops_applyDescription),
   clawops_plan: makeEntry(clawops_planSchema, clawops_planAnnotations, handlePlan, clawops_planDescription),
+  clawops_init: makeEntry(clawops_initSchema, clawops_initAnnotations, handleInit, clawops_initDescription),
   clawops_harden: makeEntry(clawops_hardenSchema, clawops_hardenAnnotations, handleHarden, clawops_hardenDescription),
   clawops_config_set: makeEntry(clawops_config_setSchema, clawops_config_setAnnotations, handleConfigSet, clawops_config_setDescription),
   clawops_config_unset: makeEntry(clawops_config_unsetSchema, clawops_config_unsetAnnotations, handleConfigUnset, clawops_config_unsetDescription),
   clawops_config_validate: makeEntry(clawops_config_validateSchema, clawops_config_validateAnnotations, handleConfigValidate, clawops_config_validateDescription),
   clawops_gateway_restart: makeEntry(clawops_gateway_restartSchema, clawops_gateway_restartAnnotations, handleGatewayRestart, clawops_gateway_restartDescription),
+  clawops_agents_logs: makeEntry(clawops_agents_logsSchema, clawops_agents_logsAnnotations, handleAgentsLogs, clawops_agents_logsDescription),
+  clawops_gateway_status: makeEntry(clawops_gateway_statusSchema, clawops_gateway_statusAnnotations, handleGatewayStatus, clawops_gateway_statusDescription),
+  clawops_secret_list: makeEntry(clawops_secret_listSchema, clawops_secret_listAnnotations, handleSecretList, clawops_secret_listDescription),
+  clawops_secret_audit: makeEntry(clawops_secret_auditSchema, clawops_secret_auditAnnotations, handleSecretAudit, clawops_secret_auditDescription),
+  clawops_gateway_update: makeEntry(clawops_gateway_updateSchema, clawops_gateway_updateAnnotations, handleGatewayUpdate, clawops_gateway_updateDescription),
+  clawops_backup_create: makeEntry(clawops_backup_createSchema, clawops_backup_createAnnotations, handleBackupCreate, clawops_backup_createDescription),
+  clawops_backup_restore: makeEntry(clawops_backup_restoreSchema, clawops_backup_restoreAnnotations, handleBackupRestore, clawops_backup_restoreDescription),
+  clawops_migrate: makeEntry(clawops_migrateSchema, clawops_migrateAnnotations, handleMigrate, clawops_migrateDescription),
+  clawops_stacks_delete: makeEntry(clawops_stacks_deleteSchema, clawops_stacks_deleteAnnotations, handleStacksDelete, clawops_stacks_deleteDescription),
+  clawops_secret_delete: makeEntry(clawops_secret_deleteSchema, clawops_secret_deleteAnnotations, handleSecretDelete, clawops_secret_deleteDescription),
   clawops_workflow_deploy_app: makeEntry(clawops_workflow_deploy_appSchema, clawops_workflow_deploy_appAnnotations, handleWorkflowDeployApp, clawops_workflow_deploy_appDescription),
   clawops_workflow_recover: makeEntry(clawops_workflow_recoverSchema, clawops_workflow_recoverAnnotations, handleWorkflowRecover, clawops_workflow_recoverDescription),
   clawops_task_status: makeEntry(clawops_task_statusSchema, clawops_task_statusAnnotations, handleTaskStatus, clawops_task_statusDescription)
@@ -1427,7 +1983,7 @@ function registerTools(server, opts) {
 
 // src/mcp/resources.ts
 import { readFileSync as readFileSync2 } from "fs";
-import path3 from "path";
+import path4 from "path";
 import { ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
 function registerResources(server) {
   server.registerResource(
@@ -1479,7 +2035,7 @@ function registerResources(server) {
     { description: "Full Pulumi output from the last up/destroy run for a stack" },
     async (uri, { name }) => {
       const stackName = Array.isArray(name) ? name[0] : name;
-      const filePath = path3.join(getConfigDir(), "state", `${stackName}.last-run.json`);
+      const filePath = path4.join(getConfigDir(), "state", `${stackName}.last-run.json`);
       let text3;
       try {
         const raw = readFileSync2(filePath, "utf-8");
@@ -1676,7 +2232,7 @@ function bearerFrom(header) {
   return match?.[1]?.trim();
 }
 async function serveMcp(opts) {
-  const { version } = await import("./package-JFVGCNKU.js");
+  const { version } = await import("./package-HYGHRX35.js");
   const makeServer = () => {
     const server = new McpServer({ name: "clawops", version });
     registerTools(server, opts);
@@ -1744,7 +2300,7 @@ async function handleHttp(req, res, sessions, makeServer, token) {
     return;
   }
   const transport = new StreamableHTTPServerTransport({
-    sessionIdGenerator: () => randomUUID5(),
+    sessionIdGenerator: () => randomUUID8(),
     onsessioninitialized: (id) => {
       sessions.set(id, transport);
     }