@clawops/cli 2.1.2 → 2.2.0

package/spec/mcp-tools.yaml

@@ -86,9 +86,8 @@ tools:
       actually running.
 
       Do NOT use when: you already know the problem and want to fix it. This tool only
-      reports — it changes nothing, and never runs `openclaw doctor --fix`. No tool
-      repairs a gateway: `clawops gateway update` is CLI-only, so tell the user to run
-      it themselves, after `clawops backup create`.
+      reports — it changes nothing, and never runs `openclaw doctor --fix`. To move a
+      gateway to another version, use clawops_gateway_update after clawops_backup_create.
 
       Every check carries a status: fail (something is wrong that clawops can name),
       warn (worth knowing, not broken), info (did not apply). `ok` is false only when
@@ -136,8 +135,8 @@ tools:
       idempotentHint: true
       openWorldHint: true
     input:
-      stackName: { type: string, optional: true }
-      tailLines: { type: integer, optional: true, default: 100, max: 1000 }
+      stackName: { type: string, optional: true, description: "Which stack's gateway to read. Omitted = the default stack in ~/.clawops/config.json" }
+      tailLines: { type: integer, optional: true, default: 100, max: 1000, description: "How many of the most recent lines to return. Keep it small; output is trimmed to 8KB regardless" }
       sinceMin: { type: integer, optional: true, description: "Lines since N minutes ago" }
     output:
       lines: { type: array, items: { type: string }, description: "Trimmed log lines (R14: hard cap 8KB)" }
@@ -227,7 +226,7 @@ tools:
       idempotentHint: true
       openWorldHint: true
     input:
-      stackName: { type: string, optional: true }
+      stackName: { type: string, optional: true, description: "Which stack's gateway config to read. Omitted = the default stack in ~/.clawops/config.json" }
       key: { type: string, optional: true, description: "Dot-path config key, e.g., gateway.auth.mode. Omit to dump the full config." }
     output:
       value: { type: string, description: "Stringified value; complex objects are JSON-encoded" }
@@ -240,8 +239,7 @@ tools:
       Use when: the user wants to see which agents are running, debug agent
       routing, or count active workspaces.
 
-      Do NOT use when: the user wants one agent's logs — no tool exposes those; tell
-      the user to run `clawops agents logs <name>`.
+      Do NOT use when: the user wants one agent's activity — that is clawops_agents_logs.
     annotations:
       title: List OpenClaw Agents
       readOnlyHint: true
@@ -249,7 +247,7 @@ tools:
       idempotentHint: true
       openWorldHint: true
     input:
-      stackName: { type: string, optional: true }
+      stackName: { type: string, optional: true, description: "Which stack's agents to list. Omitted = the default stack in ~/.clawops/config.json" }
     output:
       agents:
         type: array
@@ -261,6 +259,84 @@ tools:
             status: { type: enum, values: [running, paused, errored, stopped] }
             channels: { type: array, items: { type: string } }
 
+  - name: clawops_agents_logs
+    toolset: [cli, read]
+    description: |
+      One agent's recent activity, read from the gateway's audit log, newest last.
+      Paginated: pass the returned cursor to continue.
+
+      Use when: the user asks what a specific agent did, or why it behaved as it did.
+
+      Do NOT use when: the user wants the gateway's own log stream — that is
+      clawops_logs_tail. Do NOT use to find agent names — that is clawops_agents_list.
+    annotations:
+      title: Read One Agent's Activity
+      readOnlyHint: true
+      destructiveHint: false
+      idempotentHint: true
+      openWorldHint: true
+    input:
+      stackName: { type: string, optional: true, description: "Which stack the agent runs on. Omitted = the default stack in ~/.clawops/config.json" }
+      name: { type: string, description: "The agent's name, as clawops_agents_list reports it" }
+      limit: { type: integer, optional: true, default: 50, description: "Maximum activity records to return. Omitted = 50" }
+      cursor: { type: string, optional: true, description: "The cursor a previous call returned, to continue from where it stopped. Omitted = the most recent records" }
+
+  - name: clawops_gateway_status
+    toolset: [cli, read]
+    description: |
+      Whether the OpenClaw gateway container is running, when it started, and which image it
+      runs, as docker reports it on the host.
+
+      Use when: the user asks whether the gateway is up or which OpenClaw version is deployed.
+
+      Do NOT use when: the user wants a full health check — clawops_doctor probes the gateway
+      itself rather than the container. Do NOT use to change anything; this only reads.
+    annotations:
+      title: Gateway Container Status
+      readOnlyHint: true
+      destructiveHint: false
+      idempotentHint: true
+      openWorldHint: true
+    input:
+      stackName: { type: string, optional: true, description: "Which stack's gateway to inspect. Omitted = the default stack in ~/.clawops/config.json" }
+
+  - name: clawops_secret_list
+    toolset: [cli, read]
+    description: |
+      List the secrets clawops stores locally, by name and status. Never returns a value.
+
+      Use when: the user asks which secrets are set, or before a deploy that references one.
+
+      Do NOT use when: the user wants to set or rotate a secret. No tool does that, because the
+      value would pass through the conversation (R6): ask the user to run
+      `clawops secret set <NAME>` or `clawops secret rotate <NAME>` in a terminal.
+    annotations:
+      title: List Stored Secrets
+      readOnlyHint: true
+      destructiveHint: false
+      idempotentHint: true
+      openWorldHint: false
+    input: {}
+
+  - name: clawops_secret_audit
+    toolset: [cli, read]
+    description: |
+      Report secrets that stacks reference but clawops does not have, and `$secret:` references
+      that cannot be resolved. Never returns a value.
+
+      Use when: a deploy or config change fails on a missing secret, or before applying a plan
+      whose config references secrets.
+
+      Do NOT use when: the user wants to set the missing secret — ask them to run
+      `clawops secret set <NAME>` in a terminal; no tool takes a secret value (R6).
+    annotations:
+      title: Audit Secret References
+      readOnlyHint: true
+      destructiveHint: false
+      idempotentHint: true
+      openWorldHint: false
+    input: {}
+
 # ────────────────────────────────────────────────────────────────────────────
 # MUTATING CLI TOOLS (destructive flagged per R10/R11; elicitation per R19)
 # ────────────────────────────────────────────────────────────────────────────
@@ -286,13 +362,13 @@ tools:
       idempotentHint: true
       openWorldHint: true
     input:
-      stackName: { type: string, optional: true }
+      stackName: { type: string, optional: true, description: "Name for the stack to provision, and the name every later command refers to it by. Omitted = the default stack in ~/.clawops/config.json" }
       provider:
         type: enum
         values: [aws, gcp, azure, local]
         optional: true
         description: Defaults to provider configured for this stack
-      region: { type: string, optional: true }
+      region: { type: string, optional: true, description: "Cloud region to deploy into, in the provider's own spelling (us-east-1, us-central1, eastus). Omitted = the region recorded for the stack" }
       instanceType:
         type: string
         optional: true
@@ -318,10 +394,10 @@ tools:
         optional: true
         description: Which interface the gateway binds. 'all' serves plaintext HTTP.
       openclawVersion: { type: string, optional: true, description: "semver or 'stable'/'dev'" }
-      dryRun: { type: boolean, optional: true, default: false }
+      dryRun: { type: boolean, optional: true, default: false, description: "Show what would be created and change nothing. Use this first when the user has not yet approved a spend" }
     output:
       taskId: { type: string, description: "For >60s ops; poll clawops_task_status" }
-      stackName: { type: string }
+      stackName: { type: string, description: "Name for the stack to provision, and the name every later command refers to it by. Omitted = the default stack in ~/.clawops/config.json" }
       gatewayUrl: { type: string, format: uri }
       resourceCount: { type: integer }
 
@@ -336,8 +412,7 @@ tools:
       remove a stack. Always confirm the stack name.
 
       Do NOT use when: the user wants to stop the gateway temporarily — that is not
-      a destroy, and no tool stops a gateway; clawops_gateway_restart is the only
-      gateway tool. Do NOT use when in doubt about which stack; list first with
+      a destroy, and no tool stops a gateway; clawops_gateway_restart restarts it. Do NOT use when in doubt about which stack; list first with
       clawops_stacks_list.
     annotations:
       title: Destroy Stack (DESTRUCTIVE)
@@ -346,7 +421,7 @@ tools:
       idempotentHint: true
       openWorldHint: true
     input:
-      stackName: { type: string }
+      stackName: { type: string, description: "The stack to destroy. Required, and worth repeating back to the user before calling: this deletes every resource it provisioned" }
       yes: { type: boolean, optional: true, default: false, description: "Skip elicitation; CI/scripted use only" }
     output:
       taskId: { type: string }
@@ -371,7 +446,7 @@ tools:
       openWorldHint: true
     input:
       planPath: { type: string, description: "Absolute path to plan JSON (R7)" }
-      yes: { type: boolean, optional: true, default: false }
+      yes: { type: boolean, optional: true, default: false, description: "Skip the confirmation and apply immediately. Only when the user has already approved this specific plan" }
     output:
       taskId: { type: string }
       summary: { type: string, description: "Trimmed; full output as resource (R14)" }
@@ -394,9 +469,9 @@ tools:
       idempotentHint: true
       openWorldHint: true
     input:
-      stackName: { type: string, optional: true }
-      provider: { type: enum, values: [aws, gcp, azure, local], optional: true }
-      region: { type: string, optional: true }
+      stackName: { type: string, optional: true, description: "Which stack the plan is for. Omitted = the default stack in ~/.clawops/config.json" }
+      provider: { type: enum, values: [aws, gcp, azure, local], optional: true, description: "Cloud to plan against. Omitted = the provider recorded for the stack. 'local' has no plan/apply path and is refused" }
+      region: { type: string, optional: true, description: "Cloud region, in the provider's own spelling (us-east-1, us-central1, eastus). Omitted = the region recorded for the stack" }
       instanceType: { type: string, optional: true, description: "A clawops alias (micro|small|medium|large|gpu) or a machine type the cloud names itself, e.g. t3.small" }
       openclawVersion: { type: string, optional: true, description: "semver, or 'stable'/'dev'" }
       sshCidr: { type: string, optional: true, description: "CIDR(s) allowed to reach SSH, comma-separated, or 'auto' for this machine. Omitted = none, and nothing will be able to connect" }
@@ -428,10 +503,10 @@ tools:
       idempotentHint: true
       openWorldHint: true
     input:
-      stackName: { type: string, optional: true }
-      key: { type: string }
+      stackName: { type: string, optional: true, description: "Which stack's gateway config to write. Omitted = the default stack in ~/.clawops/config.json" }
+      key: { type: string, description: "Dotted path into the gateway config, e.g. models.provider or channels.slack.enabled" }
       value: { type: string, description: "Stringified; JSON for complex values" }
-      restart: { type: boolean, optional: true, default: false }
+      restart: { type: boolean, optional: true, default: false, description: "Restart the gateway so the change takes effect. Without it the value is written and the running gateway keeps the old one" }
     output:
       message: { type: string, description: "Confirmation of the change applied" }
 
@@ -453,9 +528,9 @@ tools:
       idempotentHint: true
       openWorldHint: true
     input:
-      stackName: { type: string, optional: true }
+      stackName: { type: string, optional: true, description: "Which stack's gateway config to write. Omitted = the default stack in ~/.clawops/config.json" }
       key: { type: string, description: "Dot-path config key to remove" }
-      restart: { type: boolean, optional: true, default: false }
+      restart: { type: boolean, optional: true, default: false, description: "Restart the gateway so the removal takes effect. Without it the key is removed and the running gateway keeps the old value" }
     output:
       message: { type: string, description: "Confirmation of the key removed" }
 
@@ -477,7 +552,7 @@ tools:
       idempotentHint: true
       openWorldHint: true
     input:
-      stackName: { type: string, optional: true }
+      stackName: { type: string, optional: true, description: "Which stack's deployed config to validate. Omitted = the default stack in ~/.clawops/config.json" }
     output:
       valid: { type: boolean }
       issues: { type: array, items: { type: string } }
@@ -499,15 +574,187 @@ tools:
       idempotentHint: true
       openWorldHint: true
     input:
-      stackName: { type: string, optional: true }
+      stackName: { type: string, optional: true, description: "Which stack's gateway to restart. Omitted = the default stack in ~/.clawops/config.json" }
     output:
       restartedAt: { type: string, format: date-time }
       previousUptimeSec: { type: integer }
 
+  - name: clawops_gateway_update
+    toolset: [cli]
+    description: |
+      Move the gateway to a different OpenClaw version: pull the image and restart the gateway
+      on it. Every agent on the host restarts with it.
+
+      Use when: the user asks to upgrade or downgrade OpenClaw on a running stack, naming a
+      version.
+
+      Do NOT use when: the user has not named a concrete version — moving tags such as
+      `latest` are refused, as the CLI refuses them. Do NOT use without a backup the user can
+      return to: suggest clawops_backup_create first.
+    annotations:
+      title: Update OpenClaw Version
+      readOnlyHint: false
+      destructiveHint: true
+      idempotentHint: true
+      openWorldHint: true
+    input:
+      stackName: { type: string, optional: true, description: "Which stack's gateway to update. Omitted = the default stack in ~/.clawops/config.json" }
+      version: { type: string, description: "A concrete OpenClaw version to move to, e.g. 2026.9.2. Moving tags are refused" }
+      yes: { type: boolean, optional: true, default: false, description: "Skip the confirmation. Only when the user has already approved this specific update" }
+
+  - name: clawops_backup_create
+    toolset: [cli]
+    description: |
+      Take a backup of the gateway's state (config, database, sessions, transcripts and
+      installed plugins) and download it to a local archive. Live state is not changed.
+
+      Use when: the user asks for a backup, and before anything that replaces state: a
+      version update, a migration, a restore, or a plan that replaces the instance.
+
+      Do NOT use when: the user wants to back up cloud infrastructure — Pulumi state and plans
+      cover that, not this.
+    annotations:
+      title: Back Up Gateway State
+      readOnlyHint: false
+      destructiveHint: false
+      idempotentHint: false
+      openWorldHint: true
+    input:
+      stackName: { type: string, optional: true, description: "Which stack to back up. Omitted = the default stack in ~/.clawops/config.json" }
+      out: { type: string, optional: true, description: "Absolute local path to write the archive to. Omitted = a timestamped file under ~/.clawops/backups" }
+
+  - name: clawops_backup_restore
+    toolset: [cli]
+    description: |
+      Verify a backup archive and expand it on the host beside the live state, never over it.
+      With activate: true, also put it into service: stop the gateway, swap the restored state
+      in (keeping the state it replaces), restart, and roll back if the gateway does not answer.
+
+      Use when: the user asks to restore or recover from a backup, naming the archive.
+
+      Do NOT use when: the gateway is merely unhealthy — clawops_workflow_recover diagnoses that
+      without discarding state. Restoring is time travel: everything since the backup is lost,
+      and channel credentials may need relinking.
+    annotations:
+      title: Restore Gateway State (DESTRUCTIVE with activate)
+      readOnlyHint: false
+      destructiveHint: true
+      idempotentHint: false
+      openWorldHint: true
+    input:
+      stackName: { type: string, optional: true, description: "Which stack to restore onto. Omitted = the default stack in ~/.clawops/config.json" }
+      file: { type: string, description: "Absolute local path to the backup archive, as clawops_backup_create wrote it" }
+      activate: { type: boolean, optional: true, default: false, description: "Put the restored state into service. Omitted = expand into a staging directory and touch nothing live" }
+      yes: { type: boolean, optional: true, default: false, description: "Skip the confirmation. Only when the user has already approved this specific restore" }
+
+  - name: clawops_migrate
+    toolset: [cli]
+    description: |
+      Move a deployment from OpenClaw 1.x onto the 2.0 runtime contract: state ownership,
+      config, and the gateway's run command, in the order a real migration showed works.
+
+      Use when: a stack still runs OpenClaw 1.x and the user wants it on 2.x. clawops_doctor
+      and clawops_gateway_status say which line a stack runs.
+
+      Do NOT use when: the stack is already on 2.x — use clawops_gateway_update to change
+      versions within 2.x. Take a backup first with clawops_backup_create.
+    annotations:
+      title: Migrate 1.x to 2.0 (DESTRUCTIVE)
+      readOnlyHint: false
+      destructiveHint: true
+      idempotentHint: false
+      openWorldHint: true
+    input:
+      stackName: { type: string, optional: true, description: "Which stack to migrate. Omitted = the default stack in ~/.clawops/config.json" }
+      openclawVersion: { type: string, optional: true, description: "The OpenClaw 2.x version to migrate to. Omitted = the version this clawops release defaults to" }
+      yes: { type: boolean, optional: true, default: false, description: "Skip the confirmation. Only when the user has already approved this migration" }
+
+  - name: clawops_stacks_delete
+    toolset: [admin]
+    description: |
+      Remove a stack from ~/.clawops/config.json. This forgets the stack; it does not tear
+      down its infrastructure, and it refuses a stack that is still deployed unless forced.
+
+      Use when: the user wants to stop tracking a stack whose resources are already gone.
+
+      Do NOT use when: the user wants the infrastructure removed — that is clawops_destroy,
+      first. Forcing the delete of a deployed stack leaves resources running and billing that
+      clawops can no longer see.
+    annotations:
+      title: Forget a Stack (DESTRUCTIVE)
+      readOnlyHint: false
+      destructiveHint: true
+      idempotentHint: true
+      openWorldHint: false
+    input:
+      name: { type: string, description: "The stack to remove from config, as clawops_stacks_list reports it" }
+      force: { type: boolean, optional: true, default: false, description: "Skip the safety checks: allow deleting the default stack, or one still deployed. Omitted = refuse both" }
+      yes: { type: boolean, optional: true, default: false, description: "Skip the confirmation. Only when the user has already approved this deletion" }
+
+  - name: clawops_secret_delete
+    toolset: [cli]
+    description: |
+      Delete a locally stored secret by name. Warns when a stack still references it.
+
+      Use when: the user asks to remove a secret they no longer use.
+
+      Do NOT use when: the user wants to replace a value — ask them to run
+      `clawops secret rotate <NAME>`; no tool takes a secret value (R6).
+    annotations:
+      title: Delete a Stored Secret (DESTRUCTIVE)
+      readOnlyHint: false
+      destructiveHint: true
+      idempotentHint: true
+      openWorldHint: false
+    input:
+      name: { type: string, description: "The secret's name, as clawops_secret_list reports it" }
+      yes: { type: boolean, optional: true, default: false, description: "Skip the confirmation. Only when the user has already approved this deletion" }
+
 # ────────────────────────────────────────────────────────────────────────────
 # COMPOSITE WORKFLOW TOOLS (R2: encode user intent, not API sequences)
 # ────────────────────────────────────────────────────────────────────────────
 
+  - name: clawops_init
+    toolset: [cli]
+    description: |
+      Register a stack and write ~/.clawops/config.json: the provider, the state backend, the
+      region, and an SSH key pair generated if one is not already there. Nothing is provisioned
+      and nothing is charged; this only creates local configuration.
+
+      Use when: any other clawops tool reports that there is no config, or the user wants to add
+      a second stack alongside the ones they have. This is the first call on a machine that has
+      never run clawops — a fresh container, a new laptop, a sandbox.
+
+      Adding a stack is additive and safe: existing stacks are kept. Overwriting one needs
+      force: true, because changing a state backend orphans the Pulumi state it points at — the
+      infrastructure stays up and clawops can no longer see or destroy it.
+
+      For aws, gcp and azure, stateUrl can be omitted and clawops names a bucket from the
+      account it can see; that needs cloud credentials in the environment, so in a sandbox pass
+      stateUrl explicitly. The local provider needs host instead, and no cloud account at all.
+
+      Do NOT use when: the user wants to deploy — that is clawops_up, after this. Credentials
+      are never passed here: clawops reads them from the environment (R6).
+    annotations:
+      title: Initialise clawops Config
+      readOnlyHint: false
+      destructiveHint: false
+      idempotentHint: false
+      openWorldHint: false
+    input:
+      provider: { type: enum, values: [aws, gcp, azure, local], description: "Which cloud this stack deploys to, or 'local' for a machine you already have" }
+      stackName: { type: string, optional: true, description: "Name for the stack, used by every later call. Omitted = \"default\"" }
+      stateUrl: { type: string, optional: true, description: "Where Pulumi state lives, e.g. s3://bucket/clawops, gs://bucket/clawops, azblob://container. Omitted = clawops names one from the cloud account it can see, which needs credentials" }
+      region: { type: string, optional: true, description: "Cloud region in the provider's own spelling. Omitted = us-east-1 (aws), us-central1 (gcp), eastus (azure)" }
+      host: { type: string, optional: true, description: "[local only] Hostname or IP of the machine to manage. Required when provider is local" }
+      sshUser: { type: string, optional: true, description: "[local only] SSH login user. Omitted = root" }
+      sshPort: { type: integer, optional: true, description: "[local only] SSH port. Omitted = 22" }
+      force: { type: boolean, optional: true, description: "Overwrite a stack that already exists. Refused without it, because replacing a state backend orphans the state it points at" }
+    output:
+      configPath: { type: string }
+      stackName: { type: string }
+      stateUrl: { type: string }
+
   - name: clawops_harden
     toolset: [cli]
     description: |
@@ -543,7 +790,7 @@ tools:
       idempotentHint: true
       openWorldHint: true
     input:
-      stackName: { type: string, optional: true }
+      stackName: { type: string, optional: true, description: "Which stack to harden. Omitted = the default stack in ~/.clawops/config.json" }
       options: { type: string, optional: true, description: "Comma-separated module IDs; default is every defaultOn module for the provider" }
       dryRun: { type: boolean, optional: true, default: false, description: "Report the current state, change nothing" }
       tailscale: { type: boolean, optional: true, default: false, description: "Join the tailnet, verify this machine reaches the host there, then use that address" }
@@ -577,14 +824,14 @@ tools:
       idempotentHint: true
       openWorldHint: true
     input:
-      provider: { type: enum, values: [aws, gcp, azure, local] }
-      region: { type: string, optional: true }
-      stackName: { type: string, optional: true, default: "default" }
-      instanceType: { type: enum, values: [micro, small, medium, large, gpu], optional: true, default: small }
+      provider: { type: enum, values: [aws, gcp, azure, local], description: "Cloud to deploy to. Omitted = the default provider in ~/.clawops/config.json" }
+      region: { type: string, optional: true, description: "Cloud region, in the provider's own spelling (us-east-1, us-central1, eastus). Omitted = the provider's default" }
+      stackName: { type: string, optional: true, default: "default", description: "Name for the new stack. Omitted = the default stack name in ~/.clawops/config.json" }
+      instanceType: { type: enum, values: [micro, small, medium, large, gpu], optional: true, default: small, description: "Machine size: a clawops alias (micro|small|medium|large|gpu) or a type the cloud names itself, e.g. t3.small" }
     output:
       taskId: { type: string }
       gatewayUrl: { type: string, format: uri }
-      stackName: { type: string }
+      stackName: { type: string, description: "Name for the new stack. Omitted = the default stack name in ~/.clawops/config.json" }
 
   - name: clawops_workflow_recover
     toolset: [workflow, read]
@@ -605,7 +852,7 @@ tools:
       idempotentHint: true
       openWorldHint: true
     input:
-      stackName: { type: string, optional: true }
+      stackName: { type: string, optional: true, description: "Which stack to diagnose. Omitted = the default stack in ~/.clawops/config.json" }
     output:
       report:
         type: object
@@ -633,7 +880,7 @@ tools:
       idempotentHint: true
       openWorldHint: false
     input:
-      taskId: { type: string }
+      taskId: { type: string, description: "The taskId returned by a long-running tool such as clawops_up, clawops_apply or clawops_destroy" }
     output:
       status: { type: enum, values: [working, input_required, completed, failed, cancelled] }
       progress: { type: number, minimum: 0, maximum: 1 }

package/dist/logs-5A7YYA53.js

@@ -1,15 +0,0 @@
-#!/usr/bin/env node
-import {
-  GATEWAY_LOGS_PROBE,
-  agentAuditCommand,
-  chooseLogSource,
-  containerLogsCommand,
-  gatewayLogsCommand
-} from "./chunk-NUL5F6YV.js";
-export {
-  GATEWAY_LOGS_PROBE,
-  agentAuditCommand,
-  chooseLogSource,
-  containerLogsCommand,
-  gatewayLogsCommand
-};

package/dist/server-B7I6HBQH.js

@@ -1,46 +0,0 @@
-#!/usr/bin/env node
-import {
-  MCP_HTTP_PORT,
-  authRequirement,
-  bearerFrom,
-  isLoopbackBind,
-  serveMcp
-} from "./chunk-T5XCMYAV.js";
-import "./chunk-R3DTA35B.js";
-import "./chunk-BOPSG2LI.js";
-import "./chunk-6ZFIFDBJ.js";
-import "./chunk-3QJBNAHW.js";
-import "./chunk-2I7KCMXZ.js";
-import "./chunk-3Z5TDXCJ.js";
-import "./chunk-AEEMRFZV.js";
-import "./chunk-IQQTB7ER.js";
-import "./chunk-XFN3YDZE.js";
-import "./chunk-2Z7J3ERQ.js";
-import "./chunk-E4NJSJ54.js";
-import "./chunk-MC5ATCXS.js";
-import "./chunk-QDNFADJI.js";
-import "./chunk-GFUK6KDR.js";
-import "./chunk-NUL5F6YV.js";
-import "./chunk-3OLUJPCB.js";
-import "./chunk-NUDIHZEH.js";
-import "./chunk-JW5A7E3X.js";
-import "./chunk-LT4XMO5D.js";
-import "./chunk-BELTQGHT.js";
-import "./chunk-GIEVAGEK.js";
-import "./chunk-VOEJYRIK.js";
-import "./chunk-EI7CQQ7D.js";
-import "./chunk-FEK7VJAY.js";
-import "./chunk-RHOWYIWT.js";
-import "./chunk-Q7NQY5HV.js";
-import "./chunk-N4WZLWJ4.js";
-import "./chunk-ELU3XQEA.js";
-import "./chunk-64PONSA5.js";
-import "./chunk-KGXPLI7W.js";
-import "./chunk-VUFMZEIM.js";
-export {
-  MCP_HTTP_PORT,
-  authRequirement,
-  bearerFrom,
-  isLoopbackBind,
-  serveMcp
-};

package/dist/ssh-VAI5DU5M.js

@@ -1,11 +0,0 @@
-#!/usr/bin/env node
-import {
-  connect,
-  describeConnectError
-} from "./chunk-E4NJSJ54.js";
-import "./chunk-MC5ATCXS.js";
-import "./chunk-KGXPLI7W.js";
-export {
-  connect,
-  describeConnectError
-};

package/dist/upgrade-ULD4KFYC.js

@@ -1,88 +0,0 @@
-#!/usr/bin/env node
-
-// src/openclaw/upgrade.ts
-function judgePreflight(report) {
-  const { targetVersion, foundVersion, status, reason } = report;
-  if (status === "indeterminate") {
-    return {
-      ok: false,
-      reason: reason ?? "the database schema could not be determined, so compatibility with the target release is unknown"
-    };
-  }
-  if (typeof foundVersion === "number" && typeof targetVersion === "number") {
-    if (foundVersion > targetVersion) {
-      return {
-        ok: false,
-        reason: `the state database is at schema ${foundVersion}, but the target release understands ${targetVersion}. This is a downgrade across a schema boundary: the older release would read a database written by a newer one. Restore a backup taken before the upgrade instead.`
-      };
-    }
-    if (foundVersion < targetVersion) {
-      return { ok: true, note: `state will migrate from schema ${foundVersion} to ${targetVersion}` };
-    }
-    return { ok: true };
-  }
-  return {
-    ok: false,
-    reason: reason ?? `preflight returned no schema version (status: ${status ?? "unknown"})`
-  };
-}
-function parsePreflight(stdout) {
-  try {
-    const parsed = JSON.parse(stdout.trim());
-    if (parsed !== null && typeof parsed === "object") return parsed;
-  } catch {
-  }
-  return void 0;
-}
-function snapshotCommand(image, stateDir, repo) {
-  return `docker run --rm -v ${stateDir}:/home/node/.openclaw ${image} openclaw backup sqlite create --global --repository ${repo} --json`;
-}
-function preflightCommand(targetImage, stateDir, snapshotDb) {
-  return `docker run --rm -v ${stateDir}:/home/node/.openclaw ${targetImage} openclaw database preflight ${snapshotDb} --json`;
-}
-function snapshotPathFrom(stdout) {
-  try {
-    const parsed = JSON.parse(stdout.trim());
-    if (parsed.ok === true && typeof parsed.snapshotPath === "string") return parsed.snapshotPath;
-  } catch {
-  }
-  return void 0;
-}
-function repairCommand(image, stateDir) {
-  return `docker run --rm -v ${stateDir}:/home/node/.openclaw ${image} openclaw doctor --fix --non-interactive --yes`;
-}
-function describeOutcome(o, version) {
-  switch (o.kind) {
-    case "started":
-      return `Gateway updated to ${version}.`;
-    case "repaired":
-      return `Gateway updated to ${version} after a one-shot repair (doctor --fix).`;
-    case "rolled-back":
-      return `Rolled back to ${o.to}: the gateway did not start on ${version} \u2014 ${o.reason}. The previous image is running again. If it also fails, restore the snapshot taken before the upgrade.`;
-    case "failed":
-      return `Upgrade to ${version} failed and the rollback did not come up either \u2014 ${o.reason}. The state snapshot taken before the upgrade is at ${o.snapshotPath}; restore it with \`openclaw backup sqlite restore\` before retrying.`;
-  }
-}
-async function resolveUpgrade(steps, ctx) {
-  const first = await steps.gate();
-  if (first.ok) return { kind: "started" };
-  await steps.repair();
-  await steps.run(ctx.version);
-  const second = await steps.gate();
-  if (second.ok) return { kind: "repaired" };
-  const reason = second.reason ?? first.reason ?? "unknown";
-  if (!ctx.previousVersion) return { kind: "failed", reason, snapshotPath: ctx.snapshotPath };
-  await steps.run(ctx.previousVersion);
-  const back = await steps.gate();
-  return back.ok ? { kind: "rolled-back", to: ctx.previousVersion, reason } : { kind: "failed", reason, snapshotPath: ctx.snapshotPath };
-}
-export {
-  describeOutcome,
-  judgePreflight,
-  parsePreflight,
-  preflightCommand,
-  repairCommand,
-  resolveUpgrade,
-  snapshotCommand,
-  snapshotPathFrom
-};