@clawops/cli 2.1.3 → 2.2.0

package/README.md

@@ -3,6 +3,7 @@
 [![npm version](https://img.shields.io/npm/v/@clawops/cli)](https://www.npmjs.com/package/@clawops/cli)
 [![npm downloads](https://img.shields.io/npm/dm/@clawops/cli)](https://www.npmjs.com/package/@clawops/cli)
 [![clawops MCP server – quality and maintenance score on Glama](https://glama.ai/mcp/servers/dfridkin/clawops/badges/score.svg)](https://glama.ai/mcp/servers/dfridkin/clawops)
+[![Listed on mcpservers.org](https://mcpservers.org/badge.svg)](https://mcpservers.org/servers/dfridkin/clawops)
 
 MCP-native infrastructure ops for OpenClaw, with read-only mode, destructive-action confirmation, and audit logs built in.
 
@@ -193,6 +194,27 @@ Either way, pass the arguments. `mcp serve` is what speaks the protocol, and an
 is one that still reads clearly a year later. clawops does not strand a client that omits them:
 run with no command at all and a pipe on stdin — how every MCP client starts a server — and it
 starts `mcp serve`, saying so on stderr. Typed at a terminal, `clawops` still prints help.
+
+**Pass cloud credentials in `env`.** A client starts the server with the environment its config
+gives it, not your shell's, so an `AWS_PROFILE` exported in a terminal does not reach it, and
+every tool that reads a stack fails with "Could not read the state of stack". Name the profile,
+or the variables your state backend needs, in the server's `env` block:
+
+```json
+{
+  "mcpServers": {
+    "clawops": {
+      "command": "npx",
+      "args": ["-y", "@clawops/cli", "mcp", "serve"],
+      "env": { "AWS_PROFILE": "my-profile" }
+    }
+  }
+}
+```
+
+It holds a profile name, not a key: the credentials themselves stay where the cloud CLI keeps
+them (R6).
+
 Config file locations:
 
 | App | Path |
@@ -254,7 +276,7 @@ clawops down --yes          # Destroy local-provider stack
 | `config` | Get/set remote OpenClaw config values (`--dry-run` shows would-write JSON) |
 | `agents` | List OpenClaw agents, or stream one agent's logs |
 | `gateway` | Restart the OpenClaw gateway service |
-| `backup` | Create and restore OpenClaw state backups (`restore` expands into a staging directory, never in place) |
+| `backup` | Create and restore OpenClaw state backups (`restore` expands into a staging directory, never in place; `--activate` swaps it in and rolls back if the gateway does not come up) |
 | `stacks` | List named stacks and their state |
 | `doctor` | Check the local machine; with `--stack`, the deployment's health too; with `--provider`, one cloud's credentials and account setup whether or not a stack exists; with `--instance-type`, account checks ask about that size rather than the provider default. `--json` for the report. Exits 1 on any failure |
 | `secret` | Manage secrets: `list`, `set`, `delete`, `rotate`, `audit` |
@@ -354,6 +376,10 @@ Do not bind to a non-loopback address without additional authentication controls
 | `clawops_stacks_list` | admin | List all stacks and their state |
 | `clawops_config_get` | cli | Read a remote config value |
 | `clawops_agents_list` | cli | List running agents |
+| `clawops_agents_logs` | cli | One agent's recent activity, paginated |
+| `clawops_gateway_status` | cli | Whether the gateway container is running, and its image |
+| `clawops_secret_list` | cli | List stored secrets by name and status (never values) |
+| `clawops_secret_audit` | cli | Report missing secrets and unresolvable `$secret:` references |
 | `clawops_up` | cli | Provision or update a stack |
 | `clawops_destroy` | cli | Destroy a stack (elicits confirmation) |
 | `clawops_apply` | cli | Apply a plan file |
@@ -362,6 +388,12 @@ Do not bind to a non-loopback address without additional authentication controls
 | `clawops_config_unset` | cli | Remove a remote config key |
 | `clawops_config_validate` | cli | Validate the deployed config against the OpenClaw schema |
 | `clawops_gateway_restart` | cli | Restart the gateway (elicits confirmation) |
+| `clawops_gateway_update` | cli | Move the gateway to a concrete OpenClaw version (elicits confirmation) |
+| `clawops_backup_create` | cli | Back up gateway state to a local archive |
+| `clawops_backup_restore` | cli | Restore a backup to staging, or with `activate` into service (elicits confirmation) |
+| `clawops_migrate` | cli | Migrate a 1.x deployment onto the 2.0 runtime (elicits confirmation) |
+| `clawops_stacks_delete` | admin | Forget a stack in config; does not destroy infrastructure (elicits confirmation) |
+| `clawops_secret_delete` | cli | Delete a stored secret (elicits confirmation) |
 | `clawops_harden` | cli | Apply hardening modules; join or leave a tailnet (elicits confirmation) |
 | `clawops_init` | cli | Register a stack and write `~/.clawops/config.json` (no cloud resources) |
 | `clawops_workflow_deploy_app` | workflow | End-to-end deploy: plan → confirm → apply → status |
@@ -544,9 +576,10 @@ pnpm dev doctor        # verify toolchain
 ```bash
 pnpm dev                   # run CLI from src/ via tsx
 pnpm build                 # tsup → dist/
-pnpm test                  # vitest (1897 tests, ~13s)
+pnpm test                  # vitest (2090 tests, ~13s)
 pnpm test:changed          # vitest --changed (fast edit loop)
 pnpm test:integration      # Docker-based SSH integration tests
+pnpm test:e2e:local        # builds, then bootstrap, the host-touching MCP tools and a 1.x migration, in systemd containers
 pnpm typecheck             # tsc --noEmit
 pnpm lint                  # eslint src/ tests/ scripts/ (--max-warnings=0)
 pnpm gen:schemas           # regenerate src/providers/types.ts + src/mcp/tools/_generated.ts
@@ -602,6 +635,80 @@ Use `pnpm changeset` to record a release note before merging a `feat` or `fix`.
 
 ---
 
+## What's new in 2.2
+
+Recovery is a flag, agents can reach every command they need, and SSH failures say what failed.
+
+### Restore puts a backup into service
+
+- `clawops backup restore --file <archive> --activate` swaps the restored state in, restarts
+  the gateway on it, and checks that it answers. Without `--activate`, a restore still
+  verifies and expands into a staging directory and touches nothing live.
+- The state it replaces is kept, not deleted. If the gateway does not come up, clawops puts the
+  old state back and restarts again; the state that failed is kept as
+  `.failed-restore-<timestamp>`, as evidence.
+- The restored state lands on the host, beside the directory it replaces. Before, it stayed in
+  the container's `/tmp`, where the next `gateway restart` destroyed it.
+- Free space is checked before an archive is expanded.
+- `clawops backup --help` no longer says restore is unavailable. It has worked since 2.0.
+
+### Every command an agent needs is an MCP tool
+
+- Ten new tools bring the catalog to 30: backup create and restore (with `activate`), gateway
+  status and update, one agent's logs, migrate, stacks delete, and secret list, audit and
+  delete. Each calls the same code as its command, so both refuse the same things in the same
+  words.
+- `clawops ssh` and `clawops secret set` / `rotate` stay CLI-only on purpose: a root shell or a
+  secret value does not belong in an agent's hands or its transcript. The secret tools never
+  return values.
+
+### SSH failures name the cause
+
+- A timeout says nothing came back, which on a clawops stack usually means the security group no
+  longer admits your address. The message prints the re-plan and apply that fix it.
+- A refused connection says the host is up and sshd is not. A rejected key names the key clawops
+  offered. A name that does not resolve, and a handshake with no algorithm in common, each say
+  what they are. ssh2's own words are kept in every message.
+- `clawops doctor --stack <name>` prints the same advice on its own line.
+
+### Fixes found by running every tool against a real host
+
+The new tools were driven end to end over MCP against a systemd host, a 1.x deployment made by
+clawops 1.7.9, and AWS. That found defects the unit tests could not, several in the CLI too:
+
+- **`clawops gateway update` works.** Every update since the upgrade gate shipped refused before
+  touching anything, because the state snapshot was given a host path inside a container that
+  cannot create it.
+- **Local-provider hosts no longer race systemd.** The gateway runs there as the `openclaw` unit
+  with `Restart=always`, which undid a restart, an update, a migration or a restore about five
+  seconds after clawops made it. clawops now changes the gateway through the unit.
+- **`clawops gateway`, `agents`, `config` and `logs` work on local stacks.** Each failed with "The
+  local provider does not use Pulumi stacks" while its MCP tool worked.
+- **`clawops migrate` refuses a stack already on 2.x**, which it would have given a fresh minimal
+  config; **asks before it runs**, as `--yes` always claimed; and **pulls the 2.x image before
+  stopping 1.x**, so the downtime is a restart rather than a multi-gigabyte download.
+- **A secret name can no longer reach outside the secrets directory.** `clawops secret delete
+  ../config.json` deleted the clawops config.
+- **`clawops_gateway_restart` keeps a gateway published on every interface** where it was,
+  instead of moving it to loopback.
+- **A stack whose state cannot be read says why**, instead of Pulumi's `code: -2`, and names the
+  usual cause for an MCP server: credentials missing from its client config's `env` block.
+
+### Other fixes
+
+- Streaming Docker commands, such as a backup upload or a log follow, no longer reuse a sudo
+  decision learned from an unrelated command. On AWS, where the login user is not in the `docker`
+  group, a backup upload failed with "permission denied" after the backup had been taken.
+- The backup and upgrade-rollback guides describe `--activate` instead of a manual procedure, and
+  CI follows every in-repo Markdown link and anchor (`pnpm verify:docs`).
+- The local provider's bootstrap runs for real in its e2e suite, against a container with systemd
+  as PID 1, instead of being mocked. The same suite now drives the host-touching MCP tools and a
+  1.x migration (`pnpm test:e2e:local`, nightly and on PRs labelled `e2e`), and
+  `E2E_MCP=1 pnpm test:cloud <cloud>` backs up and restores over MCP on a real cloud host.
+- clawops.fyi carries structured data, an `/llms.txt`, a FAQ and a comparison page.
+
+---
+
 ## What's new in 2.1
 
 Private networking, hardening on every cloud, and two fixes to commands that could not start.
@@ -667,6 +774,17 @@ Private networking, hardening on every cloud, and two fixes to commands that cou
   does not create its destination. `pnpm verify:docker` builds it and speaks MCP to the running
   container, both through its entrypoint and as a bare binary, in CI.
 
+### 2.1.2 and 2.1.3
+
+- Every MCP tool sends its description, and every one of its parameters documents itself. Clients
+  had been seeing 19 tools with a name, a schema and no description.
+- `clawops_init` registers a stack over MCP, so a client can bootstrap from nothing. It writes the
+  config and an SSH key and provisions nothing.
+- A client that cannot show a confirmation is told to ask the user and call again with
+  `yes: true`, instead of getting a `Client does not support form elicitation` crash.
+- The Docker image carries `ssh-keygen` and a CA bundle; without them it could not make a key or
+  reach any HTTPS endpoint.
+
 ---
 
 ## What's new in 2.0.1

package/dist/agent-activity-25FAWLAI.js

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+import {
+  DEFAULT_AGENT_LOG_LIMIT,
+  parseAgentActivity,
+  readAgentActivity,
+  readAgentActivityRaw
+} from "./chunk-27335SIH.js";
+import "./chunk-SOZ62ZXW.js";
+import "./chunk-WPZIJONN.js";
+import "./chunk-EI7CQQ7D.js";
+export {
+  DEFAULT_AGENT_LOG_LIMIT,
+  parseAgentActivity,
+  readAgentActivity,
+  readAgentActivityRaw
+};

package/dist/{apply-JARPVA5Y.js → apply-F5SQ2ZOS.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 import {
   applyPlan
-} from "./chunk-7T4CIT7C.js";
+} from "./chunk-AX65JMDZ.js";
 import "./chunk-BOPSG2LI.js";
-import "./chunk-6ZFIFDBJ.js";
-import "./chunk-2I7KCMXZ.js";
-import "./chunk-XFN3YDZE.js";
+import "./chunk-UAJJEDCJ.js";
+import "./chunk-PASAVVNS.js";
 import "./chunk-55UMO37O.js";
 import "./chunk-AEEMRFZV.js";
 import "./chunk-AVERNLUY.js";
-import "./chunk-NUDIHZEH.js";
-import "./chunk-CHNSL3TC.js";
+import "./chunk-6ZFIFDBJ.js";
+import "./chunk-WPZIJONN.js";
+import "./chunk-YPVWF7IA.js";
 import "./chunk-JW5A7E3X.js";
 import "./chunk-VUFMZEIM.js";
-import "./chunk-GIEVAGEK.js";
+import "./chunk-N5ZYUTZS.js";
 import "./chunk-VOEJYRIK.js";
 import "./chunk-EI7CQQ7D.js";
 import "./chunk-FEK7VJAY.js";

package/dist/backup-flows-NDP5JTR3.js

@@ -0,0 +1,29 @@
+#!/usr/bin/env node
+import {
+  ACTIVATED,
+  ARCHIVE_IS_A_CREDENTIAL,
+  PLUGINS_NOT_CARRIED,
+  activateStaged,
+  activatedLines,
+  activationFailureDetail,
+  createBackup,
+  defaultBackupFilename,
+  nothingChanged,
+  stageRestore
+} from "./chunk-PCSX6Y3U.js";
+import "./chunk-WPZIJONN.js";
+import "./chunk-N5ZYUTZS.js";
+import "./chunk-VOEJYRIK.js";
+import "./chunk-EI7CQQ7D.js";
+export {
+  ACTIVATED,
+  ARCHIVE_IS_A_CREDENTIAL,
+  PLUGINS_NOT_CARRIED,
+  activateStaged,
+  activatedLines,
+  activationFailureDetail,
+  createBackup,
+  defaultBackupFilename,
+  nothingChanged,
+  stageRestore
+};

package/dist/{bootstrap-3PBVY7MA.js → bootstrap-32TZXVDF.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   acquireSession
-} from "./chunk-2Z7J3ERQ.js";
-import "./chunk-E4NJSJ54.js";
+} from "./chunk-TYNMOYVM.js";
+import "./chunk-4PY6PN4G.js";
 import "./chunk-MC5ATCXS.js";
 import {
   gatewayRunArgs,
   gatewayRunCommand
-} from "./chunk-GIEVAGEK.js";
+} from "./chunk-N5ZYUTZS.js";
 import {
   GATEWAY_PORT
 } from "./chunk-VOEJYRIK.js";

package/dist/bootstrap.sh.tmpl

@@ -211,6 +211,10 @@ ExecStop=/usr/bin/docker stop openclaw
 [Install]
 WantedBy=multi-user.target
 UNIT
+  # A restart, update or migration since the last bootstrap pins its run command in a drop-in
+  # (see gatewayRunCommand). This unit is the new source of truth; a stale drop-in would
+  # override its ExecStart and quietly keep the old image.
+  rm -f /etc/systemd/system/openclaw.service.d/clawops-run.conf
   systemctl daemon-reload
   systemctl enable openclaw
   systemctl restart openclaw

package/dist/chunk-27335SIH.js

@@ -0,0 +1,51 @@
+#!/usr/bin/env node
+import {
+  agentAuditCommand
+} from "./chunk-SOZ62ZXW.js";
+import {
+  execPrivileged
+} from "./chunk-WPZIJONN.js";
+import {
+  err,
+  ok
+} from "./chunk-EI7CQQ7D.js";
+
+// src/openclaw/agent-activity.ts
+var DEFAULT_AGENT_LOG_LIMIT = 50;
+async function readAgentActivityRaw(session, opts, signal) {
+  const result = await execPrivileged(
+    session,
+    agentAuditCommand({
+      agentId: opts.agentId,
+      limit: opts.limit ?? DEFAULT_AGENT_LOG_LIMIT,
+      ...opts.cursor ? { cursor: opts.cursor } : {}
+    }),
+    signal
+  );
+  if (result.code !== 0) {
+    const why = result.stderr.trim() || result.stdout.trim() || `exit ${result.code}`;
+    return err(`Cannot read activity for "${opts.agentId}": ${why}`);
+  }
+  return ok(result.stdout);
+}
+function parseAgentActivity(agentId, stdout) {
+  let page;
+  try {
+    page = JSON.parse(stdout.trim() || "{}");
+  } catch {
+    return err(`Cannot read activity for "${agentId}": unexpected output: ${stdout.trim().slice(0, 200)}`);
+  }
+  return ok({ records: page.records ?? [], ...page.cursor ? { cursor: page.cursor } : {} });
+}
+async function readAgentActivity(session, opts, signal) {
+  const raw = await readAgentActivityRaw(session, opts, signal);
+  if (!raw.ok) return raw;
+  return parseAgentActivity(opts.agentId, raw.value);
+}
+
+export {
+  DEFAULT_AGENT_LOG_LIMIT,
+  readAgentActivityRaw,
+  parseAgentActivity,
+  readAgentActivity
+};

package/dist/{chunk-E4NJSJ54.js → chunk-4PY6PN4G.js}

@@ -153,14 +153,57 @@ var Ssh2Session = class {
     this.client.end();
   }
 };
-function describeConnectError(message, opts) {
-  if (!/host.*(denied|verification)/i.test(message)) {
-    return `SSH connection failed: ${message}`;
+function diagnoseConnectError(message, opts) {
+  if (/host.*(denied|verification)/i.test(message)) {
+    const entry = opts.port === 22 ? opts.host : `[${opts.host}]:${opts.port}`;
+    return {
+      summary: `the host key for ${opts.host}:${opts.port} does not match the one recorded in ${opts.knownHostsPath}. If your cloud reassigned this address \u2014 the usual cause \u2014 drop the stale entry and retry:`,
+      remedy: `  ssh-keygen -R ${entry} -f ${opts.knownHostsPath}
+If you did not expect this address to change hands, do not connect.`
+    };
+  }
+  if (opts.awaitingBoot) return { summary: `SSH connection failed: ${message}` };
+  if (message.includes("ECONNREFUSED")) {
+    return {
+      summary: `${opts.host}:${opts.port} refused the connection \u2014 the host is reachable and nothing is listening on that port (${message}).`,
+      remedy: "The instance is up and sshd is not. Check the instance state with `clawops status --stack <name>`, and that the port matches the one the stack was deployed with."
+    };
+  }
+  if (/ETIMEDOUT|EHOSTUNREACH|ENETUNREACH|Timed out while waiting for handshake/.test(message)) {
+    return {
+      // ssh2's readyTimeout (30s) usually fires before the kernel gives up on the TCP connect,
+      // so a dropping firewall is reported as a handshake timeout rather than ETIMEDOUT. Both
+      // mean the same thing to the operator: nothing came back.
+      summary: `${opts.host}:${opts.port} never answered \u2014 nothing came back at all, which is what a firewall dropping the packets looks like (${message}).`,
+      remedy: "On a clawops stack the usual cause is that the security group no longer admits this machine: `--ssh-cidr auto` pins the address you planned from, and home, office and VPN addresses change. Re-plan from where you are now and apply:\n  clawops plan --stack <name> --ssh-cidr auto --out <plan>.json\n  clawops apply <plan>.json\nIf the address has not changed, the instance may be stopped or still booting."
+    };
+  }
+  if (message.includes("ENOTFOUND")) {
+    return {
+      summary: `${opts.host} does not resolve (${message}).`,
+      remedy: "Check the address recorded for this stack with `clawops stacks list`. An instance replaced outside clawops keeps the old address in `~/.clawops/config.json`."
+    };
+  }
+  if (message.includes("All configured authentication methods failed")) {
+    const key = opts.privateKeyPath;
+    const asUser = opts.user ? ` as ${opts.user}` : "";
+    return {
+      summary: `${opts.host}:${opts.port} rejected every authentication method clawops offered${asUser} (${message}).`,
+      remedy: key ? `clawops offered the key at ${key}. Its public half may not be installed on the host \u2014 an instance rebuilt outside clawops, or a key regenerated since this stack was created. Compare what clawops offers, \`ssh-keygen -y -f ${key}\`, against the authorized_keys on the host.` : "The key clawops offered may not be installed on the host \u2014 an instance rebuilt outside clawops, or a key regenerated since this stack was created."
+    };
   }
-  const entry = opts.port === 22 ? opts.host : `[${opts.host}]:${opts.port}`;
-  return `the host key for ${opts.host}:${opts.port} does not match the one recorded in ${opts.knownHostsPath}. If your cloud reassigned this address \u2014 the usual cause \u2014 drop the stale entry and retry:
-  ssh-keygen -R ${entry} -f ${opts.knownHostsPath}
-If you did not expect this address to change hands, do not connect.`;
+  if (/no matching|Handshake failed/i.test(message)) {
+    return {
+      summary: `no algorithm the SSH handshake needs is accepted by both ends (${message}).`,
+      remedy: "The host is running an OpenSSH older than the algorithms ssh2 offers. clawops does not deploy hosts that old, so this is usually a pre-existing machine registered with the local provider; upgrading its OpenSSH is the fix."
+    };
+  }
+  return { summary: `SSH connection failed: ${message}` };
+}
+function describeConnectError(message, opts) {
+  const { summary, remedy } = diagnoseConnectError(message, opts);
+  return remedy ? `${summary}
+${remedy}` : summary;
 }
 async function connect(opts) {
   let privateKey;
@@ -221,6 +264,7 @@ function verifyHostKey(host, port, keyHash, knownHostsPath) {
 }
 
 export {
+  diagnoseConnectError,
   describeConnectError,
   connect
 };

package/dist/{chunk-PTCVFLZ3.js → chunk-66R52R7K.js}

@@ -1,7 +1,10 @@
 #!/usr/bin/env node
+import {
+  pulumiCause
+} from "./chunk-POYS3EVQ.js";
 import {
   validatePlan
-} from "./chunk-XFN3YDZE.js";
+} from "./chunk-PASAVVNS.js";
 import {
   buildContext,
   loadAdapterModule
@@ -71,7 +74,7 @@ async function generatePlan(intent, _opts) {
       "plan/apply is not supported for the local provider. Use `clawops up` directly."
     );
   }
-  const { version } = await import("./package-MF5LPITL.js");
+  const { version } = await import("./package-HYGHRX35.js");
   const config = getConfig();
   const instanceType = await resolveInstanceType(intent);
   const { guardOpenclawVersion, defaultOpenclawVersion } = await import("./version-guard-XVYW5WFJ.js");
@@ -118,7 +121,7 @@ async function generatePlan(intent, _opts) {
   } catch (err) {
     if (err instanceof UsageError) throw err;
     throw new StateError(
-      `Cannot open the state backend for stack "${stackName}": ${messageOf(err)}
+      `Cannot open the state backend for stack "${stackName}": ${pulumiCause(err)}
 A plan is only as good as the state it was computed against, so this is not a plan clawops will write. Check the stateUrl in ~/.clawops/config.json, and that the bucket or container exists and your credentials can read it.`
     );
   }
@@ -151,7 +154,7 @@ A plan is only as good as the state it was computed against, so this is not a pl
     throw new Error(`Generated plan failed schema validation:
 ${validation.errors.join("\n")}`);
   }
-  const { validatePlanConfig, validatePlanNetwork } = await import("./validate-JXKN5WD6.js");
+  const { validatePlanConfig, validatePlanNetwork } = await import("./validate-DZE6LFEB.js");
   const cfgCheck = await validatePlanConfig(plan);
   for (const w of cfgCheck.warnings) process.stderr.write(`[clawops] warning: ${w}
 `);
@@ -179,13 +182,6 @@ function planId() {
 function expandHome(p) {
   return p.replace(/^~/, process.env["HOME"] ?? "~");
 }
-function messageOf(err) {
-  const raw = err instanceof Error ? err.message : String(err);
-  const lines = raw.split("\n").map((l) => l.trim()).filter((l) => l !== "");
-  const explained = lines.find((l) => /(^|\s)error:/i.test(l));
-  if (explained) return explained.replace(/^.*?error:\s*/i, "");
-  return lines[0] ?? raw;
-}
 
 export {
   INSTANCE_ALIASES,

package/dist/{chunk-7T4CIT7C.js → chunk-AX65JMDZ.js}

@@ -2,24 +2,24 @@
 import {
   resolveSecrets
 } from "./chunk-BOPSG2LI.js";
-import {
-  saveOverlay
-} from "./chunk-6ZFIFDBJ.js";
 import {
   atomicWriteConfig,
   deepMerge,
   readRemoteConfig,
   restartGateway
-} from "./chunk-2I7KCMXZ.js";
+} from "./chunk-UAJJEDCJ.js";
 import {
   validatePlan
-} from "./chunk-XFN3YDZE.js";
+} from "./chunk-PASAVVNS.js";
 import {
   writeStackConfig
 } from "./chunk-55UMO37O.js";
 import {
   buildContext
 } from "./chunk-AVERNLUY.js";
+import {
+  saveOverlay
+} from "./chunk-6ZFIFDBJ.js";
 import {
   GATEWAY_PORT
 } from "./chunk-VOEJYRIK.js";
@@ -54,7 +54,7 @@ ${validation.errors.join("\n")}`
   });
   const stack = await ctx.getStack();
   const { guardPrivateOnlyApply } = await import("./private-only-DIA26I2E.js");
-  const { probeSsh } = await import("./tailscale-cutover-EKAQSDXP.js");
+  const { probeSsh } = await import("./tailscale-cutover-V42HO5UM.js");
   await guardPrivateOnlyApply(plan, ctx, opts?.probeTailnet ?? ((conn2) => probeSsh(conn2, opts?.signal)));
   await writeStackConfig(stack, plan);
   if (plan.metadata.stackVersion !== void 0) {
@@ -84,7 +84,7 @@ The diff you reviewed may no longer reflect what will be applied.
       changeSummary[op] = count;
     }
   }
-  const { waitForSsh } = await import("./wait-WO72TRRQ.js");
+  const { waitForSsh } = await import("./wait-DOUNNJNN.js");
   const conn = await connectionInfoFor(ctx, outputs);
   if (opts?.skipReadiness) {
     return { outputs, changeSummary, durationMs: Date.now() - start };
@@ -93,7 +93,7 @@ The diff you reviewed may no longer reflect what will be applied.
     signal: opts?.signal,
     onProgress: (line) => reportProgress(opts, line)
   });
-  const { waitForGateway } = await import("./ready-KDNRBNSU.js");
+  const { waitForGateway } = await import("./ready-IJEUBFVX.js");
   try {
     await waitForGateway(readySession, {
       signal: opts?.signal,
@@ -129,7 +129,7 @@ function expandHome(p) {
   return p.replace(/^~/, process.env["HOME"] ?? "~");
 }
 async function applyConfigOverlay(plan, outputs, ctx, signal) {
-  const { connect } = await import("./ssh-VAI5DU5M.js");
+  const { connect } = await import("./ssh-HOM7GF3M.js");
   const session = await connect({ ...await connectionInfoFor(ctx, outputs), signal });
   try {
     const remote = await readRemoteConfig(session, signal);
@@ -158,7 +158,7 @@ async function applyConfigOverlay(plan, outputs, ctx, signal) {
 async function installProviderPlugins(session, cfg, openclawVersion, signal) {
   const [{ requiredPlugins, installCommand }, { STATE_DIR_HOST_LINUX }, yaml, { readFileSync }, { join }, { resolveSpecDir }] = await Promise.all([
     import("./plugins-DTST3OER.js"),
-    import("./runtime-X3KW5TCP.js"),
+    import("./runtime-VW53TU2W.js"),
     import("./js-yaml-PTEEG4FO.js"),
     import("fs"),
     import("path"),
@@ -169,7 +169,7 @@ async function installProviderPlugins(session, cfg, openclawVersion, signal) {
   );
   const needed = requiredPlugins(cfg, catalog);
   if (needed.length === 0) return;
-  const { execPrivileged } = await import("./privileged-JFA6LLTV.js");
+  const { execPrivileged } = await import("./privileged-5Y6O4H7Z.js");
   const image = `ghcr.io/openclaw/openclaw:${openclawVersion}`;
   for (const plugin of needed) {
     const result = await execPrivileged(
@@ -187,7 +187,7 @@ async function installProviderPlugins(session, cfg, openclawVersion, signal) {
 }
 async function verifyProviders(session, cfg, signal) {
   const { missingProviders } = await import("./plugins-DTST3OER.js");
-  const { execPrivileged } = await import("./privileged-JFA6LLTV.js");
+  const { execPrivileged } = await import("./privileged-5Y6O4H7Z.js");
   const result = await execPrivileged(
     session,
     "docker exec openclaw openclaw plugins list --json",
@@ -213,10 +213,10 @@ async function loadChannelCatalog() {
   return yaml.load(readFileSync(join(resolveSpecDir(), "integrations.yaml"), "utf-8"));
 }
 async function installChannelPlugins(session, cfg, openclawVersion, signal) {
-  const [{ requiredChannelPlugins, channelInstallCommand }, { STATE_DIR_HOST_LINUX }] = await Promise.all([import("./channels-KBUR42IU.js"), import("./runtime-X3KW5TCP.js")]);
+  const [{ requiredChannelPlugins, channelInstallCommand }, { STATE_DIR_HOST_LINUX }] = await Promise.all([import("./channels-KBUR42IU.js"), import("./runtime-VW53TU2W.js")]);
   const needed = requiredChannelPlugins(cfg, await loadChannelCatalog());
   if (needed.length === 0) return;
-  const { execPrivileged } = await import("./privileged-JFA6LLTV.js");
+  const { execPrivileged } = await import("./privileged-5Y6O4H7Z.js");
   const image = `ghcr.io/openclaw/openclaw:${openclawVersion}`;
   for (const plugin of needed) {
     const result = await execPrivileged(
@@ -234,7 +234,7 @@ async function installChannelPlugins(session, cfg, openclawVersion, signal) {
 }
 async function verifyChannels(session, cfg, signal) {
   const { missingChannels, CHANNELS_LIST_CMD } = await import("./channels-KBUR42IU.js");
-  const { execPrivileged } = await import("./privileged-JFA6LLTV.js");
+  const { execPrivileged } = await import("./privileged-5Y6O4H7Z.js");
   const result = await execPrivileged(session, CHANNELS_LIST_CMD, signal);
   if (result.code !== 0) return;
   const missing = missingChannels(cfg, result.stdout, await loadChannelCatalog());