@clawops/cli 2.2.0 → 2.3.0

package/dist/{chunk-66R52R7K.js → chunk-K7OWMI63.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-POYS3EVQ.js";
 import {
   validatePlan
-} from "./chunk-PASAVVNS.js";
+} from "./chunk-47CGHUVT.js";
 import {
   buildContext,
   loadAdapterModule
-} from "./chunk-AVERNLUY.js";
+} from "./chunk-SQPHNVCF.js";
 import {
   getConfig
-} from "./chunk-GFIR2IIJ.js";
+} from "./chunk-GYMAC4MW.js";
 import {
   StateError,
   UsageError
@@ -62,9 +62,12 @@ async function resolveInstanceType(intent) {
       `[clawops] note: "${requested}" is not a clawops size (${INSTANCE_ALIASES.join(", ")}), so it is passed to ${intent.provider} as written.
 `
     );
-    return requested;
   }
-  const adapter = await loadAdapterModule(intent.provider);
+  return nativeInstanceType(intent.provider, requested);
+}
+async function nativeInstanceType(provider, requested) {
+  if (!isInstanceAlias(requested)) return requested;
+  const adapter = await loadAdapterModule(provider);
   return adapter.normalizeInstanceType(requested);
 }
 var parseDiffForTest = parseDiff;
@@ -74,9 +77,11 @@ async function generatePlan(intent, _opts) {
       "plan/apply is not supported for the local provider. Use `clawops up` directly."
     );
   }
-  const { version } = await import("./package-HYGHRX35.js");
+  const { version } = await import("./package-UOWSHBWP.js");
   const config = getConfig();
   const instanceType = await resolveInstanceType(intent);
+  const { enforceInstanceType } = await import("./policy-4FFK7REN.js");
+  await enforceInstanceType(config, intent.provider, instanceType);
   const { guardOpenclawVersion, defaultOpenclawVersion } = await import("./version-guard-XVYW5WFJ.js");
   const openclawVersion = await guardOpenclawVersion(
     intent.openclawVersion ?? await defaultOpenclawVersion()
@@ -126,7 +131,7 @@ A plan is only as good as the state it was computed against, so this is not a pl
     );
   }
   try {
-    const { writeStackConfig } = await import("./stack-config-ICQ5YHUL.js");
+    const { writeStackConfig } = await import("./stack-config-3E7KWFPI.js");
     await writeStackConfig(stack, plan);
     const outputLines = [];
     const preview = await stack.preview({
@@ -154,7 +159,7 @@ A plan is only as good as the state it was computed against, so this is not a pl
     throw new Error(`Generated plan failed schema validation:
 ${validation.errors.join("\n")}`);
   }
-  const { validatePlanConfig, validatePlanNetwork } = await import("./validate-DZE6LFEB.js");
+  const { validatePlanConfig, validatePlanNetwork } = await import("./validate-CRXX7OYF.js");
   const cfgCheck = await validatePlanConfig(plan);
   for (const w of cfgCheck.warnings) process.stderr.write(`[clawops] warning: ${w}
 `);
@@ -186,6 +191,7 @@ function expandHome(p) {
 export {
   INSTANCE_ALIASES,
   isInstanceAlias,
+  nativeInstanceType,
   parseDiffForTest,
   generatePlan,
   planId

package/dist/{chunk-OUQVKIIA.js → chunk-PNRFFYOA.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
-import {
-  listOverlays
-} from "./chunk-6ZFIFDBJ.js";
 import {
   inspectContainer
 } from "./chunk-Z3XLWZWF.js";
 import {
-  execPrivileged
-} from "./chunk-WPZIJONN.js";
+  listOverlays
+} from "./chunk-6ZFIFDBJ.js";
 import {
   interpretProbe,
   probeCommand
 } from "./chunk-LT4XMO5D.js";
+import {
+  execPrivileged
+} from "./chunk-WPZIJONN.js";
 import {
   PUBLISH_INSPECT_CMD,
   STATE_DIR_CONTAINER,
@@ -158,8 +158,8 @@ function renderSnapshot(snap, opts) {
   return lines.join("\n");
 }
 async function probeEntries() {
-  const { buildContext } = await import("./context-EHSLWKSH.js");
-  const { getConfig } = await import("./store-YOLQYXMB.js");
+  const { buildContext } = await import("./context-4KTM4DKH.js");
+  const { getConfig } = await import("./store-BTQOOIJH.js");
   const config = getConfig();
   if (!config) return [];
   return Promise.all(
@@ -227,7 +227,7 @@ function renderMenu(entries, selectedIdx, showAll, noColor, confirmDelete) {
   return lines.join("\n");
 }
 async function deleteFromRegistry(name) {
-  const { requireConfig, setConfig } = await import("./store-YOLQYXMB.js");
+  const { requireConfig, setConfig } = await import("./store-BTQOOIJH.js");
   const config = requireConfig();
   const newStacks = { ...config.stacks };
   delete newStacks[name];
@@ -385,7 +385,7 @@ var monitor_default = defineCommand({
     const tailLines = Math.max(1, parseInt(String(args.tail ?? "10"), 10) || 10);
     const isTTY = Boolean(process.stdout.isTTY);
     const noColor = Boolean(args["no-color"]) || !isTTY;
-    const { buildContext } = await import("./context-EHSLWKSH.js");
+    const { buildContext } = await import("./context-4KTM4DKH.js");
     const { acquireSession, drainPool } = await import("./pool-NT4XBSUT.js");
     const ac = new AbortController();
     process.on("SIGINT", () => ac.abort());
@@ -718,7 +718,7 @@ import { accessSync, mkdirSync, readFileSync, constants } from "fs";
 import ssh2 from "ssh2";
 import path from "path";
 async function runDiagnostics(opts = {}, deps = {}) {
-  const { getConfig, getConfigDir } = await import("./store-YOLQYXMB.js");
+  const { getConfig, getConfigDir } = await import("./store-BTQOOIJH.js");
   const config = getConfig();
   const sections = [];
   sections.push({ title: "Runtime", checks: await runtimeChecks(getConfigDir()) });
@@ -1018,8 +1018,8 @@ async function deployedVersionCheck(image, deployedVersion) {
 }
 async function hardeningChecks(conn, stack, signal) {
   try {
-    const { MODULE_CATALOG, resolveModules, withRemoteExec } = await import("./harden-UHAOVQMZ.js");
-    const { buildContext } = await import("./context-EHSLWKSH.js");
+    const { MODULE_CATALOG, resolveModules, withRemoteExec } = await import("./harden-7O553IOK.js");
+    const { buildContext } = await import("./context-4KTM4DKH.js");
     const provider = buildContext({ stack }).adapter.name;
     const modules = resolveModules(MODULE_CATALOG, void 0, provider);
     const checks = [];
@@ -1041,8 +1041,8 @@ async function hardeningChecks(conn, stack, signal) {
   }
 }
 async function defaultOpenSession(stack, signal) {
-  const { getConfig } = await import("./store-YOLQYXMB.js");
-  const { buildContext } = await import("./context-EHSLWKSH.js");
+  const { getConfig } = await import("./store-BTQOOIJH.js");
+  const { buildContext } = await import("./context-4KTM4DKH.js");
   const { extractBaseOutputs } = await import("./outputs-DJHBY7EE.js");
   const { acquireSession } = await import("./pool-NT4XBSUT.js");
   const config = getConfig();

package/dist/{chunk-AX65JMDZ.js → chunk-PRBDJSWN.js}

@@ -2,21 +2,21 @@
 import {
   resolveSecrets
 } from "./chunk-BOPSG2LI.js";
+import {
+  writeStackConfig
+} from "./chunk-CHPMOE4T.js";
 import {
   atomicWriteConfig,
   deepMerge,
   readRemoteConfig,
   restartGateway
-} from "./chunk-UAJJEDCJ.js";
+} from "./chunk-AGSNTIYZ.js";
 import {
   validatePlan
-} from "./chunk-PASAVVNS.js";
-import {
-  writeStackConfig
-} from "./chunk-55UMO37O.js";
+} from "./chunk-47CGHUVT.js";
 import {
   buildContext
-} from "./chunk-AVERNLUY.js";
+} from "./chunk-SQPHNVCF.js";
 import {
   saveOverlay
 } from "./chunk-6ZFIFDBJ.js";
@@ -26,7 +26,7 @@ import {
 import {
   getConfig,
   setConfig
-} from "./chunk-GFIR2IIJ.js";
+} from "./chunk-GYMAC4MW.js";
 import {
   UsageError
 } from "./chunk-KGXPLI7W.js";
@@ -48,13 +48,16 @@ ${validation.errors.join("\n")}`
   }
   const { guardOpenclawVersion } = await import("./version-guard-XVYW5WFJ.js");
   await guardOpenclawVersion(plan.spec.openclaw.version);
+  const { enforceInstanceType } = await import("./policy-4FFK7REN.js");
+  const { getConfig: getConfig2 } = await import("./store-BTQOOIJH.js");
+  await enforceInstanceType(getConfig2(), plan.spec.provider, plan.spec.instanceType);
   const ctx = buildContext({
     stack: plan.spec.stackName,
     provider: plan.spec.provider
   });
   const stack = await ctx.getStack();
   const { guardPrivateOnlyApply } = await import("./private-only-DIA26I2E.js");
-  const { probeSsh } = await import("./tailscale-cutover-V42HO5UM.js");
+  const { probeSsh } = await import("./tailscale-cutover-XTMGDM5H.js");
   await guardPrivateOnlyApply(plan, ctx, opts?.probeTailnet ?? ((conn2) => probeSsh(conn2, opts?.signal)));
   await writeStackConfig(stack, plan);
   if (plan.metadata.stackVersion !== void 0) {
@@ -93,7 +96,7 @@ The diff you reviewed may no longer reflect what will be applied.
     signal: opts?.signal,
     onProgress: (line) => reportProgress(opts, line)
   });
-  const { waitForGateway } = await import("./ready-IJEUBFVX.js");
+  const { waitForGateway } = await import("./ready-4H3NNEYQ.js");
   try {
     await waitForGateway(readySession, {
       signal: opts?.signal,

package/dist/{chunk-4MHDW2NB.js → chunk-QRF4OWG4.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   getConfigDir
-} from "./chunk-GFIR2IIJ.js";
+} from "./chunk-GYMAC4MW.js";
 
 // src/config/secrets.ts
 import { readFileSync, existsSync } from "fs";

package/dist/{chunk-AVERNLUY.js → chunk-SQPHNVCF.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
-import {
-  getProvider
-} from "./chunk-VUFMZEIM.js";
 import {
   readLocalState
-} from "./chunk-RDUKRIRC.js";
+} from "./chunk-U3NRKBDW.js";
 import {
   getConfigDir,
   requireConfig
-} from "./chunk-GFIR2IIJ.js";
+} from "./chunk-GYMAC4MW.js";
 import {
   UsageError
 } from "./chunk-KGXPLI7W.js";
+import {
+  getProvider
+} from "./chunk-VUFMZEIM.js";
 
 // src/cli/context.ts
 function buildContext(args) {
@@ -41,7 +41,7 @@ function buildContext(args) {
           `Stack "${stackName}" not found in config. Run \`clawops init\` or use \`--stack\` to specify a different stack.`
         );
       }
-      const { getOrCreateStack } = await import("./automation-NBYQ6MFZ.js");
+      const { getOrCreateStack } = await import("./automation-VDKLZMJI.js");
       stackCache = await getOrCreateStack({
         stack: stackName,
         stateUrl: stackConfig.stateUrl,

package/dist/{chunk-RDUKRIRC.js → chunk-U3NRKBDW.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   getConfigDir
-} from "./chunk-GFIR2IIJ.js";
+} from "./chunk-GYMAC4MW.js";
 
 // src/providers/local/state.ts
 import { readFileSync, writeFileSync, mkdirSync, renameSync } from "fs";