@clawops/cli 2.2.0 → 2.3.0

package/dist/{mcp-wire-BXF4DJFT.js → mcp-wire-HSGZFOG5.js}

@@ -1,37 +1,36 @@
 #!/usr/bin/env node
 import {
   MCP_HTTP_PORT
-} from "./chunk-CQOYUWR7.js";
-import "./chunk-E6BRQK67.js";
-import "./chunk-PCSX6Y3U.js";
-import "./chunk-LV7UO5CG.js";
-import "./chunk-AX65JMDZ.js";
-import "./chunk-SX75L2T3.js";
+} from "./chunk-EGGXYZC6.js";
 import "./chunk-27335SIH.js";
-import "./chunk-66R52R7K.js";
-import "./chunk-POYS3EVQ.js";
+import "./chunk-4SEFKZRL.js";
+import "./chunk-66CUJFXK.js";
+import "./chunk-G2ROJXYJ.js";
+import "./chunk-PRBDJSWN.js";
+import "./chunk-SX75L2T3.js";
+import "./chunk-TYNMOYVM.js";
 import "./chunk-BOPSG2LI.js";
 import "./chunk-3QJBNAHW.js";
-import "./chunk-UAJJEDCJ.js";
-import "./chunk-PASAVVNS.js";
-import "./chunk-55UMO37O.js";
+import "./chunk-CHPMOE4T.js";
 import "./chunk-AEEMRFZV.js";
-import "./chunk-AVERNLUY.js";
-import "./chunk-GAZPPSKU.js";
-import "./chunk-TYNMOYVM.js";
+import "./chunk-K7OWMI63.js";
+import "./chunk-POYS3EVQ.js";
 import "./chunk-4PY6PN4G.js";
 import "./chunk-MC5ATCXS.js";
-import "./chunk-OUQVKIIA.js";
+import "./chunk-GAZPPSKU.js";
+import "./chunk-AGSNTIYZ.js";
+import "./chunk-47CGHUVT.js";
+import "./chunk-SQPHNVCF.js";
+import "./chunk-PNRFFYOA.js";
 import "./chunk-SOZ62ZXW.js";
-import "./chunk-6ZFIFDBJ.js";
 import "./chunk-Z3XLWZWF.js";
+import "./chunk-6ZFIFDBJ.js";
+import "./chunk-LT4XMO5D.js";
 import {
   execPrivileged
 } from "./chunk-WPZIJONN.js";
-import "./chunk-YPVWF7IA.js";
 import "./chunk-JW5A7E3X.js";
-import "./chunk-LT4XMO5D.js";
-import "./chunk-VUFMZEIM.js";
+import "./chunk-HSGKK3RF.js";
 import "./chunk-N5ZYUTZS.js";
 import "./chunk-VOEJYRIK.js";
 import "./chunk-EI7CQQ7D.js";
@@ -39,9 +38,10 @@ import "./chunk-FEK7VJAY.js";
 import "./chunk-RHOWYIWT.js";
 import "./chunk-Q7NQY5HV.js";
 import "./chunk-N4WZLWJ4.js";
-import "./chunk-RDUKRIRC.js";
-import "./chunk-GFIR2IIJ.js";
+import "./chunk-U3NRKBDW.js";
+import "./chunk-GYMAC4MW.js";
 import "./chunk-KGXPLI7W.js";
+import "./chunk-VUFMZEIM.js";
 
 // src/cli/mcp-wire.ts
 var GATEWAY_MCP_NAME = "clawops";

package/dist/{migrate-flow-24XA4GZL.js → migrate-flow-4XQUUFMH.js}

@@ -7,10 +7,10 @@ import {
   migrationSteps,
   prepareMigration,
   runMigration
-} from "./chunk-E6BRQK67.js";
+} from "./chunk-4SEFKZRL.js";
 import "./chunk-GAZPPSKU.js";
-import "./chunk-JW5A7E3X.js";
 import "./chunk-LT4XMO5D.js";
+import "./chunk-JW5A7E3X.js";
 import "./chunk-N5ZYUTZS.js";
 import "./chunk-VOEJYRIK.js";
 import "./chunk-EI7CQQ7D.js";

package/dist/{package-HYGHRX35.js → package-UOWSHBWP.js}

@@ -2,7 +2,7 @@
 
 // package.json
 var name = "@clawops/cli";
-var version = "2.2.0";
+var version = "2.3.0";
 var description = "Deploy self-hosted OpenClaw to AWS, GCP, Azure or a local VM \u2014 a CLI and an MCP server in one.";
 var keywords = [
   "openclaw",

package/dist/policy-4FFK7REN.js

@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+import {
+  PolicySchema,
+  getConfigDir
+} from "./chunk-GYMAC4MW.js";
+import {
+  UsageError
+} from "./chunk-KGXPLI7W.js";
+
+// src/config/policy.ts
+import path from "path";
+function configFile() {
+  return path.join(getConfigDir(), "config.json");
+}
+async function allowedTypesFor(policy, provider) {
+  const entries = policy?.allowedInstanceTypes?.[provider];
+  if (!entries) return void 0;
+  const { nativeInstanceType } = await import("./generate-OJ5UWTLV.js");
+  return [...new Set(await Promise.all(entries.map((e) => nativeInstanceType(provider, e))))];
+}
+async function enforceInstanceType(config, provider, instanceType) {
+  const allowed = await allowedTypesFor(config?.policy, provider);
+  if (!allowed) return;
+  const { nativeInstanceType } = await import("./generate-OJ5UWTLV.js");
+  if (allowed.includes(await nativeInstanceType(provider, instanceType))) return;
+  throw new UsageError(
+    `Instance type "${instanceType}" is not allowed on ${provider} by this machine's spending policy (${configFile()} \u2192 policy.allowedInstanceTypes.${provider}). Allowed: ${allowed.join(", ")}. The operator can change it with \`clawops setup\` or by editing that file.`
+  );
+}
+function stackCapRefusal(config, stackName) {
+  const max = config?.policy?.maxStacks;
+  if (!max || !config) return void 0;
+  const names = Object.keys(config.stacks);
+  if (names.includes(stackName) || names.length < max) return void 0;
+  return `This machine's spending policy allows ${max} stack${max === 1 ? "" : "s"} (${configFile()} \u2192 policy.maxStacks), and ${names.length} exist: ${names.join(", ")}. Remove one with \`clawops stacks delete\` after destroying it, or the operator can raise the cap with \`clawops setup\`.`;
+}
+export {
+  PolicySchema,
+  allowedTypesFor,
+  enforceInstanceType,
+  stackCapRefusal
+};

package/dist/{remote-config-OZYBMBSK.js → remote-config-V2WXIXIF.js}

@@ -8,7 +8,7 @@ import {
   deepMerge,
   readRemoteConfig,
   restartGateway
-} from "./chunk-UAJJEDCJ.js";
+} from "./chunk-AGSNTIYZ.js";
 import "./chunk-WPZIJONN.js";
 import "./chunk-N5ZYUTZS.js";
 import "./chunk-VOEJYRIK.js";

package/dist/{server-E3YA32ND.js → server-YH2JWZ2Q.js}

@@ -5,35 +5,34 @@ import {
   bearerFrom,
   isLoopbackBind,
   serveMcp
-} from "./chunk-CQOYUWR7.js";
-import "./chunk-E6BRQK67.js";
-import "./chunk-PCSX6Y3U.js";
-import "./chunk-LV7UO5CG.js";
-import "./chunk-AX65JMDZ.js";
-import "./chunk-SX75L2T3.js";
+} from "./chunk-EGGXYZC6.js";
 import "./chunk-27335SIH.js";
-import "./chunk-66R52R7K.js";
-import "./chunk-POYS3EVQ.js";
+import "./chunk-4SEFKZRL.js";
+import "./chunk-66CUJFXK.js";
+import "./chunk-G2ROJXYJ.js";
+import "./chunk-PRBDJSWN.js";
+import "./chunk-SX75L2T3.js";
+import "./chunk-TYNMOYVM.js";
 import "./chunk-BOPSG2LI.js";
 import "./chunk-3QJBNAHW.js";
-import "./chunk-UAJJEDCJ.js";
-import "./chunk-PASAVVNS.js";
-import "./chunk-55UMO37O.js";
+import "./chunk-CHPMOE4T.js";
 import "./chunk-AEEMRFZV.js";
-import "./chunk-AVERNLUY.js";
-import "./chunk-GAZPPSKU.js";
-import "./chunk-TYNMOYVM.js";
+import "./chunk-K7OWMI63.js";
+import "./chunk-POYS3EVQ.js";
 import "./chunk-4PY6PN4G.js";
 import "./chunk-MC5ATCXS.js";
-import "./chunk-OUQVKIIA.js";
+import "./chunk-GAZPPSKU.js";
+import "./chunk-AGSNTIYZ.js";
+import "./chunk-47CGHUVT.js";
+import "./chunk-SQPHNVCF.js";
+import "./chunk-PNRFFYOA.js";
 import "./chunk-SOZ62ZXW.js";
-import "./chunk-6ZFIFDBJ.js";
 import "./chunk-Z3XLWZWF.js";
+import "./chunk-6ZFIFDBJ.js";
+import "./chunk-LT4XMO5D.js";
 import "./chunk-WPZIJONN.js";
-import "./chunk-YPVWF7IA.js";
 import "./chunk-JW5A7E3X.js";
-import "./chunk-LT4XMO5D.js";
-import "./chunk-VUFMZEIM.js";
+import "./chunk-HSGKK3RF.js";
 import "./chunk-N5ZYUTZS.js";
 import "./chunk-VOEJYRIK.js";
 import "./chunk-EI7CQQ7D.js";
@@ -41,9 +40,10 @@ import "./chunk-FEK7VJAY.js";
 import "./chunk-RHOWYIWT.js";
 import "./chunk-Q7NQY5HV.js";
 import "./chunk-N4WZLWJ4.js";
-import "./chunk-RDUKRIRC.js";
-import "./chunk-GFIR2IIJ.js";
+import "./chunk-U3NRKBDW.js";
+import "./chunk-GYMAC4MW.js";
 import "./chunk-KGXPLI7W.js";
+import "./chunk-VUFMZEIM.js";
 export {
   MCP_HTTP_PORT,
   authRequirement,

package/dist/setup-policy-OK5PGWP7.js

@@ -0,0 +1,90 @@
+#!/usr/bin/env node
+
+// src/cli/setup-policy.ts
+async function allowedChoices(provider, choices, policy) {
+  const { allowedTypesFor } = await import("./policy-4FFK7REN.js");
+  const allowed = await allowedTypesFor(policy, provider);
+  if (!allowed) return choices;
+  const { nativeInstanceType } = await import("./generate-OJ5UWTLV.js");
+  const kept = [];
+  for (const c of choices) {
+    if (allowed.includes(await nativeInstanceType(provider, c.value))) kept.push(c);
+  }
+  const offered = new Set(await Promise.all(kept.map((c) => nativeInstanceType(provider, c.value))));
+  for (const t of allowed) if (!offered.has(t)) kept.push({ name: `${t} (allowed by policy)`, value: t });
+  return kept;
+}
+function describe(provider, policy) {
+  const sizes = policy?.allowedInstanceTypes?.[provider];
+  const cap = policy?.maxStacks;
+  return `Server sizes on ${provider}: ${sizes ? sizes.join(", ") : "any"}. Deployments: ${cap ? `at most ${cap}` : "no limit"}.`;
+}
+async function promptSpendingPolicy(opts) {
+  const { provider, choices, current, stackCount, inquirer } = opts;
+  const { change } = await inquirer.prompt([{
+    type: "confirm",
+    name: "change",
+    message: `Spending limits \u2014 ${describe(provider ?? "this machine", current)} Change them? (they apply to every deploy from this machine, by any tool)`,
+    default: false
+  }]);
+  if (!change) return void 0;
+  const next = { ...current ?? {} };
+  if (provider && choices.length > 0) {
+    const currentSizes = current?.allowedInstanceTypes?.[provider];
+    const { sizes } = await inquirer.prompt([{
+      type: "checkbox",
+      name: "sizes",
+      message: `Server sizes clawops may deploy on ${provider}: (space to toggle; all checked = no limit)`,
+      choices: choices.map((c) => ({
+        ...c,
+        checked: currentSizes ? currentSizes.includes(c.value) : true
+      })),
+      // A checkbox answer is the array of checked values, whatever the shim's signature says.
+      validate: (v) => Array.isArray(v) && v.length > 0 || "Allow at least one size."
+    }]);
+    const all = sizes.length === choices.length;
+    const rest = { ...next.allowedInstanceTypes ?? {} };
+    if (all) delete rest[provider];
+    else rest[provider] = sizes;
+    if (Object.keys(rest).length > 0) next.allowedInstanceTypes = rest;
+    else delete next.allowedInstanceTypes;
+  }
+  const { maxStacks } = await inquirer.prompt([{
+    type: "input",
+    name: "maxStacks",
+    message: "Most deployments clawops may manage: (a number, or leave blank for no limit)",
+    default: current?.maxStacks ? String(current.maxStacks) : "",
+    validate: (v) => v.trim() === "" || /^\d+$/.test(v.trim()) && Number(v) > 0 || "A whole number above 0, or blank."
+  }]);
+  if (maxStacks.trim() === "") delete next.maxStacks;
+  else {
+    next.maxStacks = Number(maxStacks);
+    if (next.maxStacks <= stackCount) {
+      process.stderr.write(
+        `[clawops] note: ${stackCount} deployment${stackCount === 1 ? " exists" : "s exist"} already, so new ones will be refused until some are removed.
+`
+      );
+    }
+  }
+  return next;
+}
+async function savePolicy(policy) {
+  const { getConfig, setConfig } = await import("./store-BTQOOIJH.js");
+  const config = getConfig();
+  if (!config) return false;
+  const { allowedInstanceTypes, maxStacks } = policy;
+  const cleaned = {
+    ...allowedInstanceTypes && Object.keys(allowedInstanceTypes).length > 0 ? { allowedInstanceTypes } : {},
+    ...maxStacks ? { maxStacks } : {}
+  };
+  const next = { ...config };
+  if (Object.keys(cleaned).length > 0) next.policy = cleaned;
+  else delete next.policy;
+  setConfig(next);
+  return true;
+}
+export {
+  allowedChoices,
+  promptSpendingPolicy,
+  savePolicy
+};

package/dist/{stack-config-ICQ5YHUL.js → stack-config-3E7KWFPI.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   writeStackConfig
-} from "./chunk-55UMO37O.js";
+} from "./chunk-CHPMOE4T.js";
 import "./chunk-AEEMRFZV.js";
 import "./chunk-VOEJYRIK.js";
 import "./chunk-EI7CQQ7D.js";
-import "./chunk-GFIR2IIJ.js";
+import "./chunk-GYMAC4MW.js";
 import "./chunk-KGXPLI7W.js";
 export {
   writeStackConfig

package/dist/{stack-delete-NTIGKWUF.js → stack-delete-SNPMLWMD.js}

@@ -3,8 +3,8 @@ import {
   checkStackDelete,
   deleteStackFromConfig,
   forgetNotice
-} from "./chunk-LV7UO5CG.js";
-import "./chunk-GFIR2IIJ.js";
+} from "./chunk-G2ROJXYJ.js";
+import "./chunk-GYMAC4MW.js";
 import "./chunk-KGXPLI7W.js";
 export {
   checkStackDelete,

package/dist/{state-AKZP2S4T.js → state-KG6K5QZC.js}

@@ -5,8 +5,8 @@ import {
   stateDir,
   statePath,
   writeLocalState
-} from "./chunk-RDUKRIRC.js";
-import "./chunk-GFIR2IIJ.js";
+} from "./chunk-U3NRKBDW.js";
+import "./chunk-GYMAC4MW.js";
 import "./chunk-KGXPLI7W.js";
 export {
   localStateToConnectionInfo,

package/dist/{store-YOLQYXMB.js → store-BTQOOIJH.js}

@@ -5,7 +5,7 @@ import {
   getConfigPath,
   requireConfig,
   setConfig
-} from "./chunk-GFIR2IIJ.js";
+} from "./chunk-GYMAC4MW.js";
 import "./chunk-KGXPLI7W.js";
 export {
   getConfig,

package/dist/{tailscale-cutover-V42HO5UM.js → tailscale-cutover-XTMGDM5H.js}

@@ -3,13 +3,13 @@ import {
   isTailscaleIpv4,
   parseStatus,
   rootPrefix
-} from "./chunk-4MHDW2NB.js";
+} from "./chunk-QRF4OWG4.js";
 import {
   formatKnownHostsLine,
   keyTypeFromBlob,
   verifyAgainstKnownHosts
 } from "./chunk-MC5ATCXS.js";
-import "./chunk-GFIR2IIJ.js";
+import "./chunk-GYMAC4MW.js";
 import "./chunk-KGXPLI7W.js";
 
 // src/harden/tailscale-cutover.ts

package/dist/{validate-DZE6LFEB.js → validate-CRXX7OYF.js}

@@ -4,7 +4,7 @@ import {
   validatePlan,
   validatePlanConfig,
   validatePlanNetwork
-} from "./chunk-PASAVVNS.js";
+} from "./chunk-47CGHUVT.js";
 import "./chunk-JW5A7E3X.js";
 export {
   assertValidPlan,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawops/cli",
-  "version": "2.2.0",
+  "version": "2.3.0",
   "description": "Deploy self-hosted OpenClaw to AWS, GCP, Azure or a local VM — a CLI and an MCP server in one.",
   "keywords": [
     "openclaw",

package/spec/errors.yaml

@@ -1,6 +1,7 @@
 # Error Taxonomy — machine-readable companion to ADR 0005.
-# Used by `pnpm gen:schemas` to emit src/errors/_generated.ts.
-# Update via PR; CI verifies generated file matches.
+# Nothing is generated from this file. src/errors/index.ts is hand-written, and
+# tests/spec/errors.test.ts fails when the two disagree on a class or its exit code.
+# Change both in the same PR.
 
 version: 1
 
@@ -150,7 +151,8 @@ taxonomy:
     suggestedAction: "Operation cancelled by user."
 
 # Sensitive field patterns for redaction (R21).
-# Used by both pino logger config and src/mcp/audit.ts.
+# Enforced by src/mcp/audit.ts, whose SENSITIVE_KEYS must cover every pattern here;
+# tests/spec/errors.test.ts checks that it does.
 redaction:
   patterns:
     - authorization

package/spec/mcp-tools.yaml

@@ -836,9 +836,10 @@ tools:
   - name: clawops_workflow_recover
     toolset: [workflow, read]
     description: |
-      Diagnostic workflow for an unhealthy stack. Internally: status check →
-      gateway logs → agent logs → systemd service status → produces a structured
-      diagnostic report with suggested remediation.
+      Diagnostic workflow for an unhealthy stack. Internally: what is deployed
+      (clawops_status) → the stack's failed health checks (clawops_doctor) → the
+      gateway's last 50 log lines (clawops_logs_tail) → a report with next steps that
+      name the tool for each kind of failure. Changes nothing.
 
       Use when: the user reports any "not working" symptom and you don't know
       where to start. Best entry point for troubleshooting.