@clawops/cli 2.3.0 → 2.3.1

package/README.md

@@ -14,7 +14,7 @@ and Cursor drive them through typed MCP tools with explicit safety controls.
 
 ---
 
-**What's new:** [2.0.1 and 2.0 release notes](#whats-new-in-201) below, and the full history
+**What's new:** [2.3.1 release notes](#whats-new-in-231) below, and the full history
 in [CHANGELOG.md](CHANGELOG.md).
 
 ---
@@ -594,7 +594,7 @@ pnpm dev doctor        # verify toolchain
 ```bash
 pnpm dev                   # run CLI from src/ via tsx
 pnpm build                 # tsup → dist/
-pnpm test                  # vitest (2115 tests, ~13s)
+pnpm test                  # vitest (2122 tests, ~13s)
 pnpm test:changed          # vitest --changed (fast edit loop)
 pnpm test:integration      # Docker-based SSH integration tests
 pnpm test:e2e:local        # builds, then bootstrap, the host-touching MCP tools and a 1.x migration, in systemd containers
@@ -653,6 +653,20 @@ Use `pnpm changeset` to record a release note before merging a `feat` or `fix`.
 
 ---
 
+## What's new in 2.3.1
+
+A security fix. **Upgrade if you set gateway config through MCP.**
+
+- **Before:** `clawops_config_set` wrote the value you set to the audit log
+  (`~/.clawops/mcp-audit.log`) in clear and redacted the config path instead. Setting
+  `models.providers.openai.apiKey` through an agent therefore logged the API key. The
+  confirmation prompt showed the value too.
+- **Now:** the value is redacted whenever its path names a secret, and secret fields inside a
+  JSON object value are redacted one by one. Paths are logged as written. See
+  [redaction](docs/security/redaction.md#config-paths-and-values).
+- **Existing logs are not rewritten.** If you used `clawops_config_set` for a secret before
+  2.3.1, check your audit log and rotate that secret.
+
 ## What's new in 2.3
 
 Spending limits that an agent cannot lift, and a run of fixes from the backlog.

package/dist/{apply-ODV3NOJJ.js → apply-TXPUNOGW.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   applyPlan
-} from "./chunk-PRBDJSWN.js";
+} from "./chunk-7LLVIQ7G.js";
 import "./chunk-BOPSG2LI.js";
 import "./chunk-CHPMOE4T.js";
 import "./chunk-AEEMRFZV.js";

package/dist/{chunk-PRBDJSWN.js → chunk-7LLVIQ7G.js}

@@ -48,7 +48,7 @@ ${validation.errors.join("\n")}`
   }
   const { guardOpenclawVersion } = await import("./version-guard-XVYW5WFJ.js");
   await guardOpenclawVersion(plan.spec.openclaw.version);
-  const { enforceInstanceType } = await import("./policy-4FFK7REN.js");
+  const { enforceInstanceType } = await import("./policy-AZGFCQNV.js");
   const { getConfig: getConfig2 } = await import("./store-BTQOOIJH.js");
   await enforceInstanceType(getConfig2(), plan.spec.provider, plan.spec.instanceType);
   const ctx = buildContext({

package/dist/{chunk-K7OWMI63.js → chunk-LIAXA43Z.js}

@@ -77,10 +77,10 @@ async function generatePlan(intent, _opts) {
       "plan/apply is not supported for the local provider. Use `clawops up` directly."
     );
   }
-  const { version } = await import("./package-UOWSHBWP.js");
+  const { version } = await import("./package-HRMX7K3C.js");
   const config = getConfig();
   const instanceType = await resolveInstanceType(intent);
-  const { enforceInstanceType } = await import("./policy-4FFK7REN.js");
+  const { enforceInstanceType } = await import("./policy-AZGFCQNV.js");
   await enforceInstanceType(config, intent.provider, instanceType);
   const { guardOpenclawVersion, defaultOpenclawVersion } = await import("./version-guard-XVYW5WFJ.js");
   const openclawVersion = await guardOpenclawVersion(

package/dist/{chunk-EGGXYZC6.js → chunk-ORBZGTNX.js}

@@ -27,7 +27,7 @@ import {
 } from "./chunk-G2ROJXYJ.js";
 import {
   applyPlan
-} from "./chunk-PRBDJSWN.js";
+} from "./chunk-7LLVIQ7G.js";
 import {
   resolveConn
 } from "./chunk-SX75L2T3.js";
@@ -40,7 +40,7 @@ import {
 } from "./chunk-3QJBNAHW.js";
 import {
   generatePlan
-} from "./chunk-K7OWMI63.js";
+} from "./chunk-LIAXA43Z.js";
 import {
   atomicWriteConfig,
   readRemoteConfig,
@@ -108,7 +108,39 @@ function getSessionId() {
 var SENSITIVE_KEYS = ["token", "secret", "key", "password", "connectionstring", "authorization", "credential"];
 var EXEMPT_KEYS = ["keyname", "keypath", "privateKeyPath", "knownHostsPath"];
 var ARN_RE = /arn:aws:[a-z0-9\-*]+:[a-z0-9\-]*:[0-9]*:[^\s,'"]+/gi;
+function isSensitiveName(name) {
+  const n = name.toLowerCase();
+  const exempt = EXEMPT_KEYS.some((e) => n === e.toLowerCase());
+  return !exempt && SENSITIVE_KEYS.some((s) => n.includes(s));
+}
+function isSecretPath(dotPath) {
+  return dotPath.split(".").some(isSensitiveName);
+}
+function redactConfigValue(dotPath, value) {
+  if (isSecretPath(dotPath)) return "[REDACTED]";
+  let parsed;
+  try {
+    parsed = JSON.parse(value);
+  } catch {
+    return value;
+  }
+  if (parsed === null || typeof parsed !== "object") return value;
+  return JSON.stringify(sanitizeValue(parsed));
+}
+function sanitizeValue(v) {
+  if (Array.isArray(v)) return v.map(sanitizeValue);
+  if (v !== null && typeof v === "object") return sanitize(v);
+  return v;
+}
 function sanitize(args) {
+  if (typeof args["key"] === "string") {
+    const { key, value, ...rest } = args;
+    const out = { ...sanitize(rest), key };
+    if (value !== void 0) {
+      out["value"] = typeof value === "string" ? redactConfigValue(key, value) : "[REDACTED]";
+    }
+    return out;
+  }
   const result = {};
   for (const [k, v] of Object.entries(args)) {
     const kl = k.toLowerCase();
@@ -836,7 +868,7 @@ async function handleConfigGet(input, _server) {
 }
 async function handleConfigSet(input, server) {
   const confirmation = await confirmDestructive(server, {
-    message: `Set ${input.key} = ${input.value} on stack "${input.stackName ?? "default"}"?`,
+    message: `Set ${input.key} = ${redactConfigValue(input.key, input.value)} on stack "${input.stackName ?? "default"}"?`,
     title: "Confirm config change",
     what: "changing gateway configuration"
   });
@@ -1179,8 +1211,8 @@ async function handleUp(input, server) {
   const progressToken = void 0;
   const emit = makeProgressEmitter(server, progressToken);
   startTask(taskId, `clawops_up stack=${ctx.stackName}`);
-  const { generatePlan: generatePlan2 } = await import("./generate-OJ5UWTLV.js");
-  const { applyPlan: applyPlan2 } = await import("./apply-ODV3NOJJ.js");
+  const { generatePlan: generatePlan2 } = await import("./generate-XJWEQKT6.js");
+  const { applyPlan: applyPlan2 } = await import("./apply-TXPUNOGW.js");
   const { resolveNetworkFlags } = await import("./network-args-PYJRJBYO.js");
   const { detectEgressIp } = await import("./firewall-5VKZ4WBH.js");
   const network = await resolveNetworkFlags(
@@ -1400,7 +1432,7 @@ async function handleHarden(input, server) {
 
 // src/mcp/tools/cli/init.ts
 async function handleInit(input, _server) {
-  const { initStack } = await import("./init-RVQ72GZ5.js");
+  const { initStack } = await import("./init-DYOLZX65.js");
   const result = await initStack({
     provider: input.provider,
     stackName: input.stackName,
@@ -2233,7 +2265,7 @@ function bearerFrom(header) {
   return match?.[1]?.trim();
 }
 async function serveMcp(opts) {
-  const { version } = await import("./package-UOWSHBWP.js");
+  const { version } = await import("./package-HRMX7K3C.js");
   const makeServer = () => {
     const server = new McpServer({ name: "clawops", version });
     registerTools(server, opts);

package/dist/{chunk-FGY262WZ.js → chunk-Q56AM57B.js}

@@ -109,7 +109,7 @@ async function initStack(opts) {
       reason: `Stack "${stackName}" already exists in ${path.join(getConfigDir(), "config.json")} (${existing.stacks[stackName].stateUrl}). Pass force to overwrite its settings, or use a different stack name to add another one.`
     };
   }
-  const { stackCapRefusal } = await import("./policy-4FFK7REN.js");
+  const { stackCapRefusal } = await import("./policy-AZGFCQNV.js");
   const overCap = stackCapRefusal(existing, stackName);
   if (overCap) return { ok: false, reason: overCap };
   const configDir = getConfigDir();

package/dist/cli.js

@@ -39,7 +39,7 @@ import {
   initStack,
   resolveScopeAccount,
   validateStateBucket
-} from "./chunk-FGY262WZ.js";
+} from "./chunk-Q56AM57B.js";
 import "./chunk-LT4XMO5D.js";
 import {
   execPrivileged,
@@ -256,8 +256,8 @@ var up_default = defineCommand2({
       }
       return;
     }
-    const { generatePlan } = await import("./generate-OJ5UWTLV.js");
-    const { applyPlan } = await import("./apply-ODV3NOJJ.js");
+    const { generatePlan } = await import("./generate-XJWEQKT6.js");
+    const { applyPlan } = await import("./apply-TXPUNOGW.js");
     const { resolveNetworkFlags } = await import("./network-args-PYJRJBYO.js");
     const { detectEgressIp } = await import("./firewall-5VKZ4WBH.js");
     const isDryRun = Boolean(args["dry-run"]);
@@ -552,7 +552,7 @@ var plan_default = defineCommand5({
   },
   async run({ args }) {
     const { buildContext } = await import("./context-4KTM4DKH.js");
-    const { generatePlan } = await import("./generate-OJ5UWTLV.js");
+    const { generatePlan } = await import("./generate-XJWEQKT6.js");
     const { resolveNetworkFlags } = await import("./network-args-PYJRJBYO.js");
     const { detectEgressIp } = await import("./firewall-5VKZ4WBH.js");
     const ctx = buildContext(args);
@@ -668,7 +668,7 @@ var apply_default = defineCommand6({
   },
   async run({ args }) {
     const { validatePlan } = await import("./validate-CRXX7OYF.js");
-    const { applyPlan } = await import("./apply-ODV3NOJJ.js");
+    const { applyPlan } = await import("./apply-TXPUNOGW.js");
     const planPath = args._?.[0];
     if (!planPath) {
       throw new UsageError("Usage: clawops apply <plan.json>");
@@ -1887,7 +1887,7 @@ var serveCmd = defineCommand18({
     inspector: { type: "boolean", description: "Enable MCP inspector" }
   },
   async run({ args }) {
-    const { serveMcp } = await import("./server-YH2JWZ2Q.js");
+    const { serveMcp } = await import("./server-FR5LUAOI.js");
     await serveMcp({
       port: args.http ? Number(args.http) : void 0,
       bind: args.bind,
@@ -1968,8 +1968,8 @@ var wireCmd = defineCommand18({
     const { buildContext } = await import("./context-4KTM4DKH.js");
     const { acquireSession, drainPool } = await import("./pool-NT4XBSUT.js");
     const { extractBaseOutputs } = await import("./outputs-DJHBY7EE.js");
-    const { wireGatewayMcp } = await import("./mcp-wire-HSGZFOG5.js");
-    const { MCP_HTTP_PORT } = await import("./server-YH2JWZ2Q.js");
+    const { wireGatewayMcp } = await import("./mcp-wire-NAKI2WME.js");
+    const { MCP_HTTP_PORT } = await import("./server-FR5LUAOI.js");
     const ac = new AbortController();
     process20.on("SIGINT", () => {
       ac.abort();
@@ -2180,7 +2180,7 @@ var setup_default = defineCommand19({
       }]);
       localSudoPassword = sudoPass;
     }
-    const { promptSpendingPolicy, allowedChoices, savePolicy } = await import("./setup-policy-OK5PGWP7.js");
+    const { promptSpendingPolicy, allowedChoices, savePolicy } = await import("./setup-policy-HTO2KSZR.js");
     const { getConfig: readConfig } = await import("./store-BTQOOIJH.js");
     const configBefore = readConfig();
     const pendingPolicy = await promptSpendingPolicy({
@@ -2250,7 +2250,7 @@ var setup_default = defineCommand19({
       }
     ]);
     {
-      const { stackCapRefusal } = await import("./policy-4FFK7REN.js");
+      const { stackCapRefusal } = await import("./policy-AZGFCQNV.js");
       const { getConfig } = await import("./store-BTQOOIJH.js");
       const overCap = stackCapRefusal(getConfig(), stackAnswers.stackName);
       if (overCap) throw new UsageError(overCap);
@@ -2430,9 +2430,9 @@ var setup_default = defineCommand19({
         failure(`Cannot read SSH public key at ${stackAnswers.sshKeyPath ?? ""}`);
         process21.exit(1);
       }
-      const { nativeInstanceType } = await import("./generate-OJ5UWTLV.js");
+      const { nativeInstanceType } = await import("./generate-XJWEQKT6.js");
       const instanceType = await nativeInstanceType(provider, stackAnswers.instanceSize);
-      const { enforceInstanceType } = await import("./policy-4FFK7REN.js");
+      const { enforceInstanceType } = await import("./policy-AZGFCQNV.js");
       const { getConfig: currentConfig } = await import("./store-BTQOOIJH.js");
       await enforceInstanceType(currentConfig(), provider, instanceType);
       const plan = {
@@ -2604,7 +2604,7 @@ var setup_default = defineCommand19({
         default: false
       }]);
       if (applyNow) {
-        const { applyPlan } = await import("./apply-ODV3NOJJ.js");
+        const { applyPlan } = await import("./apply-TXPUNOGW.js");
         const plan = JSON.parse(readFileSync3(outputPath, "utf-8"));
         try {
           await applyPlan(plan, {
@@ -2640,7 +2640,7 @@ async function runLocalDeploy(opts) {
   const { resolveSecrets } = await import("./secrets-SVZWNAPK.js");
   const knownHostsPath = path2.join(getConfigDir2(), "known_hosts");
   const existing = getConfig();
-  const { stackCapRefusal } = await import("./policy-4FFK7REN.js");
+  const { stackCapRefusal } = await import("./policy-AZGFCQNV.js");
   const overCap = stackCapRefusal(existing, opts.stackName);
   if (overCap) throw new UsageError(overCap);
   const stackEntry = {
@@ -3112,7 +3112,7 @@ async function maybeWireGatewayMcp(opts) {
   if (!wireGateway) return;
   const { connect } = await import("./ssh-HOM7GF3M.js");
   const { getConfigDir: getConfigDir2 } = await import("./store-BTQOOIJH.js");
-  const { wireGatewayMcp } = await import("./mcp-wire-HSGZFOG5.js");
+  const { wireGatewayMcp } = await import("./mcp-wire-NAKI2WME.js");
   const knownHostsPath = path2.join(getConfigDir2(), "known_hosts");
   const spin = spinner("Wiring gateway MCP client...");
   const session = await connect({
@@ -3680,7 +3680,7 @@ import { accessSync, constants } from "fs";
 import { execSync as execSync2 } from "child_process";
 var ISSUES_URL = `${REPO_URL}/issues/new`;
 var BODY_CAP = 2e3;
-var VERSION = true ? "2.3.0" : "dev";
+var VERSION = true ? "2.3.1" : "dev";
 async function collectContext() {
   const nodeVersion = process23.version;
   const os2 = `${process23.platform} ${process23.arch}`;
@@ -3967,7 +3967,7 @@ function resolveArgv(argv2, stdinIsTty) {
 }
 
 // src/cli/index.ts
-var CLI_VERSION = true ? "2.3.0" : "dev";
+var CLI_VERSION = true ? "2.3.1" : "dev";
 var main = defineCommand24({
   meta: {
     name: "clawops",

package/dist/{generate-OJ5UWTLV.js → generate-XJWEQKT6.js}

@@ -6,7 +6,7 @@ import {
   nativeInstanceType,
   parseDiffForTest,
   planId
-} from "./chunk-K7OWMI63.js";
+} from "./chunk-LIAXA43Z.js";
 import "./chunk-POYS3EVQ.js";
 import "./chunk-47CGHUVT.js";
 import "./chunk-SQPHNVCF.js";

package/dist/{init-RVQ72GZ5.js → init-DYOLZX65.js}

@@ -3,7 +3,7 @@ import {
   PROVIDER_DEFAULTS,
   SUPPORTED_PROVIDERS,
   initStack
-} from "./chunk-FGY262WZ.js";
+} from "./chunk-Q56AM57B.js";
 import "./chunk-GYMAC4MW.js";
 import "./chunk-KGXPLI7W.js";
 export {

package/dist/{mcp-wire-HSGZFOG5.js → mcp-wire-NAKI2WME.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 import {
   MCP_HTTP_PORT
-} from "./chunk-EGGXYZC6.js";
+} from "./chunk-ORBZGTNX.js";
 import "./chunk-27335SIH.js";
 import "./chunk-4SEFKZRL.js";
 import "./chunk-66CUJFXK.js";
 import "./chunk-G2ROJXYJ.js";
-import "./chunk-PRBDJSWN.js";
+import "./chunk-7LLVIQ7G.js";
 import "./chunk-SX75L2T3.js";
 import "./chunk-TYNMOYVM.js";
 import "./chunk-BOPSG2LI.js";
 import "./chunk-3QJBNAHW.js";
 import "./chunk-CHPMOE4T.js";
 import "./chunk-AEEMRFZV.js";
-import "./chunk-K7OWMI63.js";
+import "./chunk-LIAXA43Z.js";
 import "./chunk-POYS3EVQ.js";
 import "./chunk-4PY6PN4G.js";
 import "./chunk-MC5ATCXS.js";

package/dist/{package-UOWSHBWP.js → package-HRMX7K3C.js}

@@ -2,7 +2,7 @@
 
 // package.json
 var name = "@clawops/cli";
-var version = "2.3.0";
+var version = "2.3.1";
 var description = "Deploy self-hosted OpenClaw to AWS, GCP, Azure or a local VM \u2014 a CLI and an MCP server in one.";
 var keywords = [
   "openclaw",

package/dist/{policy-4FFK7REN.js → policy-AZGFCQNV.js}

@@ -15,13 +15,13 @@ function configFile() {
 async function allowedTypesFor(policy, provider) {
   const entries = policy?.allowedInstanceTypes?.[provider];
   if (!entries) return void 0;
-  const { nativeInstanceType } = await import("./generate-OJ5UWTLV.js");
+  const { nativeInstanceType } = await import("./generate-XJWEQKT6.js");
   return [...new Set(await Promise.all(entries.map((e) => nativeInstanceType(provider, e))))];
 }
 async function enforceInstanceType(config, provider, instanceType) {
   const allowed = await allowedTypesFor(config?.policy, provider);
   if (!allowed) return;
-  const { nativeInstanceType } = await import("./generate-OJ5UWTLV.js");
+  const { nativeInstanceType } = await import("./generate-XJWEQKT6.js");
   if (allowed.includes(await nativeInstanceType(provider, instanceType))) return;
   throw new UsageError(
     `Instance type "${instanceType}" is not allowed on ${provider} by this machine's spending policy (${configFile()} \u2192 policy.allowedInstanceTypes.${provider}). Allowed: ${allowed.join(", ")}. The operator can change it with \`clawops setup\` or by editing that file.`

package/dist/{server-YH2JWZ2Q.js → server-FR5LUAOI.js}

@@ -5,19 +5,19 @@ import {
   bearerFrom,
   isLoopbackBind,
   serveMcp
-} from "./chunk-EGGXYZC6.js";
+} from "./chunk-ORBZGTNX.js";
 import "./chunk-27335SIH.js";
 import "./chunk-4SEFKZRL.js";
 import "./chunk-66CUJFXK.js";
 import "./chunk-G2ROJXYJ.js";
-import "./chunk-PRBDJSWN.js";
+import "./chunk-7LLVIQ7G.js";
 import "./chunk-SX75L2T3.js";
 import "./chunk-TYNMOYVM.js";
 import "./chunk-BOPSG2LI.js";
 import "./chunk-3QJBNAHW.js";
 import "./chunk-CHPMOE4T.js";
 import "./chunk-AEEMRFZV.js";
-import "./chunk-K7OWMI63.js";
+import "./chunk-LIAXA43Z.js";
 import "./chunk-POYS3EVQ.js";
 import "./chunk-4PY6PN4G.js";
 import "./chunk-MC5ATCXS.js";

package/dist/{setup-policy-OK5PGWP7.js → setup-policy-HTO2KSZR.js}

@@ -2,10 +2,10 @@
 
 // src/cli/setup-policy.ts
 async function allowedChoices(provider, choices, policy) {
-  const { allowedTypesFor } = await import("./policy-4FFK7REN.js");
+  const { allowedTypesFor } = await import("./policy-AZGFCQNV.js");
   const allowed = await allowedTypesFor(policy, provider);
   if (!allowed) return choices;
-  const { nativeInstanceType } = await import("./generate-OJ5UWTLV.js");
+  const { nativeInstanceType } = await import("./generate-XJWEQKT6.js");
   const kept = [];
   for (const c of choices) {
     if (allowed.includes(await nativeInstanceType(provider, c.value))) kept.push(c);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawops/cli",
-  "version": "2.3.0",
+  "version": "2.3.1",
   "description": "Deploy self-hosted OpenClaw to AWS, GCP, Azure or a local VM — a CLI and an MCP server in one.",
   "keywords": [
     "openclaw",