@getaclaw/agent 0.1.1

package/dist/setup/steps/configure.js

@@ -0,0 +1,65 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import os from 'node:os';
+import { safeExec } from '../../utils/exec.js';
+import { logger } from '../../utils/logger.js';
+/** Run openclaw config set and throw on failure. */
+async function configSet(key, value) {
+    const result = await safeExec('openclaw', ['config', 'set', key, value]);
+    if (result.exitCode !== 0) {
+        throw new Error(`openclaw config set ${key} failed (exit ${result.exitCode}): ${result.stderr.trim()}`);
+    }
+}
+export const configureStep = {
+    name: 'configure',
+    description: 'Generate OpenClaw configuration files',
+    required: true,
+    shouldRun: () => true,
+    async execute(ctx) {
+        const openclawDir = path.join(os.homedir(), '.openclaw');
+        const envPath = path.join(openclawDir, '.env');
+        ctx.emit('log', 'configure', 'Configuring OpenClaw via CLI...');
+        ctx.emit('step.progress', 'configure', 10);
+        await fs.mkdir(openclawDir, { recursive: true });
+        // Configure gateway settings via openclaw config set
+        // Both password and tailscale modes bind to lan — password auth or tailnet is the security layer
+        const bindMode = 'lan';
+        await configSet('gateway.mode', 'local');
+        await configSet('gateway.port', '18789');
+        await configSet('gateway.bind', bindMode);
+        ctx.emit('step.progress', 'configure', 30);
+        // Configure gateway auth
+        if (ctx.config.securityMode === 'password' && ctx.config.gatewayToken) {
+            await configSet('gateway.auth.mode', 'token');
+            await configSet('gateway.auth.token', ctx.config.gatewayToken);
+            // Allow Control UI over plain HTTP as fallback
+            await configSet('gateway.controlUi.allowInsecureAuth', 'true');
+        }
+        else if (ctx.config.securityMode === 'tailscale') {
+            await configSet('gateway.auth.mode', 'token');
+        }
+        ctx.emit('step.progress', 'configure', 50);
+        // Set the default model
+        ctx.emit('log', 'configure', 'Setting default model...');
+        const model = ctx.config.selectedModels?.[0];
+        if (model) {
+            const result = await safeExec('openclaw', ['models', 'set', model]);
+            if (result.exitCode !== 0) {
+                throw new Error(`openclaw models set failed (exit ${result.exitCode}): ${result.stderr.trim()}`);
+            }
+        }
+        ctx.emit('step.progress', 'configure', 70);
+        // Write .env file with API keys for the gateway environment
+        ctx.emit('log', 'configure', 'Writing environment file...');
+        const envContent = [
+            `OPENROUTER_API_KEY=${ctx.config.openrouterApiKey}`,
+            '',
+        ].join('\n');
+        await fs.writeFile(envPath, envContent, 'utf-8');
+        await fs.chmod(envPath, 0o600);
+        ctx.emit('step.progress', 'configure', 100);
+        ctx.emit('log', 'configure', 'OpenClaw configuration complete');
+        logger.info('OpenClaw configuration written via CLI', { envPath });
+    },
+};
+//# sourceMappingURL=configure.js.map

package/dist/setup/steps/configure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configure.js","sourceRoot":"","sources":["../../../src/setup/steps/configure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,oDAAoD;AACpD,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,KAAa;IACjD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACzE,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,iBAAiB,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAc;IACtC,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,uCAAuC;IACpD,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI;IAErB,KAAK,CAAC,OAAO,CAAC,GAAgB;QAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAE/C,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,iCAAiC,CAAC,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAE3C,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjD,qDAAqD;QACrD,iGAAiG;QACjG,MAAM,QAAQ,GAAG,KAAK,CAAC;QACvB,MAAM,SAAS,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,SAAS,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,SAAS,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAE3C,yBAAyB;QACzB,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACtE,MAAM,SAAS,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,SAAS,CAAC,oBAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC/D,+CAA+C;YAC/C,MAAM,SAAS,CAAC,qCAAqC,EAAE,MAAM,CAAC,CAAC;QACjE,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YACnD,MAAM,SAAS,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAE3C,wBAAwB;QACxB,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,0BAA0B,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAE3C,4DAA4D;QAC5D,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,6BAA6B,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG;YACjB,sBAAsB,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE;YACnD,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE/B,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,iCAAiC,CAAC,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;CACF,CAAC"}

package/dist/setup/steps/health.d.ts

@@ -0,0 +1,3 @@
+import type { SetupStep } from '../types.js';
+export declare const healthStep: SetupStep;
+//# sourceMappingURL=health.d.ts.map

package/dist/setup/steps/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../src/setup/steps/health.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,aAAa,CAAC;AAO1D,eAAO,MAAM,UAAU,EAAE,SAiGxB,CAAC"}

package/dist/setup/steps/health.js

@@ -0,0 +1,95 @@
+import { safeExec } from '../../utils/exec.js';
+import { logger } from '../../utils/logger.js';
+const HEALTH_CHECK_RETRIES = 5;
+const HEALTH_CHECK_INTERVAL_MS = 3000;
+export const healthStep = {
+    name: 'health',
+    description: 'Verify OpenClaw gateway is running and accessible',
+    required: true,
+    shouldRun: () => true,
+    async execute(ctx) {
+        ctx.emit('log', 'health', 'Running final health checks...');
+        ctx.emit('step.progress', 'health', 10);
+        // Check 1: Gateway HTTP endpoint
+        ctx.emit('log', 'health', 'Checking gateway HTTP endpoint...');
+        let gatewayReachable = false;
+        for (let i = 0; i < HEALTH_CHECK_RETRIES; i++) {
+            try {
+                const result = await safeExec('curl', [
+                    '-s',
+                    '-o', '/dev/null',
+                    '-w', '%{http_code}',
+                    '--max-time', '5',
+                    'http://127.0.0.1:18789',
+                ]);
+                const httpCode = parseInt(result.stdout.trim(), 10);
+                if (httpCode >= 200 && httpCode < 500) {
+                    gatewayReachable = true;
+                    ctx.emit('log', 'health', `Gateway responding (HTTP ${httpCode})`);
+                    break;
+                }
+            }
+            catch {
+                // Retry
+            }
+            if (i < HEALTH_CHECK_RETRIES - 1) {
+                ctx.emit('log', 'health', `Gateway not ready, retrying in ${HEALTH_CHECK_INTERVAL_MS / 1000}s...`);
+                await sleep(HEALTH_CHECK_INTERVAL_MS);
+            }
+        }
+        if (!gatewayReachable) {
+            throw new Error('OpenClaw gateway is not responding on port 18789');
+        }
+        ctx.emit('step.progress', 'health', 40);
+        // Check 2: WebSocket connectivity
+        ctx.emit('log', 'health', 'Checking WebSocket connectivity...');
+        try {
+            const wsResult = await safeExec('curl', [
+                '-s',
+                '-o', '/dev/null',
+                '-w', '%{http_code}',
+                '--max-time', '5',
+                '-H', 'Upgrade: websocket',
+                '-H', 'Connection: Upgrade',
+                'http://127.0.0.1:18789',
+            ]);
+            ctx.emit('log', 'health', `WebSocket endpoint check: HTTP ${wsResult.stdout.trim()}`);
+        }
+        catch {
+            logger.warn('WebSocket check returned non-zero, but gateway may still be functional');
+            ctx.emit('log', 'health', 'WebSocket check inconclusive, continuing...');
+        }
+        ctx.emit('step.progress', 'health', 70);
+        // Check 3: Control UI accessibility
+        ctx.emit('log', 'health', 'Checking Control UI...');
+        try {
+            const uiResult = await safeExec('curl', [
+                '-s',
+                '-o', '/dev/null',
+                '-w', '%{http_code}',
+                '--max-time', '5',
+                'http://127.0.0.1:18789',
+            ]);
+            const uiCode = parseInt(uiResult.stdout.trim(), 10);
+            ctx.emit('log', 'health', `Control UI responding (HTTP ${uiCode})`);
+        }
+        catch {
+            ctx.emit('log', 'health', 'Warning: Control UI check failed, but this may be expected');
+        }
+        ctx.emit('step.progress', 'health', 90);
+        // Build connection details
+        const tailscaleIp = ctx.results.get('tailscaleIp');
+        const controlUiUrl = tailscaleIp
+            ? `http://${tailscaleIp}:18789`
+            : 'http://127.0.0.1:18789';
+        ctx.results.set('controlUiUrl', controlUiUrl);
+        ctx.results.set('healthCheckPassed', true);
+        ctx.emit('step.progress', 'health', 100);
+        ctx.emit('log', 'health', `Health checks passed. Control UI: ${controlUiUrl}`);
+        logger.info('All health checks passed', { controlUiUrl });
+    },
+};
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=health.js.map

package/dist/setup/steps/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../src/setup/steps/health.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAEtC,MAAM,CAAC,MAAM,UAAU,GAAc;IACnC,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,mDAAmD;IAChE,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI;IAErB,KAAK,CAAC,OAAO,CAAC,GAAgB;QAC5B,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,gCAAgC,CAAC,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAExC,iCAAiC;QACjC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,mCAAmC,CAAC,CAAC;QAC/D,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,oBAAoB,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE;oBACpC,IAAI;oBACJ,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,cAAc;oBACpB,YAAY,EAAE,GAAG;oBACjB,wBAAwB;iBACzB,CAAC,CAAC;gBAEH,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;gBACpD,IAAI,QAAQ,IAAI,GAAG,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC;oBACtC,gBAAgB,GAAG,IAAI,CAAC;oBACxB,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,4BAA4B,QAAQ,GAAG,CAAC,CAAC;oBACnE,MAAM;gBACR,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ;YACV,CAAC;YAED,IAAI,CAAC,GAAG,oBAAoB,GAAG,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,kCAAkC,wBAAwB,GAAG,IAAI,MAAM,CAAC,CAAC;gBACnG,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAExC,kCAAkC;QAClC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,oCAAoC,CAAC,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE;gBACtC,IAAI;gBACJ,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,cAAc;gBACpB,YAAY,EAAE,GAAG;gBACjB,IAAI,EAAE,oBAAoB;gBAC1B,IAAI,EAAE,qBAAqB;gBAC3B,wBAAwB;aACzB,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,kCAAkC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;YACtF,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,6CAA6C,CAAC,CAAC;QAC3E,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAExC,oCAAoC;QACpC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,wBAAwB,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE;gBACtC,IAAI;gBACJ,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,cAAc;gBACpB,YAAY,EAAE,GAAG;gBACjB,wBAAwB;aACzB,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,+BAA+B,MAAM,GAAG,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,4DAA4D,CAAC,CAAC;QAC1F,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAExC,2BAA2B;QAC3B,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAuB,CAAC;QACzE,MAAM,YAAY,GAAG,WAAW;YAC9B,CAAC,CAAC,UAAU,WAAW,QAAQ;YAC/B,CAAC,CAAC,wBAAwB,CAAC;QAE7B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAC9C,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QAE3C,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,qCAAqC,YAAY,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IAC5D,CAAC;CACF,CAAC;AAEF,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/setup/steps/openclaw.d.ts

@@ -0,0 +1,3 @@
+import type { SetupStep } from '../types.js';
+export declare const openclawStep: SetupStep;
+//# sourceMappingURL=openclaw.d.ts.map

package/dist/setup/steps/openclaw.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw.d.ts","sourceRoot":"","sources":["../../../src/setup/steps/openclaw.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,aAAa,CAAC;AAG1D,eAAO,MAAM,YAAY,EAAE,SA8B1B,CAAC"}

package/dist/setup/steps/openclaw.js

@@ -0,0 +1,22 @@
+import { safeExec, safeExecPipe } from '../../utils/exec.js';
+export const openclawStep = {
+    name: 'openclaw',
+    description: 'Install OpenClaw globally via npm',
+    required: true,
+    shouldRun: () => true,
+    async execute(ctx) {
+        ctx.emit('log', 'openclaw', 'Installing openclaw@latest globally...');
+        ctx.emit('step.progress', 'openclaw', 10);
+        await safeExecPipe('npm', ['install', '-g', 'openclaw@latest'], {}, (output) => ctx.emit('log', 'openclaw', output), (output) => ctx.emit('log', 'openclaw', output));
+        ctx.emit('step.progress', 'openclaw', 80);
+        // Verify installation
+        ctx.emit('log', 'openclaw', 'Verifying openclaw installation...');
+        const result = await safeExec('openclaw', ['--version']);
+        const version = result.stdout.trim();
+        ctx.emit('log', 'openclaw', `OpenClaw version: ${version}`);
+        ctx.results.set('openclawVersion', version);
+        ctx.emit('step.progress', 'openclaw', 100);
+        ctx.emit('log', 'openclaw', 'OpenClaw installed successfully');
+    },
+};
+//# sourceMappingURL=openclaw.js.map

package/dist/setup/steps/openclaw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw.js","sourceRoot":"","sources":["../../../src/setup/steps/openclaw.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,CAAC,MAAM,YAAY,GAAc;IACrC,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,mCAAmC;IAChD,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI;IAErB,KAAK,CAAC,OAAO,CAAC,GAAgB;QAC5B,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,wCAAwC,CAAC,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAE1C,MAAM,YAAY,CAChB,KAAK,EACL,CAAC,SAAS,EAAE,IAAI,EAAE,iBAAiB,CAAC,EACpC,EAAE,EACF,CAAC,MAAc,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,EACvD,CAAC,MAAc,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CACxD,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAE1C,sBAAsB;QACtB,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,oCAAoC,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAE5D,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,iCAAiC,CAAC,CAAC;IACjE,CAAC;CACF,CAAC"}

package/dist/setup/steps/service.d.ts

@@ -0,0 +1,3 @@
+import type { SetupStep } from '../types.js';
+export declare const serviceStep: SetupStep;
+//# sourceMappingURL=service.d.ts.map

package/dist/setup/steps/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/setup/steps/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,aAAa,CAAC;AAI1D,eAAO,MAAM,WAAW,EAAE,SAuCzB,CAAC"}

package/dist/setup/steps/service.js

@@ -0,0 +1,37 @@
+import { safeExec } from '../../utils/exec.js';
+import { logger } from '../../utils/logger.js';
+export const serviceStep = {
+    name: 'service',
+    description: 'Set up OpenClaw as a systemd service',
+    required: true,
+    shouldRun: () => true,
+    async execute(ctx) {
+        ctx.emit('log', 'service', 'Installing OpenClaw gateway service...');
+        ctx.emit('step.progress', 'service', 10);
+        // Use OpenClaw's built-in service installer (creates user-level systemd unit)
+        await safeExec('openclaw', ['gateway', 'install', '--force', '--port', '18789']);
+        ctx.emit('step.progress', 'service', 40);
+        // Start the gateway service
+        ctx.emit('log', 'service', 'Starting OpenClaw gateway service...');
+        await safeExec('openclaw', ['gateway', 'start']);
+        ctx.emit('step.progress', 'service', 70);
+        // Verify it's running via openclaw gateway status
+        ctx.emit('log', 'service', 'Verifying service is running...');
+        const result = await safeExec('openclaw', ['gateway', 'status', '--json']);
+        let status;
+        try {
+            status = JSON.parse(result.stdout);
+        }
+        catch {
+            throw new Error('Failed to parse gateway status output');
+        }
+        const state = status?.service?.runtime?.state;
+        if (state !== 'active') {
+            throw new Error(`OpenClaw gateway service is not active (state: ${state ?? 'unknown'})`);
+        }
+        ctx.emit('step.progress', 'service', 100);
+        ctx.emit('log', 'service', 'OpenClaw gateway service installed and running');
+        logger.info('OpenClaw gateway service is active');
+    },
+};
+//# sourceMappingURL=service.js.map

package/dist/setup/steps/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/setup/steps/service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,MAAM,CAAC,MAAM,WAAW,GAAc;IACpC,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,sCAAsC;IACnD,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI;IAErB,KAAK,CAAC,OAAO,CAAC,GAAgB;QAC5B,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,wCAAwC,CAAC,CAAC;QACrE,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAEzC,8EAA8E;QAC9E,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACjF,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAEzC,4BAA4B;QAC5B,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,sCAAsC,CAAC,CAAC;QACnE,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAEzC,kDAAkD;QAClD,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,iCAAiC,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE3E,IAAI,MAAsD,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC;QAC9C,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,kDAAkD,KAAK,IAAI,SAAS,GAAG,CAAC,CAAC;QAC3F,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,gDAAgD,CAAC,CAAC;QAC7E,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACpD,CAAC;CACF,CAAC"}

package/dist/setup/steps/system.d.ts

@@ -0,0 +1,3 @@
+import type { SetupStep } from '../types.js';
+export declare const systemStep: SetupStep;
+//# sourceMappingURL=system.d.ts.map

package/dist/setup/steps/system.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.d.ts","sourceRoot":"","sources":["../../../src/setup/steps/system.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,aAAa,CAAC;AAM1D,eAAO,MAAM,UAAU,EAAE,SA2ExB,CAAC"}

package/dist/setup/steps/system.js

@@ -0,0 +1,60 @@
+import os from 'node:os';
+import { safeExec, safeExecPipe } from '../../utils/exec.js';
+import { logger } from '../../utils/logger.js';
+const MIN_RAM_FOR_SWAP = 2 * 1024 * 1024 * 1024; // 2GB in bytes
+export const systemStep = {
+    name: 'system',
+    description: 'System preparation: update packages, configure swap, verify Node.js',
+    required: true,
+    shouldRun: () => true,
+    async execute(ctx) {
+        // Step 1: apt update & upgrade
+        ctx.emit('log', 'system', 'Running apt update...');
+        ctx.emit('step.progress', 'system', 10);
+        await safeExecPipe('apt-get', ['update', '-y'], { env: { ...process.env, DEBIAN_FRONTEND: 'noninteractive' } }, (output) => ctx.emit('log', 'system', output));
+        ctx.emit('step.progress', 'system', 30);
+        ctx.emit('log', 'system', 'Running apt upgrade...');
+        await safeExecPipe('apt-get', ['upgrade', '-y'], { env: { ...process.env, DEBIAN_FRONTEND: 'noninteractive' } }, (output) => ctx.emit('log', 'system', output));
+        ctx.emit('step.progress', 'system', 50);
+        // Step 2: Install essential packages
+        ctx.emit('log', 'system', 'Installing essential packages...');
+        await safeExec('apt-get', ['install', '-y', 'curl', 'ca-certificates', 'gnupg', 'build-essential'], {
+            env: { ...process.env, DEBIAN_FRONTEND: 'noninteractive' },
+        });
+        ctx.emit('step.progress', 'system', 65);
+        // Step 3: Setup swap if RAM < 2GB
+        const totalMem = os.totalmem();
+        if (totalMem < MIN_RAM_FOR_SWAP) {
+            ctx.emit('log', 'system', `RAM is ${Math.round(totalMem / 1024 / 1024)}MB, setting up 2GB swap...`);
+            try {
+                await safeExec('fallocate', ['-l', '2G', '/swapfile']);
+                await safeExec('chmod', ['600', '/swapfile']);
+                await safeExec('mkswap', ['/swapfile']);
+                await safeExec('swapon', ['/swapfile']);
+                ctx.emit('log', 'system', 'Swap configured successfully');
+            }
+            catch (err) {
+                logger.warn('Failed to set up swap, continuing anyway', {
+                    error: err instanceof Error ? err.message : String(err),
+                });
+                ctx.emit('log', 'system', 'Warning: Failed to set up swap, continuing...');
+            }
+        }
+        else {
+            ctx.emit('log', 'system', `RAM is ${Math.round(totalMem / 1024 / 1024)}MB, swap not needed`);
+        }
+        ctx.emit('step.progress', 'system', 80);
+        // Step 4: Verify Node.js 22
+        ctx.emit('log', 'system', 'Verifying Node.js version...');
+        const nodeResult = await safeExec('node', ['--version']);
+        const nodeVersion = nodeResult.stdout.trim();
+        ctx.emit('log', 'system', `Node.js version: ${nodeVersion}`);
+        const majorVersion = parseInt(nodeVersion.replace('v', '').split('.')[0], 10);
+        if (majorVersion < 22) {
+            throw new Error(`Node.js 22+ is required, found ${nodeVersion}`);
+        }
+        ctx.emit('step.progress', 'system', 100);
+        ctx.emit('log', 'system', 'System preparation complete');
+    },
+};
+//# sourceMappingURL=system.js.map

package/dist/setup/steps/system.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.js","sourceRoot":"","sources":["../../../src/setup/steps/system.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,eAAe;AAEhE,MAAM,CAAC,MAAM,UAAU,GAAc;IACnC,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,qEAAqE;IAClF,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI;IAErB,KAAK,CAAC,OAAO,CAAC,GAAgB;QAC5B,+BAA+B;QAC/B,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,uBAAuB,CAAC,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAExC,MAAM,YAAY,CAChB,SAAS,EACT,CAAC,QAAQ,EAAE,IAAI,CAAC,EAChB,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,gBAAgB,EAAE,EAAE,EAC9D,CAAC,MAAc,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CACtD,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,wBAAwB,CAAC,CAAC;QAEpD,MAAM,YAAY,CAChB,SAAS,EACT,CAAC,SAAS,EAAE,IAAI,CAAC,EACjB,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,gBAAgB,EAAE,EAAE,EAC9D,CAAC,MAAc,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CACtD,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAExC,qCAAqC;QACrC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,kCAAkC,CAAC,CAAC;QAC9D,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE;YAClG,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,gBAAgB,EAAE;SAC3D,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAExC,kCAAkC;QAClC,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QAC/B,IAAI,QAAQ,GAAG,gBAAgB,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAEpG,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;gBACvD,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;gBAC9C,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;gBACxC,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;gBACxC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,8BAA8B,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;oBACtD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACxD,CAAC,CAAC;gBACH,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,+CAA+C,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC/F,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAExC,4BAA4B;QAC5B,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,8BAA8B,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7C,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,oBAAoB,WAAW,EAAE,CAAC,CAAC;QAE7D,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9E,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,kCAAkC,WAAW,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,6BAA6B,CAAC,CAAC;IAC3D,CAAC;CACF,CAAC"}

package/dist/setup/steps/tailscale.d.ts

@@ -0,0 +1,3 @@
+import type { SetupStep } from '../types.js';
+export declare const tailscaleStep: SetupStep;
+//# sourceMappingURL=tailscale.d.ts.map

package/dist/setup/steps/tailscale.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tailscale.d.ts","sourceRoot":"","sources":["../../../src/setup/steps/tailscale.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,aAAa,CAAC;AAG1D,eAAO,MAAM,aAAa,EAAE,SA4D3B,CAAC"}

package/dist/setup/steps/tailscale.js

@@ -0,0 +1,40 @@
+import { safeExec, safeExecPipe } from '../../utils/exec.js';
+export const tailscaleStep = {
+    name: 'tailscale',
+    description: 'Install and configure Tailscale VPN',
+    required: false,
+    shouldRun: (config) => config.securityMode === 'tailscale',
+    async execute(ctx) {
+        if (!ctx.config.tailscaleAuthKey) {
+            throw new Error('Tailscale auth key is required when security mode is tailscale');
+        }
+        // Install Tailscale
+        ctx.emit('log', 'tailscale', 'Downloading Tailscale installer...');
+        ctx.emit('step.progress', 'tailscale', 10);
+        await safeExecPipe('curl', ['-fsSL', 'https://tailscale.com/install.sh', '-o', '/tmp/tailscale-install.sh'], {}, (output) => ctx.emit('log', 'tailscale', output));
+        ctx.emit('step.progress', 'tailscale', 30);
+        ctx.emit('log', 'tailscale', 'Running Tailscale installer...');
+        await safeExecPipe('sh', ['/tmp/tailscale-install.sh'], {}, (output) => ctx.emit('log', 'tailscale', output), (output) => ctx.emit('log', 'tailscale', output));
+        ctx.emit('step.progress', 'tailscale', 60);
+        // Authenticate with auth key
+        ctx.emit('log', 'tailscale', 'Authenticating with Tailscale...');
+        await safeExec('tailscale', [
+            'up',
+            `--authkey=${ctx.config.tailscaleAuthKey}`,
+            '--hostname=openclaw-vps',
+        ]);
+        ctx.emit('step.progress', 'tailscale', 80);
+        // Get Tailscale IP
+        ctx.emit('log', 'tailscale', 'Retrieving Tailscale IP...');
+        const ipResult = await safeExec('tailscale', ['ip', '-4']);
+        const tailscaleIp = ipResult.stdout.trim();
+        ctx.emit('log', 'tailscale', `Tailscale IP: ${tailscaleIp}`);
+        ctx.results.set('tailscaleIp', tailscaleIp);
+        // Update firewall: restrict agent port to Tailscale subnet
+        ctx.emit('log', 'tailscale', 'Updating firewall rules for Tailscale...');
+        await safeExec('ufw', ['allow', 'in', 'on', 'tailscale0']);
+        ctx.emit('step.progress', 'tailscale', 100);
+        ctx.emit('log', 'tailscale', 'Tailscale configured successfully');
+    },
+};
+//# sourceMappingURL=tailscale.js.map

package/dist/setup/steps/tailscale.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tailscale.js","sourceRoot":"","sources":["../../../src/setup/steps/tailscale.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,CAAC,MAAM,aAAa,GAAc;IACtC,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,qCAAqC;IAClD,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,KAAK,WAAW;IAE1D,KAAK,CAAC,OAAO,CAAC,GAAgB;QAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;QAED,oBAAoB;QACpB,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,oCAAoC,CAAC,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAE3C,MAAM,YAAY,CAChB,MAAM,EACN,CAAC,OAAO,EAAE,kCAAkC,EAAE,IAAI,EAAE,2BAA2B,CAAC,EAChF,EAAE,EACF,CAAC,MAAc,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,CACzD,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,gCAAgC,CAAC,CAAC;QAE/D,MAAM,YAAY,CAChB,IAAI,EACJ,CAAC,2BAA2B,CAAC,EAC7B,EAAE,EACF,CAAC,MAAc,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,EACxD,CAAC,MAAc,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,CACzD,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAE3C,6BAA6B;QAC7B,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,kCAAkC,CAAC,CAAC;QACjE,MAAM,QAAQ,CAAC,WAAW,EAAE;YAC1B,IAAI;YACJ,aAAa,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE;YAC1C,yBAAyB;SAC1B,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAE3C,mBAAmB;QACnB,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,4BAA4B,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,iBAAiB,WAAW,EAAE,CAAC,CAAC;QAE7D,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAE5C,2DAA2D;QAC3D,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,0CAA0C,CAAC,CAAC;QACzE,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QAE3D,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,mCAAmC,CAAC,CAAC;IACpE,CAAC;CACF,CAAC"}

package/dist/setup/types.d.ts

@@ -0,0 +1,36 @@
+export type StepName = 'system' | 'openclaw' | 'configure' | 'tailscale' | 'channels' | 'service' | 'health';
+export type StepState = 'pending' | 'running' | 'completed' | 'error' | 'skipped';
+export interface StepStatus {
+    name: StepName;
+    state: StepState;
+    error?: string;
+    duration?: number;
+    retries: number;
+}
+export interface SetupConfig {
+    openrouterApiKey: string;
+    selectedModels: string[];
+    securityMode: 'password' | 'tailscale';
+    gatewayToken?: string;
+    tailscaleAuthKey?: string;
+    channels: ChannelConfig[];
+}
+export interface ChannelConfig {
+    type: string;
+    name: string;
+    config: Record<string, unknown>;
+}
+export interface StepContext {
+    config: SetupConfig;
+    configDir: string;
+    emit: (event: string, ...args: unknown[]) => void;
+    results: Map<string, unknown>;
+}
+export interface SetupStep {
+    name: StepName;
+    description: string;
+    required: boolean;
+    shouldRun: (config: SetupConfig) => boolean;
+    execute: (ctx: StepContext) => Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/setup/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/setup/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAChB,QAAQ,GACR,UAAU,GACV,WAAW,GACX,WAAW,GACX,UAAU,GACV,SAAS,GACT,QAAQ,CAAC;AAEb,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;AAElF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,EAAE,UAAU,GAAG,WAAW,CAAC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IAClD,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC;IAC5C,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C"}

package/dist/setup/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/setup/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/setup/types.ts"],"names":[],"mappings":""}

package/dist/utils/crypto.d.ts

@@ -0,0 +1,11 @@
+export interface TlsCert {
+    cert: string;
+    key: string;
+    fingerprint: string;
+}
+export declare function generateToken(length?: number): string;
+export declare function generateSessionToken(): string;
+export declare function hashToken(token: string): string;
+export declare function generateTlsCert(pairingToken: string): TlsCert;
+export declare function computeCertFingerprint(certPem: string): string;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/utils/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/utils/crypto.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,aAAa,CAAC,MAAM,SAAK,GAAG,MAAM,CAEjD;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CA8B7D;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAM9D"}

package/dist/utils/crypto.js

@@ -0,0 +1,47 @@
+import { randomBytes, createHash } from 'node:crypto';
+import selfsigned from 'selfsigned';
+export function generateToken(length = 32) {
+    return randomBytes(length).toString('hex');
+}
+export function generateSessionToken() {
+    return randomBytes(48).toString('base64url');
+}
+export function hashToken(token) {
+    return createHash('sha256').update(token).digest('hex');
+}
+export function generateTlsCert(pairingToken) {
+    const attrs = [{ name: 'commonName', value: 'getaclaw-agent' }];
+    const options = {
+        days: 365,
+        keySize: 2048,
+        algorithm: 'sha256',
+        extensions: [
+            {
+                name: 'subjectAltName',
+                altNames: [
+                    { type: 2, value: 'localhost' },
+                    { type: 7, ip: '127.0.0.1' },
+                ],
+            },
+        ],
+    };
+    const pems = selfsigned.generate(attrs, options);
+    const fingerprint = createHash('sha256')
+        .update(pems.cert)
+        .digest('hex')
+        .match(/.{2}/g)
+        .join(':');
+    return {
+        cert: pems.cert,
+        key: pems.private,
+        fingerprint,
+    };
+}
+export function computeCertFingerprint(certPem) {
+    return createHash('sha256')
+        .update(certPem)
+        .digest('hex')
+        .match(/.{2}/g)
+        .join(':');
+}
+//# sourceMappingURL=crypto.js.map

package/dist/utils/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/utils/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,UAAU,MAAM,YAAY,CAAC;AAQpC,MAAM,UAAU,aAAa,CAAC,MAAM,GAAG,EAAE;IACvC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,YAAoB;IAClD,MAAM,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG;QACd,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,QAAiB;QAC5B,UAAU,EAAE;YACV;gBACE,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE;oBACR,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE;oBAC/B,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE;iBAC7B;aACF;SACF;KACF,CAAC;IAEF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAEjD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC;SACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;SACjB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,OAAO,CAAE;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;IAEb,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,IAAI,CAAC,OAAO;QACjB,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,OAAO,CAAE;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}

package/dist/utils/exec.d.ts

@@ -0,0 +1,12 @@
+import { type ExecFileOptions } from 'node:child_process';
+export interface ExecResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+}
+export declare class CommandNotAllowedError extends Error {
+    constructor(command: string);
+}
+export declare function safeExec(command: string, args: string[], options?: ExecFileOptions): Promise<ExecResult>;
+export declare function safeExecPipe(command: string, args: string[], options?: ExecFileOptions, onStdout?: (data: string) => void, onStderr?: (data: string) => void): Promise<ExecResult>;
+//# sourceMappingURL=exec.d.ts.map

package/dist/utils/exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../src/utils/exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,eAAe,EAAqB,MAAM,oBAAoB,CAAC;AA8B9F,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,UAAU,CAAC,CAqCrB;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE,eAAoB,EAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EACjC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAChC,OAAO,CAAC,UAAU,CAAC,CAsCrB"}