@openreef/cli 0.1.0 → 0.2.0

package/README.md

@@ -44,8 +44,8 @@ my-formation/
 | Type | Agents | Use Case |
 |------|--------|----------|
 | `solo` | 1 | Single agent with curated personality, tools, and cron |
-| `team` | 2–5 | Defined roles with explicit communication topology |
-| `swarm` | 6+ | Large-scale or dynamically-spawning agent patterns |
+| `shoal` | 2–5 | Defined roles with explicit communication topology |
+| `school` | 6+ | Large-scale or dynamically-spawning agent patterns |
 
 ## Quick Start
 
@@ -83,7 +83,7 @@ A single JSON file declares your entire formation:
 ```json
 {
   "reef": "1.0",
-  "type": "team",
+  "type": "shoal",
   "name": "my-formation",
   "version": "1.0.0",
   "description": "A research team with a manager and researcher",
@@ -126,6 +126,8 @@ Variables support `{{VARIABLE_NAME}}` interpolation across all text files. Sensi
 
 ## CLI
 
+### Offline Commands
+
 | Command | Description |
 |---------|-------------|
 | `reef init [name]` | Scaffold a new formation from the bundled template |
@@ -133,17 +135,22 @@ Variables support `{{VARIABLE_NAME}}` interpolation across all text files. Sensi
 | `reef validate <path>` | Run schema and structural validation on a formation |
 | `reef pack <path>` | Package a formation into a `.tar.gz` archive |
 
-**Planned** (requires running OpenClaw):
+### Online Commands (requires running OpenClaw)
 
 | Command | Description |
 |---------|-------------|
 | `reef install <path>` | Deploy a formation to OpenClaw |
+| `reef uninstall <identifier>` | Remove a formation and all its resources |
+| `reef list` | List installed formations |
+| `reef status <identifier>` | Show status of a deployed formation |
+
+**Planned:**
+
+| Command | Description |
+|---------|-------------|
 | `reef update <path>` | Update a deployed formation (preserves agent-written data) |
-| `reef uninstall <name>` | Remove a formation and all its resources |
 | `reef export <namespace>` | Snapshot running agents into a formation package |
 | `reef lock` | Pin dependency versions with integrity digests |
-| `reef list` | List installed formations |
-| `reef status <name>` | Show status of a deployed formation |
 
 ## Security
 

package/dist/commands/init.d.ts

@@ -1,7 +1,7 @@
 export interface InitOptions {
     name?: string;
     namespace?: string;
-    type?: 'solo' | 'team' | 'swarm';
+    type?: 'solo' | 'shoal' | 'school';
     yes?: boolean;
 }
 export declare function init(nameArg: string | undefined, options?: InitOptions): Promise<void>;

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAqBD,wBAAsB,IAAI,CACxB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CA4Cf"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IACnC,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAqBD,wBAAsB,IAAI,CACxB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CA4Cf"}

package/dist/commands/init.js

@@ -25,7 +25,7 @@ function generateEnvExample(variables) {
 export async function init(nameArg, options = {}) {
     const name = nameArg ?? options.name ?? 'my-formation';
     const namespace = options.namespace ?? name;
-    const type = options.type ?? 'team';
+    const type = options.type ?? 'shoal';
     const targetDir = resolve(name);
     // Check if directory already exists
     try {

package/dist/commands/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAU3C,SAAS,kBAAkB,CAAC,SAAmC;IAC7D,MAAM,KAAK,GAAa,CAAC,gCAAgC,CAAC,CAAC;IAE3D,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,OAA2B,EAC3B,UAAuB,EAAE;IAEzB,MAAM,IAAI,GAAG,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC;IACvD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC;IAEpC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhC,oCAAoC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,CAAC,KAAK,CACX,GAAG,KAAK,CAAC,KAAK,eAAe,IAAI,+DAA+D,CACjG,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IAED,+DAA+D;IAC/D,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;IACtC,MAAM,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAExD,4BAA4B;IAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAiB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE/C,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;IAErB,MAAM,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAExE,uCAAuC;IACvC,IAAI,QAAQ,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;AACpD,CAAC"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAU3C,SAAS,kBAAkB,CAAC,SAAmC;IAC7D,MAAM,KAAK,GAAa,CAAC,gCAAgC,CAAC,CAAC;IAE3D,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,OAA2B,EAC3B,UAAuB,EAAE;IAEzB,MAAM,IAAI,GAAG,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC;IACvD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC;IAErC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhC,oCAAoC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,CAAC,KAAK,CACX,GAAG,KAAK,CAAC,KAAK,eAAe,IAAI,+DAA+D,CACjG,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IAED,+DAA+D;IAC/D,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;IACtC,MAAM,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAExD,4BAA4B;IAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAiB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE/C,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;IAErB,MAAM,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAExE,uCAAuC;IACvC,IAAI,QAAQ,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;AACpD,CAAC"}

package/dist/commands/install.d.ts

@@ -0,0 +1,13 @@
+export interface InstallOptions {
+    set?: string[];
+    namespace?: string;
+    force?: boolean;
+    merge?: boolean;
+    yes?: boolean;
+    noEnv?: boolean;
+    gatewayUrl?: string;
+    gatewayToken?: string;
+    gatewayPassword?: string;
+}
+export declare function install(formationPath: string, options: InstallOptions): Promise<void>;
+//# sourceMappingURL=install.d.ts.map

package/dist/commands/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AA2CA,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAkCD,wBAAsB,OAAO,CAC3B,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,IAAI,CAAC,CA4nBf"}

package/dist/commands/install.js

@@ -0,0 +1,560 @@
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
+import { join, dirname } from 'node:path';
+import ora from 'ora';
+import chalk from 'chalk';
+import { loadManifest } from '../core/manifest-loader.js';
+import { validateSchema } from '../core/schema-validator.js';
+import { validateStructure } from '../core/structural-validator.js';
+import { resolveVariables } from '../core/variable-resolver.js';
+import { interpolate } from '../core/template-interpolator.js';
+import { resolveWorkspacePath, resolveGatewayUrl, validateAgentIds, } from '../core/openclaw-paths.js';
+import { readConfig, writeConfig, addAgentEntry, removeAgentEntry, addBinding, removeBinding, setAgentToAgent, removeAgentToAgent, } from '../core/config-patcher.js';
+import { GatewayClient, resolveGatewayAuth } from '../core/gateway-client.js';
+import { loadState, saveState, deleteState, listStates, computeFileHash, } from '../core/state-manager.js';
+import { generateAgentsMd } from '../core/agents-md-generator.js';
+import { listFiles } from '../utils/fs.js';
+import { icons, header, label, value, table } from '../utils/output.js';
+const TOKEN_RE = /\{\{\w+\}\}/;
+function isBinaryBuffer(buf) {
+    const check = buf.subarray(0, 8192);
+    return check.includes(0);
+}
+function parseSets(sets) {
+    const result = {};
+    if (!sets)
+        return result;
+    for (const s of sets) {
+        const eq = s.indexOf('=');
+        if (eq === -1)
+            continue;
+        result[s.slice(0, eq)] = s.slice(eq + 1);
+    }
+    return result;
+}
+function parseIdentifier(identifier) {
+    const slash = identifier.indexOf('/');
+    if (slash !== -1) {
+        return {
+            namespace: identifier.slice(0, slash),
+            name: identifier.slice(slash + 1),
+        };
+    }
+    return { name: identifier };
+}
+export async function install(formationPath, options) {
+    // ── Phase 1: Parse + Validate IDs ──
+    const spinner = ora('Loading formation...').start();
+    let manifest;
+    try {
+        manifest = await loadManifest(formationPath);
+    }
+    catch (err) {
+        spinner.fail('Failed to load formation');
+        throw err;
+    }
+    const schemaResult = await validateSchema(manifest);
+    if (!schemaResult.valid) {
+        spinner.fail('Schema validation failed');
+        for (const issue of schemaResult.issues) {
+            console.error(`  ${icons.error} ${issue.message}`);
+        }
+        process.exit(1);
+    }
+    const structResult = await validateStructure(manifest, formationPath);
+    if (!structResult.valid) {
+        spinner.fail('Structural validation failed');
+        for (const issue of structResult.issues) {
+            if (issue.severity === 'error') {
+                console.error(`  ${icons.error} ${issue.message}`);
+            }
+        }
+        process.exit(1);
+    }
+    const namespace = options.namespace ?? manifest.namespace;
+    const slugs = Object.keys(manifest.agents);
+    const idValidation = validateAgentIds(slugs, namespace);
+    if (!idValidation.valid) {
+        spinner.fail('Agent ID validation failed');
+        for (const error of idValidation.errors) {
+            console.error(`  ${icons.error} ${error}`);
+        }
+        process.exit(1);
+    }
+    spinner.succeed('Formation loaded and validated');
+    // ── Phase 2: Variables ──
+    const { resolved: resolvedVars, missing } = await resolveVariables(manifest.variables ?? {}, formationPath, {
+        interactive: !options.yes,
+        cliOverrides: parseSets(options.set),
+        noEnv: options.noEnv,
+    });
+    if (missing.length > 0) {
+        console.error(`${icons.error} Missing required variables: ${missing.join(', ')}`);
+        console.error('  Use --set KEY=VALUE or set them in .env / environment.');
+        process.exit(1);
+    }
+    // ── Phase 3: Conflicts ──
+    const { config, path: configPath } = await readConfig();
+    const existingState = await loadState(namespace, manifest.name);
+    if (existingState && !options.force && !options.merge) {
+        console.error(`${icons.error} Formation "${namespace}/${manifest.name}" is already installed.`);
+        console.error('  Use --force to replace or --merge to update.');
+        process.exit(1);
+    }
+    // Check for agent ID conflicts in config (from other formations)
+    if (!options.force && !options.merge) {
+        const agentsList = config.agents?.list ?? [];
+        const conflicting = agentsList.filter((a) => {
+            const id = a.id;
+            return id.startsWith(`${namespace}-`) && idValidation.ids.has(slugs.find((s) => `${namespace}-${s}` === id) ?? '');
+        });
+        if (conflicting.length > 0) {
+            console.error(`${icons.error} Config already contains agents with matching IDs:`);
+            for (const a of conflicting) {
+                console.error(`  - ${a.id}`);
+            }
+            console.error('  Use --force to replace.');
+            process.exit(1);
+        }
+    }
+    // --force cleanup
+    if (options.force && existingState) {
+        if (!options.yes) {
+            const { confirm } = await import('@inquirer/prompts');
+            const ok = await confirm({
+                message: `This will remove the existing installation of "${namespace}/${manifest.name}". Continue?`,
+            });
+            if (!ok) {
+                console.log('Aborted.');
+                process.exit(0);
+            }
+        }
+        const cleanupSpinner = ora('Cleaning up existing installation...').start();
+        // Remove cron jobs via RPC
+        if (existingState.cronJobs.length > 0) {
+            try {
+                const gwUrl = options.gatewayUrl ?? resolveGatewayUrl(config, process.env);
+                const gwAuth = resolveGatewayAuth({
+                    gatewayUrl: options.gatewayUrl,
+                    gatewayToken: options.gatewayToken,
+                    gatewayPassword: options.gatewayPassword,
+                    config,
+                });
+                const gw = new GatewayClient({
+                    url: gwUrl,
+                    ...gwAuth,
+                });
+                await gw.connect();
+                for (const job of existingState.cronJobs) {
+                    try {
+                        await gw.cronRemove(job.id);
+                    }
+                    catch {
+                        // Job may already be gone
+                    }
+                }
+                gw.close();
+            }
+            catch {
+                cleanupSpinner.warn('Could not connect to Gateway for cron cleanup — jobs may be orphaned');
+            }
+        }
+        // Remove from config
+        let cleanConfig = config;
+        for (const agent of Object.values(existingState.agents)) {
+            cleanConfig = removeAgentEntry(cleanConfig, agent.id);
+        }
+        for (const binding of existingState.bindings) {
+            cleanConfig = removeBinding(cleanConfig, binding);
+        }
+        // Remove agentToAgent allow entry
+        if (existingState.agentToAgent?.allowAdded) {
+            const allStates = await listStates();
+            const otherInNamespace = allStates.some((s) => s.namespace === namespace &&
+                s.name !== existingState.name);
+            cleanConfig = removeAgentToAgent(cleanConfig, namespace, otherInNamespace, existingState.agentToAgent.wasEnabled);
+        }
+        await writeConfig(configPath, cleanConfig, { silent: true });
+        // Delete workspaces
+        const { rm } = await import('node:fs/promises');
+        for (const agent of Object.values(existingState.agents)) {
+            try {
+                await rm(agent.workspace, { recursive: true, force: true });
+            }
+            catch {
+                // Already gone
+            }
+        }
+        await deleteState(namespace, manifest.name);
+        cleanupSpinner.succeed('Cleaned up existing installation');
+    }
+    // ── Phase 4: Dependencies ──
+    if (manifest.dependencies?.skills) {
+        const skills = Object.keys(manifest.dependencies.skills);
+        if (skills.length > 0) {
+            console.log(`${icons.warning} ${chalk.yellow('Skills not yet installed (ClawHub integration planned):')} ${skills.join(', ')}`);
+        }
+    }
+    if (manifest.dependencies?.services?.length) {
+        const unconfigured = manifest.dependencies.services.filter((s) => s.required);
+        if (unconfigured.length > 0) {
+            console.log(`${icons.warning} ${chalk.yellow('Required services — ensure they are configured:')} ${unconfigured.map((s) => s.name).join(', ')}`);
+        }
+    }
+    // ── Phase 5: Confirm ──
+    if (!options.yes && !options.merge) {
+        console.log('');
+        console.log(header('Deployment Plan'));
+        console.log('');
+        console.log(`${label('Formation:')} ${value(`${namespace}/${manifest.name}`)} v${manifest.version}`);
+        console.log('');
+        // Agents
+        console.log(label('Agents:'));
+        const agentRows = [];
+        for (const [slug] of Object.entries(manifest.agents)) {
+            agentRows.push([
+                `  ${slug}`,
+                `→ ${idValidation.ids.get(slug)}`,
+            ]);
+        }
+        console.log(table(agentRows));
+        // Bindings
+        if (manifest.bindings?.length) {
+            console.log('');
+            console.log(label('Channel Bindings:'));
+            for (const b of manifest.bindings) {
+                console.log(`  ${b.channel} → ${namespace}-${b.agent}`);
+            }
+        }
+        // Cron
+        if (manifest.cron?.length) {
+            console.log('');
+            console.log(label('Cron Jobs:'));
+            for (const c of manifest.cron) {
+                console.log(`  ${c.schedule} → ${namespace}-${c.agent}: "${c.prompt.slice(0, 60)}${c.prompt.length > 60 ? '...' : ''}"`);
+            }
+        }
+        // Variables
+        if (manifest.variables && Object.keys(manifest.variables).length > 0) {
+            console.log('');
+            console.log(label('Variables:'));
+            for (const [name, config] of Object.entries(manifest.variables)) {
+                const val = config.sensitive
+                    ? '********'
+                    : (resolvedVars[name] ?? '(not set)');
+                console.log(`  ${name} = ${val}`);
+            }
+        }
+        console.log('');
+        const { confirm } = await import('@inquirer/prompts');
+        const proceed = await confirm({ message: 'Deploy this formation?' });
+        if (!proceed) {
+            console.log('Aborted.');
+            process.exit(0);
+        }
+    }
+    // ── Phase 6: Deploy ──
+    const deploySpinner = ora('Deploying formation...').start();
+    const agentStates = {};
+    const fileHashes = {};
+    const cronJobStates = [];
+    const openClawBindings = [];
+    // Deploy workspace files
+    deploySpinner.text = 'Writing workspace files...';
+    for (const [slug, agentDef] of Object.entries(manifest.agents)) {
+        const agentId = idValidation.ids.get(slug);
+        const workspacePath = resolveWorkspacePath(agentId);
+        await mkdir(workspacePath, { recursive: true });
+        const sourceDir = join(formationPath, agentDef.source);
+        const files = await listFiles(sourceDir);
+        const deployedFiles = [];
+        for (const relativePath of files) {
+            const srcFile = join(sourceDir, relativePath);
+            const destPath = join(workspacePath, relativePath);
+            await mkdir(dirname(destPath), { recursive: true });
+            const rawBytes = await readFile(srcFile);
+            if (isBinaryBuffer(rawBytes)) {
+                // --merge: skip unchanged files
+                if (options.merge && existingState) {
+                    const hash = computeFileHash(rawBytes);
+                    const existingHash = existingState.fileHashes[`${agentId}:${relativePath}`];
+                    if (existingHash === hash) {
+                        deployedFiles.push(relativePath);
+                        fileHashes[`${agentId}:${relativePath}`] = hash;
+                        continue;
+                    }
+                }
+                await writeFile(destPath, rawBytes);
+                fileHashes[`${agentId}:${relativePath}`] = computeFileHash(rawBytes);
+                deployedFiles.push(relativePath);
+                continue;
+            }
+            let content = rawBytes.toString('utf-8');
+            if (TOKEN_RE.test(content)) {
+                content = interpolate(content, resolvedVars);
+            }
+            const written = Buffer.from(content, 'utf-8');
+            // --merge: skip unchanged files
+            if (options.merge && existingState) {
+                const hash = computeFileHash(written);
+                const existingHash = existingState.fileHashes[`${agentId}:${relativePath}`];
+                if (existingHash === hash) {
+                    deployedFiles.push(relativePath);
+                    fileHashes[`${agentId}:${relativePath}`] = hash;
+                    continue;
+                }
+            }
+            await writeFile(destPath, written);
+            fileHashes[`${agentId}:${relativePath}`] = computeFileHash(written);
+            deployedFiles.push(relativePath);
+        }
+        // Generate AGENTS.md
+        if (manifest.agentToAgent?.[slug]?.length) {
+            const agentsMd = generateAgentsMd(manifest, slug, namespace);
+            const buf = Buffer.from(agentsMd, 'utf-8');
+            await writeFile(join(workspacePath, 'AGENTS.md'), buf);
+            fileHashes[`${agentId}:AGENTS.md`] = computeFileHash(buf);
+            deployedFiles.push('AGENTS.md');
+        }
+        agentStates[slug] = {
+            id: agentId,
+            slug,
+            workspace: workspacePath,
+            files: deployedFiles,
+        };
+    }
+    // Patch config
+    deploySpinner.text = 'Patching OpenClaw config...';
+    let patchedConfig = (await readConfig(configPath)).config;
+    for (const [slug, agentDef] of Object.entries(manifest.agents)) {
+        const agentId = idValidation.ids.get(slug);
+        patchedConfig = addAgentEntry(patchedConfig, {
+            id: agentId,
+            name: slug,
+            workspace: resolveWorkspacePath(agentId),
+            model: agentDef.model,
+        });
+    }
+    // Map bindings — use validated IDs from the map, not raw string composition
+    for (const binding of manifest.bindings ?? []) {
+        if (binding.direction) {
+            console.log(`\n${icons.warning} ${chalk.yellow(`'direction' field in binding ${binding.channel} → ${binding.agent} is ignored (OpenClaw bindings are always inbound)`)}`);
+        }
+        const resolvedAgentId = idValidation.ids.get(binding.agent);
+        if (!resolvedAgentId) {
+            console.log(`\n${icons.warning} ${chalk.yellow(`Binding references unknown agent "${binding.agent}" — skipped`)}`);
+            continue;
+        }
+        const openClawBinding = {
+            agentId: resolvedAgentId,
+            match: { channel: binding.channel },
+        };
+        patchedConfig = addBinding(patchedConfig, openClawBinding);
+        openClawBindings.push(openClawBinding);
+    }
+    // Agent-to-agent messaging
+    const a2aState = { wasEnabled: false, allowAdded: false };
+    if (manifest.agentToAgent &&
+        Object.keys(manifest.agentToAgent).length > 0) {
+        const tools = patchedConfig.tools;
+        const a2a = tools?.agentToAgent;
+        a2aState.wasEnabled = a2a?.enabled === true;
+        patchedConfig = setAgentToAgent(patchedConfig, namespace);
+        a2aState.allowAdded = true;
+    }
+    await writeConfig(configPath, patchedConfig, { silent: options.merge });
+    // Cron jobs via Gateway RPC
+    if (manifest.cron?.length) {
+        deploySpinner.text = 'Creating cron jobs...';
+        const gwUrl = options.gatewayUrl ?? resolveGatewayUrl(patchedConfig, process.env);
+        const gwAuth = resolveGatewayAuth({
+            gatewayUrl: options.gatewayUrl,
+            gatewayToken: options.gatewayToken,
+            gatewayPassword: options.gatewayPassword,
+            config: patchedConfig,
+        });
+        const gw = new GatewayClient({
+            url: gwUrl,
+            ...gwAuth,
+        });
+        try {
+            await gw.connect();
+            if (options.merge && existingState) {
+                // --merge: update existing cron jobs, add new ones
+                const existingJobs = await gw.cronList({ includeDisabled: true });
+                const existingByName = new Map(existingJobs.map((j) => [j.name, j]));
+                for (const [i, cronEntry] of manifest.cron.entries()) {
+                    const jobName = `reef:${namespace}:${cronEntry.agent}-${i}`;
+                    const existing = existingByName.get(jobName);
+                    if (existing) {
+                        // Update in-place
+                        await gw.cronUpdate(existing.id, {
+                            schedule: {
+                                kind: 'cron',
+                                expr: cronEntry.schedule,
+                                tz: cronEntry.timezone,
+                            },
+                            payload: {
+                                kind: 'agentTurn',
+                                message: cronEntry.prompt,
+                            },
+                            agentId: idValidation.ids.get(cronEntry.agent),
+                            enabled: true,
+                        });
+                        cronJobStates.push({
+                            id: existing.id,
+                            name: jobName,
+                            agentSlug: cronEntry.agent,
+                        });
+                    }
+                    else {
+                        // Add new
+                        const result = await gw.cronAdd({
+                            name: jobName,
+                            agentId: idValidation.ids.get(cronEntry.agent),
+                            enabled: true,
+                            schedule: {
+                                kind: 'cron',
+                                expr: cronEntry.schedule,
+                                tz: cronEntry.timezone,
+                            },
+                            sessionTarget: 'isolated',
+                            wakeMode: 'now',
+                            payload: {
+                                kind: 'agentTurn',
+                                message: cronEntry.prompt,
+                            },
+                        });
+                        cronJobStates.push({
+                            id: result.id,
+                            name: jobName,
+                            agentSlug: cronEntry.agent,
+                        });
+                    }
+                }
+            }
+            else {
+                // Fresh install
+                for (const [i, cronEntry] of manifest.cron.entries()) {
+                    const jobName = `reef:${namespace}:${cronEntry.agent}-${i}`;
+                    const cronAgentId = idValidation.ids.get(cronEntry.agent);
+                    if (!cronAgentId) {
+                        console.log(`\n${icons.warning} ${chalk.yellow(`Cron job references unknown agent "${cronEntry.agent}" — skipped`)}`);
+                        continue;
+                    }
+                    const result = await gw.cronAdd({
+                        name: jobName,
+                        agentId: cronAgentId,
+                        enabled: true,
+                        schedule: {
+                            kind: 'cron',
+                            expr: cronEntry.schedule,
+                            tz: cronEntry.timezone,
+                        },
+                        sessionTarget: 'isolated',
+                        wakeMode: 'now',
+                        payload: {
+                            kind: 'agentTurn',
+                            message: cronEntry.prompt,
+                        },
+                    });
+                    cronJobStates.push({
+                        id: result.id,
+                        name: jobName,
+                        agentSlug: cronEntry.agent,
+                    });
+                }
+            }
+        }
+        catch (err) {
+            deploySpinner.fail('Failed to create cron jobs');
+            console.error(`${icons.error} Gateway error: ${err instanceof Error ? err.message : err}`);
+            console.error('  Ensure OpenClaw Gateway is running. Config and workspace files were deployed successfully.');
+            // Still save state for what we deployed
+        }
+        finally {
+            gw.close();
+        }
+    }
+    // ── Phase 7: Validate ──
+    deploySpinner.text = 'Validating deployment...';
+    const finalConfig = (await readConfig(configPath)).config;
+    const agentsList = finalConfig.agents?.list ?? [];
+    // agent_exists: check agents in config
+    for (const [slug] of Object.entries(manifest.agents)) {
+        const agentId = idValidation.ids.get(slug);
+        const found = agentsList.some((a) => a.id === agentId);
+        if (!found) {
+            console.log(`\n${icons.warning} Agent "${agentId}" not found in config after deploy`);
+        }
+    }
+    // binding_active: check bindings in config
+    const finalBindings = (finalConfig.bindings ?? []);
+    for (const binding of openClawBindings) {
+        const found = finalBindings.some((b) => {
+            const match = b.match;
+            return b.agentId === binding.agentId && match?.channel === binding.match.channel;
+        });
+        if (!found) {
+            console.log(`\n${icons.warning} Binding ${binding.match.channel} → ${binding.agentId} not found in config after deploy`);
+        }
+    }
+    // cron_exists: verify cron jobs via Gateway (if we created any and Gateway is reachable)
+    if (cronJobStates.length > 0) {
+        try {
+            const gwUrl = options.gatewayUrl ?? resolveGatewayUrl(patchedConfig, process.env);
+            const gwAuth = resolveGatewayAuth({
+                gatewayUrl: options.gatewayUrl,
+                gatewayToken: options.gatewayToken,
+                gatewayPassword: options.gatewayPassword,
+                config: patchedConfig,
+            });
+            const verifyGw = new GatewayClient({
+                url: gwUrl,
+                ...gwAuth,
+            });
+            await verifyGw.connect();
+            const liveJobs = await verifyGw.cronList({ includeDisabled: true });
+            verifyGw.close();
+            const liveIds = new Set(liveJobs.map((j) => j.id));
+            for (const job of cronJobStates) {
+                if (!liveIds.has(job.id)) {
+                    console.log(`\n${icons.warning} Cron job "${job.name}" (${job.id}) not found on Gateway after deploy`);
+                }
+            }
+        }
+        catch {
+            // Gateway not reachable for verification — skip
+        }
+    }
+    // ── Phase 8: State ──
+    const variablesForState = {};
+    for (const [name, config] of Object.entries(manifest.variables ?? {})) {
+        if (config.sensitive) {
+            // Store as env var reference, not the secret value
+            variablesForState[name] = `$${name}`;
+        }
+        else {
+            variablesForState[name] = resolvedVars[name] ?? '';
+        }
+    }
+    const state = {
+        name: manifest.name,
+        version: manifest.version,
+        namespace,
+        installedAt: new Date().toISOString(),
+        agents: agentStates,
+        bindings: openClawBindings,
+        cronJobs: cronJobStates,
+        variables: variablesForState,
+        fileHashes,
+        agentToAgent: a2aState.allowAdded ? a2aState : undefined,
+    };
+    await saveState(state);
+    deploySpinner.succeed('Formation deployed');
+    console.log('');
+    console.log(`${icons.success} ${chalk.green(`${Object.keys(agentStates).length} agents deployed, ${openClawBindings.length} bindings wired, ${cronJobStates.length} cron jobs scheduled`)}`);
+    console.log('');
+    console.log(`  ${label('Manage:')} reef status ${namespace}/${manifest.name}`);
+    console.log(`  ${label('Remove:')} reef uninstall ${namespace}/${manifest.name}`);
+}
+//# sourceMappingURL=install.js.map