@wipcomputer/wip-ldm-os 0.4.38 → 0.4.41

package/scripts/ldm-backup.sh

@@ -0,0 +1,251 @@
+#!/bin/bash
+# ldm-backup.sh — Unified backup for LDM OS
+# Backs up: ~/.ldm/, ~/.openclaw/, ~/.claude/, ~/wipcomputerinc/
+# Handles SQLite safely (sqlite3 .backup). Tars to iCloud for offsite.
+#
+# Source of truth: wip-ldm-os-private/scripts/ldm-backup.sh
+# Deployed to: ~/.ldm/bin/ldm-backup.sh (via ldm install)
+#
+# Usage:
+#   ldm-backup.sh                     # run backup
+#   ldm-backup.sh --dry-run           # preview what would be backed up
+#   ldm-backup.sh --keep 14           # keep last 14 backups (default: 7)
+#   ldm-backup.sh --include-secrets   # include ~/.ldm/secrets/
+#
+# Config: ~/.ldm/config.json (workspace path) + {workspace}/settings/config.json (backup settings)
+
+set -euo pipefail
+
+export PATH="/opt/homebrew/bin:/usr/local/bin:$PATH"
+
+LDM_HOME="$HOME/.ldm"
+OC_HOME="$HOME/.openclaw"
+CLAUDE_HOME="$HOME/.claude"
+BACKUP_ROOT="$LDM_HOME/backups"
+KEEP=7
+INCLUDE_SECRETS=false
+DRY_RUN=false
+
+# Parse flags
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --keep) KEEP="$2"; shift 2 ;;
+    --include-secrets) INCLUDE_SECRETS=true; shift ;;
+    --dry-run) DRY_RUN=true; shift ;;
+    *) echo "Unknown flag: $1" >&2; exit 1 ;;
+  esac
+done
+
+# Read workspace path from ~/.ldm/config.json
+WORKSPACE=""
+if [ -f "$LDM_HOME/config.json" ]; then
+  WORKSPACE=$(python3 -c "import json; print(json.load(open('$LDM_HOME/config.json')).get('workspace',''))" 2>/dev/null || true)
+fi
+if [ -z "$WORKSPACE" ]; then
+  echo "WARNING: No workspace in ~/.ldm/config.json. Skipping workspace backup."
+fi
+
+# Read iCloud backup path from workspace config
+ICLOUD_BACKUP=""
+if [ -n "$WORKSPACE" ] && [ -f "$WORKSPACE/settings/config.json" ]; then
+  ICLOUD_BACKUP=$(python3 -c "
+import json, os
+c = json.load(open('$WORKSPACE/settings/config.json'))
+p = c.get('paths',{}).get('icloudBackup','')
+print(os.path.expanduser(p))
+" 2>/dev/null || true)
+fi
+
+# Read keep from workspace config (override if set there)
+if [ -n "$WORKSPACE" ] && [ -f "$WORKSPACE/settings/config.json" ]; then
+  CONFIG_KEEP=$(python3 -c "import json; print(json.load(open('$WORKSPACE/settings/config.json')).get('backup',{}).get('keep',0))" 2>/dev/null || true)
+  if [ -n "$CONFIG_KEEP" ] && [ "$CONFIG_KEEP" -gt 0 ] 2>/dev/null; then
+    KEEP="$CONFIG_KEEP"
+  fi
+fi
+
+DATE=$(date +%Y-%m-%d--%H-%M-%S)
+DEST="$BACKUP_ROOT/$DATE"
+
+echo "=== LDM Backup: $DATE ==="
+echo "  Local:     $DEST"
+echo "  iCloud:    ${ICLOUD_BACKUP:-not configured}"
+echo "  Keep:      $KEEP days"
+echo "  Workspace: ${WORKSPACE:-not configured}"
+echo ""
+
+if [ "$DRY_RUN" = true ]; then
+  echo "[DRY RUN] Would back up:"
+  echo "  ~/.ldm/memory/crystal.db (sqlite3 .backup)"
+  echo "  ~/.ldm/agents/ (cp -a)"
+  echo "  ~/.ldm/state/ (cp -a)"
+  echo "  ~/.ldm/config.json (cp)"
+  [ -f "$OC_HOME/memory/main.sqlite" ] && echo "  ~/.openclaw/memory/main.sqlite (sqlite3 .backup) [$(du -sh "$OC_HOME/memory/main.sqlite" | cut -f1)]"
+  [ -f "$OC_HOME/memory/context-embeddings.sqlite" ] && echo "  ~/.openclaw/memory/context-embeddings.sqlite (sqlite3 .backup)"
+  [ -d "$OC_HOME/workspace" ] && echo "  ~/.openclaw/workspace/ (tar)"
+  [ -d "$OC_HOME/agents/main/sessions" ] && echo "  ~/.openclaw/agents/main/sessions/ (tar)"
+  [ -f "$OC_HOME/openclaw.json" ] && echo "  ~/.openclaw/openclaw.json (cp)"
+  [ -f "$CLAUDE_HOME/CLAUDE.md" ] && echo "  ~/.claude/CLAUDE.md (cp)"
+  [ -f "$CLAUDE_HOME/settings.json" ] && echo "  ~/.claude/settings.json (cp)"
+  [ -d "$CLAUDE_HOME/projects" ] && echo "  ~/.claude/projects/ (tar)"
+  [ -n "$WORKSPACE" ] && echo "  $WORKSPACE/ (tar, excludes node_modules/.git/objects)"
+  [ "$INCLUDE_SECRETS" = true ] && echo "  ~/.ldm/secrets/ (cp -a)"
+  echo ""
+  echo "[DRY RUN] No files modified."
+  exit 0
+fi
+
+# Preflight
+if [ ! -d "$LDM_HOME" ]; then
+  echo "ERROR: ~/.ldm/ not found" >&2
+  exit 1
+fi
+
+mkdir -p "$DEST/ldm/memory" "$DEST/openclaw/memory" "$DEST/claude"
+
+# ── 1. Back up ~/.ldm/ ──
+
+echo "--- ~/.ldm/ ---"
+
+# Crystal DB (safe sqlite3 .backup)
+CRYSTAL_DB="$LDM_HOME/memory/crystal.db"
+if [ -f "$CRYSTAL_DB" ]; then
+  if command -v sqlite3 &>/dev/null; then
+    sqlite3 "$CRYSTAL_DB" ".backup '$DEST/ldm/memory/crystal.db'"
+    echo "  crystal.db:              sqlite3 .backup OK"
+  else
+    cp "$CRYSTAL_DB" "$DEST/ldm/memory/crystal.db"
+    [ -f "$CRYSTAL_DB-wal" ] && cp "$CRYSTAL_DB-wal" "$DEST/ldm/memory/crystal.db-wal"
+    [ -f "$CRYSTAL_DB-shm" ] && cp "$CRYSTAL_DB-shm" "$DEST/ldm/memory/crystal.db-shm"
+    echo "  crystal.db:              file copy (no sqlite3)"
+  fi
+else
+  echo "  crystal.db:              not found (skipped)"
+fi
+
+# Config
+[ -f "$LDM_HOME/config.json" ] && cp "$LDM_HOME/config.json" "$DEST/ldm/config.json" && echo "  config.json:             OK"
+
+# State
+[ -d "$LDM_HOME/state" ] && cp -a "$LDM_HOME/state" "$DEST/ldm/state" && echo "  state/:                  OK"
+
+# Agents (identity, journals, daily logs)
+[ -d "$LDM_HOME/agents" ] && cp -a "$LDM_HOME/agents" "$DEST/ldm/agents" && echo "  agents/:                 OK"
+
+# Secrets (optional)
+if [ "$INCLUDE_SECRETS" = true ] && [ -d "$LDM_HOME/secrets" ]; then
+  cp -a "$LDM_HOME/secrets" "$DEST/ldm/secrets"
+  chmod 700 "$DEST/ldm/secrets"
+  echo "  secrets/:                OK"
+fi
+
+# ── 2. Back up ~/.openclaw/ ──
+
+echo "--- ~/.openclaw/ ---"
+
+# main.sqlite (safe sqlite3 .backup)
+if [ -f "$OC_HOME/memory/main.sqlite" ]; then
+  if command -v sqlite3 &>/dev/null; then
+    sqlite3 "$OC_HOME/memory/main.sqlite" ".backup '$DEST/openclaw/memory/main.sqlite'"
+    echo "  main.sqlite:             sqlite3 .backup OK"
+  else
+    cp "$OC_HOME/memory/main.sqlite" "$DEST/openclaw/memory/main.sqlite"
+    [ -f "$OC_HOME/memory/main.sqlite-wal" ] && cp "$OC_HOME/memory/main.sqlite-wal" "$DEST/openclaw/memory/main.sqlite-wal"
+    echo "  main.sqlite:             file copy"
+  fi
+fi
+
+# context-embeddings.sqlite
+if [ -f "$OC_HOME/memory/context-embeddings.sqlite" ]; then
+  if command -v sqlite3 &>/dev/null; then
+    sqlite3 "$OC_HOME/memory/context-embeddings.sqlite" ".backup '$DEST/openclaw/memory/context-embeddings.sqlite'"
+    echo "  context-embeddings:      sqlite3 .backup OK"
+  else
+    cp "$OC_HOME/memory/context-embeddings.sqlite" "$DEST/openclaw/memory/context-embeddings.sqlite"
+    echo "  context-embeddings:      file copy"
+  fi
+fi
+
+# Workspace
+[ -d "$OC_HOME/workspace" ] && tar -cf "$DEST/openclaw/workspace.tar" -C "$OC_HOME" workspace 2>/dev/null && echo "  workspace/:              tar OK"
+
+# OC sessions
+[ -d "$OC_HOME/agents/main/sessions" ] && tar -cf "$DEST/openclaw/sessions.tar" -C "$OC_HOME/agents/main" sessions 2>/dev/null && echo "  sessions/:               tar OK"
+
+# OC config
+[ -f "$OC_HOME/openclaw.json" ] && cp "$OC_HOME/openclaw.json" "$DEST/openclaw/openclaw.json" && echo "  openclaw.json:           OK"
+
+# State files
+for f in session-export-state.json cc-export-watermark.json cc-capture-watermark.json memory-capture-state.json; do
+  [ -f "$OC_HOME/memory/$f" ] && cp "$OC_HOME/memory/$f" "$DEST/openclaw/memory/$f"
+done
+echo "  state files:             OK"
+
+# ── 3. Back up ~/.claude/ ──
+
+echo "--- ~/.claude/ ---"
+
+[ -f "$CLAUDE_HOME/CLAUDE.md" ] && cp "$CLAUDE_HOME/CLAUDE.md" "$DEST/claude/CLAUDE.md" && echo "  CLAUDE.md:               OK"
+[ -f "$CLAUDE_HOME/settings.json" ] && cp "$CLAUDE_HOME/settings.json" "$DEST/claude/settings.json" && echo "  settings.json:           OK"
+[ -d "$CLAUDE_HOME/projects" ] && tar -cf "$DEST/claude/projects.tar" -C "$CLAUDE_HOME" projects 2>/dev/null && echo "  projects/:               tar OK"
+
+# ── 4. Back up workspace ──
+
+if [ -n "$WORKSPACE" ] && [ -d "$WORKSPACE" ]; then
+  echo "--- $WORKSPACE/ ---"
+  tar -cf "$DEST/wipcomputerinc.tar" \
+    --exclude "node_modules" \
+    --exclude ".git/objects" \
+    --exclude ".DS_Store" \
+    --exclude "*/staff/cc-mini/documents/backups" \
+    --exclude "*/_temp/backups" \
+    --exclude "*/_trash" \
+    -C "$(dirname "$WORKSPACE")" "$(basename "$WORKSPACE")" 2>/dev/null \
+    && echo "  workspace:               tar OK" \
+    || echo "  workspace:               tar FAILED"
+fi
+
+# ── 5. iCloud offsite ──
+
+if [ -n "$ICLOUD_BACKUP" ] && [ -d "$(dirname "$ICLOUD_BACKUP")" ]; then
+  echo "--- iCloud offsite ---"
+  mkdir -p "$ICLOUD_BACKUP"
+  ORG=$(python3 -c "import json; print(json.load(open('$LDM_HOME/config.json')).get('org','ldmos'))" 2>/dev/null || echo "ldmos")
+  DEVICE=$(hostname -s)
+  TAR_NAME="${ORG}-${DEVICE}-${DATE}.tar.gz"
+  tar -czf "$ICLOUD_BACKUP/$TAR_NAME" -C "$BACKUP_ROOT" "$DATE" 2>/dev/null \
+    && echo "  $TAR_NAME: OK" \
+    || echo "  iCloud tar: FAILED"
+
+  # Rotate iCloud tars
+  ICLOUD_COUNT=$(ls -1 "$ICLOUD_BACKUP"/*.tar.gz 2>/dev/null | wc -l | tr -d ' ')
+  if [ "$ICLOUD_COUNT" -gt "$KEEP" ]; then
+    REMOVE_COUNT=$((ICLOUD_COUNT - KEEP))
+    ls -1t "$ICLOUD_BACKUP"/*.tar.gz | tail -n "$REMOVE_COUNT" | while read OLD; do
+      rm -f "$OLD"
+      echo "  Rotated: $(basename "$OLD")"
+    done
+  fi
+fi
+
+# ── 6. Rotate local backups ──
+
+echo "--- Rotation ---"
+BACKUP_COUNT=$(ls -1d "$BACKUP_ROOT"/20??-??-??--* 2>/dev/null | wc -l | tr -d ' ')
+if [ "$BACKUP_COUNT" -gt "$KEEP" ]; then
+  REMOVE_COUNT=$((BACKUP_COUNT - KEEP))
+  ls -1d "$BACKUP_ROOT"/20??-??-??--* | head -n "$REMOVE_COUNT" | while read OLD; do
+    rm -rf "$OLD"
+    echo "  Removed: $(basename "$OLD")"
+  done
+fi
+
+# ── Summary ──
+
+TOTAL_SIZE=$(du -sh "$DEST" | cut -f1)
+echo ""
+echo "=== Backup complete ==="
+echo "  Location: $DEST"
+echo "  Size:     $TOTAL_SIZE"
+echo "  Backups:  $BACKUP_COUNT total (keeping $KEEP)"
+[ -n "$ICLOUD_BACKUP" ] && echo "  iCloud:   $ICLOUD_BACKUP/"

package/scripts/ldm-restore.sh

@@ -0,0 +1,224 @@
+#!/bin/bash
+# ldm-restore.sh — Restore from an LDM OS backup
+# Restores: ~/.ldm/, ~/.openclaw/, ~/.claude/, ~/wipcomputerinc/
+#
+# Source of truth: wip-ldm-os-private/scripts/ldm-restore.sh
+# Deployed to: ~/.ldm/bin/ldm-restore.sh (via ldm install)
+#
+# Usage:
+#   ldm-restore.sh                          # list available backups
+#   ldm-restore.sh 2026-03-24--09-50-22     # restore from specific backup
+#   ldm-restore.sh --from-icloud <file>     # restore from iCloud tar
+#   ldm-restore.sh --dry-run <backup>       # preview what would be restored
+#   ldm-restore.sh --only ldm <backup>      # restore only ~/.ldm/ data
+#   ldm-restore.sh --only openclaw <backup> # restore only ~/.openclaw/ data
+#   ldm-restore.sh --only claude <backup>   # restore only ~/.claude/ data
+#   ldm-restore.sh --only workspace <backup># restore only workspace
+
+set -euo pipefail
+
+export PATH="/opt/homebrew/bin:/usr/local/bin:$PATH"
+
+LDM_HOME="$HOME/.ldm"
+BACKUP_ROOT="$LDM_HOME/backups"
+DRY_RUN=false
+ONLY=""
+FROM_ICLOUD=""
+BACKUP_NAME=""
+
+# Parse flags
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --dry-run) DRY_RUN=true; shift ;;
+    --only) ONLY="$2"; shift 2 ;;
+    --from-icloud) FROM_ICLOUD="$2"; shift 2 ;;
+    --help|-h)
+      echo "Usage: ldm-restore.sh [options] [backup-name]"
+      echo ""
+      echo "Options:"
+      echo "  --dry-run              Preview what would be restored"
+      echo "  --only <section>       Restore only: ldm, openclaw, claude, workspace"
+      echo "  --from-icloud <file>   Restore from iCloud .tar.gz"
+      echo ""
+      echo "Examples:"
+      echo "  ldm-restore.sh                           # list backups"
+      echo "  ldm-restore.sh 2026-03-24--09-50-22      # restore from local"
+      echo "  ldm-restore.sh --only ldm 2026-03-24--09-50-22  # restore only crystal.db + agents"
+      echo "  ldm-restore.sh --from-icloud ~/path/to/backup.tar.gz"
+      exit 0
+      ;;
+    *) BACKUP_NAME="$1"; shift ;;
+  esac
+done
+
+# If restoring from iCloud tar, extract to temp dir first
+if [ -n "$FROM_ICLOUD" ]; then
+  if [ ! -f "$FROM_ICLOUD" ]; then
+    echo "ERROR: File not found: $FROM_ICLOUD" >&2
+    exit 1
+  fi
+  echo "Extracting iCloud backup to temp dir..."
+  TEMP_DIR=$(mktemp -d)
+  tar -xzf "$FROM_ICLOUD" -C "$TEMP_DIR"
+  # Find the backup dir inside (should be one dated folder)
+  BACKUP_NAME=$(ls "$TEMP_DIR" | head -1)
+  BACKUP_ROOT="$TEMP_DIR"
+  echo "  Extracted: $BACKUP_NAME"
+fi
+
+# List mode (no backup specified)
+if [ -z "$BACKUP_NAME" ]; then
+  echo "Available backups:"
+  echo ""
+  if [ -d "$BACKUP_ROOT" ]; then
+    for d in $(ls -1d "$BACKUP_ROOT"/20??-??-??--* 2>/dev/null | sort -r); do
+      SIZE=$(du -sh "$d" | cut -f1)
+      echo "  $(basename "$d")  ($SIZE)"
+    done
+  fi
+  echo ""
+  echo "Usage: ldm-restore.sh <backup-name>"
+  echo "  e.g. ldm-restore.sh 2026-03-24--09-50-22"
+  exit 0
+fi
+
+SRC="$BACKUP_ROOT/$BACKUP_NAME"
+
+if [ ! -d "$SRC" ]; then
+  echo "ERROR: Backup not found: $SRC" >&2
+  exit 1
+fi
+
+echo "=== LDM Restore: $BACKUP_NAME ==="
+echo "  Source: $SRC"
+echo "  Mode:  ${ONLY:-all}"
+echo ""
+
+# Read workspace path
+WORKSPACE=""
+if [ -f "$LDM_HOME/config.json" ]; then
+  WORKSPACE=$(python3 -c "import json; print(json.load(open('$LDM_HOME/config.json')).get('workspace',''))" 2>/dev/null || true)
+fi
+
+if [ "$DRY_RUN" = true ]; then
+  echo "[DRY RUN] Would restore:"
+  [ -z "$ONLY" ] || [ "$ONLY" = "ldm" ] && {
+    [ -f "$SRC/ldm/memory/crystal.db" ] && echo "  crystal.db -> ~/.ldm/memory/crystal.db"
+    [ -d "$SRC/ldm/agents" ] && echo "  agents/ -> ~/.ldm/agents/"
+    [ -d "$SRC/ldm/state" ] && echo "  state/ -> ~/.ldm/state/"
+    [ -f "$SRC/ldm/config.json" ] && echo "  config.json -> ~/.ldm/config.json"
+  }
+  [ -z "$ONLY" ] || [ "$ONLY" = "openclaw" ] && {
+    [ -f "$SRC/openclaw/memory/main.sqlite" ] && echo "  main.sqlite -> ~/.openclaw/memory/main.sqlite"
+    [ -f "$SRC/openclaw/memory/context-embeddings.sqlite" ] && echo "  context-embeddings.sqlite -> ~/.openclaw/memory/"
+    [ -f "$SRC/openclaw/workspace.tar" ] && echo "  workspace.tar -> ~/.openclaw/workspace/"
+    [ -f "$SRC/openclaw/sessions.tar" ] && echo "  sessions.tar -> ~/.openclaw/agents/main/sessions/"
+    [ -f "$SRC/openclaw/openclaw.json" ] && echo "  openclaw.json -> ~/.openclaw/"
+  }
+  [ -z "$ONLY" ] || [ "$ONLY" = "claude" ] && {
+    [ -f "$SRC/claude/CLAUDE.md" ] && echo "  CLAUDE.md -> ~/.claude/CLAUDE.md"
+    [ -f "$SRC/claude/settings.json" ] && echo "  settings.json -> ~/.claude/settings.json"
+    [ -f "$SRC/claude/projects.tar" ] && echo "  projects.tar -> ~/.claude/projects/"
+  }
+  [ -z "$ONLY" ] || [ "$ONLY" = "workspace" ] && {
+    [ -f "$SRC/wipcomputerinc.tar" ] && echo "  wipcomputerinc.tar -> $WORKSPACE/"
+  }
+  echo ""
+  echo "[DRY RUN] No files modified."
+  exit 0
+fi
+
+echo "WARNING: This will overwrite existing files. Press Ctrl+C to cancel."
+echo "Restoring in 5 seconds..."
+sleep 5
+
+# ── Restore ~/.ldm/ ──
+
+if [ -z "$ONLY" ] || [ "$ONLY" = "ldm" ]; then
+  echo "--- Restoring ~/.ldm/ ---"
+
+  if [ -f "$SRC/ldm/memory/crystal.db" ]; then
+    cp "$SRC/ldm/memory/crystal.db" "$LDM_HOME/memory/crystal.db"
+    echo "  crystal.db:              OK"
+  fi
+
+  if [ -d "$SRC/ldm/agents" ]; then
+    cp -a "$SRC/ldm/agents/"* "$LDM_HOME/agents/" 2>/dev/null
+    echo "  agents/:                 OK"
+  fi
+
+  if [ -d "$SRC/ldm/state" ]; then
+    cp -a "$SRC/ldm/state/"* "$LDM_HOME/state/" 2>/dev/null
+    echo "  state/:                  OK"
+  fi
+
+  [ -f "$SRC/ldm/config.json" ] && cp "$SRC/ldm/config.json" "$LDM_HOME/config.json" && echo "  config.json:             OK"
+fi
+
+# ── Restore ~/.openclaw/ ──
+
+if [ -z "$ONLY" ] || [ "$ONLY" = "openclaw" ]; then
+  echo "--- Restoring ~/.openclaw/ ---"
+
+  OC_HOME="$HOME/.openclaw"
+
+  if [ -f "$SRC/openclaw/memory/main.sqlite" ]; then
+    cp "$SRC/openclaw/memory/main.sqlite" "$OC_HOME/memory/main.sqlite"
+    echo "  main.sqlite:             OK"
+  fi
+
+  if [ -f "$SRC/openclaw/memory/context-embeddings.sqlite" ]; then
+    cp "$SRC/openclaw/memory/context-embeddings.sqlite" "$OC_HOME/memory/context-embeddings.sqlite"
+    echo "  context-embeddings:      OK"
+  fi
+
+  if [ -f "$SRC/openclaw/workspace.tar" ]; then
+    tar -xf "$SRC/openclaw/workspace.tar" -C "$OC_HOME/"
+    echo "  workspace/:              OK"
+  fi
+
+  if [ -f "$SRC/openclaw/sessions.tar" ]; then
+    mkdir -p "$OC_HOME/agents/main"
+    tar -xf "$SRC/openclaw/sessions.tar" -C "$OC_HOME/agents/main/"
+    echo "  sessions/:               OK"
+  fi
+
+  [ -f "$SRC/openclaw/openclaw.json" ] && cp "$SRC/openclaw/openclaw.json" "$OC_HOME/openclaw.json" && echo "  openclaw.json:           OK"
+
+  for f in session-export-state.json cc-export-watermark.json cc-capture-watermark.json memory-capture-state.json; do
+    [ -f "$SRC/openclaw/memory/$f" ] && cp "$SRC/openclaw/memory/$f" "$OC_HOME/memory/$f"
+  done
+  echo "  state files:             OK"
+fi
+
+# ── Restore ~/.claude/ ──
+
+if [ -z "$ONLY" ] || [ "$ONLY" = "claude" ]; then
+  echo "--- Restoring ~/.claude/ ---"
+
+  [ -f "$SRC/claude/CLAUDE.md" ] && cp "$SRC/claude/CLAUDE.md" "$HOME/.claude/CLAUDE.md" && echo "  CLAUDE.md:               OK"
+  [ -f "$SRC/claude/settings.json" ] && cp "$SRC/claude/settings.json" "$HOME/.claude/settings.json" && echo "  settings.json:           OK"
+
+  if [ -f "$SRC/claude/projects.tar" ]; then
+    tar -xf "$SRC/claude/projects.tar" -C "$HOME/.claude/"
+    echo "  projects/:               OK"
+  fi
+fi
+
+# ── Restore workspace ──
+
+if [ -z "$ONLY" ] || [ "$ONLY" = "workspace" ]; then
+  if [ -f "$SRC/wipcomputerinc.tar" ] && [ -n "$WORKSPACE" ]; then
+    echo "--- Restoring workspace ---"
+    tar -xf "$SRC/wipcomputerinc.tar" -C "$(dirname "$WORKSPACE")"
+    echo "  workspace:               OK"
+  fi
+fi
+
+# Clean up temp dir if from iCloud
+[ -n "${TEMP_DIR:-}" ] && rm -rf "$TEMP_DIR"
+
+echo ""
+echo "=== Restore complete ==="
+echo "  Restart the gateway: openclaw gateway restart"
+echo "  Verify crystal: crystal status"