@wooblaymcp/cli 0.1.0

package/dist/adapters/openclaw.d.ts

@@ -0,0 +1,32 @@
+import type { IntegrationAdapter } from './types.js';
+/**
+ * OpenClaw adapter – patches ~/.openclaw/openclaw.json to:
+ *   - Add tools.deny list to block dangerous tools
+ *   - Add Wooblay MCP server to agents.list[].mcp.servers[]
+ */
+export declare class OpenClawAdapter implements IntegrationAdapter {
+    readonly name = "openclaw";
+    readonly configPath: string;
+    detect(): Promise<{
+        installed: boolean;
+        configExists: boolean;
+        version?: string;
+    }>;
+    backup(): Promise<string>;
+    enable(opts: {
+        gateUrl: string;
+    }): Promise<{
+        success: boolean;
+        message: string;
+    }>;
+    disable(backupPath: string): Promise<void>;
+    restart(): Promise<{
+        success: boolean;
+        message: string;
+    }>;
+    status(): Promise<{
+        healthy: boolean;
+        message: string;
+    }>;
+}
+//# sourceMappingURL=openclaw.d.ts.map

package/dist/adapters/openclaw.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw.d.ts","sourceRoot":"","sources":["../../src/adapters/openclaw.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAKrD;;;;GAIG;AACH,qBAAa,eAAgB,YAAW,kBAAkB;IACxD,QAAQ,CAAC,IAAI,cAAc;IAC3B,QAAQ,CAAC,UAAU,SAAmB;IAEhC,MAAM,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAOlF,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAYzB,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAgDjF,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO1C,OAAO,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAKzD,MAAM,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAyB/D"}

package/dist/adapters/openclaw.js

@@ -0,0 +1,102 @@
+import { readFileSync, writeFileSync, copyFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { mkdirSync } from 'node:fs';
+import { BACKUPS_DIR } from '../config/paths.js';
+const OPENCLAW_DIR = join(homedir(), '.openclaw');
+const OPENCLAW_CONFIG = join(OPENCLAW_DIR, 'openclaw.json');
+/**
+ * OpenClaw adapter – patches ~/.openclaw/openclaw.json to:
+ *   - Add tools.deny list to block dangerous tools
+ *   - Add Wooblay MCP server to agents.list[].mcp.servers[]
+ */
+export class OpenClawAdapter {
+    name = 'openclaw';
+    configPath = OPENCLAW_CONFIG;
+    async detect() {
+        // Check if openclaw binary is on PATH (simplified check)
+        const configExists = existsSync(OPENCLAW_CONFIG);
+        const installed = existsSync(OPENCLAW_DIR);
+        return { installed, configExists };
+    }
+    async backup() {
+        mkdirSync(BACKUPS_DIR, { recursive: true });
+        const timestamp = new Date().toISOString().replace(/[:.]/g, '-');
+        const backupPath = join(BACKUPS_DIR, `openclaw-${timestamp}.json`);
+        if (existsSync(OPENCLAW_CONFIG)) {
+            copyFileSync(OPENCLAW_CONFIG, backupPath);
+        }
+        return backupPath;
+    }
+    async enable(opts) {
+        if (!existsSync(OPENCLAW_CONFIG)) {
+            return { success: false, message: `Config not found at ${OPENCLAW_CONFIG}` };
+        }
+        try {
+            const raw = readFileSync(OPENCLAW_CONFIG, 'utf-8');
+            const config = JSON.parse(raw);
+            // Add tools.deny list
+            const tools = config['tools'] ?? {};
+            tools['deny'] = ['exec', 'process', 'browser', 'canvas'];
+            config['tools'] = tools;
+            // Add MCP server to agents
+            const agents = config['agents'] ?? {};
+            const list = agents['list'] ?? [{}];
+            for (const agent of list) {
+                const mcp = agent['mcp'] ?? {};
+                const servers = mcp['servers'] ?? [];
+                // Remove existing wooblay server if present
+                const filtered = servers.filter((s) => s['name'] !== 'wooblay-gate');
+                filtered.push({
+                    name: 'wooblay-gate',
+                    url: `${opts.gateUrl}/mcp`,
+                    transport: 'sse',
+                });
+                mcp['servers'] = filtered;
+                agent['mcp'] = mcp;
+            }
+            agents['list'] = list;
+            config['agents'] = agents;
+            writeFileSync(OPENCLAW_CONFIG, JSON.stringify(config, null, 2) + '\n', 'utf-8');
+            return { success: true, message: 'OpenClaw config patched with Wooblay MCP server' };
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            return { success: false, message: `Failed to patch config: ${msg}` };
+        }
+    }
+    async disable(backupPath) {
+        if (!existsSync(backupPath)) {
+            throw new Error(`Backup not found at ${backupPath}`);
+        }
+        copyFileSync(backupPath, OPENCLAW_CONFIG);
+    }
+    async restart() {
+        // Placeholder – actual restart logic would kill/spawn the process
+        return { success: false, message: 'OpenClaw restart is not yet implemented' };
+    }
+    async status() {
+        const configExists = existsSync(OPENCLAW_CONFIG);
+        if (!configExists) {
+            return { healthy: false, message: 'OpenClaw config not found' };
+        }
+        try {
+            const raw = readFileSync(OPENCLAW_CONFIG, 'utf-8');
+            const config = JSON.parse(raw);
+            const agents = config['agents'] ?? {};
+            const list = agents['list'] ?? [];
+            const hasWooblay = list.some((agent) => {
+                const mcp = agent['mcp'] ?? {};
+                const servers = mcp['servers'] ?? [];
+                return servers.some((s) => s['name'] === 'wooblay-gate');
+            });
+            return hasWooblay
+                ? { healthy: true, message: 'Wooblay MCP server is configured in OpenClaw' }
+                : { healthy: false, message: 'Wooblay MCP server not found in OpenClaw config' };
+        }
+        catch {
+            return { healthy: false, message: 'Failed to read OpenClaw config' };
+        }
+    }
+}
+//# sourceMappingURL=openclaw.js.map

package/dist/adapters/openclaw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw.js","sourceRoot":"","sources":["../../src/adapters/openclaw.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAClD,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;AAE5D;;;;GAIG;AACH,MAAM,OAAO,eAAe;IACjB,IAAI,GAAG,UAAU,CAAC;IAClB,UAAU,GAAG,eAAe,CAAC;IAEtC,KAAK,CAAC,MAAM;QACV,yDAAyD;QACzD,MAAM,YAAY,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAC3C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM;QACV,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,SAAS,OAAO,CAAC,CAAC;QAEnE,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChC,YAAY,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAyB;QACpC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,uBAAuB,eAAe,EAAE,EAAE,CAAC;QAC/E,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YAE1D,sBAAsB;YACtB,MAAM,KAAK,GAAI,MAAM,CAAC,OAAO,CAA6B,IAAI,EAAE,CAAC;YACjE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YACzD,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;YAExB,2BAA2B;YAC3B,MAAM,MAAM,GAAI,MAAM,CAAC,QAAQ,CAA6B,IAAI,EAAE,CAAC;YACnE,MAAM,IAAI,GAAI,MAAM,CAAC,MAAM,CAAoC,IAAI,CAAC,EAAE,CAAC,CAAC;YAExE,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAI,KAAK,CAAC,KAAK,CAA6B,IAAI,EAAE,CAAC;gBAC5D,MAAM,OAAO,GAAI,GAAG,CAAC,SAAS,CAAoC,IAAI,EAAE,CAAC;gBAEzE,4CAA4C;gBAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,MAAM,CAAY,KAAK,cAAc,CAChD,CAAC;gBAEF,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,cAAc;oBACpB,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,MAAM;oBAC1B,SAAS,EAAE,KAAK;iBACjB,CAAC,CAAC;gBAEH,GAAG,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC;gBAC1B,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;YACrB,CAAC;YAED,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YACtB,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;YAE1B,aAAa,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;YAChF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,GAAG,EAAE,EAAE,CAAC;QACvE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,UAAkB;QAC9B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,YAAY,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,OAAO;QACX,kEAAkE;QAClE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,YAAY,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;QACjD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;QAClE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YAC1D,MAAM,MAAM,GAAI,MAAM,CAAC,QAAQ,CAA6B,IAAI,EAAE,CAAC;YACnE,MAAM,IAAI,GAAI,MAAM,CAAC,MAAM,CAAoC,IAAI,EAAE,CAAC;YAEtE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBACrC,MAAM,GAAG,GAAI,KAAK,CAAC,KAAK,CAA6B,IAAI,EAAE,CAAC;gBAC5D,MAAM,OAAO,GAAI,GAAG,CAAC,SAAS,CAAoC,IAAI,EAAE,CAAC;gBACzE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,MAAM,CAAY,KAAK,cAAc,CAAC,CAAC;YACvE,CAAC,CAAC,CAAC;YAEH,OAAO,UAAU;gBACf,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,8CAA8C,EAAE;gBAC5E,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;QACvE,CAAC;IACH,CAAC;CACF"}

package/dist/adapters/registry.d.ts

@@ -0,0 +1,7 @@
+import type { IntegrationAdapter } from './types.js';
+/**
+ * Get an integration adapter by name.
+ * Throws if the adapter is not registered.
+ */
+export declare function getAdapter(name: string): IntegrationAdapter;
+//# sourceMappingURL=registry.d.ts.map

package/dist/adapters/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/adapters/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAOrD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAO3D"}

package/dist/adapters/registry.js

@@ -0,0 +1,17 @@
+import { OpenClawAdapter } from './openclaw.js';
+const adapters = {
+    openclaw: () => new OpenClawAdapter(),
+};
+/**
+ * Get an integration adapter by name.
+ * Throws if the adapter is not registered.
+ */
+export function getAdapter(name) {
+    const factory = adapters[name];
+    if (!factory) {
+        const available = Object.keys(adapters).join(', ');
+        throw new Error(`Unknown adapter "${name}". Available: ${available}`);
+    }
+    return factory();
+}
+//# sourceMappingURL=registry.js.map

package/dist/adapters/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/adapters/registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,MAAM,QAAQ,GAA6C;IACzD,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,eAAe,EAAE;CACtC,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,iBAAiB,SAAS,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,OAAO,EAAE,CAAC;AACnB,CAAC"}

package/dist/adapters/types.d.ts

@@ -0,0 +1,40 @@
+/**
+ * IntegrationAdapter – interface for plugging agent frameworks into Wooblay.
+ *
+ * Each adapter knows how to detect, configure, and manage
+ * a specific agent runtime (e.g. OpenClaw).
+ */
+export interface IntegrationAdapter {
+    /** Human-readable name of the adapter (e.g. "openclaw") */
+    readonly name: string;
+    /** Path to the framework's config file */
+    readonly configPath: string;
+    /** Detect whether the framework is installed and configured */
+    detect(): Promise<{
+        installed: boolean;
+        configExists: boolean;
+        version?: string;
+    }>;
+    /** Back up the current config; returns the backup file path */
+    backup(): Promise<string>;
+    /** Patch the framework config to route through Wooblay Gate */
+    enable(opts: {
+        gateUrl: string;
+    }): Promise<{
+        success: boolean;
+        message: string;
+    }>;
+    /** Restore the framework config from a backup */
+    disable(backupPath: string): Promise<void>;
+    /** Restart the framework process */
+    restart(): Promise<{
+        success: boolean;
+        message: string;
+    }>;
+    /** Check if the framework is running and healthy */
+    status(): Promise<{
+        healthy: boolean;
+        message: string;
+    }>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/adapters/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/adapters/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,0CAA0C;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,+DAA+D;IAC/D,MAAM,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEnF,+DAA+D;IAC/D,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAE1B,+DAA+D;IAC/D,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAElF,iDAAiD;IACjD,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3C,oCAAoC;IACpC,OAAO,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE1D,oDAAoD;IACpD,MAAM,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1D"}

package/dist/adapters/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/adapters/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/adapters/types.ts"],"names":[],"mappings":""}

package/dist/commands/deploy.d.ts

@@ -0,0 +1,25 @@
+/**
+ * wooblay deploy – Build, push, and provision a secure runtime on EC2.
+ *
+ * This command:
+ *   1. Reads the runtime manifest (runtimes/<runtime>.yaml)
+ *   2. Builds Docker images for Gate + Agent runtime
+ *   3. Pushes images to ECR
+ *   4. Runs Terraform to provision a hardened EC2 instance
+ *   5. Outputs the tenant URL and health status
+ *
+ * Usage:
+ *   wooblay deploy --runtime openclaw --tenant my-client
+ */
+interface DeployOptions {
+    runtime: string;
+    tenant: string;
+    region: string;
+    instanceType: string;
+    skipBuild: boolean;
+    skipPush: boolean;
+    dryRun: boolean;
+}
+export declare function deploy(opts: DeployOptions): Promise<void>;
+export {};
+//# sourceMappingURL=deploy.d.ts.map

package/dist/commands/deploy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,UAAU,aAAa;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;CACjB;AAoBD,wBAAsB,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA0M/D"}

package/dist/commands/deploy.js

@@ -0,0 +1,230 @@
+/**
+ * wooblay deploy – Build, push, and provision a secure runtime on EC2.
+ *
+ * This command:
+ *   1. Reads the runtime manifest (runtimes/<runtime>.yaml)
+ *   2. Builds Docker images for Gate + Agent runtime
+ *   3. Pushes images to ECR
+ *   4. Runs Terraform to provision a hardened EC2 instance
+ *   5. Outputs the tenant URL and health status
+ *
+ * Usage:
+ *   wooblay deploy --runtime openclaw --tenant my-client
+ */
+import { execSync } from 'node:child_process';
+import { readFileSync, existsSync } from 'node:fs';
+import { resolve, join } from 'node:path';
+import chalk from 'chalk';
+function run(cmd, opts) {
+    try {
+        const result = execSync(cmd, {
+            cwd: opts?.cwd,
+            encoding: 'utf-8',
+            stdio: opts?.silent ? 'pipe' : 'inherit',
+        });
+        return result?.toString().trim() ?? '';
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new Error(`Command failed: ${cmd}\n${msg}`);
+    }
+}
+function runCapture(cmd, opts) {
+    return run(cmd, { ...opts, silent: true });
+}
+export async function deploy(opts) {
+    const { runtime, tenant, region, instanceType, skipBuild, skipPush, dryRun } = opts;
+    console.log(chalk.bold('\n=== Wooblay Deploy ==='));
+    console.log(`  Runtime:  ${chalk.cyan(runtime)}`);
+    console.log(`  Tenant:   ${chalk.cyan(tenant)}`);
+    console.log(`  Region:   ${chalk.cyan(region)}`);
+    console.log(`  Instance: ${chalk.cyan(instanceType)}`);
+    if (dryRun)
+        console.log(chalk.yellow('  [DRY RUN — no resources will be created]'));
+    console.log('');
+    // ── Find project root ────────────────────────────────────────────────
+    const projectRoot = findProjectRoot();
+    if (!projectRoot) {
+        console.error(chalk.red('Could not find project root (looking for pnpm-workspace.yaml)'));
+        process.exit(1);
+    }
+    // ── Step 1: Read runtime manifest ────────────────────────────────────
+    console.log(chalk.bold('Step 1: Reading runtime manifest...'));
+    const manifestPath = join(projectRoot, 'runtimes', `${runtime}.yaml`);
+    if (!existsSync(manifestPath)) {
+        console.error(chalk.red(`Runtime manifest not found: ${manifestPath}`));
+        console.error(chalk.dim(`Available runtimes: ls ${join(projectRoot, 'runtimes')}/*.yaml`));
+        process.exit(1);
+    }
+    console.log(chalk.green(`  ✓ Found ${manifestPath}`));
+    // ── Step 2: Verify AWS CLI ───────────────────────────────────────────
+    console.log(chalk.bold('\nStep 2: Verifying AWS credentials...'));
+    try {
+        const identity = runCapture('aws sts get-caller-identity --output json');
+        const account = JSON.parse(identity);
+        console.log(chalk.green(`  ✓ AWS Account: ${account.Account}`));
+        console.log(chalk.green(`  ✓ Identity:    ${account.Arn}`));
+    }
+    catch {
+        console.error(chalk.red('  ✗ AWS CLI not configured. Run: aws configure'));
+        process.exit(1);
+    }
+    // Get account ID
+    const accountId = runCapture('aws sts get-caller-identity --query Account --output text');
+    const ecrBase = `${accountId}.dkr.ecr.${region}.amazonaws.com`;
+    // ── Step 3: Build Docker images ──────────────────────────────────────
+    const gateImage = `${ecrBase}/wooblay-gate:${tenant}-latest`;
+    const agentImage = `${ecrBase}/openclaw-wooblay:${tenant}-latest`;
+    if (!skipBuild) {
+        console.log(chalk.bold('\nStep 3: Building Docker images...'));
+        console.log('  Building Gate image...');
+        run(`docker build -f docker/gate/Dockerfile -t ${gateImage} .`, { cwd: projectRoot });
+        console.log(chalk.green('  ✓ Gate image built'));
+        console.log('  Building Agent runtime image...');
+        run(`docker build -f docker/runtimes/${runtime}/Dockerfile -t ${agentImage} .`, { cwd: projectRoot });
+        console.log(chalk.green('  ✓ Agent image built'));
+    }
+    else {
+        console.log(chalk.dim('\nStep 3: Skipping build (--skip-build)'));
+    }
+    // ── Step 4: Push to ECR ──────────────────────────────────────────────
+    if (!skipPush) {
+        console.log(chalk.bold('\nStep 4: Pushing images to ECR...'));
+        // Authenticate with ECR
+        run(`aws ecr get-login-password --region ${region} | docker login --username AWS --password-stdin ${ecrBase}`, {
+            cwd: projectRoot,
+        });
+        console.log(chalk.green('  ✓ ECR authenticated'));
+        run(`docker push ${gateImage}`, { cwd: projectRoot });
+        console.log(chalk.green('  ✓ Gate image pushed'));
+        run(`docker push ${agentImage}`, { cwd: projectRoot });
+        console.log(chalk.green('  ✓ Agent image pushed'));
+    }
+    else {
+        console.log(chalk.dim('\nStep 4: Skipping push (--skip-push)'));
+    }
+    // ── Step 5: Generate signing keys if needed ──────────────────────────
+    console.log(chalk.bold('\nStep 5: Generating tenant signing keys...'));
+    let serverPrivateKey;
+    let serverPublicKey;
+    try {
+        // Try to read existing keys from the local .env
+        const envPath = join(projectRoot, '.env');
+        const envContent = existsSync(envPath) ? readFileSync(envPath, 'utf-8') : '';
+        const privMatch = envContent.match(/WOOBLAY_SERVER_PRIVATE_KEY=(.+)/);
+        const pubMatch = envContent.match(/WOOBLAY_SERVER_PUBLIC_KEY=(.+)/);
+        if (privMatch && pubMatch) {
+            serverPrivateKey = privMatch[1].trim();
+            serverPublicKey = pubMatch[1].trim();
+            console.log(chalk.green('  ✓ Using signing keys from .env'));
+        }
+        else {
+            // Generate new keys using node crypto
+            const keyScript = `
+        const { generateKeyPairSync } = require('crypto');
+        const { publicKey, privateKey } = generateKeyPairSync('ed25519');
+        const pub = publicKey.export({ type: 'spki', format: 'der' }).toString('hex');
+        const priv = privateKey.export({ type: 'pkcs8', format: 'der' }).toString('hex');
+        console.log(JSON.stringify({ pub, priv }));
+      `;
+            const keyJson = runCapture(`node -e "${keyScript.replace(/\n/g, ' ')}"`);
+            const keys = JSON.parse(keyJson);
+            serverPrivateKey = keys.priv;
+            serverPublicKey = keys.pub;
+            console.log(chalk.green('  ✓ Generated new ed25519 signing keys'));
+        }
+    }
+    catch (err) {
+        console.error(chalk.red('  ✗ Failed to generate signing keys'));
+        throw err;
+    }
+    // ── Step 6: Run Terraform ────────────────────────────────────────────
+    console.log(chalk.bold('\nStep 6: Provisioning EC2 instance via Terraform...'));
+    const runtimeTfDir = join(projectRoot, 'infra', 'runtime');
+    if (!existsSync(runtimeTfDir)) {
+        console.error(chalk.red(`Terraform directory not found: ${runtimeTfDir}`));
+        process.exit(1);
+    }
+    // First, get base infrastructure outputs
+    console.log('  Getting base infrastructure outputs...');
+    const baseTfDir = join(projectRoot, 'infra', 'base');
+    let baseOutputs;
+    try {
+        const outputJson = runCapture(`terraform output -json`, { cwd: baseTfDir });
+        const parsed = JSON.parse(outputJson);
+        baseOutputs = Object.fromEntries(Object.entries(parsed).map(([k, v]) => [k, v.value]));
+        console.log(chalk.green('  ✓ Base outputs loaded'));
+    }
+    catch {
+        console.error(chalk.red('  ✗ Could not read base Terraform outputs.'));
+        console.error(chalk.dim('    Run: cd infra/base && terraform init && terraform apply'));
+        process.exit(1);
+    }
+    // Initialize Terraform
+    run('terraform init', { cwd: runtimeTfDir });
+    // Build tfvars
+    const privateSubnetIds = baseOutputs['private_subnet_ids'];
+    const publicSubnetIds = baseOutputs['public_subnet_ids'];
+    const firstPrivateSubnet = Array.isArray(privateSubnetIds) ? privateSubnetIds[0] : '';
+    const tfVars = [
+        `-var="tenant_name=${tenant}"`,
+        `-var="aws_region=${region}"`,
+        `-var="vpc_id=${baseOutputs['vpc_id']}"`,
+        `-var="private_subnet_id=${firstPrivateSubnet}"`,
+        `-var='public_subnet_ids=${JSON.stringify(publicSubnetIds)}'`,
+        `-var="runtime_security_group_id=${baseOutputs['runtime_security_group_id']}"`,
+        `-var="alb_arn=${baseOutputs['alb_arn']}"`,
+        `-var="alb_http_listener_arn=${baseOutputs['alb_http_listener_arn']}"`,
+        `-var="kms_key_arn=${baseOutputs['kms_key_arn']}"`,
+        `-var="log_group_name=${baseOutputs['log_group_name']}"`,
+        `-var="gate_image=${gateImage}"`,
+        `-var="agent_image=${agentImage}"`,
+        `-var="instance_type=${instanceType}"`,
+        `-var="server_private_key=${serverPrivateKey}"`,
+        `-var="server_public_key=${serverPublicKey}"`,
+        `-var="tool_filter=risky"`,
+    ];
+    const tfVarString = tfVars.join(' ');
+    if (dryRun) {
+        console.log(chalk.yellow('\n  [DRY RUN] Would run:'));
+        console.log(chalk.dim(`    terraform plan ${tfVarString}`));
+        run(`terraform plan ${tfVarString}`, { cwd: runtimeTfDir });
+    }
+    else {
+        console.log('  Applying Terraform...');
+        run(`terraform apply -auto-approve ${tfVarString}`, { cwd: runtimeTfDir });
+        console.log(chalk.green('  ✓ EC2 instance provisioned'));
+        // Get outputs
+        console.log(chalk.bold('\n=== Deployment Complete ==='));
+        try {
+            const tenantUrl = runCapture('terraform output -raw tenant_url', { cwd: runtimeTfDir });
+            const healthUrl = runCapture('terraform output -raw health_url', { cwd: runtimeTfDir });
+            const instanceId = runCapture('terraform output -raw instance_id', { cwd: runtimeTfDir });
+            const ssmCmd = runCapture('terraform output -raw ssm_command', { cwd: runtimeTfDir });
+            console.log(`  Tenant URL:    ${chalk.cyan(tenantUrl)}`);
+            console.log(`  Health Check:  ${chalk.cyan(healthUrl)}`);
+            console.log(`  Instance ID:   ${chalk.cyan(instanceId)}`);
+            console.log(`  SSM Access:    ${chalk.dim(ssmCmd)}`);
+            console.log('');
+            console.log(chalk.green('  The instance is bootstrapping. It may take 2-3 minutes'));
+            console.log(chalk.green('  for the Gate to become healthy and the UI to be accessible.'));
+        }
+        catch {
+            console.log(chalk.yellow('  Outputs not yet available. Check with:'));
+            console.log(chalk.dim(`    cd ${runtimeTfDir} && terraform output`));
+        }
+    }
+}
+function findProjectRoot() {
+    let dir = process.cwd();
+    for (let i = 0; i < 10; i++) {
+        if (existsSync(join(dir, 'pnpm-workspace.yaml')))
+            return dir;
+        const parent = resolve(dir, '..');
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return null;
+}
+//# sourceMappingURL=deploy.js.map

package/dist/commands/deploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,KAAK,MAAM,OAAO,CAAC;AAY1B,SAAS,GAAG,CAAC,GAAW,EAAE,IAAyC;IACjE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE;YAC3B,GAAG,EAAE,IAAI,EAAE,GAAG;YACd,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SACzC,CAAC,CAAC;QACH,OAAO,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,IAAuB;IACtD,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAmB;IAC9C,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEpF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACvD,IAAI,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,wEAAwE;IACxE,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;IACtC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC,CAAC;QAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,wEAAwE;IACxE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;IACtE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,+BAA+B,YAAY,EAAE,CAAC,CAAC,CAAC;QACxE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,YAAY,EAAE,CAAC,CAAC,CAAC;IAEtD,wEAAwE;IACxE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,UAAU,CAAC,2CAA2C,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,iBAAiB;IACjB,MAAM,SAAS,GAAG,UAAU,CAAC,2DAA2D,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,GAAG,SAAS,YAAY,MAAM,gBAAgB,CAAC;IAE/D,wEAAwE;IACxE,MAAM,SAAS,GAAG,GAAG,OAAO,iBAAiB,MAAM,SAAS,CAAC;IAC7D,MAAM,UAAU,GAAG,GAAG,OAAO,qBAAqB,MAAM,SAAS,CAAC;IAElE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,CAAC;QAE/D,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxC,GAAG,CAAC,6CAA6C,SAAS,IAAI,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAEjD,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,GAAG,CAAC,mCAAmC,OAAO,kBAAkB,UAAU,IAAI,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;QACtG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAC;QAE9D,wBAAwB;QACxB,GAAG,CAAC,uCAAuC,MAAM,mDAAmD,OAAO,EAAE,EAAE;YAC7G,GAAG,EAAE,WAAW;SACjB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAElD,GAAG,CAAC,eAAe,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAElD,GAAG,CAAC,eAAe,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,wEAAwE;IACxE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC,CAAC;IACvE,IAAI,gBAAwB,CAAC;IAC7B,IAAI,eAAuB,CAAC;IAE5B,IAAI,CAAC;QACH,gDAAgD;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAEpE,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;YAC1B,gBAAgB,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACvC,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,sCAAsC;YACtC,MAAM,SAAS,GAAG;;;;;;OAMjB,CAAC;YACF,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC;YAC7B,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,CAAC;QAChE,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,wEAAwE;IACxE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC,CAAC;IAChF,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAE3D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,kCAAkC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,yCAAyC;IACzC,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAErD,IAAI,WAAmC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,UAAU,CAAC,wBAAwB,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,WAAW,GAAG,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CACpE,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC,CAAC;QACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,uBAAuB;IACvB,GAAG,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IAE7C,eAAe;IACf,MAAM,gBAAgB,GAAG,WAAW,CAAC,oBAAoB,CAAY,CAAC;IACtE,MAAM,eAAe,GAAG,WAAW,CAAC,mBAAmB,CAAY,CAAC;IACpE,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtF,MAAM,MAAM,GAAG;QACb,qBAAqB,MAAM,GAAG;QAC9B,oBAAoB,MAAM,GAAG;QAC7B,gBAAgB,WAAW,CAAC,QAAQ,CAAC,GAAG;QACxC,2BAA2B,kBAAkB,GAAG;QAChD,2BAA2B,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG;QAC7D,mCAAmC,WAAW,CAAC,2BAA2B,CAAC,GAAG;QAC9E,iBAAiB,WAAW,CAAC,SAAS,CAAC,GAAG;QAC1C,+BAA+B,WAAW,CAAC,uBAAuB,CAAC,GAAG;QACtE,qBAAqB,WAAW,CAAC,aAAa,CAAC,GAAG;QAClD,wBAAwB,WAAW,CAAC,gBAAgB,CAAC,GAAG;QACxD,oBAAoB,SAAS,GAAG;QAChC,qBAAqB,UAAU,GAAG;QAClC,uBAAuB,YAAY,GAAG;QACtC,4BAA4B,gBAAgB,GAAG;QAC/C,2BAA2B,eAAe,GAAG;QAC7C,0BAA0B;KAC3B,CAAC;IAEF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAErC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,WAAW,EAAE,CAAC,CAAC,CAAC;QAC5D,GAAG,CAAC,kBAAkB,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IAC9D,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,GAAG,CAAC,iCAAiC,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAEzD,cAAc;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,UAAU,CAAC,kCAAkC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;YACxF,MAAM,SAAS,GAAG,UAAU,CAAC,kCAAkC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;YACxF,MAAM,UAAU,GAAG,UAAU,CAAC,mCAAmC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;YAC1F,MAAM,MAAM,GAAG,UAAU,CAAC,mCAAmC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;YAEtF,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC,CAAC;YACrF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC,CAAC;QAC5F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,YAAY,sBAAsB,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe;IACtB,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/commands/dev.d.ts

@@ -0,0 +1,5 @@
+export interface DevOpts {
+    sqlite?: boolean;
+}
+export declare function dev(opts: DevOpts): Promise<void>;
+//# sourceMappingURL=dev.d.ts.map

package/dist/commands/dev.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.d.ts","sourceRoot":"","sources":["../../src/commands/dev.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,OAAO;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAsB,GAAG,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA6BtD"}

package/dist/commands/dev.js

@@ -0,0 +1,29 @@
+import chalk from 'chalk';
+export async function dev(opts) {
+    console.log(chalk.bold.cyan('\n🚀 Wooblay – Local Development\n'));
+    if (opts.sqlite) {
+        console.log(chalk.yellow('  Using SQLite mode (no Docker required)\n'));
+        console.log(chalk.gray('  Set environment variable:'));
+        console.log(chalk.white('    export DATABASE_URL="file:./wooblay.db"\n'));
+    }
+    else {
+        // ── Step 1: Postgres via Docker ────────────────────────────────────
+        console.log(chalk.yellow('→ Step 1: Start Postgres\n'));
+        console.log(chalk.white('  docker-compose -f docker/docker-compose.yml up -d postgres'));
+        console.log(chalk.gray('  Postgres will be available at localhost:5432\n'));
+    }
+    // ── Step 2: Gate dev server ──────────────────────────────────────────
+    console.log(chalk.yellow('→ Step 2: Start Gate dev server\n'));
+    console.log(chalk.white('  pnpm --filter @wooblay/gate dev'));
+    console.log(chalk.gray('  Gate will be available at http://localhost:4800\n'));
+    // ── Step 3: UI dev server ────────────────────────────────────────────
+    console.log(chalk.yellow('→ Step 3: Start UI dev server\n'));
+    console.log(chalk.white('  pnpm --filter @wooblay/ui dev'));
+    console.log(chalk.gray('  UI will be available at http://localhost:5173\n'));
+    // ── Tip ──────────────────────────────────────────────────────────────
+    console.log(chalk.gray('─'.repeat(60)));
+    console.log(chalk.gray('  Tip: Run each command in a separate terminal, or use:'));
+    console.log(chalk.white('    pnpm dev'));
+    console.log(chalk.gray('  to start all services via Turborepo.\n'));
+}
+//# sourceMappingURL=dev.js.map

package/dist/commands/dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.js","sourceRoot":"","sources":["../../src/commands/dev.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAM1B,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAa;IACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAC;IAEnE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,4CAA4C,CAAC,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC;IAC5E,CAAC;SAAM,CAAC;QACN,sEAAsE;QACtE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,wEAAwE;IACxE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC,CAAC;IAE/E,wEAAwE;IACxE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC,CAAC;IAE7E,wEAAwE;IACxE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/commands/disable.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Disable Wooblay supervision for a specific agent framework.
+ *
+ * For OpenClaw: restores config backup and removes the plugin.
+ * For MCP/Generic: prints instructions.
+ */
+export declare function disable(framework: string): Promise<void>;
+//# sourceMappingURL=disable.d.ts.map

package/dist/commands/disable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disable.d.ts","sourceRoot":"","sources":["../../src/commands/disable.ts"],"names":[],"mappings":"AAMA;;;;;GAKG;AACH,wBAAsB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAe9D"}