claw-zero 0.1.0

package/README.md

@@ -0,0 +1,96 @@
+# One-Click Claw
+
+A Node.js CLI that installs and sandboxes the [OpenClaw](https://github.com/openclaw/openclaw) AI agent on your local Mac with zero manual configuration.
+
+**What it does in one command:**
+- Checks for Docker (installs via Homebrew if missing)
+- Creates `~/Desktop/OpenClaw_Workspace`
+- Generates a `clawdbot.json` security config based on your chosen profile
+- Pulls `ghcr.io/openclaw/openclaw:latest` and boots it on `localhost:3845`
+
+---
+
+## Prerequisites
+
+| Requirement | Notes |
+|---|---|
+| macOS | Homebrew auto-install is Mac-only for MVP |
+| Node.js ≥ 18 | ESModules + native `fetch` |
+| Docker Desktop | Auto-installed via Homebrew if absent |
+| Anthropic or OpenAI API key | Entered during setup; never stored in plaintext |
+
+---
+
+## Quickstart
+
+```bash
+git clone <repo-url> claw_zero
+cd claw_zero
+npm install
+npm start
+```
+
+Follow the interactive prompts — the entire setup takes under 2 minutes.
+
+---
+
+## Security Profiles
+
+Choose a profile during setup. The selection writes a `clawdbot.json` to your workspace.
+
+| Profile | Sandbox | Workspace | Human Approval Required | Skill Trust | Budget |
+|---|---|---|---|---|---|
+| **Fort Knox** | `all` | Read-only | All commands | None | 100k tokens |
+| **Pragmatic PM** *(default)* | `non-main` | Scoped | `rm`, `sudo`, `curl`, `wget`, `git push`, `npm publish` | Verified only | 500k tokens |
+| **Cowboy Coder** | `off` | Scoped | `sudo`, `rm -rf` | All | 2M tokens |
+| **YOLO Mode** | `off` | Read-write | None | All | Unlimited |
+
+---
+
+## Container Details
+
+| Parameter | Value |
+|---|---|
+| Image | `ghcr.io/openclaw/openclaw:latest` |
+| Container name | `openclaw_sandbox` |
+| Port | `3845` → `localhost:3845` |
+| Volume mount | `~/Desktop/OpenClaw_Workspace:/workspace` |
+| API key env var | `ANTHROPIC_API_KEY` |
+
+The container runs with `--detach --rm` — it stops automatically when Docker restarts.
+
+---
+
+## Key Environment Variables
+
+None required at the host level. The API key is collected interactively and passed directly to the container via `--env`.
+
+---
+
+## Project Structure
+
+```
+claw_zero/
+├── src/
+│   ├── index.ts        # Entry point — UI flow
+│   ├── types.ts        # TypeScript types
+│   ├── profiles.ts     # Security profile config map
+│   ├── config.ts       # clawdbot.json generation
+│   ├── docker.ts       # Docker detection, install, daemon start
+│   ├── workspace.ts    # Workspace directory creation
+│   └── container.ts    # Image pull + container launch
+├── PRD.md
+├── tasks.md
+└── architecture.md
+```
+
+---
+
+## Scripts
+
+| Command | Action |
+|---|---|
+| `npm start` | Run the CLI via `tsx` |
+| `npm run build` | Compile TypeScript to `dist/` |
+| `npm run dev` | Same as `start` (alias) |
+| `npx tsc --noEmit` | Type-check without emitting |

package/dist/config.d.ts

@@ -0,0 +1,6 @@
+import type { SecurityProfileKey } from './types.js';
+export declare const WORKSPACE_PATH: string;
+export declare const CONFIG_FILENAME = "clawdbot.json";
+/** Generates clawdbot.json and writes it to the workspace directory. */
+export declare function generateConfig(profileKey: SecurityProfileKey, apiKey: string): Promise<void>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGrD,eAAO,MAAM,cAAc,QAAmD,CAAC;AAC/E,eAAO,MAAM,eAAe,kBAAkB,CAAC;AAE/C,wEAAwE;AACxE,wBAAsB,cAAc,CAClC,UAAU,EAAE,kBAAkB,EAC9B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAef"}

package/dist/config.js

@@ -0,0 +1,19 @@
+import { writeFile, mkdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { PROFILES } from './profiles.js';
+export const WORKSPACE_PATH = join(homedir(), 'Desktop', 'OpenClaw_Workspace');
+export const CONFIG_FILENAME = 'clawdbot.json';
+/** Generates clawdbot.json and writes it to the workspace directory. */
+export async function generateConfig(profileKey, apiKey) {
+    const profile = PROFILES[profileKey];
+    if (!profile)
+        throw new Error(`Unknown profile: ${profileKey}`);
+    const configData = {
+        ...profile.config,
+        api_key: apiKey,
+    };
+    await mkdir(WORKSPACE_PATH, { recursive: true });
+    await writeFile(join(WORKSPACE_PATH, CONFIG_FILENAME), JSON.stringify(configData, null, 2), 'utf-8');
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC;AAE/C,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAA8B,EAC9B,MAAc;IAEd,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC;IAEhE,MAAM,UAAU,GAAG;QACjB,GAAG,OAAO,CAAC,MAAM;QACjB,OAAO,EAAE,MAAM;KAChB,CAAC;IAEF,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,SAAS,CACb,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,EACrC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,EACnC,OAAO,CACR,CAAC;AACJ,CAAC"}

package/dist/container.d.ts

@@ -0,0 +1,15 @@
+import type { SecurityProfileKey } from './types.js';
+/** Pulls the OpenClaw container image; returns the pulled image size. */
+export declare function pullContainerImage(): Promise<{
+    size: string;
+}>;
+/**
+ * Runs the OpenClaw container:
+ * - Mounts ONLY ~/Desktop/OpenClaw_Workspace (never the full home dir)
+ * - Exposes port 3845
+ * - Passes the API key as ANTHROPIC_API_KEY env var
+ */
+export declare function launchContainer(apiKey: string, _profileKey: SecurityProfileKey): Promise<{
+    port: number;
+}>;
+//# sourceMappingURL=container.d.ts.map

package/dist/container.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../src/container.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAMrD,yEAAyE;AACzE,wBAAsB,kBAAkB,IAAI,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAepE;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,kBAAkB,GAC9B,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAiB3B"}

package/dist/container.js

@@ -0,0 +1,41 @@
+import { execa } from 'execa';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+const WORKSPACE_PATH = join(homedir(), 'Desktop', 'OpenClaw_Workspace');
+const IMAGE = 'ghcr.io/openclaw/openclaw:latest';
+const PORT = 3845;
+/** Pulls the OpenClaw container image; returns the pulled image size. */
+export async function pullContainerImage() {
+    await execa('docker', ['pull', IMAGE], { stdio: 'inherit' });
+    // Get image size after pull
+    const { stdout } = await execa('docker', [
+        'image',
+        'inspect',
+        IMAGE,
+        '--format',
+        '{{.Size}}',
+    ]);
+    const bytes = parseInt(stdout.trim(), 10);
+    const size = isNaN(bytes) ? 'unknown' : `${(bytes / 1_073_741_824).toFixed(1)} GB`;
+    return { size };
+}
+/**
+ * Runs the OpenClaw container:
+ * - Mounts ONLY ~/Desktop/OpenClaw_Workspace (never the full home dir)
+ * - Exposes port 3845
+ * - Passes the API key as ANTHROPIC_API_KEY env var
+ */
+export async function launchContainer(apiKey, _profileKey) {
+    await execa('docker', [
+        'run',
+        '--detach',
+        '--rm',
+        '--name', 'openclaw_sandbox',
+        '--publish', `${PORT}:${PORT}`,
+        '--volume', `${WORKSPACE_PATH}:/workspace`,
+        '--env', `ANTHROPIC_API_KEY=${apiKey}`,
+        IMAGE,
+    ], { stdio: 'ignore' });
+    return { port: PORT };
+}
+//# sourceMappingURL=container.js.map

package/dist/container.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container.js","sourceRoot":"","sources":["../src/container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;AACxE,MAAM,KAAK,GAAG,kCAAkC,CAAC;AACjD,MAAM,IAAI,GAAG,IAAI,CAAC;AAElB,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAE7D,4BAA4B;IAC5B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;QACvC,OAAO;QACP,SAAS;QACT,KAAK;QACL,UAAU;QACV,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAEnF,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,WAA+B;IAE/B,MAAM,KAAK,CACT,QAAQ,EACR;QACE,KAAK;QACL,UAAU;QACV,MAAM;QACN,QAAQ,EAAE,kBAAkB;QAC5B,WAAW,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE;QAC9B,UAAU,EAAE,GAAG,cAAc,aAAa;QAC1C,OAAO,EAAE,qBAAqB,MAAM,EAAE;QACtC,KAAK;KACN,EACD,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC"}

package/dist/docker.d.ts

@@ -0,0 +1,7 @@
+/** Silent check — returns true if docker CLI is available. */
+export declare function checkDocker(): Promise<boolean>;
+/** Install Docker Desktop via Homebrew Cask. */
+export declare function installDocker(): Promise<void>;
+/** Open Docker.app and poll `docker info` until daemon is ready (max 60s). */
+export declare function startDockerDaemon(): Promise<void>;
+//# sourceMappingURL=docker.d.ts.map

package/dist/docker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../src/docker.ts"],"names":[],"mappings":"AAEA,8DAA8D;AAC9D,wBAAsB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAOpD;AAED,gDAAgD;AAChD,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAEnD;AAED,8EAA8E;AAC9E,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CA0BvD"}

package/dist/docker.js

@@ -0,0 +1,42 @@
+import { execa } from 'execa';
+/** Silent check — returns true if docker CLI is available. */
+export async function checkDocker() {
+    try {
+        await execa('docker', ['--version']);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Install Docker Desktop via Homebrew Cask. */
+export async function installDocker() {
+    await execa('brew', ['install', '--cask', 'docker'], { stdio: 'inherit' });
+}
+/** Open Docker.app and poll `docker info` until daemon is ready (max 60s). */
+export async function startDockerDaemon() {
+    // Check if daemon is already running
+    try {
+        await execa('docker', ['info'], { stdio: 'ignore' });
+        return; // Already running
+    }
+    catch {
+        // Not running — launch it
+    }
+    await execa('open', ['-a', 'Docker']);
+    const POLL_INTERVAL_MS = 2000;
+    const MAX_WAIT_MS = 60_000;
+    const start = Date.now();
+    while (Date.now() - start < MAX_WAIT_MS) {
+        await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL_MS));
+        try {
+            await execa('docker', ['info'], { stdio: 'ignore' });
+            return; // Daemon ready
+        }
+        catch {
+            // Still starting — keep polling
+        }
+    }
+    throw new Error('Docker daemon did not start within 60 seconds.');
+}
+//# sourceMappingURL=docker.js.map

package/dist/docker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.js","sourceRoot":"","sources":["../src/docker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAE9B,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,qCAAqC;IACrC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,kBAAkB;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IAED,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEtC,MAAM,gBAAgB,GAAG,IAAI,CAAC;IAC9B,MAAM,WAAW,GAAG,MAAM,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,WAAW,EAAE,CAAC;QACxC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrD,OAAO,CAAC,eAAe;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;AACpE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,154 @@
+#!/usr/bin/env node
+import * as p from '@clack/prompts';
+import pc from 'picocolors';
+import { Listr } from 'listr2';
+import { PROFILES } from './profiles.js';
+import { generateConfig, WORKSPACE_PATH } from './config.js';
+import { execa } from 'execa';
+import { checkDocker, installDocker, startDockerDaemon } from './docker.js';
+import { createWorkspace } from './workspace.js';
+import { pullContainerImage, launchContainer } from './container.js';
+/** Formats API key for inline confirmation: first 7 + last 4 chars. */
+function maskApiKey(key) {
+    if (key.length <= 11)
+        return key.slice(0, 3) + '••••' + key.slice(-2);
+    return key.slice(0, 7) + '••••' + key.slice(-4);
+}
+/** Syntax-highlights a JSON object: cyan keys, green strings, purple numbers. */
+function highlightJson(obj) {
+    return JSON.stringify(obj, null, 2)
+        .split('\n')
+        .map((line) => {
+        return line
+            .replace(/"([^"]+)":/g, (_, k) => pc.cyan('"' + k + '"') + ':')
+            .replace(/: "([^"]*)"/g, (_, v) => ': ' + pc.green('"' + v + '"'))
+            .replace(/: (\d+)/g, (_, n) => ': ' + pc.magenta(n))
+            .replace(/: \[/g, ': [')
+            .replace(/"(\*|rm|sudo|curl|wget|git push|npm publish|rm -rf)"/g, (_, v) => pc.green('"' + v + '"'));
+    })
+        .join('\n');
+}
+async function main() {
+    // ── 3.2 Welcome intro ───────────────────────────────────────────────────────
+    console.clear();
+    console.log(pc.dim('──────────────────────────────────────────────'));
+    p.intro(`${pc.bgCyan(pc.black(' 🦞 ONE-CLICK CLAW '))}  ${pc.dim('Secure Local Sandbox')}`);
+    console.log(pc.dim('──────────────────────────────────────────────'));
+    // ── 3.3 API key masked input ────────────────────────────────────────────────
+    const apiKey = await p.password({
+        message: 'Paste your Anthropic or OpenAI API Key',
+        mask: '•',
+        validate: (value) => {
+            if (!value)
+                return 'API Key is required to power the brain.';
+        },
+    });
+    if (p.isCancel(apiKey)) {
+        p.cancel('Setup cancelled.');
+        process.exit(0);
+    }
+    // Inline confirmation
+    console.log(`${pc.green('◆')} API Key   ${pc.dim('✓')} ${pc.dim(maskApiKey(apiKey))}`);
+    // ── 3.4 Security profile selection ─────────────────────────────────────────
+    const profileKey = await p.select({
+        message: 'Select your security profile',
+        initialValue: 'pragmatic',
+        options: [
+            { value: 'fort_knox', label: 'Fort Knox', hint: 'Super strict. Read-only.' },
+            { value: 'pragmatic', label: 'The Pragmatic PM', hint: 'Recommended. Scoped access.' },
+            { value: 'cowboy', label: 'Cowboy Coder', hint: 'Lenient. Proceed with caution.' },
+            { value: 'yolo', label: 'YOLO Mode', hint: 'Unrestricted. Good luck.' },
+        ],
+    });
+    if (p.isCancel(profileKey)) {
+        p.cancel('Setup cancelled.');
+        process.exit(0);
+    }
+    const selectedProfile = PROFILES[profileKey];
+    // Inline confirmation
+    console.log(`${pc.green('◆')} Profile   ${pc.yellow(selectedProfile.label)}`);
+    // ── 3.5 Config preview ──────────────────────────────────────────────────────
+    console.log(`\n${pc.dim('◇')} ${pc.dim('Generating clawdbot.json')}`);
+    console.log(highlightJson(selectedProfile.config));
+    console.log();
+    // ── 3.6 Sequential install checklist (listr2) ───────────────────────────────
+    let dockerVersion = 'Docker';
+    let imageSize = '1.2 GB';
+    let containerPort = 3845;
+    const tasks = new Listr([
+        {
+            title: 'Checking Docker daemon...',
+            task: async (_, task) => {
+                const installed = await checkDocker();
+                if (!installed) {
+                    task.title = 'Installing Docker via Homebrew...';
+                    await installDocker();
+                }
+                await startDockerDaemon();
+                try {
+                    const { stdout } = await execa('docker', ['--version']);
+                    dockerVersion = stdout.trim();
+                }
+                catch {
+                    // version string is cosmetic — don't block
+                }
+                task.title = pc.dim(`✔ ${dockerVersion} is running`);
+            },
+        },
+        {
+            title: 'Creating workspace directory...',
+            task: async (_, task) => {
+                await createWorkspace();
+                task.title = pc.dim(`✔ Workspace ready at ${WORKSPACE_PATH}`);
+            },
+        },
+        {
+            title: 'Writing clawdbot.json...',
+            task: async (_, task) => {
+                await generateConfig(profileKey, apiKey);
+                task.title = pc.dim('✔ clawdbot.json written');
+            },
+        },
+        {
+            title: 'Pulling OpenClaw container image...',
+            task: async (_, task) => {
+                const result = await pullContainerImage();
+                imageSize = result.size;
+                task.title = pc.dim(`✔ Image pulled (${imageSize})`);
+            },
+        },
+        {
+            title: 'Booting container...',
+            task: async (_, task) => {
+                const result = await launchContainer(apiKey, profileKey);
+                containerPort = result.port;
+                task.title = pc.dim(`✔ Container live on port ${containerPort}`);
+            },
+        },
+    ], {
+        rendererOptions: { collapseErrors: false },
+    });
+    try {
+        await tasks.run();
+    }
+    catch (err) {
+        p.cancel(`Setup failed: ${err.message}`);
+        process.exit(1);
+    }
+    // ── 3.7 Outro ───────────────────────────────────────────────────────────────
+    const box = [
+        `  ${pc.dim('│')}  ☕  Pouring some coffee for your new AI intern...`,
+        `  ${pc.dim('│')}`,
+        `  ${pc.dim('│')}  Workspace  →  ${pc.cyan(WORKSPACE_PATH)}`,
+        `  ${pc.dim('│')}  Access     →  ${pc.cyan(`localhost:${containerPort}`)}`,
+        `  ${pc.dim('│')}  Profile    →  ${pc.yellow(selectedProfile.label)}`,
+        `  ${pc.dim('│')}`,
+        `  ${pc.dim('│')}  Drop files into the workspace folder to begin.`,
+    ].join('\n');
+    p.outro(`${pc.green('✔')} Sandbox successfully booted!\n\n${box}`);
+}
+main().catch((err) => {
+    p.cancel(`Unexpected error: ${err.message}`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAE/B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAErE,uEAAuE;AACvE,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,iFAAiF;AACjF,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;SAChC,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,OAAO,IAAI;aACR,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;aAC9D,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;aACjE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;aACnD,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC;aACvB,OAAO,CAAC,uDAAuD,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACzE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CACxB,CAAC;IACN,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,+EAA+E;IAC/E,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC,CAAC;IAEtE,+EAA+E;IAC/E,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC;QAC9B,OAAO,EAAE,wCAAwC;QACjD,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,IAAI,CAAC,KAAK;gBAAE,OAAO,yCAAyC,CAAC;QAC/D,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,sBAAsB;IACtB,OAAO,CAAC,GAAG,CACT,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAgB,CAAC,CAAC,EAAE,CACpF,CAAC;IAEF,8EAA8E;IAC9E,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC;QAChC,OAAO,EAAE,8BAA8B;QACvC,YAAY,EAAE,WAAW;QACzB,OAAO,EAAE;YACP,EAAE,KAAK,EAAE,WAAW,EAAG,KAAK,EAAE,WAAW,EAAW,IAAI,EAAE,0BAA0B,EAAE;YACtF,EAAE,KAAK,EAAE,WAAW,EAAG,KAAK,EAAE,kBAAkB,EAAI,IAAI,EAAE,6BAA6B,EAAE;YACzF,EAAE,KAAK,EAAE,QAAQ,EAAM,KAAK,EAAE,cAAc,EAAQ,IAAI,EAAE,gCAAgC,EAAE;YAC5F,EAAE,KAAK,EAAE,MAAM,EAAQ,KAAK,EAAE,WAAW,EAAW,IAAI,EAAE,0BAA0B,EAAE;SACvF;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,CAAC,UAAoB,CAAC,CAAC;IAEvD,sBAAsB;IACtB,OAAO,CAAC,GAAG,CACT,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CACjE,CAAC;IAEF,+EAA+E;IAC/E,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,+EAA+E;IAC/E,IAAI,aAAa,GAAG,QAAQ,CAAC;IAC7B,IAAI,SAAS,GAAG,QAAQ,CAAC;IACzB,IAAI,aAAa,GAAG,IAAI,CAAC;IAEzB,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB;QACE;YACE,KAAK,EAAE,2BAA2B;YAClC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,SAAS,GAAG,MAAM,WAAW,EAAE,CAAC;gBACtC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,IAAI,CAAC,KAAK,GAAG,mCAAmC,CAAC;oBACjD,MAAM,aAAa,EAAE,CAAC;gBACxB,CAAC;gBACD,MAAM,iBAAiB,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;oBACxD,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChC,CAAC;gBAAC,MAAM,CAAC;oBACP,2CAA2C;gBAC7C,CAAC;gBACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,aAAa,aAAa,CAAC,CAAC;YACvD,CAAC;SACF;QACD;YACE,KAAK,EAAE,iCAAiC;YACxC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,eAAe,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,wBAAwB,cAAc,EAAE,CAAC,CAAC;YAChE,CAAC;SACF;QACD;YACE,KAAK,EAAE,0BAA0B;YACjC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,cAAc,CAAC,UAAgC,EAAE,MAAgB,CAAC,CAAC;gBACzE,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YACjD,CAAC;SACF;QACD;YACE,KAAK,EAAE,qCAAqC;YAC5C,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC;gBAC1C,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;gBACxB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,mBAAmB,SAAS,GAAG,CAAC,CAAC;YACvD,CAAC;SACF;QACD;YACE,KAAK,EAAE,sBAAsB;YAC7B,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAgB,EAAE,UAAgC,CAAC,CAAC;gBACzF,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC;gBAC5B,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,4BAA4B,aAAa,EAAE,CAAC,CAAC;YACnE,CAAC;SACF;KACF,EACD;QACE,eAAe,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;KAC3C,CACF,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,CAAC,CAAC,MAAM,CAAC,iBAAkB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+EAA+E;IAC/E,MAAM,GAAG,GAAG;QACV,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,oDAAoD;QACpE,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;QAClB,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE;QAC5D,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,IAAI,CAAC,aAAa,aAAa,EAAE,CAAC,EAAE;QAC1E,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE;QACrE,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;QAClB,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,kDAAkD;KACnE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,CAAC,CAAC,MAAM,CAAC,qBAAsB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/profiles.d.ts

@@ -0,0 +1,3 @@
+import type { SecurityProfile } from './types.js';
+export declare const PROFILES: Record<string, SecurityProfile>;
+//# sourceMappingURL=profiles.d.ts.map

package/dist/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../src/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CA6CpD,CAAC"}

package/dist/profiles.js

@@ -0,0 +1,47 @@
+export const PROFILES = {
+    fort_knox: {
+        key: 'fort_knox',
+        label: 'Fort Knox',
+        config: {
+            sandbox: { mode: 'all' },
+            workspaceAccess: 'ro',
+            require_human_approval: ['*'],
+            skill_registry_trust: 'none',
+            max_budget: 100000,
+        },
+    },
+    pragmatic: {
+        key: 'pragmatic',
+        label: 'The Pragmatic PM',
+        config: {
+            sandbox: { mode: 'non-main' },
+            workspaceAccess: 'scoped',
+            require_human_approval: ['rm', 'sudo', 'curl', 'wget', 'git push', 'npm publish'],
+            skill_registry_trust: 'verified_only',
+            max_budget: 500000,
+        },
+    },
+    cowboy: {
+        key: 'cowboy',
+        label: 'Cowboy Coder',
+        config: {
+            sandbox: { mode: 'off' },
+            workspaceAccess: 'scoped',
+            require_human_approval: ['sudo', 'rm -rf'],
+            skill_registry_trust: 'all',
+            max_budget: 2000000,
+        },
+    },
+    yolo: {
+        key: 'yolo',
+        label: 'YOLO Mode',
+        config: {
+            sandbox: { mode: 'off' },
+            workspaceAccess: 'rw',
+            require_human_approval: [],
+            skill_registry_trust: 'all',
+            max_budget: 0, // 0 = unlimited
+        },
+    },
+};
+//# sourceMappingURL=profiles.js.map

package/dist/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../src/profiles.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,QAAQ,GAAoC;IACvD,SAAS,EAAE;QACT,GAAG,EAAE,WAAW;QAChB,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE;YACN,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;YACxB,eAAe,EAAE,IAAI;YACrB,sBAAsB,EAAE,CAAC,GAAG,CAAC;YAC7B,oBAAoB,EAAE,MAAM;YAC5B,UAAU,EAAE,MAAM;SACnB;KACF;IACD,SAAS,EAAE;QACT,GAAG,EAAE,WAAW;QAChB,KAAK,EAAE,kBAAkB;QACzB,MAAM,EAAE;YACN,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAC7B,eAAe,EAAE,QAAQ;YACzB,sBAAsB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC;YACjF,oBAAoB,EAAE,eAAe;YACrC,UAAU,EAAE,MAAM;SACnB;KACF;IACD,MAAM,EAAE;QACN,GAAG,EAAE,QAAQ;QACb,KAAK,EAAE,cAAc;QACrB,MAAM,EAAE;YACN,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;YACxB,eAAe,EAAE,QAAQ;YACzB,sBAAsB,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;YAC1C,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,OAAO;SACpB;KACF;IACD,IAAI,EAAE;QACJ,GAAG,EAAE,MAAM;QACX,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE;YACN,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;YACxB,eAAe,EAAE,IAAI;YACrB,sBAAsB,EAAE,EAAE;YAC1B,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,CAAC,EAAE,gBAAgB;SAChC;KACF;CACF,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,19 @@
+export type SecurityProfileKey = 'fort_knox' | 'pragmatic' | 'cowboy' | 'yolo';
+export type SandboxMode = 'all' | 'non-main' | 'off';
+export type WorkspaceAccess = 'ro' | 'scoped' | 'rw';
+export type SkillRegistryTrust = 'none' | 'verified_only' | 'all';
+export interface ClawdbotConfig {
+    sandbox: {
+        mode: SandboxMode;
+    };
+    workspaceAccess: WorkspaceAccess;
+    require_human_approval: string[];
+    skill_registry_trust: SkillRegistryTrust;
+    max_budget: number;
+}
+export interface SecurityProfile {
+    key: SecurityProfileKey;
+    label: string;
+    config: ClawdbotConfig;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE/E,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,UAAU,GAAG,KAAK,CAAC;AAErD,MAAM,MAAM,eAAe,GAAG,IAAI,GAAG,QAAQ,GAAG,IAAI,CAAC;AAErD,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,eAAe,GAAG,KAAK,CAAC;AAElE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE;QACP,IAAI,EAAE,WAAW,CAAC;KACnB,CAAC;IACF,eAAe,EAAE,eAAe,CAAC;IACjC,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,oBAAoB,EAAE,kBAAkB,CAAC;IACzC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,kBAAkB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,cAAc,CAAC;CACxB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/workspace.d.ts

@@ -0,0 +1,4 @@
+export declare const WORKSPACE_PATH: string;
+/** Idempotent — creates workspace directory; no error if it already exists. */
+export declare function createWorkspace(): Promise<void>;
+//# sourceMappingURL=workspace.d.ts.map

package/dist/workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,cAAc,QAAmD,CAAC;AAE/E,+EAA+E;AAC/E,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAErD"}

package/dist/workspace.js

@@ -0,0 +1,9 @@
+import { execa } from 'execa';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+export const WORKSPACE_PATH = join(homedir(), 'Desktop', 'OpenClaw_Workspace');
+/** Idempotent — creates workspace directory; no error if it already exists. */
+export async function createWorkspace() {
+    await execa('mkdir', ['-p', WORKSPACE_PATH]);
+}
+//# sourceMappingURL=workspace.js.map

package/dist/workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAE/E,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "claw-zero",
+  "version": "0.1.0",
+  "description": "One-Click CLI to securely install and sandbox the OpenClaw AI agent",
+  "type": "module",
+  "main": "./dist/index.js",
+  "bin": {
+    "claw-zero": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "start": "tsx src/index.ts",
+    "build": "tsc",
+    "dev": "tsx watch src/index.ts",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@clack/prompts": "^0.9.0",
+    "execa": "^9.5.2",
+    "listr2": "^8.2.5",
+    "picocolors": "^1.1.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.2"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}