clawmacdo 0.37.0 → 0.40.0

package/README.md

@@ -5,7 +5,7 @@
 
 Rust CLI tool for deploying [OpenClaw](https://openclaw.ai) to **DigitalOcean**, **AWS Lightsail**, **Tencent Cloud**, **Microsoft Azure**, or **BytePlus Cloud** — with Claude Code, Codex, and Gemini CLI pre-installed.
 
-## ✨ What's New in v0.37.0
+## ✨ What's New in v0.40.0
 
 - **`update-model` subcommand** — change the AI model on a running OpenClaw instance without redeploying (updates API keys, provider config, model settings, and restarts the gateway)
 - **`update-ip` subcommand** — refresh the IP address of a deployed instance from the cloud provider API (Lightsail, DigitalOcean, BytePlus) and update both JSON deploy record and SQLite
@@ -21,6 +21,10 @@ Rust CLI tool for deploying [OpenClaw](https://openclaw.ai) to **DigitalOcean**,
 - **AWS credential passthrough** — web UI credentials are written to `~/.aws/credentials` so the AWS CLI uses them instead of stale local config
 - **Lightsail destroy with credentials** — destroy modal now prompts for AWS Access Key ID and Secret Access Key
 - **Lightsail snapshot listing** — credentials from the web UI are now passed through to the AWS CLI for snapshot listing
+- **`whatsapp-setup` subcommand** — set up WhatsApp on a deployed instance (set phone number, enable plugin, restart gateway, fetch pairing QR code)
+- **`whatsapp-qr` subcommand** — fetch the WhatsApp pairing QR code from a deployed instance (re-fetch if expired)
+- **`plugin-install` subcommand** — install OpenClaw plugins on deployed instances via `clawmacdo plugin-install --instance <id> --plugin @openguardrails/moltguard` (installs via pnpm, enables plugin, restarts gateway)
+- **Windows PowerShell scripts** — all shell scripts now have `.ps1` equivalents for Windows support (`release.ps1`, `npm-package.ps1`, `npm-publish.ps1`, scan scripts, etc.)
 - **Agent Docker Access warning** — deploy form shows the common Docker socket permission error with a clear fix instruction
 - **Dual license** — switched from MIT to GPLv3 (open source) + Commercial (proprietary) dual license model
 
@@ -205,6 +209,150 @@ cargo build --release --no-default-features --features aws-only
 | `aws-only` | Lightsail-only build (no DO or Tencent) | ❌ |
 | `minimal` | CLI-only, no web UI or optional features | ❌ |
 
+## Programmatic Usage (Node.js)
+
+The npm package exports `getBinaryPath()` so you can call clawmacdo from Node.js scripts or automation tools.
+
+```bash
+npm install clawmacdo
+```
+
+```javascript
+const { execSync, spawn } = require("child_process");
+const { getBinaryPath } = require("clawmacdo");
+
+const bin = getBinaryPath(); // absolute path to the clawmacdo binary
+
+// --- Deploy a new instance ---
+const deploy = execSync(`${bin} deploy \
+  --provider lightsail \
+  --customer-name "my-openclaw" \
+  --customer-email "you@example.com" \
+  --aws-access-key-id "${process.env.AWS_ACCESS_KEY_ID}" \
+  --aws-secret-access-key "${process.env.AWS_SECRET_ACCESS_KEY}" \
+  --anthropic-key "${process.env.ANTHROPIC_API_KEY}" \
+  --primary-model anthropic \
+  --json`, { encoding: "utf8" });
+console.log(JSON.parse(deploy));
+
+// --- Track deploy progress (streaming) ---
+const track = spawn(bin, ["track", "<deploy-id>", "--follow", "--json"]);
+track.stdout.on("data", (chunk) => {
+  console.log("progress:", chunk.toString());
+});
+
+// --- Set up Telegram bot ---
+execSync(`${bin} telegram-setup \
+  --instance <deploy-id> \
+  --bot-token "${process.env.TELEGRAM_TOKEN}"`, { stdio: "inherit" });
+
+// --- Set up WhatsApp (displays QR code) ---
+execSync(`${bin} whatsapp-setup \
+  --instance <deploy-id> \
+  --phone-number "+6512345678"`, { stdio: "inherit" });
+
+// --- Fetch WhatsApp QR code ---
+const qr = execSync(`${bin} whatsapp-qr --instance <deploy-id>`, { encoding: "utf8" });
+console.log(qr); // ASCII QR code
+
+// --- Change AI model ---
+execSync(`${bin} update-model \
+  --instance <deploy-id> \
+  --primary-model openai \
+  --openai-key "${process.env.OPENAI_API_KEY}"`, { stdio: "inherit" });
+
+// --- Install a plugin ---
+execSync(`${bin} plugin-install \
+  --instance <deploy-id> \
+  --plugin "@openguardrails/moltguard"`, { stdio: "inherit" });
+
+// --- Refresh IP after restart ---
+execSync(`${bin} update-ip --instance <deploy-id>`, { stdio: "inherit" });
+
+// --- Create snapshot ---
+execSync(`${bin} do-snapshot \
+  --do-token "${process.env.DO_TOKEN}" \
+  --droplet-id 12345 \
+  --snapshot-name "my-backup"`, { stdio: "inherit" });
+
+// --- Restore from snapshot ---
+execSync(`${bin} do-restore \
+  --do-token "${process.env.DO_TOKEN}" \
+  --snapshot-name "my-backup"`, { stdio: "inherit" });
+
+// --- Destroy an instance ---
+execSync(`${bin} destroy \
+  --provider digitalocean \
+  --do-token "${process.env.DO_TOKEN}" \
+  --name "openclaw-abc123" --yes`, { stdio: "inherit" });
+
+// --- Start the web UI programmatically ---
+const server = spawn(bin, ["serve", "--port", "3456"], { stdio: "inherit" });
+```
+
+### TypeScript
+
+```typescript
+import { getBinaryPath } from "clawmacdo";
+import { execSync } from "child_process";
+
+const bin: string = getBinaryPath();
+execSync(`${bin} deploy --provider lightsail ...`, { stdio: "inherit" });
+```
+
+## Quick Start (CLI)
+
+```bash
+# Install
+npm install -g clawmacdo
+
+# Deploy to DigitalOcean
+clawmacdo deploy --provider digitalocean \
+  --customer-name "my-openclaw" --customer-email "you@example.com" \
+  --do-token "$DO_TOKEN" --anthropic-key "$ANTHROPIC_API_KEY"
+
+# Deploy to AWS Lightsail
+clawmacdo deploy --provider lightsail \
+  --customer-name "my-openclaw" --customer-email "you@example.com" \
+  --aws-access-key-id "$AWS_ACCESS_KEY_ID" \
+  --aws-secret-access-key "$AWS_SECRET_ACCESS_KEY"
+
+# Track deploy progress
+clawmacdo track <deploy-id> --follow
+
+# Set up Telegram bot
+clawmacdo telegram-setup --instance <deploy-id> --bot-token "$TELEGRAM_TOKEN"
+clawmacdo telegram-pair --instance <deploy-id> --code <PAIRING_CODE>
+
+# Set up WhatsApp (displays QR code to scan)
+clawmacdo whatsapp-setup --instance <deploy-id> --phone-number "+6512345678"
+clawmacdo whatsapp-qr --instance <deploy-id>   # re-fetch QR if expired
+
+# Change AI model on a running instance
+clawmacdo update-model --instance <deploy-id> \
+  --primary-model openai --openai-key "$OPENAI_API_KEY"
+
+# Install a plugin
+clawmacdo plugin-install --instance <deploy-id> --plugin "@openguardrails/moltguard"
+
+# Refresh IP after instance restart
+clawmacdo update-ip --instance <deploy-id>
+
+# Enable Tailscale Funnel (public HTTPS access)
+clawmacdo tailscale-funnel --instance <deploy-id> --auth-key "$TAILSCALE_AUTH_KEY"
+clawmacdo funnel-on --instance <deploy-id>
+
+# Create and restore snapshots
+clawmacdo do-snapshot --do-token "$DO_TOKEN" --droplet-id 12345 --snapshot-name "backup"
+clawmacdo do-restore --do-token "$DO_TOKEN" --snapshot-name "backup"
+
+# Destroy an instance
+clawmacdo destroy --provider digitalocean --do-token "$DO_TOKEN" --name "openclaw-abc123"
+
+# Start the web UI
+clawmacdo serve --port 3456
+```
+
 ## Usage
 
 > **Full CLI reference with all examples, curl commands, and sample responses:** [docs/clawmacdo_usage.md](docs/clawmacdo_usage.md)
@@ -758,6 +906,8 @@ For licensing inquiries, contact: bunnyppl@gmail.com
 | [TanStack Progress Tracking](docs/tanstack-progress-tracking.md) | Frontend integration guide for TanStack (React Query) progress bars |
 | [Security Scan](docs/SECURITY_SCAN.md) | Security scanning CLI and vulnerability assessment |
 | [Security Flaw Evaluation](docs/EVAL_SECURITY_FLAW.md) | Security flaw evaluation report and findings |
+
+Security scan scripts always write their main outputs to the system temp directory and only mirror them into `/root/.openclaw/workspace` when that directory is accessible.
 | [High Security Fixes](docs/HIGH_SECURITY_FIXES.md) | Code-level remediation map for all HIGH findings |
 | [Tencent Cloud Plan](docs/TENCENT_PLAN.md) | Tencent Cloud provider support plan |
 | [Repository Guidelines](docs/AGENTS.md) | Contribution guidelines and repository conventions |
@@ -769,7 +919,7 @@ See [CHANGELOG.md](CHANGELOG.md) for version history and breaking changes.
 ---
 
 **Last updated:** March 19, 2026
-**Current version:** 0.37.0
+**Current version:** 0.40.0
 **Architecture version:** 2.0 (modular workspace)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clawmacdo",
-  "version": "0.37.0",
+  "version": "0.40.0",
   "description": "CLI tool for deploying OpenClaw to multiple cloud providers with pre-installed AI dev tools",
   "keywords": [
     "openclaw",
@@ -30,8 +30,8 @@
     "node": ">=16"
   },
   "optionalDependencies": {
-    "@clawmacdo/darwin-arm64": "0.37.0",
-    "@clawmacdo/linux-x64": "0.37.0",
-    "@clawmacdo/win32-x64": "0.37.0"
+    "@clawmacdo/darwin-arm64": "0.40.0",
+    "@clawmacdo/linux-x64": "0.40.0",
+    "@clawmacdo/win32-x64": "0.40.0"
   }
 }