clawmacdo 0.49.0 → 0.51.0

package/README.md

@@ -5,164 +5,17 @@
 
 Rust CLI tool for deploying [OpenClaw](https://openclaw.ai) to **DigitalOcean**, **AWS Lightsail**, **Tencent Cloud**, **Microsoft Azure**, or **BytePlus Cloud** — with Claude Code, Codex, and Gemini CLI pre-installed.
 
-## ✨ What's New in v0.49.0
-
-- **`skill-remove` subcommand** — delete a deployed skill by name from an instance's workspace and restart the gateway (`--instance` + `--skill`)
-- **`skill-list` subcommand** — list all skill directories on an instance with their gateway-registered name and readiness status
-- **`skill-check-perms` subcommand** — audit file ownership and permissions for a deployed skill; add `--fix` to auto-correct to `openclaw:openclaw` / `644`/`755`
-
-## What's New in v0.49.0
-
-- **`skill-diff` subcommand** — compare a local skill directory against the deployed skill on an instance; reports files that are in-sync (✓), modified (≠), new locally (+), or only on instance (−); also shows gateway skill status
-
-## What's New in v0.46.4
-
-- **`cron-message` subcommand** — schedule a recurring message to the OpenClaw gateway agent; the agent processes it and delivers the response to Telegram, WhatsApp, or any other connected channel (uses `openclaw cron add` under the hood)
-- **`cron-tool` subcommand** — schedule recurring tool execution on a deployed instance; the agent runs the named tool and announces the result to the chosen channel
-- **`cron-list` subcommand** — list all cron jobs on a deployed instance
-- **`cron-remove` subcommand** — remove a cron job by name from a deployed instance
-- **`skill-deploy` subcommand** — upload a `.zip` of OpenClaw skills to a deployed instance; extracts into `~/.openclaw/workspace/skills/` and restarts the gateway automatically
-
-## What's New in v0.38.0
-
-- **No spurious CLI warnings on non-deploy commands** — `telegram-setup`, `telegram-pair`, and other SSH-only commands no longer print "Azure/AWS CLI not found" at startup; provider CLI checks now run only when deploying to that provider
-- **`telegram-setup` `gateway.env` fix** — bot token is now written to both `.env` and `gateway.env`; the systemd gateway service loads `gateway.env` via `EnvironmentFile`, so previously a re-run with a new token left the running service polling with the old bot
-- **`telegram-setup` resets pairing state** — clears previous bot's pairing credentials and update offsets before reconfiguring, giving users a clean pairing flow with the new bot
-
-## What's New in v0.46.4
-
-- **SSH performance** — `telegram-setup` and `whatsapp-setup` reuse a single SSH session for all 4 steps (one TCP connect + handshake instead of four); cipher negotiation now prefers faster AEAD ciphers (`chacha20-poly1305`, `aes128-gcm`); ephemeral deploy keys use RSA-2048 instead of RSA-4096 (~4× faster key generation); `wait_for_ssh` no longer probes wrong users on Lightsail (`ubuntu`) and Azure (`azureuser`)
-- **Telegram/WhatsApp Lightsail fix** — `telegram-setup`, `telegram-pair`, `whatsapp-setup`, and `whatsapp-qr` now SSH as `ubuntu` (not `root`) on Lightsail instances
-- **`update-model` subcommand** — change the AI model on a running OpenClaw instance without redeploying (updates API keys, provider config, model settings, and restarts the gateway)
-- **`update-ip` subcommand** — refresh the IP address of a deployed instance from the cloud provider API (Lightsail, DigitalOcean, BytePlus) and update both JSON deploy record and SQLite
-- **Refresh IP button** — new "Refresh IP" button in Deployments tab queries the cloud provider and updates the IP in-place
-- **Deployments action dropdown** — deployment row actions now open in a stacked menu so controls stay readable instead of overlapping in narrow tables
-- **Deployments table fit** — deployments table now uses a tighter fixed layout with wrapped cell content to avoid left-right scrolling in the tab
-- **Funnel actions in dropdown** — the Deployments tab now handles the two-step funnel flow from the Actions menu: first toggle funnel on/off, then open the funnel URL once it becomes available
-- **Snapshot/restore progress tracking** — snapshot and restore operations are now async with step-by-step progress via SSE; the frontend can display real-time progress bars using `GET /api/deploy/{operation_id}/events`
-- **Deploy progress in Deployments tab** — running deployments show an animated progress bar with current step label, polling every 3 seconds
-- **Funnel verification** — toggling funnel ON now polls the funnel status with a progress bar before showing the Open button
-- **Docker fix: systemd user manager restart** — "Fix Agent Docker Access" now restarts the systemd user service manager so the gateway picks up the docker group
-- **`KillMode=control-group`** — gateway service now kills the entire cgroup on restart, preventing orphaned child processes from holding the port
-- **AWS credential passthrough** — web UI credentials are written to `~/.aws/credentials` so the AWS CLI uses them instead of stale local config
-- **Lightsail destroy with credentials** — destroy modal now prompts for AWS Access Key ID and Secret Access Key
-- **Lightsail snapshot listing** — credentials from the web UI are now passed through to the AWS CLI for snapshot listing
-- **`whatsapp-setup` subcommand** — set up WhatsApp on a deployed instance (set phone number, enable plugin, restart gateway, fetch pairing QR code)
-- **`whatsapp-qr` subcommand** — fetch the WhatsApp pairing QR code from a deployed instance (re-fetch if expired)
-- **`plugin-install` subcommand** — install OpenClaw plugins on deployed instances via `clawmacdo plugin-install --instance <id> --plugin @openguardrails/moltguard` (installs via pnpm, enables plugin, restarts gateway)
-- **Windows PowerShell scripts** — all shell scripts now have `.ps1` equivalents for Windows support (`release.ps1`, `npm-package.ps1`, `npm-publish.ps1`, scan scripts, etc.)
-- **Agent Docker Access warning** — deploy form shows the common Docker socket permission error with a clear fix instruction
-- **Dual license** — switched from MIT to GPLv3 (open source) + Commercial (proprietary) dual license model
-
-### Previous highlights (v0.25.x – v0.26.x)
-- **`do-snapshot` subcommand** — create a named DigitalOcean snapshot from an existing droplet by ID, with optional `--power-off` flag for clean shutdown/snapshot/power-on cycle
-- **BytePlus EIP cost reduction** — switched from pay-by-bandwidth to pay-by-traffic billing, reduced default bandwidth from 10 Mbps to 5 Mbps
-- **BytePlus spot instances** — new `--spot` flag on deploy enables `SpotAsPriceGo` strategy for up to ~80% compute cost savings
-- **`bp-snapshot` / `bp-restore`** — snapshot and restore for BytePlus ECS instances
-- **`ls-snapshot` / `ls-restore`** — snapshot and restore for AWS Lightsail instances
-- **BytePlus EIP orphan cleanup** — destroy command now finds and releases unbound EIPs left behind after instance termination
-
-### Previous highlights (v0.21.x – v0.23.x)
-- **`destroy` subcommand** — delete any openclaw instance across all 5 cloud providers with interactive confirmation
-- **`skills-data-api` service** — Node.js/Express API backed by MongoDB for browsing, scraping, and serving Claude Code skill marketplace data
-- **Playwright e2e test suite** — CSV-driven deploy form testing under `e2e/`, covering all 5 cloud providers with 30+ scenarios
-
-### Previous highlights (v0.20.x)
-- **`do-restore` subcommand** — restore a DigitalOcean droplet from a snapshot by name, with standard `openclaw-{id}` naming and deploy record saved to both JSON and SQLite (visible in web UI Deployments tab)
-
-### Previous highlights (v0.19.x)
-- **One-click Funnel access** — "Open" button in Deployments tab opens the Funnel webchat with gateway token pre-injected (no manual token paste or device pairing needed)
-- **Auto-disable device pairing for Funnel** — Funnel setup sets `dangerouslyDisableDeviceAuth: true` so browser connections via Tailscale Funnel skip the pairing screen
-
-### Previous highlights (v0.18.x)
-- **Tailscale Funnel** — `tailscale-funnel` subcommand: install Tailscale, enable Funnel, configure `openclaw.json`, auto-approve devices, and print public webchat URL
-- **Funnel toggle** — `funnel-on` / `funnel-off` CLI commands and web UI Deployments tab toggle button
-- **Customer skill management** — `skill-upload`, `skill-download`, `skill-push` subcommands for per-deployment SKILL.md
-
-### Previous highlights (v0.17.x)
-- **Web UI security hardening (CRIT-01)** — API key auth, 6-digit PIN login, CORS, rate limiting, localhost-only binding
-- **All 4 CRITICAL security findings resolved**
-
-### Previous highlights (v0.14.x – v0.15.x)
-- **Windows builds fixed** — Dependencies correctly scoped, native MSVC builds
-- **`digitalocean` feature flag** — DigitalOcean provider now properly gated as a default feature
-
-### Previous highlights (v0.13.x)
-- **`ark-api-key`** — Generate temporary BytePlus ARK API keys from access/secret credentials, or list endpoints with `--list`
-- **`ark-chat`** — Send prompts to BytePlus ARK models directly from the CLI
-- **`telegram-setup` / `telegram-pair` / `telegram-chat-id`** — Configure, pair, and inspect Telegram bots on deployed instances via SSH
-- **Web UI destroy** — Destroy cloud instances directly from the Deployments tab with provider-specific credential prompts
-- **Detach mode improvements** — Proper `setsid()` session detachment, stdout/stderr logging to file
-- **Workspace path fix** — Automatic `/root/` → `/home/openclaw/` path correction during provisioning
-
-### Earlier highlights (v0.9.x – v0.12.x)
-- **BytePlus Cloud** — 5th cloud provider added (`--provider=byteplus` or `bp`)
-- **BytePlus ECS client** — HMAC-SHA256 signed REST API with auto-provisioning of VPC, subnet, and security group
-- **Preflight CLI checks** — Azure CLI and AWS CLI verified at startup, auto-installed if missing
-- **Full-width professional web UI** — layout widened to 1536px max, compact hero with inline mascot
-- **Deploy progress tracking** — All 16 deploy steps persisted to SQLite in real-time
-- **`clawmacdo track` command** — Query deploy progress by ID, hostname, or IP address
-- **Follow mode** (`--follow`) — Live-polling display that refreshes until deployment finishes
-- **5 cloud providers** — DigitalOcean, AWS Lightsail, Tencent Cloud, Microsoft Azure, BytePlus Cloud
-- **npm distribution** — `npm install -g clawmacdo`
-
-## Security Hardening
-
-- Privileged remote provisioning commands now run through stdin-fed shells instead of nested quoted `sudo` / `su -c` wrappers.
-- User-supplied hostnames are normalized and validated before any deploy flow uses them.
-- The web UI now only accepts backup archives from `~/.clawmacdo/backups` and SSH keys from `~/.clawmacdo/keys`.
-- Backup restore validates the local `.tar.gz` before upload and extracts remotely with `--no-same-owner` and `--no-same-permissions` into a dedicated restore directory.
-- The gateway service now reads `~/.openclaw/gateway.env` instead of the broader `.env`, so setup-only secrets such as `ANTHROPIC_SETUP_TOKEN` are not inherited by the long-running service.
-- Direct Docker-group access for `openclaw` has been removed. If sandbox mode is requested during deploy, the deploy now forces sandbox mode off until a safer non-root mediation path exists.
-- Lightsail credentials are passed only to the child AWS CLI processes instead of mutating process-global environment variables or writing `~/.aws/credentials`.
-- Tencent's optional security-group helper now takes SSH ingress from `CLAWMACDO_TENCENT_SSH_CIDR` and defaults to `127.0.0.1/32` instead of opening SSH to the world.
-
-See [docs/HIGH_SECURITY_FIXES.md](docs/HIGH_SECURITY_FIXES.md) for the finding-by-finding code map, rationale, and functionality impact.
-
-## 🏗️ Project Structure
-
-```
-clawmacdo/
-├── Cargo.toml              # Workspace configuration
-├── crates/                 # All crates in workspace
-│   ├── clawmacdo-cli/      # 🖥️  Main CLI binary & command orchestration
-│   ├── clawmacdo-core/     # 🔧  Config, errors, shared types
-│   ├── clawmacdo-cloud/    # ☁️   Cloud provider implementations
-│   ├── clawmacdo-provision/# 🔨  Server provisioning & setup logic
-│   ├── clawmacdo-db/       # 💾  Database operations & storage
-│   ├── clawmacdo-ssh/      # 🔑  SSH/SCP operations & key management
-│   └── clawmacdo-ui/       # 🎨  Web UI, progress bars, user prompts
-├── skills-data-api/        # 🧠  Node.js skills marketplace API (MongoDB)
-├── e2e/                    # 🧪  Playwright end-to-end test suite
-├── assets/                 # Static assets (mascot, etc.)
-└── docs/                   # Design docs and usage reference
-```
-
-### 📦 Crate Overview
-
-| Crate | Purpose | Dependencies |
-|-------|---------|--------------|
-| **clawmacdo-cli** | Main binary, command parsing, orchestration | All other crates |
-| **clawmacdo-core** | Configuration, errors, shared types | Minimal (serde, anyhow) |
-| **clawmacdo-cloud** | DigitalOcean, AWS Lightsail, Tencent Cloud & BytePlus APIs | reqwest, async-trait |
-| **clawmacdo-provision** | Server setup, package installation | SSH, Core, UI |
-| **clawmacdo-db** | SQLite operations, job tracking | rusqlite |
-| **clawmacdo-ssh** | SSH connections, file transfers | ssh2 |
-| **clawmacdo-ui** | Progress bars, web interface | indicatif, axum |
-
 ## Features
 
 - **Multi-cloud**: Deploy to DigitalOcean, AWS Lightsail, Tencent Cloud, Microsoft Azure, or BytePlus Cloud with `--provider` flag
-- **Backup** local `~/.openclaw/` config into a timestamped `.tar.gz`
 - **1-click deploy**: generate SSH keys, provision a cloud instance, install Node 24 + OpenClaw + Claude Code + Codex + Gemini CLI, restore config, configure `.env` (API + messaging), start the gateway, and auto-configure model failover
 - **Cloud-to-cloud migration**: SSH into a source instance, back up remotely, deploy to a new instance, restore
-- **Snapshot restore**: create a DigitalOcean droplet from a snapshot by name, with deploy record saved to SQLite for web UI visibility
-- **Snapshot create**: create a named snapshot from an existing DigitalOcean droplet, with optional power-off for data consistency
+- **Snapshot & restore**: create and restore named snapshots for DigitalOcean, BytePlus, and AWS Lightsail
 - **Destroy**: delete an instance by name with confirmation, clean up SSH keys (cloud + local)
 - **Status**: list all openclaw-tagged instances with IPs
-- **List backups**: show local backup archives with sizes and dates
-- **Web UI**: Browser-based deploy interface with real-time SSE progress streaming (optional)
-- **Security groups**: Auto-create firewall rules on Tencent Cloud and BytePlus (SSH + HTTP/HTTPS + Gateway)
+- **Backup**: back up local `~/.openclaw/` config into a timestamped `.tar.gz`
+- **Web UI**: browser-based deploy interface with real-time SSE progress streaming (optional)
+- **Security groups**: auto-create firewall rules on Tencent Cloud and BytePlus (SSH + HTTP/HTTPS + Gateway)
 
 ## Supported Cloud Providers
 
@@ -235,97 +88,6 @@ cargo build --release --no-default-features --features aws-only
 | `aws-only` | Lightsail-only build (no DO or Tencent) | ❌ |
 | `minimal` | CLI-only, no web UI or optional features | ❌ |
 
-## Programmatic Usage (Node.js)
-
-The npm package exports `getBinaryPath()` so you can call clawmacdo from Node.js scripts or automation tools.
-
-```bash
-npm install clawmacdo
-```
-
-```javascript
-const { execSync, spawn } = require("child_process");
-const { getBinaryPath } = require("clawmacdo");
-
-const bin = getBinaryPath(); // absolute path to the clawmacdo binary
-
-// --- Deploy a new instance ---
-const deploy = execSync(`${bin} deploy \
-  --provider lightsail \
-  --customer-name "my-openclaw" \
-  --customer-email "you@example.com" \
-  --aws-access-key-id "${process.env.AWS_ACCESS_KEY_ID}" \
-  --aws-secret-access-key "${process.env.AWS_SECRET_ACCESS_KEY}" \
-  --anthropic-key "${process.env.ANTHROPIC_API_KEY}" \
-  --primary-model anthropic \
-  --json`, { encoding: "utf8" });
-console.log(JSON.parse(deploy));
-
-// --- Track deploy progress (streaming) ---
-const track = spawn(bin, ["track", "<deploy-id>", "--follow", "--json"]);
-track.stdout.on("data", (chunk) => {
-  console.log("progress:", chunk.toString());
-});
-
-// --- Set up Telegram bot ---
-execSync(`${bin} telegram-setup \
-  --instance <deploy-id> \
-  --bot-token "${process.env.TELEGRAM_TOKEN}"`, { stdio: "inherit" });
-
-// --- Set up WhatsApp (displays QR code) ---
-execSync(`${bin} whatsapp-setup \
-  --instance <deploy-id> \
-  --phone-number "+6512345678"`, { stdio: "inherit" });
-
-// --- Fetch WhatsApp QR code ---
-const qr = execSync(`${bin} whatsapp-qr --instance <deploy-id>`, { encoding: "utf8" });
-console.log(qr); // ASCII QR code
-
-// --- Change AI model ---
-execSync(`${bin} update-model \
-  --instance <deploy-id> \
-  --primary-model openai \
-  --openai-key "${process.env.OPENAI_API_KEY}"`, { stdio: "inherit" });
-
-// --- Install a plugin ---
-execSync(`${bin} plugin-install \
-  --instance <deploy-id> \
-  --plugin "@openguardrails/moltguard"`, { stdio: "inherit" });
-
-// --- Refresh IP after restart ---
-execSync(`${bin} update-ip --instance <deploy-id>`, { stdio: "inherit" });
-
-// --- Create snapshot ---
-execSync(`${bin} do-snapshot \
-  --do-token "${process.env.DO_TOKEN}" \
-  --droplet-id 12345 \
-  --snapshot-name "my-backup"`, { stdio: "inherit" });
-
-// --- Restore from snapshot ---
-execSync(`${bin} do-restore \
-  --do-token "${process.env.DO_TOKEN}" \
-  --snapshot-name "my-backup"`, { stdio: "inherit" });
-
-// --- Destroy an instance ---
-execSync(`${bin} destroy \
-  --provider digitalocean \
-  --do-token "${process.env.DO_TOKEN}" \
-  --name "openclaw-abc123" --yes`, { stdio: "inherit" });
-
-// --- Start the web UI programmatically ---
-const server = spawn(bin, ["serve", "--port", "3456"], { stdio: "inherit" });
-```
-
-### TypeScript
-
-```typescript
-import { getBinaryPath } from "clawmacdo";
-import { execSync } from "child_process";
-
-const bin: string = getBinaryPath();
-execSync(`${bin} deploy --provider lightsail ...`, { stdio: "inherit" });
-```
-
 ## Quick Start (CLI)
 
 ```bash
@@ -550,27 +312,7 @@ export ARK_ENDPOINT_ID="ep-20260315233753-58rpv"
 clawmacdo ark-chat "Explain quantum computing in 3 sentences."
 ```
 
-### Restore DigitalOcean Droplet from Snapshot
-
-Create a new droplet from an existing DigitalOcean snapshot. The droplet name follows the standard `openclaw-{id}` naming convention.
-
-```bash
-# Restore from a snapshot by name
-clawmacdo do-restore \
-  --do-token "$DO_TOKEN" \
-  --snapshot-name "my-openclaw-snapshot"
-
-# With region and size overrides
-clawmacdo do-restore \
-  --do-token "$DO_TOKEN" \
-  --snapshot-name "my-openclaw-snapshot" \
-  --region nyc1 \
-  --size s-4vcpu-8gb
-```
-
-The command generates a new SSH key pair, looks up the snapshot by name, creates the droplet, waits for it to become active, and saves a deploy record for use with other `clawmacdo` commands.
-
-### Create a DigitalOcean Snapshot from a Droplet
+### Create a DigitalOcean Snapshot
 
 Create a named snapshot from an existing DigitalOcean droplet. Optionally shuts down the droplet first for a clean snapshot.
 
@@ -589,9 +331,25 @@ clawmacdo do-snapshot \
   --power-off
 ```
 
-The command verifies the droplet exists, optionally shuts it down, creates the snapshot, polls until complete, confirms the snapshot, and optionally powers the droplet back on.
+### Restore a DigitalOcean Droplet from Snapshot
+
+Create a new droplet from an existing DigitalOcean snapshot. The droplet name follows the standard `openclaw-{id}` naming convention.
 
-### Create a BytePlus Snapshot from an ECS Instance
+```bash
+# Restore from a snapshot by name
+clawmacdo do-restore \
+  --do-token "$DO_TOKEN" \
+  --snapshot-name "my-openclaw-snapshot"
+
+# With region and size overrides
+clawmacdo do-restore \
+  --do-token "$DO_TOKEN" \
+  --snapshot-name "my-openclaw-snapshot" \
+  --region nyc1 \
+  --size s-4vcpu-8gb
+```
+
+### Create a BytePlus Snapshot
 
 Create a named snapshot of a BytePlus ECS instance's system disk.
 
@@ -601,7 +359,7 @@ clawmacdo bp-snapshot \
   --snapshot-name "my-openclaw-backup"
 ```
 
-### Restore a BytePlus ECS Instance from a Snapshot
+### Restore a BytePlus ECS Instance from Snapshot
 
 Create a new instance from an existing BytePlus snapshot. This creates a custom image from the snapshot, then launches a new instance from that image.
 
@@ -628,7 +386,7 @@ clawmacdo ls-snapshot \
   --region ap-southeast-1
 ```
 
-### Restore a Lightsail Instance from a Snapshot
+### Restore a Lightsail Instance from Snapshot
 
 Create a new instance directly from an existing Lightsail snapshot.
 
@@ -776,6 +534,126 @@ clawmacdo status
 clawmacdo status --provider tencent
 ```
 
+## Programmatic Usage (Node.js)
+
+The npm package exports `getBinaryPath()` so you can call clawmacdo from Node.js scripts or automation tools.
+
+```bash
+npm install clawmacdo
+```
+
+```javascript
+const { execSync, spawn } = require("child_process");
+const { getBinaryPath } = require("clawmacdo");
+
+const bin = getBinaryPath(); // absolute path to the clawmacdo binary
+
+// --- Deploy a new instance ---
+const deploy = execSync(`${bin} deploy \
+  --provider lightsail \
+  --customer-name "my-openclaw" \
+  --customer-email "you@example.com" \
+  --aws-access-key-id "${process.env.AWS_ACCESS_KEY_ID}" \
+  --aws-secret-access-key "${process.env.AWS_SECRET_ACCESS_KEY}" \
+  --anthropic-key "${process.env.ANTHROPIC_API_KEY}" \
+  --primary-model anthropic \
+  --json`, { encoding: "utf8" });
+console.log(JSON.parse(deploy));
+
+// --- Track deploy progress (streaming) ---
+const track = spawn(bin, ["track", "<deploy-id>", "--follow", "--json"]);
+track.stdout.on("data", (chunk) => {
+  console.log("progress:", chunk.toString());
+});
+
+// --- Set up Telegram bot ---
+execSync(`${bin} telegram-setup \
+  --instance <deploy-id> \
+  --bot-token "${process.env.TELEGRAM_TOKEN}"`, { stdio: "inherit" });
+
+// --- Set up WhatsApp (displays QR code) ---
+execSync(`${bin} whatsapp-setup \
+  --instance <deploy-id> \
+  --phone-number "+6512345678"`, { stdio: "inherit" });
+
+// --- Fetch WhatsApp QR code ---
+const qr = execSync(`${bin} whatsapp-qr --instance <deploy-id>`, { encoding: "utf8" });
+console.log(qr); // ASCII QR code
+
+// --- Change AI model ---
+execSync(`${bin} update-model \
+  --instance <deploy-id> \
+  --primary-model openai \
+  --openai-key "${process.env.OPENAI_API_KEY}"`, { stdio: "inherit" });
+
+// --- Install a plugin ---
+execSync(`${bin} plugin-install \
+  --instance <deploy-id> \
+  --plugin "@openguardrails/moltguard"`, { stdio: "inherit" });
+
+// --- Refresh IP after restart ---
+execSync(`${bin} update-ip --instance <deploy-id>`, { stdio: "inherit" });
+
+// --- Create snapshot ---
+execSync(`${bin} do-snapshot \
+  --do-token "${process.env.DO_TOKEN}" \
+  --droplet-id 12345 \
+  --snapshot-name "my-backup"`, { stdio: "inherit" });
+
+// --- Restore from snapshot ---
+execSync(`${bin} do-restore \
+  --do-token "${process.env.DO_TOKEN}" \
+  --snapshot-name "my-backup"`, { stdio: "inherit" });
+
+// --- Destroy an instance ---
+execSync(`${bin} destroy \
+  --provider digitalocean \
+  --do-token "${process.env.DO_TOKEN}" \
+  --name "openclaw-abc123" --yes`, { stdio: "inherit" });
+
+// --- Start the web UI programmatically ---
+const server = spawn(bin, ["serve", "--port", "3456"], { stdio: "inherit" });
+```
+
+### TypeScript
+
+```typescript
+import { getBinaryPath } from "clawmacdo";
+import { execSync } from "child_process";
+
+const bin: string = getBinaryPath();
+execSync(`${bin} deploy --provider lightsail ...`, { stdio: "inherit" });
+```
+
+## Environment Variables
+
+| Variable | Description | Required |
+|----------|-------------|----------|
+| `DO_TOKEN` | DigitalOcean API token | For DO deploys |
+| `AWS_ACCESS_KEY_ID` | AWS IAM access key ID | For Lightsail deploys |
+| `AWS_SECRET_ACCESS_KEY` | AWS IAM secret access key | For Lightsail deploys |
+| `AWS_REGION` | AWS region (default: `us-east-1`) | For Lightsail deploys |
+| `TENCENT_SECRET_ID` | Tencent Cloud Secret ID | For Tencent deploys |
+| `TENCENT_SECRET_KEY` | Tencent Cloud Secret Key | For Tencent deploys |
+| `AZURE_TENANT_ID` | Azure AD tenant ID | For Azure deploys |
+| `AZURE_SUBSCRIPTION_ID` | Azure subscription ID | For Azure deploys |
+| `AZURE_CLIENT_ID` | Azure service principal client ID | For Azure deploys |
+| `AZURE_CLIENT_SECRET` | Azure service principal client secret | For Azure deploys |
+| `BYTEPLUS_ACCESS_KEY` | BytePlus Access Key | For BytePlus deploys |
+| `BYTEPLUS_SECRET_KEY` | BytePlus Secret Key | For BytePlus deploys |
+| `BYTEPLUS_ARK_API_KEY` | BytePlus ARK API key (for AI model inference) | For BytePlus ARK model |
+| `ARK_API_KEY` | ARK bearer token for `ark-chat` | For `ark-chat` |
+| `ARK_ENDPOINT_ID` | ARK endpoint ID for `ark-chat` | For `ark-chat` |
+| `CLAUDE_API_KEY` | Anthropic Claude API key | Optional |
+| `OPENAI_API_KEY` | OpenAI API key | Optional |
+| `TELEGRAM_TOKEN` | Telegram bot token | Optional |
+| `TAILSCALE_AUTH_KEY` | Tailscale auth key | Optional |
+| `CLAWMACDO_API_KEY` | API key protecting `/api/*` endpoints | Optional (Web UI) |
+| `CLAWMACDO_PIN` | 6-digit PIN for web UI login page | Optional (Web UI) |
+| `CLAWMACDO_BIND` | Server bind address (default: `127.0.0.1`) | Optional (Web UI) |
+| `SKILLS_API_URL` | Railway skills API base URL | For skill commands |
+| `USER_SKILLS_API_KEY` | API key for user-skills endpoints | For skill commands |
+
 ## Skills Data API
 
 The `skills-data-api/` directory contains a standalone Node.js/Express service for browsing and serving Claude Code skill marketplace data, backed by MongoDB.
@@ -814,6 +692,37 @@ docker run -p 3000:3000 \
 
 See [`skills-data-api/README.md`](skills-data-api/README.md) for full API documentation.
 
+## Project Structure
+
+```
+clawmacdo/
+├── Cargo.toml              # Workspace configuration
+├── crates/                 # All crates in workspace
+│   ├── clawmacdo-cli/      # 🖥️  Main CLI binary & command orchestration
+│   ├── clawmacdo-core/     # 🔧  Config, errors, shared types
+│   ├── clawmacdo-cloud/    # ☁️   Cloud provider implementations
+│   ├── clawmacdo-provision/# 🔨  Server provisioning & setup logic
+│   ├── clawmacdo-db/       # 💾  Database operations & storage
+│   ├── clawmacdo-ssh/      # 🔑  SSH/SCP operations & key management
+│   └── clawmacdo-ui/       # 🎨  Web UI, progress bars, user prompts
+├── skills-data-api/        # 🧠  Node.js skills marketplace API (MongoDB)
+├── e2e/                    # 🧪  Playwright end-to-end test suite
+├── assets/                 # Static assets (mascot, etc.)
+└── docs/                   # Design docs and usage reference
+```
+
+### Crate Overview
+
+| Crate | Purpose | Dependencies |
+|-------|---------|--------------|
+| **clawmacdo-cli** | Main binary, command parsing, orchestration | All other crates |
+| **clawmacdo-core** | Configuration, errors, shared types | Minimal (serde, anyhow) |
+| **clawmacdo-cloud** | DigitalOcean, AWS Lightsail, Tencent Cloud & BytePlus APIs | reqwest, async-trait |
+| **clawmacdo-provision** | Server setup, package installation | SSH, Core, UI |
+| **clawmacdo-db** | SQLite operations, job tracking | rusqlite |
+| **clawmacdo-ssh** | SSH connections, file transfers | ssh2 |
+| **clawmacdo-ui** | Progress bars, web interface | indicatif, axum |
+
 ## Development
 
 ### Workspace Commands
@@ -849,42 +758,13 @@ Then reference in individual crate:
 new-crate = { workspace = true }
 ```
 
-## Environment Variables
-
-| Variable | Description | Required |
-|----------|-------------|----------|
-| `DO_TOKEN` | DigitalOcean API token | For DO deploys |
-| `AWS_ACCESS_KEY_ID` | AWS IAM access key ID | For Lightsail deploys |
-| `AWS_SECRET_ACCESS_KEY` | AWS IAM secret access key | For Lightsail deploys |
-| `AWS_REGION` | AWS region (default: `us-east-1`) | For Lightsail deploys |
-| `TENCENT_SECRET_ID` | Tencent Cloud Secret ID | For Tencent deploys |
-| `TENCENT_SECRET_KEY` | Tencent Cloud Secret Key | For Tencent deploys |
-| `AZURE_TENANT_ID` | Azure AD tenant ID | For Azure deploys |
-| `AZURE_SUBSCRIPTION_ID` | Azure subscription ID | For Azure deploys |
-| `AZURE_CLIENT_ID` | Azure service principal client ID | For Azure deploys |
-| `AZURE_CLIENT_SECRET` | Azure service principal client secret | For Azure deploys |
-| `BYTEPLUS_ACCESS_KEY` | BytePlus Access Key | For BytePlus deploys |
-| `BYTEPLUS_SECRET_KEY` | BytePlus Secret Key | For BytePlus deploys |
-| `BYTEPLUS_ARK_API_KEY` | BytePlus ARK API key (for AI model inference) | For BytePlus ARK model |
-| `ARK_API_KEY` | ARK bearer token for `ark-chat` | For `ark-chat` |
-| `ARK_ENDPOINT_ID` | ARK endpoint ID for `ark-chat` | For `ark-chat` |
-| `CLAUDE_API_KEY` | Anthropic Claude API key | Optional |
-| `OPENAI_API_KEY` | OpenAI API key | Optional |
-| `TELEGRAM_TOKEN` | Telegram bot token | Optional |
-| `TAILSCALE_AUTH_KEY` | Tailscale auth key | Optional |
-| `CLAWMACDO_API_KEY` | API key protecting `/api/*` endpoints | Optional (Web UI) |
-| `CLAWMACDO_PIN` | 6-digit PIN for web UI login page | Optional (Web UI) |
-| `CLAWMACDO_BIND` | Server bind address (default: `127.0.0.1`) | Optional (Web UI) |
-| `SKILLS_API_URL` | Railway skills API base URL | For skill commands |
-| `USER_SKILLS_API_KEY` | API key for user-skills endpoints | For skill commands |
-
 ## Architecture Notes
 
 The refactored workspace follows a **dependency hierarchy**:
 
 1. **clawmacdo-core** - Foundation (no internal deps)
 2. **clawmacdo-ssh** - Depends on core
-3. **clawmacdo-db** - Depends on core  
+3. **clawmacdo-db** - Depends on core
 4. **clawmacdo-ui** - Depends on core
 5. **clawmacdo-cloud** - Depends on core
 6. **clawmacdo-provision** - Depends on core, ssh, ui, cloud
@@ -900,11 +780,24 @@ This prevents circular dependencies and enables clean testing.
 - **Feature gates** for optional components
 - **Minimal Tokio features** (not "full")
 
+## Security Hardening
+
+- Privileged remote provisioning commands now run through stdin-fed shells instead of nested quoted `sudo` / `su -c` wrappers.
+- User-supplied hostnames are normalized and validated before any deploy flow uses them.
+- The web UI now only accepts backup archives from `~/.clawmacdo/backups` and SSH keys from `~/.clawmacdo/keys`.
+- Backup restore validates the local `.tar.gz` before upload and extracts remotely with `--no-same-owner` and `--no-same-permissions` into a dedicated restore directory.
+- The gateway service now reads `~/.openclaw/gateway.env` instead of the broader `.env`, so setup-only secrets such as `ANTHROPIC_SETUP_TOKEN` are not inherited by the long-running service.
+- Direct Docker-group access for `openclaw` has been removed. If sandbox mode is requested during deploy, the deploy now forces sandbox mode off until a safer non-root mediation path exists.
+- Lightsail credentials are passed only to the child AWS CLI processes instead of mutating process-global environment variables or writing `~/.aws/credentials`.
+- Tencent's optional security-group helper now takes SSH ingress from `CLAWMACDO_TENCENT_SSH_CIDR` and defaults to `127.0.0.1/32` instead of opening SSH to the world.
+
+See [docs/HIGH_SECURITY_FIXES.md](docs/HIGH_SECURITY_FIXES.md) for the finding-by-finding code map, rationale, and functionality impact.
+
 ## Contributing
 
 1. Fork the repository
 2. Create a feature branch
-3. Add tests for new functionality  
+3. Add tests for new functionality
 4. Run `cargo clippy` and `cargo test`
 5. Submit a pull request
 
@@ -933,37 +826,15 @@ For licensing inquiries, contact: bunnyppl@gmail.com
 | [TanStack Progress Tracking](docs/tanstack-progress-tracking.md) | Frontend integration guide for TanStack (React Query) progress bars |
 | [Security Scan](docs/SECURITY_SCAN.md) | Security scanning CLI and vulnerability assessment |
 | [Security Flaw Evaluation](docs/EVAL_SECURITY_FLAW.md) | Security flaw evaluation report and findings |
-
-Security scan scripts always write their main outputs to the system temp directory and only mirror them into `/root/.openclaw/workspace` when that directory is accessible.
 | [High Security Fixes](docs/HIGH_SECURITY_FIXES.md) | Code-level remediation map for all HIGH findings |
 | [Tencent Cloud Plan](docs/TENCENT_PLAN.md) | Tencent Cloud provider support plan |
 | [Repository Guidelines](docs/AGENTS.md) | Contribution guidelines and repository conventions |
 
 ## Changelog
 
-See [CHANGELOG.md](CHANGELOG.md) for version history and breaking changes.
+See [CHANGELOG.md](CHANGELOG.md) for version history and release notes.
 
 ---
 
-**Last updated:** March 19, 2026
-**Current version:** 0.49.0
-**Architecture version:** 2.0 (modular workspace)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+**Current version:** 0.51.0
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clawmacdo",
-  "version": "0.49.0",
+  "version": "0.51.0",
   "description": "CLI tool for deploying OpenClaw to multiple cloud providers with pre-installed AI dev tools",
   "keywords": [
     "openclaw",
@@ -30,8 +30,8 @@
     "node": ">=16"
   },
   "optionalDependencies": {
-    "@clawmacdo/darwin-arm64": "0.49.0",
-    "@clawmacdo/linux-x64": "0.49.0",
-    "@clawmacdo/win32-x64": "0.49.0"
+    "@clawmacdo/darwin-arm64": "0.51.0",
+    "@clawmacdo/linux-x64": "0.51.0",
+    "@clawmacdo/win32-x64": "0.51.0"
   }
 }