clawup 1.0.0

package/dist/tools/deploy.js

@@ -0,0 +1,181 @@
+"use strict";
+/**
+ * Deploy Tool — Deploy agents with pulumi up
+ *
+ * Platform-agnostic implementation using RuntimeAdapter.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deployTool = void 0;
+const config_1 = require("../lib/config");
+const core_1 = require("@clawup/core");
+const workspace_1 = require("../lib/workspace");
+const tailscale_1 = require("../lib/tailscale");
+const tool_helpers_1 = require("../lib/tool-helpers");
+const ui_1 = require("../lib/ui");
+const picocolors_1 = __importDefault(require("picocolors"));
+/**
+ * Deploy tool implementation
+ */
+const deployTool = async (runtime, options) => {
+    const { ui, exec } = runtime;
+    ui.intro("Agent Army");
+    // Ensure workspace is set up (no-op in dev mode)
+    const wsResult = (0, workspace_1.ensureWorkspace)();
+    if (!wsResult.ok) {
+        ui.log.error(wsResult.error ?? "Failed to set up workspace.");
+        process.exit(1);
+    }
+    const cwd = (0, workspace_1.getWorkspaceDir)();
+    // Resolve config name and load manifest
+    let configName;
+    try {
+        configName = (0, config_1.resolveConfigName)(options.config);
+    }
+    catch (err) {
+        ui.log.error(err.message);
+        process.exit(1);
+    }
+    const manifest = (0, config_1.loadManifest)(configName);
+    if (!manifest) {
+        ui.log.error(`Config '${configName}' could not be loaded.`);
+        process.exit(1);
+    }
+    // Select/create stack
+    const selectResult = exec.capture("pulumi", ["stack", "select", manifest.stackName], cwd);
+    if (selectResult.exitCode !== 0) {
+        const initResult = exec.capture("pulumi", ["stack", "init", manifest.stackName], cwd);
+        if (initResult.exitCode !== 0) {
+            ui.log.error(initResult.stderr || selectResult.stderr);
+            ui.log.error(`Could not select Pulumi stack "${manifest.stackName}".`);
+            process.exit(1);
+        }
+    }
+    // Calculate estimated cost
+    const totalCost = manifest.agents.reduce((sum, a) => {
+        const costs = manifest.provider === "hetzner" ? core_1.HETZNER_COST_ESTIMATES : core_1.COST_ESTIMATES;
+        return sum + (costs[a.instanceType ?? manifest.instanceType] ?? 30);
+    }, 0);
+    // Show deployment summary
+    ui.note([
+        `Stack:    ${manifest.stackName}`,
+        `Region:   ${manifest.region}`,
+        ``,
+        `Agents (${manifest.agents.length}):`,
+        (0, ui_1.formatAgentList)(manifest.agents),
+        ``,
+        `Estimated cost: ${(0, ui_1.formatCost)(totalCost)}`,
+    ].join("\n"), "Deployment Summary");
+    // Confirm deployment
+    if (!options.yes) {
+        const confirmed = await ui.confirm({
+            message: "Proceed with deployment?",
+        });
+        if (!confirmed) {
+            ui.cancel("Deployment cancelled.");
+        }
+    }
+    // Sync manifest to project root so the Pulumi program can read it
+    (0, config_1.syncManifestToProject)(configName, cwd);
+    // Sync instanceType from manifest to Pulumi config
+    exec.capture("pulumi", ["config", "set", "instanceType", manifest.instanceType], cwd);
+    // Clean up stale Tailscale devices before deploying
+    // This prevents duplicates when Pulumi replaces servers (create-before-delete)
+    const tailnetDnsName = (0, tool_helpers_1.getConfig)(exec, "tailnetDnsName", cwd);
+    const tailscaleApiKey = (0, tool_helpers_1.getConfig)(exec, "tailscaleApiKey", cwd);
+    if (tailnetDnsName && tailscaleApiKey) {
+        const spinner = ui.spinner("Cleaning up stale Tailscale devices...");
+        const { cleaned, failed } = (0, tailscale_1.cleanupTailscaleDevices)(tailscaleApiKey, tailnetDnsName, manifest.stackName, manifest.agents);
+        if (cleaned.length > 0) {
+            spinner.stop(`Removed ${cleaned.length} stale Tailscale device(s)`);
+        }
+        else {
+            spinner.stop("No stale Tailscale devices found");
+        }
+        if (failed.length > 0) {
+            ui.log.warn(`Could not remove some devices: ${failed.join(", ")}. Check https://login.tailscale.com/admin/machines`);
+        }
+    }
+    // Ensure MagicDNS is enabled (required for Tailscale hostname resolution)
+    if (tailscaleApiKey) {
+        const spinner = ui.spinner("Ensuring Tailscale MagicDNS is enabled...");
+        const magicDnsChanged = (0, tailscale_1.ensureMagicDns)(tailscaleApiKey);
+        spinner.stop(magicDnsChanged ? "MagicDNS enabled" : "MagicDNS OK");
+    }
+    // Ensure Tailscale Funnel prerequisites (identity plugins may need webhooks)
+    if (tailscaleApiKey) {
+        const spinner = ui.spinner("Ensuring Tailscale Funnel prerequisites...");
+        const funnel = (0, tailscale_1.ensureTailscaleFunnel)(tailscaleApiKey);
+        const changes = [];
+        if (funnel.funnelAcl)
+            changes.push("Funnel ACL enabled");
+        spinner.stop(changes.length > 0 ? changes.join(", ") : "Funnel prerequisites OK");
+    }
+    // Deploy
+    ui.log.step("Running pulumi up...");
+    console.log();
+    const exitCode = await exec.stream("pulumi", ["up", "--yes"], { cwd });
+    console.log();
+    if (exitCode !== 0) {
+        ui.log.error("Deployment failed. Check the output above for details.");
+        process.exit(1);
+    }
+    ui.log.success("Deployment complete!");
+    // Show outputs
+    const outputsResult = exec.capture("pulumi", [
+        "stack",
+        "output",
+        "--json",
+        "--show-secrets",
+    ], cwd);
+    if (outputsResult.exitCode === 0) {
+        try {
+            const outputs = JSON.parse(outputsResult.stdout);
+            const lines = [];
+            for (const agent of manifest.agents) {
+                const urlKey = `${agent.role}TailscaleUrl`;
+                const ipKey = `${agent.role}PublicIp`;
+                const idKey = `${agent.role}InstanceId`;
+                lines.push(`${agent.displayName} (${agent.role}):`);
+                if (outputs[urlKey])
+                    lines.push(`  Tailscale URL: ${outputs[urlKey]}`);
+                if (outputs[ipKey])
+                    lines.push(`  Public IP:     ${outputs[ipKey]}`);
+                if (outputs[idKey])
+                    lines.push(`  Instance ID:   ${outputs[idKey]}`);
+                lines.push("");
+            }
+            ui.note(lines.join("\n"), "Agent Details");
+            // Show webhook URLs if available
+            const webhookLines = [];
+            for (const agent of manifest.agents) {
+                const webhookUrl = outputs[`${agent.role}WebhookUrl`];
+                if (webhookUrl) {
+                    webhookLines.push(`  ${agent.displayName} (${agent.role}): ${webhookUrl}`);
+                }
+            }
+            if (webhookLines.length > 0) {
+                ui.note(webhookLines.join("\n"), "Webhook URLs");
+            }
+        }
+        catch (err) {
+            ui.log.warn(`Could not parse stack outputs: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    // Remind user about Tailscale if not connected
+    if (!(0, tailscale_1.isTailscaleInstalled)()) {
+        const hint = process.platform === "darwin"
+            ? "Install from the Mac App Store or https://tailscale.com/download"
+            : "Install from https://tailscale.com/download";
+        ui.log.warn(`Tailscale is required to connect to agents.\n  ${hint}\n  Then run: ${picocolors_1.default.cyan("tailscale up")}`);
+    }
+    else if (!(0, tailscale_1.isTailscaleRunning)()) {
+        ui.log.warn(`Tailscale is not running. Start it before validating agents.\n  Open the Tailscale app or run: ${picocolors_1.default.cyan("tailscale up")}`);
+    }
+    ui.log.info(`Run ${picocolors_1.default.cyan("clawup webhooks setup")} to configure Linear webhooks for your agents.`);
+    ui.outro("Agents will be ready in 3-5 minutes. Run `clawup validate` to check.");
+};
+exports.deployTool = deployTool;
+//# sourceMappingURL=deploy.js.map

package/dist/tools/deploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../../tools/deploy.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;AAGH,0CAAuF;AACvF,uCAAsE;AACtE,gDAAoE;AACpE,gDAA4I;AAC5I,sDAAgD;AAChD,kCAAwD;AACxD,4DAA4B;AAS5B;;GAEG;AACI,MAAM,UAAU,GAAsC,KAAK,EAChE,OAAuB,EACvB,OAAsB,EACtB,EAAE;IACF,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAE7B,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAEvB,iDAAiD;IACjD,MAAM,QAAQ,GAAG,IAAA,2BAAe,GAAE,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,6BAA6B,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,2BAAe,GAAE,CAAC;IAE9B,wCAAwC;IACxC,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,EAAE,CAAC,GAAG,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,qBAAY,EAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,UAAU,wBAAwB,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,sBAAsB;IACtB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1F,IAAI,YAAY,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;QACtF,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC9B,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YACvD,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,kCAAkC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;YACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,6BAAsB,CAAC,CAAC,CAAC,qBAAc,CAAC;QACtF,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,IAAI,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC,EAAE,CAAC,CAAC,CAAC;IAEN,0BAA0B;IAC1B,EAAE,CAAC,IAAI,CACL;QACE,aAAa,QAAQ,CAAC,SAAS,EAAE;QACjC,aAAa,QAAQ,CAAC,MAAM,EAAE;QAC9B,EAAE;QACF,WAAW,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI;QACrC,IAAA,oBAAe,EAAC,QAAQ,CAAC,MAAM,CAAC;QAChC,EAAE;QACF,mBAAmB,IAAA,eAAU,EAAC,SAAS,CAAC,EAAE;KAC3C,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,oBAAoB,CACrB,CAAC;IAEF,qBAAqB;IACrB,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YACjC,OAAO,EAAE,0BAA0B;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,IAAA,8BAAqB,EAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAEvC,mDAAmD;IACnD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC;IAEtF,oDAAoD;IACpD,+EAA+E;IAC/E,MAAM,cAAc,GAAG,IAAA,wBAAS,EAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,IAAA,wBAAS,EAAC,IAAI,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAEhE,IAAI,cAAc,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;QACrE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAA,mCAAuB,EACjD,eAAe,EAAE,cAAc,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CACrE,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,MAAM,4BAA4B,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,EAAE,CAAC,GAAG,CAAC,IAAI,CACT,kCAAkC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,oDAAoD,CACxG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;QACxE,MAAM,eAAe,GAAG,IAAA,0BAAc,EAAC,eAAe,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACrE,CAAC;IAED,6EAA6E;IAC7E,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,IAAA,iCAAqB,EAAC,eAAe,CAAC,CAAC;QACtD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;IACpF,CAAC;IAED,SAAS;IACT,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAEvC,eAAe;IACf,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;QAC3C,OAAO;QACP,QAAQ;QACR,QAAQ;QACR,gBAAgB;KACjB,EAAE,GAAG,CAAC,CAAC;IACR,IAAI,aAAa,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAA4B,CAAC;YAC5E,MAAM,KAAK,GAAa,EAAE,CAAC;YAE3B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpC,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,cAAc,CAAC;gBAC3C,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,IAAI,UAAU,CAAC;gBACtC,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,IAAI,YAAY,CAAC;gBACxC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;gBACpD,IAAI,OAAO,CAAC,MAAM,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACvE,IAAI,OAAO,CAAC,KAAK,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACrE,IAAI,OAAO,CAAC,KAAK,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACrE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,CAAC;YAED,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;YAE3C,iCAAiC;YACjC,MAAM,YAAY,GAAa,EAAE,CAAC;YAClC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,KAAK,CAAC,IAAI,YAAY,CAAuB,CAAC;gBAC5E,IAAI,UAAU,EAAE,CAAC;oBACf,YAAY,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,IAAI,MAAM,UAAU,EAAE,CAAC,CAAC;gBAC7E,CAAC;YACH,CAAC;YACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,IAAI,CAAC,IAAA,gCAAoB,GAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,GACR,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAC3B,CAAC,CAAC,kEAAkE;YACpE,CAAC,CAAC,6CAA6C,CAAC;QACpD,EAAE,CAAC,GAAG,CAAC,IAAI,CACT,kDAAkD,IAAI,iBAAiB,oBAAE,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CACjG,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,IAAA,8BAAkB,GAAE,EAAE,CAAC;QACjC,EAAE,CAAC,GAAG,CAAC,IAAI,CACT,kGAAkG,oBAAE,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAC5H,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,GAAG,CAAC,IAAI,CACT,OAAO,oBAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,gDAAgD,CACxF,CAAC;IAEF,EAAE,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;AACnF,CAAC,CAAC;AA9LW,QAAA,UAAU,cA8LrB"}

package/dist/tools/destroy.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Destroy Tool — Tear down resources with safety confirmations
+ *
+ * Platform-agnostic implementation using RuntimeAdapter.
+ */
+import type { ToolImplementation } from "../adapters";
+export interface DestroyOptions {
+    /** Skip confirmation prompts (dangerous!) */
+    yes?: boolean;
+    /** Config name (auto-detected if only one) */
+    config?: string;
+}
+/**
+ * Destroy tool implementation
+ */
+export declare const destroyTool: ToolImplementation<DestroyOptions>;

package/dist/tools/destroy.js

@@ -0,0 +1,119 @@
+"use strict";
+/**
+ * Destroy Tool — Tear down resources with safety confirmations
+ *
+ * Platform-agnostic implementation using RuntimeAdapter.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.destroyTool = void 0;
+const config_1 = require("../lib/config");
+const tailscale_1 = require("../lib/tailscale");
+const workspace_1 = require("../lib/workspace");
+const tool_helpers_1 = require("../lib/tool-helpers");
+const ui_1 = require("../lib/ui");
+/**
+ * Destroy tool implementation
+ */
+const destroyTool = async (runtime, options) => {
+    const { ui, exec } = runtime;
+    ui.intro("Agent Army");
+    // Ensure workspace is set up (no-op in dev mode)
+    const wsResult = (0, workspace_1.ensureWorkspace)();
+    if (!wsResult.ok) {
+        ui.log.error(wsResult.error ?? "Failed to set up workspace.");
+        process.exit(1);
+    }
+    const cwd = (0, workspace_1.getWorkspaceDir)();
+    // Resolve config name and load manifest
+    let configName;
+    try {
+        configName = (0, config_1.resolveConfigName)(options.config);
+    }
+    catch (err) {
+        ui.log.error(err.message);
+        process.exit(1);
+    }
+    const manifest = (0, config_1.loadManifest)(configName);
+    if (!manifest) {
+        ui.log.error(`Config '${configName}' could not be loaded.`);
+        process.exit(1);
+    }
+    // Select/create stack
+    const selectResult = exec.capture("pulumi", ["stack", "select", manifest.stackName], cwd);
+    if (selectResult.exitCode !== 0) {
+        const initResult = exec.capture("pulumi", ["stack", "init", manifest.stackName], cwd);
+        if (initResult.exitCode !== 0) {
+            ui.log.error(`Could not select Pulumi stack "${manifest.stackName}".`);
+            process.exit(1);
+        }
+    }
+    // Show what will be destroyed (provider-aware)
+    const manifestProvider = manifest.provider ?? "aws";
+    const resourceLabel = manifestProvider === "hetzner" ? "Hetzner servers" : "EC2 instances";
+    const infraLabel = manifestProvider === "hetzner" ? "Firewall rules" : "VPC, subnet, and security group";
+    ui.note([
+        `Stack:  ${manifest.stackName}`,
+        `Region: ${manifest.region}`,
+        ``,
+        `Agents (${manifest.agents.length}):`,
+        (0, ui_1.formatAgentList)(manifest.agents),
+        ``,
+        `This will PERMANENTLY DESTROY:`,
+        `  - ${manifest.agents.length} ${resourceLabel}`,
+        `  - All workspace data on those instances`,
+        `  - ${infraLabel}`,
+        `  - Tailscale device registrations`,
+    ].join("\n"), "Destruction Plan");
+    // Confirm
+    if (!options.yes) {
+        const typedName = await ui.text({
+            message: `Type the stack name to confirm: "${manifest.stackName}"`,
+            validate: (val) => {
+                if (val !== manifest.stackName)
+                    return `Must type "${manifest.stackName}" to confirm`;
+                return undefined;
+            },
+        });
+        const confirmed = await ui.confirm({
+            message: "Are you ABSOLUTELY sure?",
+            initialValue: false,
+        });
+        if (!confirmed) {
+            ui.cancel("Destruction cancelled.");
+        }
+    }
+    // Sync manifest to project root so the Pulumi program can read it
+    (0, config_1.syncManifestToProject)(configName, cwd);
+    // Destroy infrastructure
+    ui.log.step("Running pulumi destroy...");
+    console.log();
+    const exitCode = await exec.stream("pulumi", ["destroy", "--yes"], { cwd });
+    console.log();
+    if (exitCode !== 0) {
+        ui.log.error("Destruction failed. Check the output above for details.");
+        process.exit(1);
+    }
+    // Clean up Tailscale devices after infrastructure is destroyed
+    const tailnetDnsName = (0, tool_helpers_1.getConfig)(exec, "tailnetDnsName", cwd);
+    const tailscaleApiKey = (0, tool_helpers_1.getConfig)(exec, "tailscaleApiKey", cwd);
+    if (tailnetDnsName && tailscaleApiKey) {
+        const spinner = ui.spinner("Removing agents from Tailscale...");
+        const { cleaned, failed } = (0, tailscale_1.cleanupTailscaleDevices)(tailscaleApiKey, tailnetDnsName, manifest.stackName, manifest.agents);
+        if (failed.length === 0) {
+            spinner.stop(cleaned.length > 0 ? "Tailscale devices cleaned up" : "No Tailscale devices found");
+        }
+        else {
+            spinner.stop("Some Tailscale devices could not be removed");
+            ui.log.warn(`Could not remove: ${failed.join(", ")}. Remove manually from https://login.tailscale.com/admin/machines`);
+        }
+    }
+    else if (tailnetDnsName && !tailscaleApiKey) {
+        ui.log.warn("No Tailscale API key configured - devices must be removed manually.");
+        console.log("  Remove devices at: https://login.tailscale.com/admin/machines");
+        console.log("  Tip: Set a Tailscale API key (`clawup init`) for automatic cleanup.");
+    }
+    ui.log.success(`Stack "${manifest.stackName}" has been destroyed.`);
+    ui.outro("Done!");
+};
+exports.destroyTool = destroyTool;
+//# sourceMappingURL=destroy.js.map

package/dist/tools/destroy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destroy.js","sourceRoot":"","sources":["../../tools/destroy.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAGH,0CAAuF;AACvF,gDAA2D;AAC3D,gDAAoE;AACpE,sDAAgD;AAChD,kCAA4C;AAS5C;;GAEG;AACI,MAAM,WAAW,GAAuC,KAAK,EAClE,OAAuB,EACvB,OAAuB,EACvB,EAAE;IACF,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAE7B,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAEvB,iDAAiD;IACjD,MAAM,QAAQ,GAAG,IAAA,2BAAe,GAAE,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,6BAA6B,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,2BAAe,GAAE,CAAC;IAE9B,wCAAwC;IACxC,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,EAAE,CAAC,GAAG,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,qBAAY,EAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,UAAU,wBAAwB,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,sBAAsB;IACtB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1F,IAAI,YAAY,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;QACtF,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC9B,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,kCAAkC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;YACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC;IACpD,MAAM,aAAa,GAAG,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe,CAAC;IAC3F,MAAM,UAAU,GAAG,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,iCAAiC,CAAC;IAEzG,EAAE,CAAC,IAAI,CACL;QACE,WAAW,QAAQ,CAAC,SAAS,EAAE;QAC/B,WAAW,QAAQ,CAAC,MAAM,EAAE;QAC5B,EAAE;QACF,WAAW,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI;QACrC,IAAA,oBAAe,EAAC,QAAQ,CAAC,MAAM,CAAC;QAChC,EAAE;QACF,gCAAgC;QAChC,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,aAAa,EAAE;QAChD,2CAA2C;QAC3C,OAAO,UAAU,EAAE;QACnB,oCAAoC;KACrC,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,kBAAkB,CACnB,CAAC;IAEF,UAAU;IACV,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,oCAAoC,QAAQ,CAAC,SAAS,GAAG;YAClE,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;gBAChB,IAAI,GAAG,KAAK,QAAQ,CAAC,SAAS;oBAAE,OAAO,cAAc,QAAQ,CAAC,SAAS,cAAc,CAAC;gBACtF,OAAO,SAAS,CAAC;YACnB,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YACjC,OAAO,EAAE,0BAA0B;YACnC,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,IAAA,8BAAqB,EAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAEvC,yBAAyB;IACzB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+DAA+D;IAC/D,MAAM,cAAc,GAAG,IAAA,wBAAS,EAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,IAAA,wBAAS,EAAC,IAAI,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAEhE,IAAI,cAAc,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;QAChE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAA,mCAAuB,EACjD,eAAe,EAAE,cAAc,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CACrE,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC;QACnG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YAC5D,EAAE,CAAC,GAAG,CAAC,IAAI,CACT,qBAAqB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,mEAAmE,CAC1G,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,cAAc,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9C,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;IACvF,CAAC;IAED,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,QAAQ,CAAC,SAAS,uBAAuB,CAAC,CAAC;IACpE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACpB,CAAC,CAAC;AAzHW,QAAA,WAAW,eAyHtB"}

package/dist/tools/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Tools Module
+ *
+ * Platform-agnostic tool implementations using the RuntimeAdapter pattern.
+ * Each tool is a ToolImplementation that can run with any adapter.
+ *
+ * @example
+ * import { deployTool, createCLIAdapter } from './tools';
+ *
+ * // Run with CLI adapter
+ * await deployTool(createCLIAdapter(), { yes: false });
+ */
+export { deployTool, type DeployOptions } from "./deploy";
+export { statusTool, type StatusOptions } from "./status";
+export { validateTool, type ValidateOptions } from "./validate";
+export { destroyTool, type DestroyOptions } from "./destroy";
+export { redeployTool, type RedeployOptions } from "./redeploy";
+export { pushTool, type PushOptions } from "./push";
+export { webhooksSetupTool, type WebhooksSetupOptions } from "./webhooks";
+export { type RuntimeAdapter, type ToolImplementation, type ToolDefinition, createCLIAdapter, } from "../adapters";

package/dist/tools/index.js

@@ -0,0 +1,34 @@
+"use strict";
+/**
+ * Tools Module
+ *
+ * Platform-agnostic tool implementations using the RuntimeAdapter pattern.
+ * Each tool is a ToolImplementation that can run with any adapter.
+ *
+ * @example
+ * import { deployTool, createCLIAdapter } from './tools';
+ *
+ * // Run with CLI adapter
+ * await deployTool(createCLIAdapter(), { yes: false });
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCLIAdapter = exports.webhooksSetupTool = exports.pushTool = exports.redeployTool = exports.destroyTool = exports.validateTool = exports.statusTool = exports.deployTool = void 0;
+// Export all tools
+var deploy_1 = require("./deploy");
+Object.defineProperty(exports, "deployTool", { enumerable: true, get: function () { return deploy_1.deployTool; } });
+var status_1 = require("./status");
+Object.defineProperty(exports, "statusTool", { enumerable: true, get: function () { return status_1.statusTool; } });
+var validate_1 = require("./validate");
+Object.defineProperty(exports, "validateTool", { enumerable: true, get: function () { return validate_1.validateTool; } });
+var destroy_1 = require("./destroy");
+Object.defineProperty(exports, "destroyTool", { enumerable: true, get: function () { return destroy_1.destroyTool; } });
+var redeploy_1 = require("./redeploy");
+Object.defineProperty(exports, "redeployTool", { enumerable: true, get: function () { return redeploy_1.redeployTool; } });
+var push_1 = require("./push");
+Object.defineProperty(exports, "pushTool", { enumerable: true, get: function () { return push_1.pushTool; } });
+var webhooks_1 = require("./webhooks");
+Object.defineProperty(exports, "webhooksSetupTool", { enumerable: true, get: function () { return webhooks_1.webhooksSetupTool; } });
+// Re-export adapter types and factory for convenience
+var adapters_1 = require("../adapters");
+Object.defineProperty(exports, "createCLIAdapter", { enumerable: true, get: function () { return adapters_1.createCLIAdapter; } });
+//# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../tools/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAEH,mBAAmB;AACnB,mCAA0D;AAAjD,oGAAA,UAAU,OAAA;AACnB,mCAA0D;AAAjD,oGAAA,UAAU,OAAA;AACnB,uCAAgE;AAAvD,wGAAA,YAAY,OAAA;AACrB,qCAA6D;AAApD,sGAAA,WAAW,OAAA;AACpB,uCAAgE;AAAvD,wGAAA,YAAY,OAAA;AACrB,+BAAoD;AAA3C,gGAAA,QAAQ,OAAA;AACjB,uCAA0E;AAAjE,6GAAA,iBAAiB,OAAA;AAE1B,sDAAsD;AACtD,wCAKqB;AADnB,4GAAA,gBAAgB,OAAA"}

package/dist/tools/push.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Push Tool — Live-update running agents via Tailscale SSH
+ *
+ * Syncs workspace files, skills, config, and OpenClaw updates to
+ * running agent instances without redeploying infrastructure.
+ *
+ * Platform-agnostic implementation using RuntimeAdapter.
+ */
+import type { ToolImplementation } from "../adapters";
+export interface PushOptions {
+    /** Sync skills to remote workspace */
+    skills?: boolean;
+    /** Sync workspace files to remote agents */
+    workspace?: boolean;
+    /** Remove remote memory/ dir and MEMORY.md */
+    memoryReset?: boolean;
+    /** Run npm install -g openclaw@latest + gateway restart */
+    openclaw?: boolean;
+    /** Copy local openclaw.json to remote + gateway restart */
+    pushConfig?: boolean;
+    /** Filter to a single agent (name, role, or alias) */
+    agent?: string;
+    /** Config name (auto-detected if only one) */
+    config?: string;
+}
+/**
+ * Push tool implementation
+ */
+export declare const pushTool: ToolImplementation<PushOptions>;