clawup 1.0.0

package/dist/tools/status.js

@@ -0,0 +1,205 @@
+"use strict";
+/**
+ * Status Tool — Show agent statuses from stack outputs
+ *
+ * Platform-agnostic implementation using RuntimeAdapter.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.statusTool = void 0;
+const config_1 = require("../lib/config");
+const core_1 = require("@clawup/core");
+const workspace_1 = require("../lib/workspace");
+const tailscale_1 = require("../lib/tailscale");
+const tool_helpers_1 = require("../lib/tool-helpers");
+/**
+ * SSH options for non-interactive connections
+ */
+const SSH_OPTS = [
+    "-o", "StrictHostKeyChecking=no",
+    "-o", "UserKnownHostsFile=/dev/null",
+    "-o", "BatchMode=yes",
+];
+/**
+ * Fetch Claude Code version via SSH (best effort, returns "—" on failure)
+ */
+function getClaudeCodeVersion(exec, host, timeout = 5) {
+    const result = exec.capture("ssh", [
+        "-o", `ConnectTimeout=${timeout}`,
+        ...SSH_OPTS,
+        `${core_1.SSH_USER}@${host}`,
+        `"/home/${core_1.SSH_USER}/.local/bin/claude --version 2>/dev/null || echo ''"`,
+    ]);
+    if (result.exitCode === 0 && result.stdout?.trim()) {
+        return result.stdout.trim();
+    }
+    return "—";
+}
+/**
+ * Fetch GitHub CLI version via SSH (best effort, returns "—" on failure)
+ */
+function getGhVersion(exec, host, timeout = 5) {
+    const result = exec.capture("ssh", [
+        "-o", `ConnectTimeout=${timeout}`,
+        ...SSH_OPTS,
+        `${core_1.SSH_USER}@${host}`,
+        `"gh --version 2>/dev/null | head -n1 | awk '{print \\$3}' || echo ''"`,
+    ]);
+    if (result.exitCode === 0 && result.stdout?.trim()) {
+        return result.stdout.trim();
+    }
+    return "—";
+}
+/**
+ * Fetch GitHub CLI auth status via SSH (best effort, returns "✓" or "—")
+ */
+function getGhAuthStatus(exec, host, timeout = 5) {
+    const result = exec.capture("ssh", [
+        "-o", `ConnectTimeout=${timeout}`,
+        ...SSH_OPTS,
+        `${core_1.SSH_USER}@${host}`,
+        `"gh auth status 2>&1 >/dev/null && echo 'OK' || echo 'no'"`,
+    ]);
+    if (result.exitCode === 0 && result.stdout?.trim() === "OK") {
+        return "✓";
+    }
+    return "—";
+}
+/**
+ * Status tool implementation
+ */
+const statusTool = async (runtime, options) => {
+    const { ui, exec } = runtime;
+    if (!options.json) {
+        ui.intro("Agent Army");
+    }
+    // Ensure workspace is set up (no-op in dev mode)
+    const wsResult = (0, workspace_1.ensureWorkspace)();
+    if (!wsResult.ok) {
+        ui.log.error(wsResult.error ?? "Failed to set up workspace.");
+        process.exit(1);
+    }
+    const cwd = (0, workspace_1.getWorkspaceDir)();
+    // Resolve config name and load manifest
+    let configName;
+    try {
+        configName = (0, config_1.resolveConfigName)(options.config);
+    }
+    catch (err) {
+        ui.log.error(err.message);
+        process.exit(1);
+    }
+    const manifest = (0, config_1.loadManifest)(configName);
+    if (!manifest) {
+        ui.log.error(`Config '${configName}' could not be loaded.`);
+        process.exit(1);
+    }
+    // Select/create stack
+    const selectResult = exec.capture("pulumi", ["stack", "select", manifest.stackName], cwd);
+    if (selectResult.exitCode !== 0) {
+        const initResult = exec.capture("pulumi", ["stack", "init", manifest.stackName], cwd);
+        if (initResult.exitCode !== 0) {
+            if (!options.json) {
+                ui.log.error(initResult.stderr || selectResult.stderr);
+                ui.log.error(`Could not select Pulumi stack "${manifest.stackName}".`);
+            }
+            process.exit(1);
+        }
+    }
+    // Get outputs
+    const outputs = (0, tool_helpers_1.getStackOutputs)(exec, true, cwd);
+    if (!outputs) {
+        ui.log.error("Could not fetch stack outputs. Has the stack been deployed?");
+        process.exit(1);
+    }
+    // Get tailnet DNS name for SSH connections
+    const tailnetDnsName = (0, tool_helpers_1.getConfig)(exec, "tailnetDnsName", cwd);
+    // Warn if Tailscale is not running (SSH version columns will show "—")
+    const tailscaleUp = (0, tailscale_1.isTailscaleRunning)();
+    if (!tailscaleUp && !options.json) {
+        ui.log.warn("Tailscale is not running — CLI version columns will show \"—\".\n" +
+            "  Open the Tailscale app or run: tailscale up");
+    }
+    // Build status data with Claude Code and GitHub CLI versions (fetched via SSH)
+    const statusData = manifest.agents.map((agent) => {
+        let claudeCodeVersion = "—";
+        let ghVersion = "—";
+        let ghAuth = "—";
+        if (tailnetDnsName) {
+            const tsHost = (0, core_1.tailscaleHostname)(manifest.stackName, agent.name);
+            const host = `${tsHost}.${tailnetDnsName}`;
+            claudeCodeVersion = getClaudeCodeVersion(exec, host);
+            ghVersion = getGhVersion(exec, host);
+            if (ghVersion !== "—") {
+                ghAuth = getGhAuthStatus(exec, host);
+            }
+        }
+        return {
+            name: agent.displayName,
+            role: agent.role,
+            instanceId: outputs[`${agent.role}InstanceId`] ?? "—",
+            publicIp: outputs[`${agent.role}PublicIp`] ?? "—",
+            tailscaleUrl: outputs[`${agent.role}TailscaleUrl`] ?? "—",
+            claudeCodeVersion,
+            ghVersion,
+            ghAuth,
+        };
+    });
+    // JSON output
+    if (options.json) {
+        console.log(JSON.stringify(statusData, null, 2));
+        return;
+    }
+    // Table output
+    ui.log.step(`Stack: ${manifest.stackName} | Region: ${manifest.region}`);
+    console.log();
+    // Header
+    const nameW = 12;
+    const roleW = 10;
+    const idW = 22;
+    const ipW = 16;
+    const claudeW = 16;
+    const ghW = 8;
+    const authW = 6;
+    const header = [
+        "Agent".padEnd(nameW),
+        "Role".padEnd(roleW),
+        "Instance ID".padEnd(idW),
+        "Public IP".padEnd(ipW),
+        "Claude Code".padEnd(claudeW),
+        "gh".padEnd(ghW),
+        "Auth".padEnd(authW),
+    ].join("  ");
+    const separator = [
+        "─".repeat(nameW),
+        "─".repeat(roleW),
+        "─".repeat(idW),
+        "─".repeat(ipW),
+        "─".repeat(claudeW),
+        "─".repeat(ghW),
+        "─".repeat(authW),
+    ].join("  ");
+    console.log(`  ${header}`);
+    console.log(`  ${separator}`);
+    for (const s of statusData) {
+        const row = [
+            s.name.padEnd(nameW),
+            s.role.padEnd(roleW),
+            s.instanceId.padEnd(idW),
+            s.publicIp.padEnd(ipW),
+            s.claudeCodeVersion.padEnd(claudeW),
+            s.ghVersion.padEnd(ghW),
+            s.ghAuth.padEnd(authW),
+        ].join("  ");
+        console.log(`  ${row}`);
+    }
+    console.log();
+    // Show Tailscale URLs
+    const urlLines = statusData
+        .filter((s) => s.tailscaleUrl !== "—")
+        .map((s) => `  ${s.name}: ${s.tailscaleUrl}`);
+    if (urlLines.length > 0) {
+        ui.note(urlLines.join("\n"), "Tailscale URLs");
+    }
+};
+exports.statusTool = statusTool;
+//# sourceMappingURL=status.js.map

package/dist/tools/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../tools/status.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAGH,0CAAgE;AAChE,uCAA2D;AAC3D,gDAAoE;AACpE,gDAAsD;AACtD,sDAAiE;AASjE;;GAEG;AACH,MAAM,QAAQ,GAAG;IACf,IAAI,EAAE,0BAA0B;IAChC,IAAI,EAAE,8BAA8B;IACpC,IAAI,EAAE,eAAe;CACtB,CAAC;AAEF;;GAEG;AACH,SAAS,oBAAoB,CAAC,IAAiB,EAAE,IAAY,EAAE,UAAkB,CAAC;IAChF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;QACjC,IAAI,EAAE,kBAAkB,OAAO,EAAE;QACjC,GAAG,QAAQ;QACX,GAAG,eAAQ,IAAI,IAAI,EAAE;QACrB,UAAU,eAAQ,sDAAsD;KACzE,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QACnD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,IAAiB,EAAE,IAAY,EAAE,UAAkB,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;QACjC,IAAI,EAAE,kBAAkB,OAAO,EAAE;QACjC,GAAG,QAAQ;QACX,GAAG,eAAQ,IAAI,IAAI,EAAE;QACrB,uEAAuE;KACxE,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QACnD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,IAAiB,EAAE,IAAY,EAAE,UAAkB,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;QACjC,IAAI,EAAE,kBAAkB,OAAO,EAAE;QACjC,GAAG,QAAQ;QACX,GAAG,eAAQ,IAAI,IAAI,EAAE;QACrB,4DAA4D;KAC7D,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAC5D,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACI,MAAM,UAAU,GAAsC,KAAK,EAChE,OAAuB,EACvB,OAAsB,EACtB,EAAE;IACF,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAE7B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzB,CAAC;IAED,iDAAiD;IACjD,MAAM,QAAQ,GAAG,IAAA,2BAAe,GAAE,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,6BAA6B,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,2BAAe,GAAE,CAAC;IAE9B,wCAAwC;IACxC,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,EAAE,CAAC,GAAG,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,qBAAY,EAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,UAAU,wBAAwB,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,sBAAsB;IACtB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1F,IAAI,YAAY,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;QACtF,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;gBACvD,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,kCAAkC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,cAAc;IACd,MAAM,OAAO,GAAG,IAAA,8BAAe,EAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,2CAA2C;IAC3C,MAAM,cAAc,GAAG,IAAA,wBAAS,EAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAE9D,uEAAuE;IACvE,MAAM,WAAW,GAAG,IAAA,8BAAkB,GAAE,CAAC;IACzC,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,EAAE,CAAC,GAAG,CAAC,IAAI,CACT,mEAAmE;YACnE,+CAA+C,CAChD,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/C,IAAI,iBAAiB,GAAG,GAAG,CAAC;QAC5B,IAAI,SAAS,GAAG,GAAG,CAAC;QACpB,IAAI,MAAM,GAAG,GAAG,CAAC;QACjB,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,IAAA,wBAAiB,EAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACjE,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,cAAc,EAAE,CAAC;YAC3C,iBAAiB,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrD,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrC,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACtB,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QACD,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,WAAW;YACvB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAG,OAAO,CAAC,GAAG,KAAK,CAAC,IAAI,YAAY,CAAY,IAAI,GAAG;YACjE,QAAQ,EAAG,OAAO,CAAC,GAAG,KAAK,CAAC,IAAI,UAAU,CAAY,IAAI,GAAG;YAC7D,YAAY,EAAG,OAAO,CAAC,GAAG,KAAK,CAAC,IAAI,cAAc,CAAY,IAAI,GAAG;YACrE,iBAAiB;YACjB,SAAS;YACT,MAAM;SACP,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,cAAc;IACd,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,eAAe;IACf,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,QAAQ,CAAC,SAAS,cAAc,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,SAAS;IACT,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,MAAM,GAAG,GAAG,EAAE,CAAC;IACf,MAAM,GAAG,GAAG,EAAE,CAAC;IACf,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,CAAC,CAAC;IAEhB,MAAM,MAAM,GAAG;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QACpB,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;QACzB,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC;QACvB,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAChB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,SAAS,GAAG;QAChB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;QACjB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;QACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;KAClB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC;IAE9B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG;YACV,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACpB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACpB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC;YACxB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;YACtB,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC;YACnC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;YACvB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;SACvB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,sBAAsB;IACtB,MAAM,QAAQ,GAAG,UAAU;SACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,GAAG,CAAC;SACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IAEhD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACjD,CAAC;AACH,CAAC,CAAC;AA5JW,QAAA,UAAU,cA4JrB"}

package/dist/tools/validate.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Validate Tool — Health check agents via Tailscale SSH
+ *
+ * Platform-agnostic implementation using RuntimeAdapter.
+ */
+import type { ToolImplementation } from "../adapters";
+export interface ValidateOptions {
+    /** SSH timeout in seconds */
+    timeout?: string;
+    /** Config name (auto-detected if only one) */
+    config?: string;
+}
+/**
+ * Validate tool implementation
+ */
+export declare const validateTool: ToolImplementation<ValidateOptions>;

package/dist/tools/validate.js

@@ -0,0 +1,219 @@
+"use strict";
+/**
+ * Validate Tool — Health check agents via Tailscale SSH
+ *
+ * Platform-agnostic implementation using RuntimeAdapter.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateTool = void 0;
+const config_1 = require("../lib/config");
+const core_1 = require("@clawup/core");
+const workspace_1 = require("../lib/workspace");
+const tailscale_1 = require("../lib/tailscale");
+const tool_helpers_1 = require("../lib/tool-helpers");
+const picocolors_1 = __importDefault(require("picocolors"));
+/**
+ * SSH options for non-interactive connections
+ */
+const SSH_OPTS = [
+    "-o", "StrictHostKeyChecking=no",
+    "-o", "UserKnownHostsFile=/dev/null",
+    "-o", "BatchMode=yes",
+];
+/**
+ * Run an SSH check command
+ */
+function runSshCheck(exec, host, command, timeout) {
+    const result = exec.capture("ssh", [
+        "-o", `ConnectTimeout=${timeout}`,
+        ...SSH_OPTS,
+        `${core_1.SSH_USER}@${host}`,
+        `"${command.replace(/"/g, '\\"')}"`,
+    ]);
+    return { ok: result.exitCode === 0, output: result.stdout || result.stderr };
+}
+/**
+ * Validate tool implementation
+ */
+const validateTool = async (runtime, options) => {
+    const { ui, exec } = runtime;
+    ui.intro("Agent Army");
+    (0, tailscale_1.requireTailscale)();
+    // Ensure workspace is set up (no-op in dev mode)
+    const wsResult = (0, workspace_1.ensureWorkspace)();
+    if (!wsResult.ok) {
+        ui.log.error(wsResult.error ?? "Failed to set up workspace.");
+        process.exit(1);
+    }
+    const cwd = (0, workspace_1.getWorkspaceDir)();
+    // Resolve config name and load manifest
+    let configName;
+    try {
+        configName = (0, config_1.resolveConfigName)(options.config);
+    }
+    catch (err) {
+        ui.log.error(err.message);
+        process.exit(1);
+    }
+    const manifest = (0, config_1.loadManifest)(configName);
+    if (!manifest) {
+        ui.log.error(`Config '${configName}' could not be loaded.`);
+        process.exit(1);
+    }
+    // Select/create stack
+    const selectResult = exec.capture("pulumi", ["stack", "select", manifest.stackName], cwd);
+    if (selectResult.exitCode !== 0) {
+        const initResult = exec.capture("pulumi", ["stack", "init", manifest.stackName], cwd);
+        if (initResult.exitCode !== 0) {
+            ui.log.error(`Could not select Pulumi stack "${manifest.stackName}".`);
+            process.exit(1);
+        }
+    }
+    // Get tailnet
+    const tailnetDnsName = (0, tool_helpers_1.getConfig)(exec, "tailnetDnsName", cwd);
+    if (!tailnetDnsName) {
+        ui.log.error("Could not determine tailnet DNS name from Pulumi config.");
+        process.exit(1);
+    }
+    const timeout = parseInt(options.timeout ?? "30", 10);
+    const results = [];
+    ui.log.step(`Validating ${manifest.agents.length} agents (timeout: ${timeout}s)...`);
+    console.log();
+    for (const agent of manifest.agents) {
+        const tsHost = (0, core_1.tailscaleHostname)(manifest.stackName, agent.name);
+        const host = `${tsHost}.${tailnetDnsName}`;
+        const checks = [];
+        ui.log.info(`${picocolors_1.default.bold(agent.displayName)} (${agent.role}) — ${host}`);
+        // Check 1: SSH connectivity
+        const ssh = runSshCheck(exec, host, "echo 'SSH OK'", timeout);
+        checks.push({
+            name: "SSH connectivity",
+            passed: ssh.ok,
+            detail: ssh.ok ? "connected" : "connection failed",
+        });
+        if (ssh.ok) {
+            // Check 2: OpenClaw gateway running (systemd user service)
+            const gateway = runSshCheck(exec, host, "systemctl --user is-active openclaw-gateway", timeout);
+            checks.push({
+                name: "OpenClaw gateway",
+                passed: gateway.ok,
+                detail: gateway.ok ? "running" : gateway.output || "not running",
+            });
+            // Check 3: Workspace files present
+            const workspace = runSshCheck(exec, host, `test -f /home/${core_1.SSH_USER}/.openclaw/workspace/SOUL.md && test -f /home/${core_1.SSH_USER}/.openclaw/workspace/HEARTBEAT.md && echo 'OK'`, timeout);
+            checks.push({
+                name: "Workspace files",
+                passed: workspace.ok,
+                detail: workspace.ok ? "SOUL.md + HEARTBEAT.md present" : "missing files",
+            });
+            // Check 4: Claude Code CLI installed
+            const claudeCode = runSshCheck(exec, host, `/home/${core_1.SSH_USER}/.local/bin/claude --version 2>/dev/null || echo 'not installed'`, timeout);
+            const claudeVersion = claudeCode.output.trim();
+            const claudeInstalled = claudeCode.ok && !claudeVersion.includes("not installed");
+            checks.push({
+                name: "Claude Code CLI",
+                passed: claudeInstalled,
+                detail: claudeInstalled ? claudeVersion : "not installed",
+            });
+            // Check 5: Claude Code auth (API key or OAuth token)
+            if (claudeInstalled) {
+                const credCheck = runSshCheck(exec, host, `grep -E '"(ANTHROPIC_API_KEY|CLAUDE_CODE_OAUTH_TOKEN)"' /home/${core_1.SSH_USER}/.openclaw/openclaw.json | head -1`, timeout);
+                const hasApiKey = credCheck.output.includes("ANTHROPIC_API_KEY");
+                const hasOAuthToken = credCheck.output.includes("CLAUDE_CODE_OAUTH_TOKEN");
+                const credIsConfigured = credCheck.ok && (hasApiKey || hasOAuthToken);
+                const credType = hasOAuthToken ? "OAuth token" : "API key";
+                if (credIsConfigured) {
+                    const envVar = hasOAuthToken ? "CLAUDE_CODE_OAUTH_TOKEN" : "ANTHROPIC_API_KEY";
+                    const testScript = `
+export ${envVar}=$(jq -r '.env.${envVar}' /home/${core_1.SSH_USER}/.openclaw/openclaw.json)
+timeout 15 /home/${core_1.SSH_USER}/.local/bin/claude -p 'hi' 2>&1 | head -5
+          `.trim();
+                    const authTest = runSshCheck(exec, host, testScript, timeout + 15);
+                    const authWorks = authTest.ok &&
+                        !authTest.output.includes("Invalid API key") &&
+                        !authTest.output.includes("not authenticated");
+                    checks.push({
+                        name: "Claude Code auth",
+                        passed: authWorks,
+                        detail: authWorks ? `${credType} verified` : `${credType} test failed: ${authTest.output.substring(0, 50)}`,
+                    });
+                }
+                else {
+                    checks.push({
+                        name: "Claude Code auth",
+                        passed: false,
+                        detail: "No credentials configured",
+                    });
+                }
+            }
+            // Check 6: GitHub CLI installed
+            const ghVersion = runSshCheck(exec, host, `gh --version 2>/dev/null | head -n1 || echo 'not installed'`, timeout);
+            const ghVersionStr = ghVersion.output.trim();
+            const ghInstalled = ghVersion.ok && !ghVersionStr.includes("not installed");
+            checks.push({
+                name: "GitHub CLI",
+                passed: ghInstalled,
+                detail: ghInstalled ? ghVersionStr : "not installed",
+            });
+            // Check 7: GitHub CLI auth status (if installed)
+            if (ghInstalled) {
+                const ghAuth = runSshCheck(exec, host, `gh auth status 2>&1 | head -n2 || echo 'not authenticated'`, timeout);
+                const ghAuthStr = ghAuth.output.trim();
+                const ghAuthenticated = ghAuth.ok &&
+                    !ghAuthStr.includes("not authenticated") &&
+                    !ghAuthStr.includes("not logged");
+                checks.push({
+                    name: "GitHub CLI auth",
+                    passed: ghAuthenticated,
+                    detail: ghAuthenticated ? "authenticated" : "not authenticated (optional)",
+                });
+            }
+        }
+        else {
+            checks.push({ name: "OpenClaw gateway", passed: false, detail: "skipped (no SSH)" });
+            checks.push({ name: "Workspace files", passed: false, detail: "skipped (no SSH)" });
+            checks.push({ name: "Claude Code CLI", passed: false, detail: "skipped (no SSH)" });
+            checks.push({ name: "Claude Code auth", passed: false, detail: "skipped (no SSH)" });
+            checks.push({ name: "GitHub CLI", passed: false, detail: "skipped (no SSH)" });
+            checks.push({ name: "GitHub CLI auth", passed: false, detail: "skipped (no SSH)" });
+        }
+        // Display check results
+        const allPassed = checks.every((c) => c.passed);
+        for (const check of checks) {
+            const icon = check.passed ? picocolors_1.default.green("PASS") : picocolors_1.default.red("FAIL");
+            console.log(`    ${icon}  ${check.name}: ${check.detail ?? ""}`);
+        }
+        console.log();
+        results.push({ agent: agent.displayName, checks, passed: allPassed });
+    }
+    // Summary
+    const passed = results.filter((r) => r.passed).length;
+    const failed = results.filter((r) => !r.passed).length;
+    const summaryLines = [
+        `Total:  ${results.length}`,
+        `Passed: ${passed}`,
+        `Failed: ${failed}`,
+    ];
+    ui.note(summaryLines.join("\n"), "Validation Summary");
+    if (failed > 0) {
+        ui.log.warn("Some agents failed validation.");
+        console.log("  1. Wait 3-5 minutes for cloud-init to complete");
+        const agentHints = results
+            .filter((r) => !r.passed)
+            .map((r) => {
+            const agent = manifest.agents.find((a) => a.displayName === r.agent);
+            return agent ? agent.role : r.agent;
+        });
+        console.log(`  2. Check logs: clawup ssh ${agentHints[0] ?? "<role>"} -- journalctl -u openclaw`);
+        console.log("  3. Verify Tailscale: tailscale status");
+        process.exit(1);
+    }
+    else {
+        ui.log.success("All agents are healthy!");
+    }
+};
+exports.validateTool = validateTool;
+//# sourceMappingURL=validate.js.map

package/dist/tools/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../tools/validate.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;AAGH,0CAAgE;AAChE,uCAA2D;AAC3D,gDAAoE;AACpE,gDAAoD;AACpD,sDAAgD;AAChD,4DAA4B;AAe5B;;GAEG;AACH,MAAM,QAAQ,GAAG;IACf,IAAI,EAAE,0BAA0B;IAChC,IAAI,EAAE,8BAA8B;IACpC,IAAI,EAAE,eAAe;CACtB,CAAC;AAEF;;GAEG;AACH,SAAS,WAAW,CAClB,IAAiB,EACjB,IAAY,EACZ,OAAe,EACf,OAAe;IAEf,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;QACjC,IAAI,EAAE,kBAAkB,OAAO,EAAE;QACjC,GAAG,QAAQ;QACX,GAAG,eAAQ,IAAI,IAAI,EAAE;QACrB,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG;KACpC,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;AAC/E,CAAC;AAED;;GAEG;AACI,MAAM,YAAY,GAAwC,KAAK,EACpE,OAAuB,EACvB,OAAwB,EACxB,EAAE;IACF,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAE7B,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAEvB,IAAA,4BAAgB,GAAE,CAAC;IAEnB,iDAAiD;IACjD,MAAM,QAAQ,GAAG,IAAA,2BAAe,GAAE,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,6BAA6B,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,2BAAe,GAAE,CAAC;IAE9B,wCAAwC;IACxC,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,EAAE,CAAC,GAAG,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,qBAAY,EAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,UAAU,wBAAwB,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,sBAAsB;IACtB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1F,IAAI,YAAY,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;QACtF,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC9B,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,kCAAkC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;YACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,cAAc;IACd,MAAM,cAAc,GAAG,IAAA,wBAAS,EAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,QAAQ,CAAC,MAAM,CAAC,MAAM,qBAAqB,OAAO,OAAO,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,IAAA,wBAAiB,EAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,cAAc,EAAE,CAAC;QAC3C,MAAM,MAAM,GAA0B,EAAE,CAAC;QAEzC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,oBAAE,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC;QAEvE,4BAA4B;QAC5B,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,GAAG,CAAC,EAAE;YACd,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB;SACnD,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,2DAA2D;YAC3D,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,6CAA6C,EAAE,OAAO,CAAC,CAAC;YAChG,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,OAAO,CAAC,EAAE;gBAClB,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,aAAa;aACjE,CAAC,CAAC;YAEH,mCAAmC;YACnC,MAAM,SAAS,GAAG,WAAW,CAC3B,IAAI,EACJ,IAAI,EACJ,iBAAiB,eAAQ,iDAAiD,eAAQ,gDAAgD,EAClI,OAAO,CACR,CAAC;YACF,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,SAAS,CAAC,EAAE;gBACpB,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,eAAe;aAC1E,CAAC,CAAC;YAEH,qCAAqC;YACrC,MAAM,UAAU,GAAG,WAAW,CAC5B,IAAI,EACJ,IAAI,EACJ,SAAS,eAAQ,kEAAkE,EACnF,OAAO,CACR,CAAC;YACF,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC/C,MAAM,eAAe,GAAG,UAAU,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YAClF,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe;aAC1D,CAAC,CAAC;YAEH,qDAAqD;YACrD,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,SAAS,GAAG,WAAW,CAC3B,IAAI,EACJ,IAAI,EACJ,iEAAiE,eAAQ,oCAAoC,EAC7G,OAAO,CACR,CAAC;gBACF,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;gBACjE,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;gBAC3E,MAAM,gBAAgB,GAAG,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,CAAC;gBACtE,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;gBAE3D,IAAI,gBAAgB,EAAE,CAAC;oBACrB,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,mBAAmB,CAAC;oBAC/E,MAAM,UAAU,GAAG;SACpB,MAAM,kBAAkB,MAAM,WAAW,eAAQ;mBACvC,eAAQ;WAChB,CAAC,IAAI,EAAE,CAAC;oBACT,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,GAAG,EAAE,CAAC,CAAC;oBACnE,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE;wBAC3B,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC;wBAC5C,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;oBACjD,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,kBAAkB;wBACxB,MAAM,EAAE,SAAS;wBACjB,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,QAAQ,WAAW,CAAC,CAAC,CAAC,GAAG,QAAQ,iBAAiB,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;qBAC5G,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,kBAAkB;wBACxB,MAAM,EAAE,KAAK;wBACb,MAAM,EAAE,2BAA2B;qBACpC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,gCAAgC;YAChC,MAAM,SAAS,GAAG,WAAW,CAC3B,IAAI,EACJ,IAAI,EACJ,6DAA6D,EAC7D,OAAO,CACR,CAAC;YACF,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAG,SAAS,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe;aACrD,CAAC,CAAC;YAEH,iDAAiD;YACjD,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,WAAW,CACxB,IAAI,EACJ,IAAI,EACJ,4DAA4D,EAC5D,OAAO,CACR,CAAC;gBACF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACvC,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE;oBAC/B,CAAC,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC;oBACxC,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,iBAAiB;oBACvB,MAAM,EAAE,eAAe;oBACvB,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,8BAA8B;iBAC3E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACrF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACpF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACpF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACrF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC/E,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,wBAAwB;QACxB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAChD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,oBAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC9D,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,UAAU;IACV,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAEvD,MAAM,YAAY,GAAG;QACnB,WAAW,OAAO,CAAC,MAAM,EAAE;QAC3B,WAAW,MAAM,EAAE;QACnB,WAAW,MAAM,EAAE;KACpB,CAAC;IAEF,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAEvD,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,OAAO;aACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;aACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACtC,CAAC,CAAC,CAAC;QACL,OAAO,CAAC,GAAG,CAAC,+BAA+B,UAAU,CAAC,CAAC,CAAC,IAAI,QAAQ,4BAA4B,CAAC,CAAC;QAClG,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC,CAAC;AAjOW,QAAA,YAAY,gBAiOvB"}

package/dist/tools/webhooks.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Webhooks Setup Tool — Configure Linear webhooks for deployed agents
+ *
+ * Collects signing secrets, stores them in Pulumi config for persistence,
+ * then applies them live via SSH (no redeploy needed).
+ *
+ * Platform-agnostic implementation using RuntimeAdapter.
+ */
+import type { ToolImplementation } from "../adapters";
+export interface WebhooksSetupOptions {
+    /** Config name (auto-detected if only one) */
+    config?: string;
+}
+/**
+ * Webhooks setup tool implementation
+ */
+export declare const webhooksSetupTool: ToolImplementation<WebhooksSetupOptions>;

package/dist/tools/webhooks.js

@@ -0,0 +1,181 @@
+"use strict";
+/**
+ * Webhooks Setup Tool — Configure Linear webhooks for deployed agents
+ *
+ * Collects signing secrets, stores them in Pulumi config for persistence,
+ * then applies them live via SSH (no redeploy needed).
+ *
+ * Platform-agnostic implementation using RuntimeAdapter.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.webhooksSetupTool = void 0;
+const config_1 = require("../lib/config");
+const core_1 = require("@clawup/core");
+const workspace_1 = require("../lib/workspace");
+const tool_helpers_1 = require("../lib/tool-helpers");
+const picocolors_1 = __importDefault(require("picocolors"));
+/** SSH options for non-interactive connections */
+const SSH_OPTS = [
+    "-o", "StrictHostKeyChecking=no",
+    "-o", "UserKnownHostsFile=/dev/null",
+    "-o", "BatchMode=yes",
+];
+/**
+ * Run a command over SSH
+ */
+function sshExec(exec, host, command) {
+    const result = exec.capture("ssh", [
+        "-o", "ConnectTimeout=15",
+        ...SSH_OPTS,
+        `${core_1.SSH_USER}@${host}`,
+        `"${command.replace(/"/g, '\\"')}"`,
+    ]);
+    return { ok: result.exitCode === 0, output: result.stdout || result.stderr };
+}
+/**
+ * Webhooks setup tool implementation
+ */
+const webhooksSetupTool = async (runtime, options) => {
+    const { ui, exec } = runtime;
+    ui.intro("Agent Army — Webhook Setup");
+    // Ensure workspace is set up
+    const wsResult = (0, workspace_1.ensureWorkspace)();
+    if (!wsResult.ok) {
+        ui.log.error(wsResult.error ?? "Failed to set up workspace.");
+        process.exit(1);
+    }
+    const cwd = (0, workspace_1.getWorkspaceDir)();
+    // Resolve config name and load manifest
+    let configName;
+    try {
+        configName = (0, config_1.resolveConfigName)(options.config);
+    }
+    catch (err) {
+        ui.log.error(err.message);
+        process.exit(1);
+    }
+    const manifest = (0, config_1.loadManifest)(configName);
+    if (!manifest) {
+        ui.log.error(`Config '${configName}' could not be loaded.`);
+        process.exit(1);
+    }
+    // Select stack
+    const selectResult = exec.capture("pulumi", ["stack", "select", manifest.stackName], cwd);
+    if (selectResult.exitCode !== 0) {
+        ui.log.error(`Could not select Pulumi stack "${manifest.stackName}". Run ${picocolors_1.default.cyan("clawup deploy")} first.`);
+        process.exit(1);
+    }
+    // Get stack outputs
+    const outputs = (0, tool_helpers_1.getStackOutputs)(exec, true, cwd);
+    if (!outputs) {
+        ui.log.error(`Could not fetch stack outputs. Run ${picocolors_1.default.cyan("clawup deploy")} first.`);
+        process.exit(1);
+    }
+    // Get tailnet DNS name for SSH
+    const tailnetDnsName = (0, tool_helpers_1.getConfig)(exec, "tailnetDnsName", cwd);
+    if (!tailnetDnsName) {
+        ui.log.error("Could not read tailnetDnsName from Pulumi config.");
+        process.exit(1);
+    }
+    // Check if any webhook URLs exist
+    const agentsWithUrls = manifest.agents.filter((agent) => outputs[`${agent.role}WebhookUrl`]);
+    if (agentsWithUrls.length === 0) {
+        ui.log.error("No webhook URLs found in stack outputs.\n" +
+            `  Make sure agents are deployed and exposing webhook endpoints.\n` +
+            `  Run ${picocolors_1.default.cyan("clawup deploy")} if you haven't already.`);
+        process.exit(1);
+    }
+    ui.note([
+        "This will walk you through creating Linear webhooks for each agent.",
+        "You'll need access to your Linear workspace settings.",
+    ].join("\n"), "Linear Webhook Setup");
+    // Collect webhook secrets for each agent
+    const secrets = [];
+    for (const agent of manifest.agents) {
+        const webhookUrl = outputs[`${agent.role}WebhookUrl`];
+        if (!webhookUrl) {
+            ui.log.warn(`No webhook URL found for ${agent.displayName} (${agent.role}) — skipping.`);
+            continue;
+        }
+        ui.note([
+            `Webhook URL: ${picocolors_1.default.cyan(String(webhookUrl))}`,
+            "",
+            "Steps:",
+            "1. Go to Linear Settings → API → Webhooks → \"New webhook\"",
+            "2. Paste the URL above",
+            "3. Select events to receive (e.g., Issues, Comments)",
+            "4. Create the webhook and copy the \"Signing secret\"",
+        ].join("\n"), `${agent.displayName} (${agent.role})`);
+        const secret = await ui.text({
+            message: `Signing secret for ${agent.displayName}`,
+            placeholder: "Paste the signing secret from Linear",
+            validate: (val) => {
+                if (!val)
+                    return "Signing secret is required";
+            },
+        });
+        secrets.push({
+            role: agent.role,
+            name: agent.name,
+            agentName: agent.displayName,
+            secret: secret,
+        });
+    }
+    if (secrets.length === 0) {
+        ui.log.warn("No webhook secrets collected.");
+        ui.outro("Nothing to do.");
+        return;
+    }
+    // Store secrets in Pulumi config (for persistence across deploys)
+    const configSpinner = ui.spinner("Saving webhook secrets to Pulumi config...");
+    for (const { role, secret } of secrets) {
+        exec.capture("pulumi", ["config", "set", `${role}LinearWebhookSecret`, secret, "--secret"], cwd);
+    }
+    configSpinner.stop(`Saved ${secrets.length} webhook secret(s) to Pulumi config`);
+    // Apply secrets live via SSH
+    const applySpinner = ui.spinner("Applying webhook secrets to running agents...");
+    let applied = 0;
+    let failed = 0;
+    for (const { role, name, agentName, secret } of secrets) {
+        const tsHost = (0, core_1.tailscaleHostname)(manifest.stackName, name);
+        const host = `${tsHost}.${tailnetDnsName}`;
+        // Escape the secret for use inside jq
+        const escapedSecret = secret.replace(/'/g, "'\\''");
+        const jqCmd = `jq '.plugins.entries.linear.config.webhookSecret = \\\"${escapedSecret.replace(/\\/g, "\\\\").replace(/"/g, '\\\\\\"')}\\\"' ` +
+            `/home/${core_1.SSH_USER}/.openclaw/openclaw.json > /tmp/openclaw-patched.json && ` +
+            `mv /tmp/openclaw-patched.json /home/${core_1.SSH_USER}/.openclaw/openclaw.json`;
+        const patchResult = sshExec(exec, host, jqCmd);
+        if (!patchResult.ok) {
+            applySpinner.stop(`Failed to patch config on ${agentName}`);
+            ui.log.warn(`  ${agentName}: ${patchResult.output}`);
+            failed++;
+            continue;
+        }
+        const restartResult = sshExec(exec, host, "systemctl --user restart openclaw-gateway");
+        if (!restartResult.ok) {
+            applySpinner.stop(`Failed to restart gateway on ${agentName}`);
+            ui.log.warn(`  ${agentName}: ${restartResult.output}`);
+            failed++;
+            continue;
+        }
+        applied++;
+    }
+    if (applied > 0 && failed === 0) {
+        applySpinner.stop(`Applied to ${applied} agent(s)`);
+    }
+    else if (applied > 0) {
+        applySpinner.stop(`Applied to ${applied} agent(s), ${failed} failed`);
+    }
+    else {
+        applySpinner.stop(`Failed to apply to any agents`);
+    }
+    if (failed > 0) {
+        ui.log.warn(`Some agents could not be reached. They will pick up the secrets on next deploy.`);
+    }
+    ui.outro("Webhook setup complete!");
+};
+exports.webhooksSetupTool = webhooksSetupTool;
+//# sourceMappingURL=webhooks.js.map