Generate Deploy Plan
clawops_planGenerate a deploy plan as reviewable JSON to preview infrastructure changes before applying. Approve what would be created before committing to deployment.
Instructions
Generate a Maker deploy plan (does NOT apply). Plan is JSON conforming to deploy-plan.schema.json — review before applying.
Use when: the user wants to see what would be created before committing, or you (the agent) need a reviewable artifact for the user to approve.
Do NOT use when: the user has explicitly asked to deploy and you already have their approval — go directly to clawops_up.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| region | No | Cloud region, in the provider's own spelling (us-east-1, us-central1, eastus). Omitted = the region recorded for the stack | |
| outPath | No | Absolute path to write plan; if omitted, plan returned inline | |
| sshCidr | No | CIDR(s) allowed to reach SSH, comma-separated, or 'auto' for this machine. Omitted = none, and nothing will be able to connect | |
| provider | No | Cloud to plan against. Omitted = the provider recorded for the stack. 'local' has no plan/apply path and is refused | |
| stackName | No | Which stack the plan is for. Omitted = the default stack in ~/.clawops/config.json | |
| gatewayCidr | No | CIDR(s) allowed to reach the gateway port, or 'auto'. Requires publishGateway=all | |
| privateOnly | No | Close public SSH and gateway access; reach the stack over its tailnet. Requires a verified tailnet address (clawops_harden with tailscale), and refuses unless that address answers SSH now | |
| instanceType | No | A clawops alias (micro|small|medium|large|gpu) or a machine type the cloud names itself, e.g. t3.small | |
| publishGateway | No | Which interface the gateway binds. loopback (default) keeps it off the network | |
| openclawVersion | No | semver, or 'stable'/'dev' |