Use this procedure for low-risk production upgrades.
- Record current binary version:
claw --version- Create and verify backup:
claw admin backup create
claw admin backup verify- Save current backup id from command output.
- Stop daemon (service manager preferred).
- Install new
clawbinary. - Preview config migration if needed:
claw admin migrate plan- Apply migration:
claw admin migrate apply- Run preflight and restart daemon:
claw admin preflight
claw daemon --listen 0.0.0.0:50051 --auth-profile default- Run smoke checks from a client repo:
claw sync pull --remote origin --ref-name heads/main
claw sync push --remote origin --ref-name heads/main- Daemon fails to start after upgrade.
- Client sync fails due to protocol/runtime regression.
- Unexpected integrity or ref update errors.
- Stop daemon.
- Reinstall previous binary version.
- Validate rollback plan:
claw admin rollback plan --backup-id <backup-id>- Execute rollback:
claw admin rollback execute --backup-id <backup-id>- Verify and restart:
claw admin backup verify --backup-id <backup-id>
claw admin preflight- Restart daemon and re-run smoke checks.
- Backups cover repository metadata under
.claw/. - Keep at least one known-good binary artifact and one recent verified backup per environment.
- Every
migrate apply,backup create, androllback executewrites an entry to.claw/migrations/ledger.jsonl.