Summary

• add provider-native checkpoint/image support for AWS, Azure, and GCP brokered Linux leases
• support disk-snapshot and full-image strategies, native checkpoint fork/delete, and provider-aware image delete routes
• document checkpoint/image behavior, update changelog/source map, and enable Worker preview URL config
• add Go and Worker regression coverage for checkpoint routing, AWS images, Azure snapshots/images, and GCP snapshots/machine images

Validation

• go test ./...
• npm test --prefix worker -- --run fleet.test.ts gcp.test.ts azure.test.ts aws.test.ts
• npm run docs:check
• live AWS E2E: created native AMI checkpoint chk_dd7d0c5a4a3f861d, forked lease cbx_8caff7811d52, verified /opt/crabbox-checkpoint-e2e-marker survived, released source/fork leases, removed AMI ami-02988e7af6fd5998b and matching snapshots

Notes

Azure/GCP live E2E is blocked by environment credentials, not local tests: the deployed Worker is missing Azure/GCP provider secrets, the Google services@openclaw.org login has no visible GCP project access, and the available Azure login hits a disabled guest user in an old tenant. AWS live cleanup also exposed an IAM policy gap: the coordinator can create AMIs but needs ec2:DeregisterImage and snapshot delete permission for native checkpoint deletion through the Worker route.