diff --git a/digitalocean/aider.sh b/digitalocean/aider.sh
index 9c70d025..ba1d6282 100755
--- a/digitalocean/aider.sh
+++ b/digitalocean/aider.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 # Source common functions - try local file first, fall back to remote
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
diff --git a/digitalocean/claude.sh b/digitalocean/claude.sh
index 93e5366a..6c44eee4 100755
--- a/digitalocean/claude.sh
+++ b/digitalocean/claude.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 # Source common functions - try local file first, fall back to remote
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
diff --git a/digitalocean/codex.sh b/digitalocean/codex.sh
index 2046a8a1..36130b93 100755
--- a/digitalocean/codex.sh
+++ b/digitalocean/codex.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
diff --git a/digitalocean/goose.sh b/digitalocean/goose.sh
index 8bcbb4ed..2a36bd68 100755
--- a/digitalocean/goose.sh
+++ b/digitalocean/goose.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 # Source common functions - try local file first, fall back to remote
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
diff --git a/digitalocean/interpreter.sh b/digitalocean/interpreter.sh
index 8ff7f155..e32b67ff 100755
--- a/digitalocean/interpreter.sh
+++ b/digitalocean/interpreter.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
diff --git a/digitalocean/nanoclaw.sh b/digitalocean/nanoclaw.sh
index 55a394d8..2e31720a 100755
--- a/digitalocean/nanoclaw.sh
+++ b/digitalocean/nanoclaw.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 # Source common functions - try local file first, fall back to remote
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
diff --git a/digitalocean/openclaw.sh b/digitalocean/openclaw.sh
index e0a5ed2b..c35cde72 100755
--- a/digitalocean/openclaw.sh
+++ b/digitalocean/openclaw.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 # Source common functions - try local file first, fall back to remote
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
diff --git a/hetzner/aider.sh b/hetzner/aider.sh
index c18940d5..f90b612c 100755
--- a/hetzner/aider.sh
+++ b/hetzner/aider.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 # Source common functions - try local file first, fall back to remote
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
diff --git a/hetzner/claude.sh b/hetzner/claude.sh
index 0cefd668..dc65c47c 100755
--- a/hetzner/claude.sh
+++ b/hetzner/claude.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 # Source common functions - try local file first, fall back to remote
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
diff --git a/hetzner/codex.sh b/hetzner/codex.sh
index 489cc295..6a0172b8 100755
--- a/hetzner/codex.sh
+++ b/hetzner/codex.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
diff --git a/hetzner/goose.sh b/hetzner/goose.sh
index 6f6692d6..58fd230a 100755
--- a/hetzner/goose.sh
+++ b/hetzner/goose.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 # Source common functions - try local file first, fall back to remote
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
diff --git a/hetzner/interpreter.sh b/hetzner/interpreter.sh
index ececb6d1..9b1349f5 100755
--- a/hetzner/interpreter.sh
+++ b/hetzner/interpreter.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
diff --git a/hetzner/nanoclaw.sh b/hetzner/nanoclaw.sh
index cf7ebce7..22451cda 100755
--- a/hetzner/nanoclaw.sh
+++ b/hetzner/nanoclaw.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 # Source common functions - try local file first, fall back to remote
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
diff --git a/hetzner/openclaw.sh b/hetzner/openclaw.sh
index 90c2ee5d..76971c33 100755
--- a/hetzner/openclaw.sh
+++ b/hetzner/openclaw.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 # Source common functions - try local file first, fall back to remote
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
diff --git a/linode/aider.sh b/linode/aider.sh
index ba874f33..46466ea6 100755
--- a/linode/aider.sh
+++ b/linode/aider.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then source "$SCRIPT_DIR/lib/common.sh"
 else source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/linode/lib/common.sh); fi
diff --git a/linode/claude.sh b/linode/claude.sh
index 4af9e459..a27a87d0 100755
--- a/linode/claude.sh
+++ b/linode/claude.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then source "$SCRIPT_DIR/lib/common.sh"
 else source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/linode/lib/common.sh); fi
diff --git a/linode/codex.sh b/linode/codex.sh
index 29cdf5b4..de5338ca 100755
--- a/linode/codex.sh
+++ b/linode/codex.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then source "$SCRIPT_DIR/lib/common.sh"
 else source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/linode/lib/common.sh); fi
diff --git a/linode/goose.sh b/linode/goose.sh
index c50ac277..bbdc0023 100755
--- a/linode/goose.sh
+++ b/linode/goose.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then source "$SCRIPT_DIR/lib/common.sh"
 else source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/linode/lib/common.sh); fi
diff --git a/linode/interpreter.sh b/linode/interpreter.sh
index 83f09550..1e0de287 100755
--- a/linode/interpreter.sh
+++ b/linode/interpreter.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then source "$SCRIPT_DIR/lib/common.sh"
 else source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/linode/lib/common.sh); fi
diff --git a/linode/nanoclaw.sh b/linode/nanoclaw.sh
index 6ac90df7..1af98982 100755
--- a/linode/nanoclaw.sh
+++ b/linode/nanoclaw.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then source "$SCRIPT_DIR/lib/common.sh"
 else source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/linode/lib/common.sh); fi
diff --git a/linode/openclaw.sh b/linode/openclaw.sh
index c92b683e..85d0e655 100755
--- a/linode/openclaw.sh
+++ b/linode/openclaw.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then source "$SCRIPT_DIR/lib/common.sh"
 else source <(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/linode/lib/common.sh); fi
diff --git a/sprite/aider.sh b/sprite/aider.sh
index ac87c15c..08baf31c 100755
--- a/sprite/aider.sh
+++ b/sprite/aider.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 # Source common functions - try local file first, fall back to remote
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
diff --git a/sprite/claude.sh b/sprite/claude.sh
index 6e5025a3..784cd900 100755
--- a/sprite/claude.sh
+++ b/sprite/claude.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 # Source common functions - try local file first, fall back to remote
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
diff --git a/sprite/codex.sh b/sprite/codex.sh
index caf6d952..b9d24bda 100755
--- a/sprite/codex.sh
+++ b/sprite/codex.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
diff --git a/sprite/goose.sh b/sprite/goose.sh
index f5f54a6d..2dcb5159 100755
--- a/sprite/goose.sh
+++ b/sprite/goose.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 # Source common functions - try local file first, fall back to remote
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
diff --git a/sprite/interpreter.sh b/sprite/interpreter.sh
index 45473ad0..c76f0fd5 100755
--- a/sprite/interpreter.sh
+++ b/sprite/interpreter.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
diff --git a/sprite/nanoclaw.sh b/sprite/nanoclaw.sh
index f579368a..95174f33 100644
--- a/sprite/nanoclaw.sh
+++ b/sprite/nanoclaw.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 # Source common functions - try local file first, fall back to remote
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
diff --git a/sprite/openclaw.sh b/sprite/openclaw.sh
index 09876bbf..b327559b 100755
--- a/sprite/openclaw.sh
+++ b/sprite/openclaw.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 # Source common functions - try local file first, fall back to remote
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
diff --git a/vultr/aider.sh b/vultr/aider.sh
index 7a2f2c57..a286e298 100755
--- a/vultr/aider.sh
+++ b/vultr/aider.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
diff --git a/vultr/claude.sh b/vultr/claude.sh
index 5b1622a5..fb2ec673 100755
--- a/vultr/claude.sh
+++ b/vultr/claude.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
diff --git a/vultr/codex.sh b/vultr/codex.sh
index fe792d61..b444c3c5 100755
--- a/vultr/codex.sh
+++ b/vultr/codex.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
diff --git a/vultr/goose.sh b/vultr/goose.sh
index 7d31e7b6..c08aef71 100755
--- a/vultr/goose.sh
+++ b/vultr/goose.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
diff --git a/vultr/interpreter.sh b/vultr/interpreter.sh
index 8dc97710..0dbd7453 100755
--- a/vultr/interpreter.sh
+++ b/vultr/interpreter.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
diff --git a/vultr/nanoclaw.sh b/vultr/nanoclaw.sh
index 94accbf1..228535c9 100755
--- a/vultr/nanoclaw.sh
+++ b/vultr/nanoclaw.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
diff --git a/vultr/openclaw.sh b/vultr/openclaw.sh
index 4ccf4be8..0147bbe7 100755
--- a/vultr/openclaw.sh
+++ b/vultr/openclaw.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
 if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then