@better-openclaw/core 1.0.0

package/dist/generators/bare-metal-install.js

@@ -0,0 +1,228 @@
+const LINUX_SCRIPT_PREFIX_NATIVE = `
+# Native services (install/start on host first)
+if [ -f "native/install-linux.sh" ]; then
+  info "Installing and starting native services..."
+  bash native/install-linux.sh
+  ok "Native services ready."
+fi
+`;
+const LINUX_SCRIPT = `#!/usr/bin/env bash
+set -euo pipefail
+
+# OpenClaw bare-metal installer (Linux)
+# Optionally runs native services script, then Docker + Compose.
+# Idempotent: safe to re-run.
+
+SCRIPT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")" && pwd)"
+cd "$SCRIPT_DIR"
+
+if [ -t 1 ]; then
+  RED='\\033[0;31m'; GREEN='\\033[0;32m'; YELLOW='\\033[1;33m'; CYAN='\\033[0;36m'; NC='\\033[0m'
+else
+  RED=''; GREEN=''; YELLOW=''; CYAN=''; NC=''
+fi
+info()  { echo -e "\${CYAN}ℹ  $*\${NC}"; }
+ok()    { echo -e "\${GREEN}✅ $*\${NC}"; }
+warn()  { echo -e "\${YELLOW}⚠️  $*\${NC}"; }
+err()   { echo -e "\${RED}❌ $*\${NC}" >&2; }
+__NATIVE_BLOCK__
+# Install Docker if missing
+if ! command -v docker &> /dev/null; then
+  info "Installing Docker..."
+  if command -v apt-get &> /dev/null; then
+    sudo apt-get update -qq
+    sudo apt-get install -y -qq ca-certificates curl
+    curl -fsSL https://get.docker.com | sudo sh
+    sudo usermod -aG docker "$USER" 2>/dev/null || true
+    ok "Docker installed. You may need to log out and back in for group changes."
+  elif command -v dnf &> /dev/null || command -v yum &> /dev/null; then
+    sudo dnf install -y dnf-plugins-core 2>/dev/null || sudo yum install -y yum-utils
+    sudo dnf config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo 2>/dev/null || sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
+    sudo dnf install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin 2>/dev/null || sudo yum install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
+    sudo systemctl enable --now docker
+    sudo usermod -aG docker "$USER" 2>/dev/null || true
+    ok "Docker installed."
+  else
+    err "Unsupported package manager. Install Docker manually: https://docs.docker.com/engine/install/"
+    exit 1
+  fi
+else
+  ok "Docker already installed."
+fi
+
+if ! docker compose version &> /dev/null; then
+  err "Docker Compose (v2) plugin not found. Install it: https://docs.docker.com/compose/install/"
+  exit 1
+fi
+
+if ! docker info &> /dev/null 2>&1; then
+  err "Docker daemon not running. Start it (e.g. sudo systemctl start docker) and re-run this script."
+  exit 1
+fi
+
+# Use project start script if present, else docker compose up
+if [ -f "scripts/start.sh" ]; then
+  info "Starting stack via scripts/start.sh..."
+  bash scripts/start.sh
+else
+  if [ -f ".env.example" ] && [ ! -f ".env" ]; then cp .env.example .env; fi
+  info "Starting stack..."
+  docker compose up -d --remove-orphans
+  echo ""
+  ok "Stack started. Gateway: http://localhost:\${OPENCLAW_GATEWAY_PORT:-18789}"
+fi
+`;
+const MACOS_SCRIPT_PREFIX_NATIVE = `
+if [ -f "native/install-macos.sh" ]; then
+  info "Installing and starting native services..."
+  bash native/install-macos.sh
+  ok "Native services ready."
+fi
+`;
+const MACOS_SCRIPT = `#!/usr/bin/env bash
+set -euo pipefail
+
+# OpenClaw bare-metal installer (macOS)
+# Optionally runs native services, then Docker Desktop + compose.
+# Idempotent: safe to re-run.
+
+SCRIPT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")" && pwd)"
+cd "$SCRIPT_DIR"
+
+if [ -t 1 ]; then
+  RED='\\033[0;31m'; GREEN='\\033[0;32m'; YELLOW='\\033[1;33m'; CYAN='\\033[0;36m'; NC='\\033[0m'
+else
+  RED=''; GREEN=''; YELLOW=''; CYAN=''; NC=''
+fi
+info()  { echo -e "\${CYAN}ℹ  $*\${NC}"; }
+ok()    { echo -e "\${GREEN}✅ $*\${NC}"; }
+warn()  { echo -e "\${YELLOW}⚠️  $*\${NC}"; }
+err()   { echo -e "\${RED}❌ $*\${NC}" >&2; }
+__NATIVE_BLOCK__
+if ! command -v docker &> /dev/null; then
+  if command -v brew &> /dev/null; then
+    info "Installing Docker via Homebrew..."
+    brew install --cask docker
+    warn "Docker Desktop was installed. Please open Docker from Applications, then re-run this script."
+    exit 0
+  else
+    err "Docker not found. Install Docker Desktop from https://docs.docker.com/desktop/install/mac-install/ or run: brew install --cask docker"
+    exit 1
+  fi
+fi
+
+if ! docker info &> /dev/null 2>&1; then
+  err "Docker daemon not running. Open Docker Desktop from Applications, then re-run this script."
+  exit 1
+fi
+
+if ! docker compose version &> /dev/null; then
+  err "Docker Compose (v2) not available. Ensure Docker Desktop is up to date."
+  exit 1
+fi
+
+if [ -f "scripts/start.sh" ]; then
+  info "Starting stack via scripts/start.sh..."
+  bash scripts/start.sh
+else
+  if [ -f ".env.example" ] && [ ! -f ".env" ]; then cp .env.example .env; fi
+  info "Starting stack..."
+  docker compose up -d --remove-orphans
+  echo ""
+  ok "Stack started. Gateway: http://localhost:\${OPENCLAW_GATEWAY_PORT:-18789}"
+fi
+`;
+const WINDOWS_SCRIPT_PREFIX_NATIVE = `
+if (Test-Path "native/install-windows.ps1") {
+  Info "Installing and starting native services..."
+  & .\\native\\install-windows.ps1
+  Ok "Native services ready."
+}
+`;
+const WINDOWS_SCRIPT = `# OpenClaw bare-metal installer (Windows PowerShell)
+# Optionally runs native services, then Docker Desktop + compose.
+# Idempotent: safe to re-run. Run in PowerShell as Administrator if installing Docker.
+
+$ErrorActionPreference = "Stop"
+$ProjectDir = $PSScriptRoot
+Set-Location $ProjectDir
+
+function Info { Write-Host "  $args" -ForegroundColor Cyan }
+function Ok   { Write-Host "  $args" -ForegroundColor Green }
+function Warn { Write-Host "  $args" -ForegroundColor Yellow }
+function Err  { Write-Host "  $args" -ForegroundColor Red; exit 1 }
+__NATIVE_BLOCK__
+# Check Docker
+$docker = Get-Command docker -ErrorAction SilentlyContinue
+if (-not $docker) {
+  Write-Host ""
+  Write-Host "  Docker not found." -ForegroundColor Red
+  Write-Host "  Install Docker Desktop from: https://docs.docker.com/desktop/install/windows-install/"
+  Write-Host "  Then restart PowerShell and run this script again."
+  exit 1
+}
+
+try { docker info 2>$null | Out-Null } catch {
+  Write-Host ""
+  Write-Host "  Docker daemon is not running." -ForegroundColor Red
+  Write-Host "  Start Docker Desktop from the Start menu, then run this script again."
+  exit 1
+}
+
+try { docker compose version 2>$null | Out-Null } catch {
+  Write-Host ""
+  Write-Host "  Docker Compose (v2) not available. Update Docker Desktop." -ForegroundColor Red
+  exit 1
+}
+
+Ok "Docker is ready."
+
+# Prepare .env
+if (-not (Test-Path ".env")) {
+  if (Test-Path ".env.example") {
+    Copy-Item ".env.example" ".env"
+    Info "Created .env from .env.example"
+  }
+}
+
+# Create dirs
+$configDir = if ($env:OPENCLAW_CONFIG_DIR) { $env:OPENCLAW_CONFIG_DIR } else { "./openclaw/config" }
+$workspaceDir = if ($env:OPENCLAW_WORKSPACE_DIR) { $env:OPENCLAW_WORKSPACE_DIR } else { "./openclaw/workspace" }
+New-Item -ItemType Directory -Force -Path $configDir | Out-Null
+New-Item -ItemType Directory -Force -Path $workspaceDir | Out-Null
+Ok "Directories ready."
+
+# Start stack
+Info "Starting stack..."
+docker compose up -d --remove-orphans
+
+$port = if ($env:OPENCLAW_GATEWAY_PORT) { $env:OPENCLAW_GATEWAY_PORT } else { "18789" }
+Write-Host ""
+Ok "Stack started. Gateway: http://localhost:$port"
+`;
+/**
+ * Returns one file: install.sh (Linux/macOS) or install.ps1 (Windows).
+ * When hasNativeServices is true, the script runs the native installer first, then Docker + compose.
+ */
+export function generateBareMetalInstall(options) {
+    const { platform, hasNativeServices } = options;
+    const files = {};
+    if (platform === "windows/amd64") {
+        const script = hasNativeServices
+            ? WINDOWS_SCRIPT.replace("__NATIVE_BLOCK__", WINDOWS_SCRIPT_PREFIX_NATIVE)
+            : WINDOWS_SCRIPT.replace("__NATIVE_BLOCK__", "");
+        files["install.ps1"] = script;
+        return files;
+    }
+    const isMac = platform.startsWith("macos/");
+    const baseScript = isMac ? MACOS_SCRIPT : LINUX_SCRIPT;
+    const prefix = hasNativeServices
+        ? isMac
+            ? MACOS_SCRIPT_PREFIX_NATIVE
+            : LINUX_SCRIPT_PREFIX_NATIVE
+        : "";
+    const script = baseScript.replace("__NATIVE_BLOCK__", prefix);
+    files["install.sh"] = script;
+    return files;
+}
+//# sourceMappingURL=bare-metal-install.js.map

package/dist/generators/bare-metal-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bare-metal-install.js","sourceRoot":"","sources":["../../src/generators/bare-metal-install.ts"],"names":[],"mappings":"AAOA,MAAM,0BAA0B,GAAG;;;;;;;CAOlC,CAAC;AAEF,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiEpB,CAAC;AAEF,MAAM,0BAA0B,GAAG;;;;;;CAMlC,CAAC;AAEF,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoDpB,CAAC;AAEF,MAAM,4BAA4B,GAAG;;;;;;CAMpC,CAAC;AAEF,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4DtB,CAAC;AASF;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAgC;IACxE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC;IAChD,MAAM,KAAK,GAA2B,EAAE,CAAC;IAEzC,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,iBAAiB;YAC/B,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;YAC1E,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAClD,KAAK,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC;QAC9B,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC;IACvD,MAAM,MAAM,GAAG,iBAAiB;QAC/B,CAAC,CAAC,KAAK;YACN,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,0BAA0B;QAC7B,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC9D,KAAK,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC;IAC7B,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/generators/caddy.d.ts

@@ -0,0 +1,13 @@
+import type { ResolverOutput } from "../types.js";
+/**
+ * Generates a Caddyfile with reverse proxy entries for each exposed service.
+ *
+ * Each service with exposed ports gets a subdomain route under the provided domain.
+ * Services without exposed ports are skipped.
+ *
+ * @param resolved - The resolved service configuration
+ * @param domain - The main domain for routing (e.g. "example.com")
+ * @returns The Caddyfile content as a string
+ */
+export declare function generateCaddyfile(resolved: ResolverOutput, domain: string): string;
+//# sourceMappingURL=caddy.d.ts.map

package/dist/generators/caddy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caddy.d.ts","sourceRoot":"","sources":["../../src/generators/caddy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAsFlF"}

package/dist/generators/caddy.js

@@ -0,0 +1,85 @@
+/**
+ * Generates a Caddyfile with reverse proxy entries for each exposed service.
+ *
+ * Each service with exposed ports gets a subdomain route under the provided domain.
+ * Services without exposed ports are skipped.
+ *
+ * @param resolved - The resolved service configuration
+ * @param domain - The main domain for routing (e.g. "example.com")
+ * @returns The Caddyfile content as a string
+ */
+export function generateCaddyfile(resolved, domain) {
+    const sections = [];
+    // ── Global Options ──────────────────────────────────────────────────────
+    sections.push(`# ═══════════════════════════════════════════════════════════════════════════════
+# OpenClaw Caddyfile — Auto-generated reverse proxy configuration
+# Domain: ${domain}
+# ═══════════════════════════════════════════════════════════════════════════════
+
+{
+	# Global options
+	email admin@${domain}
+	acme_ca https://acme-v02.api.letsencrypt.org/directory
+}
+`);
+    // ── Per-Service Reverse Proxy Blocks ─────────────────────────────────────
+    for (const { definition } of resolved.services) {
+        // Skip the proxy service itself
+        if (definition.id === "caddy" || definition.id === "traefik")
+            continue;
+        const exposedPorts = definition.ports.filter((p) => p.exposed);
+        if (exposedPorts.length === 0)
+            continue;
+        // Use the first exposed port as the primary route target
+        const primaryPort = exposedPorts[0];
+        const subdomain = `${definition.id}.${domain}`;
+        const block = [
+            `# ${definition.icon} ${definition.name}`,
+            `# ${definition.description}`,
+            `${subdomain} {`,
+            `	reverse_proxy ${definition.id}:${primaryPort.container} {`,
+            `		header_up Host {host}`,
+            `		header_up X-Real-IP {remote_host}`,
+            `		header_up X-Forwarded-For {remote_host}`,
+            `		header_up X-Forwarded-Proto {scheme}`,
+            `	}`,
+        ];
+        // Add health check if service has one
+        if (definition.healthcheck) {
+            block.push("");
+            block.push(`	# Health check`);
+            block.push(`	handle /health {`);
+            block.push(`		reverse_proxy ${definition.id}:${primaryPort.container}`);
+            block.push(`	}`);
+        }
+        block.push(`}`);
+        block.push("");
+        // If there are additional exposed ports, add them as separate entries
+        for (let i = 1; i < exposedPorts.length; i++) {
+            const port = exposedPorts[i];
+            const portSubdomain = `${definition.id}-${port.description
+                .toLowerCase()
+                .replace(/[^a-z0-9]+/g, "-")
+                .replace(/-+$/, "")}.${domain}`;
+            block.push(`# ${definition.name} — ${port.description}`);
+            block.push(`${portSubdomain} {`);
+            block.push(`	reverse_proxy ${definition.id}:${port.container}`);
+            block.push(`}`);
+            block.push("");
+        }
+        sections.push(block.join("\n"));
+    }
+    // ── Fallback / Root Domain ──────────────────────────────────────────────
+    sections.push(`# Root domain — serves the OpenClaw gateway
+${domain} {
+	reverse_proxy openclaw:18789 {
+		header_up Host {host}
+		header_up X-Real-IP {remote_host}
+		header_up X-Forwarded-For {remote_host}
+		header_up X-Forwarded-Proto {scheme}
+	}
+}
+`);
+    return sections.join("\n");
+}
+//# sourceMappingURL=caddy.js.map

package/dist/generators/caddy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caddy.js","sourceRoot":"","sources":["../../src/generators/caddy.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAwB,EAAE,MAAc;IACzE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,2EAA2E;IAE3E,QAAQ,CAAC,IAAI,CAAC;;YAEH,MAAM;;;;;eAKH,MAAM;;;CAGpB,CAAC,CAAC;IAEF,4EAA4E;IAE5E,KAAK,MAAM,EAAE,UAAU,EAAE,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAChD,gCAAgC;QAChC,IAAI,UAAU,CAAC,EAAE,KAAK,OAAO,IAAI,UAAU,CAAC,EAAE,KAAK,SAAS;YAAE,SAAS;QAEvE,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAExC,yDAAyD;QACzD,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC;QACrC,MAAM,SAAS,GAAG,GAAG,UAAU,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;QAE/C,MAAM,KAAK,GAAG;YACb,KAAK,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE;YACzC,KAAK,UAAU,CAAC,WAAW,EAAE;YAC7B,GAAG,SAAS,IAAI;YAChB,kBAAkB,UAAU,CAAC,EAAE,IAAI,WAAW,CAAC,SAAS,IAAI;YAC5D,yBAAyB;YACzB,qCAAqC;YACrC,2CAA2C;YAC3C,wCAAwC;YACxC,IAAI;SACJ,CAAC;QAEF,sCAAsC;QACtC,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,EAAE,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC;YACxE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,sEAAsE;QACtE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC;YAC9B,MAAM,aAAa,GAAG,GAAG,UAAU,CAAC,EAAE,IAAI,IAAI,CAAC,WAAW;iBACxD,WAAW,EAAE;iBACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;iBAC3B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;YAEjC,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,IAAI,CAAC,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,kBAAkB,UAAU,CAAC,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,2EAA2E;IAE3E,QAAQ,CAAC,IAAI,CAAC;EACb,MAAM;;;;;;;;CAQP,CAAC,CAAC;IAEF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/generators/env.d.ts

@@ -0,0 +1,42 @@
+import type { ResolverOutput } from "../types.js";
+/**
+ * Options for environment file generation.
+ */
+export interface EnvGeneratorOptions {
+    generateSecrets: boolean;
+    domain?: string;
+    openclawVersion?: string;
+    /** When set, host-like vars (e.g. REDIS_HOST) for these services use host.docker.internal so gateway in Docker can reach native services on host. */
+    nativeServiceIds?: Set<string>;
+}
+/**
+ * Generates `.env.example` and `.env` file contents from resolved services.
+ *
+ * - `.env.example`: every env var with descriptive comments, placeholders for secrets
+ * - `.env`: same vars but secrets filled with cryptographically random values when generateSecrets is true
+ */
+export declare function generateEnvFiles(resolved: ResolverOutput, options: EnvGeneratorOptions): {
+    envExample: string;
+    env: string;
+};
+export interface EnvVarGroup {
+    serviceName: string;
+    serviceIcon: string;
+    serviceId: string;
+    vars: {
+        key: string;
+        description: string;
+        secret: boolean;
+        required: boolean;
+        defaultValue: string;
+    }[];
+}
+/**
+ * Returns environment variables grouped by service, suitable for UI rendering.
+ *
+ * - First group is always "OpenClaw Core" with base variables.
+ * - Subsequent groups correspond to each resolved service.
+ * - Variables are deduplicated across groups (first occurrence wins).
+ */
+export declare function getStructuredEnvVars(resolved: ResolverOutput): EnvVarGroup[];
+//# sourceMappingURL=env.d.ts.map

package/dist/generators/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/generators/env.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGlD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACnC,eAAe,EAAE,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qJAAqJ;IACrJ,gBAAgB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC/B;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC/B,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,mBAAmB,GAC1B;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CA+QrC;AAmBD,MAAM,WAAW,WAAW;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE;QACL,GAAG,EAAE,MAAM,CAAC;QACZ,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,OAAO,CAAC;QAChB,QAAQ,EAAE,OAAO,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;KACrB,EAAE,CAAC;CACJ;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,cAAc,GAAG,WAAW,EAAE,CAsE5E"}

package/dist/generators/env.js

@@ -0,0 +1,276 @@
+import { randomBytes } from "node:crypto";
+import { getDbRequirements } from "./postgres-init.js";
+/**
+ * Generates `.env.example` and `.env` file contents from resolved services.
+ *
+ * - `.env.example`: every env var with descriptive comments, placeholders for secrets
+ * - `.env`: same vars but secrets filled with cryptographically random values when generateSecrets is true
+ */
+export function generateEnvFiles(resolved, options) {
+    const version = options.openclawVersion ?? "latest";
+    const lines = [];
+    // ── Base OpenClaw Variables ──────────────────────────────────────────────
+    lines.push({
+        comment: formatComment("OpenClaw version to deploy", "OpenClaw Core", true, false),
+        key: "OPENCLAW_VERSION",
+        exampleValue: version,
+        actualValue: version,
+    });
+    const gatewayToken = options.generateSecrets ? randomBytes(24).toString("hex") : "";
+    lines.push({
+        comment: formatComment("Authentication token for the OpenClaw gateway API", "OpenClaw Core", true, true),
+        key: "OPENCLAW_GATEWAY_TOKEN",
+        exampleValue: "your_gateway_token_here",
+        actualValue: gatewayToken,
+    });
+    lines.push({
+        comment: formatComment("Port the OpenClaw gateway listens on", "OpenClaw Core", true, false),
+        key: "OPENCLAW_GATEWAY_PORT",
+        exampleValue: "18789",
+        actualValue: "18789",
+    });
+    lines.push({
+        comment: formatComment("Port for the OpenClaw ACP bridge (WebSocket)", "OpenClaw Core", false, false),
+        key: "OPENCLAW_BRIDGE_PORT",
+        exampleValue: "18790",
+        actualValue: "18790",
+    });
+    lines.push({
+        comment: formatComment("Gateway network bind mode (lan for Docker networking, loopback for local-only)", "OpenClaw Core", false, false),
+        key: "OPENCLAW_GATEWAY_BIND",
+        exampleValue: "lan",
+        actualValue: "lan",
+    });
+    lines.push({
+        comment: formatComment("Host path to OpenClaw configuration directory", "OpenClaw Core", true, false),
+        key: "OPENCLAW_CONFIG_DIR",
+        exampleValue: "./openclaw/config",
+        actualValue: "./openclaw/config",
+    });
+    lines.push({
+        comment: formatComment("Host path to OpenClaw workspace directory", "OpenClaw Core", true, false),
+        key: "OPENCLAW_WORKSPACE_DIR",
+        exampleValue: "./openclaw/workspace",
+        actualValue: "./openclaw/workspace",
+    });
+    lines.push({
+        comment: formatComment("OpenClaw Docker image override (default uses ghcr.io/openclaw/openclaw)", "OpenClaw Core", false, false),
+        key: "OPENCLAW_IMAGE",
+        exampleValue: "",
+        actualValue: "",
+    });
+    if (options.domain) {
+        lines.push({
+            comment: formatComment("Primary domain for service routing", "OpenClaw Core", false, false),
+            key: "OPENCLAW_DOMAIN",
+            exampleValue: "example.com",
+            actualValue: options.domain,
+        });
+    }
+    // Claude web-provider session variables (optional)
+    lines.push({
+        comment: "\n# ═══════════════════════════════════════════════════════════════════════════════\n# Claude Web Provider (optional)\n# ═══════════════════════════════════════════════════════════════════════════════",
+        key: "",
+        exampleValue: "",
+        actualValue: "",
+    });
+    lines.push({
+        comment: formatComment("Claude AI session key for web provider authentication", "OpenClaw Core", false, true),
+        key: "CLAUDE_AI_SESSION_KEY",
+        exampleValue: "your_claude_ai_session_key_here",
+        actualValue: "",
+    });
+    lines.push({
+        comment: formatComment("Claude web session key for web provider authentication", "OpenClaw Core", false, true),
+        key: "CLAUDE_WEB_SESSION_KEY",
+        exampleValue: "your_claude_web_session_key_here",
+        actualValue: "",
+    });
+    lines.push({
+        comment: formatComment("Claude web cookie for web provider authentication", "OpenClaw Core", false, true),
+        key: "CLAUDE_WEB_COOKIE",
+        exampleValue: "your_claude_web_cookie_here",
+        actualValue: "",
+    });
+    // ── Per-Service Database Passwords ──────────────────────────────────────
+    const dbReqs = getDbRequirements(resolved);
+    if (dbReqs.length > 0) {
+        lines.push({
+            comment: "\n# ═══════════════════════════════════════════════════════════════════════════════\n# Per-Service Database Passwords\n# Each service gets its own PostgreSQL database and credentials\n# ═══════════════════════════════════════════════════════════════════════════════",
+            key: "",
+            exampleValue: "",
+            actualValue: "",
+        });
+        for (const req of dbReqs) {
+            const secretValue = options.generateSecrets ? randomBytes(24).toString("hex") : "";
+            lines.push({
+                comment: formatComment(`PostgreSQL password for ${req.serviceName} (database: ${req.dbName}, user: ${req.dbUser})`, req.serviceName, true, true),
+                key: req.passwordEnvVar,
+                exampleValue: `your_${req.passwordEnvVar.toLowerCase()}_here`,
+                actualValue: secretValue,
+            });
+        }
+    }
+    // ── Service-Specific Variables ───────────────────────────────────────────
+    const dbPasswordKeys = dbReqs.map((r) => r.passwordEnvVar);
+    const seenKeys = new Set([
+        "OPENCLAW_VERSION",
+        "OPENCLAW_GATEWAY_TOKEN",
+        "OPENCLAW_GATEWAY_PORT",
+        "OPENCLAW_BRIDGE_PORT",
+        "OPENCLAW_GATEWAY_BIND",
+        "OPENCLAW_CONFIG_DIR",
+        "OPENCLAW_WORKSPACE_DIR",
+        "OPENCLAW_IMAGE",
+        "OPENCLAW_DOMAIN",
+        "CLAUDE_AI_SESSION_KEY",
+        "CLAUDE_WEB_SESSION_KEY",
+        "CLAUDE_WEB_COOKIE",
+        ...dbPasswordKeys,
+    ]);
+    for (const { definition } of resolved.services) {
+        const allEnvVars = [...definition.environment, ...definition.openclawEnvVars];
+        if (allEnvVars.length === 0)
+            continue;
+        // Section separator for this service
+        lines.push({
+            comment: `\n# ═══════════════════════════════════════════════════════════════════════════════\n# ${definition.icon} ${definition.name}\n# ═══════════════════════════════════════════════════════════════════════════════`,
+            key: "",
+            exampleValue: "",
+            actualValue: "",
+        });
+        const isNative = options.nativeServiceIds?.has(definition.id);
+        for (const envVar of allEnvVars) {
+            if (seenKeys.has(envVar.key))
+                continue;
+            seenKeys.add(envVar.key);
+            const secretValue = options.generateSecrets ? randomBytes(24).toString("hex") : "";
+            // For native services, host-like vars must point to host so gateway (in Docker) can reach them
+            const isHostVar = envVar.key.endsWith("_HOST");
+            const hostValue = isNative && isHostVar ? "host.docker.internal" : null;
+            const exampleValue = hostValue
+                ? hostValue
+                : envVar.secret
+                    ? `your_${envVar.key.toLowerCase()}_here`
+                    : envVar.defaultValue;
+            let actualValue;
+            if (hostValue) {
+                actualValue = hostValue;
+            }
+            else if (envVar.secret) {
+                actualValue = envVar.defaultValue.startsWith("${") ? envVar.defaultValue : secretValue;
+            }
+            else {
+                actualValue = envVar.defaultValue;
+            }
+            lines.push({
+                comment: formatComment(envVar.description, definition.name, envVar.required, envVar.secret),
+                key: envVar.key,
+                exampleValue,
+                actualValue,
+            });
+        }
+    }
+    // ── Build output strings ────────────────────────────────────────────────
+    const header = [
+        "# ═══════════════════════════════════════════════════════════════════════════════",
+        "# OpenClaw Environment Configuration",
+        `# Generated at ${new Date().toISOString()}`,
+        "# ═══════════════════════════════════════════════════════════════════════════════",
+        "",
+    ].join("\n");
+    let envExample = header;
+    let env = header;
+    for (const line of lines) {
+        if (line.key === "") {
+            // Section comment
+            envExample += `${line.comment}\n`;
+            env += `${line.comment}\n`;
+        }
+        else {
+            envExample += `${line.comment}\n${line.key}=${line.exampleValue}\n\n`;
+            env += `${line.comment}\n${line.key}=${line.actualValue}\n\n`;
+        }
+    }
+    return { envExample, env };
+}
+/**
+ * Format a descriptive comment block for an environment variable.
+ */
+function formatComment(description, serviceName, required, secret) {
+    return [
+        `# ${description}`,
+        `# Service: ${serviceName} | Required: ${required ? "Yes" : "No"} | Secret: ${secret ? "Yes" : "No"}`,
+    ].join("\n");
+}
+/**
+ * Returns environment variables grouped by service, suitable for UI rendering.
+ *
+ * - First group is always "OpenClaw Core" with base variables.
+ * - Subsequent groups correspond to each resolved service.
+ * - Variables are deduplicated across groups (first occurrence wins).
+ */
+export function getStructuredEnvVars(resolved) {
+    const groups = [];
+    const seenKeys = new Set();
+    // ── OpenClaw Core group ──────────────────────────────────────────────────
+    const coreVars = [
+        {
+            key: "OPENCLAW_VERSION",
+            description: "OpenClaw version to deploy",
+            secret: false,
+            required: true,
+            defaultValue: "latest",
+        },
+        {
+            key: "OPENCLAW_GATEWAY_TOKEN",
+            description: "Authentication token for the OpenClaw gateway API",
+            secret: true,
+            required: true,
+            defaultValue: "",
+        },
+        {
+            key: "OPENCLAW_GATEWAY_PORT",
+            description: "Port the OpenClaw gateway listens on",
+            secret: false,
+            required: true,
+            defaultValue: "18789",
+        },
+    ];
+    for (const v of coreVars) {
+        seenKeys.add(v.key);
+    }
+    groups.push({
+        serviceName: "OpenClaw Core",
+        serviceIcon: "⚙️",
+        serviceId: "openclaw-core",
+        vars: coreVars,
+    });
+    // ── Per-service groups ───────────────────────────────────────────────────
+    for (const { definition } of resolved.services) {
+        const allEnvVars = [...definition.environment, ...definition.openclawEnvVars];
+        const vars = [];
+        for (const envVar of allEnvVars) {
+            if (seenKeys.has(envVar.key))
+                continue;
+            seenKeys.add(envVar.key);
+            vars.push({
+                key: envVar.key,
+                description: envVar.description,
+                secret: envVar.secret,
+                required: envVar.required,
+                defaultValue: envVar.defaultValue,
+            });
+        }
+        if (vars.length === 0)
+            continue;
+        groups.push({
+            serviceName: definition.name,
+            serviceIcon: definition.icon,
+            serviceId: definition.id,
+            vars,
+        });
+    }
+    return groups;
+}
+//# sourceMappingURL=env.js.map