@better-openclaw/core 1.0.13 → 1.0.15

package/src/generators/openclaw-json.ts

@@ -0,0 +1,406 @@
+import type { AiProvider, ResolverOutput } from "../types.js";
+
+const PROVIDER_CONFIGS: Record<AiProvider, any> = {
+	openai: {
+		baseUrl: "https://api.openai.com/v1",
+		api: "openai-completions",
+		auth: "api-key",
+		apiKey: "${OPENAI_API_KEY}",
+		models: [
+			{
+				id: "gpt-4o",
+				name: "GPT-4o",
+				api: "openai-completions",
+				reasoning: false,
+				input: ["text", "image"],
+				cost: { input: 2.5, output: 10, cacheRead: 1.25, cacheWrite: 2.5 },
+				contextWindow: 128000,
+				maxTokens: 16384,
+			},
+			{
+				id: "gpt-4o-mini",
+				name: "GPT-4o Mini",
+				api: "openai-completions",
+				reasoning: false,
+				input: ["text", "image"],
+				cost: { input: 0.15, output: 0.6, cacheRead: 0.075, cacheWrite: 0.15 },
+				contextWindow: 128000,
+				maxTokens: 16384,
+			},
+		],
+	},
+	anthropic: {
+		baseUrl: "https://api.anthropic.com/v1/messages",
+		api: "anthropic-messages",
+		auth: "api-key",
+		apiKey: "${ANTHROPIC_API_KEY}",
+		models: [
+			{
+				id: "claude-3-5-sonnet-latest",
+				name: "Claude 3.5 Sonnet",
+				api: "anthropic-messages",
+				reasoning: false,
+				input: ["text", "image"],
+				cost: { input: 3.0, output: 15.0, cacheRead: 0.3, cacheWrite: 3.75 },
+				contextWindow: 200000,
+				maxTokens: 8192,
+			},
+			{
+				id: "claude-3-5-haiku-latest",
+				name: "Claude 3.5 Haiku",
+				api: "anthropic-messages",
+				reasoning: false,
+				input: ["text", "image"],
+				cost: { input: 0.8, output: 4.0, cacheRead: 0.08, cacheWrite: 1.0 },
+				contextWindow: 200000,
+				maxTokens: 8192,
+			},
+		],
+	},
+	google: {
+		baseUrl: "https://generativelanguage.googleapis.com/v1beta/openai",
+		api: "openai-completions",
+		auth: "api-key",
+		apiKey: "${GOOGLE_API_KEY}",
+		models: [
+			{
+				id: "gemini-2.5-pro",
+				name: "Gemini 2.5 Pro",
+				api: "openai-completions",
+				reasoning: false,
+				input: ["text", "image"],
+				cost: { input: 2.0, output: 8.0, cacheRead: 0.5, cacheWrite: 2.0 },
+				contextWindow: 2000000,
+				maxTokens: 8192,
+			},
+			{
+				id: "gemini-2.5-flash",
+				name: "Gemini 2.5 Flash",
+				api: "openai-completions",
+				reasoning: false,
+				input: ["text", "image"],
+				cost: { input: 0.15, output: 0.6, cacheRead: 0.0375, cacheWrite: 0.15 },
+				contextWindow: 1000000,
+				maxTokens: 8192,
+			},
+		],
+	},
+	xai: {
+		baseUrl: "https://api.x.ai/v1",
+		api: "openai-completions",
+		auth: "api-key",
+		apiKey: "${XAI_API_KEY}",
+		models: [
+			{
+				id: "grok-2-latest",
+				name: "Grok 2",
+				api: "openai-completions",
+				reasoning: false,
+				input: ["text", "image"],
+				cost: { input: 2.0, output: 10.0, cacheRead: 1.0, cacheWrite: 2.0 },
+				contextWindow: 131072,
+				maxTokens: 32768,
+			},
+		],
+	},
+	deepseek: {
+		baseUrl: "https://api.deepseek.com/v1",
+		api: "openai-completions",
+		auth: "api-key",
+		apiKey: "${DEEPSEEK_API_KEY}",
+		models: [
+			{
+				id: "deepseek-chat",
+				name: "DeepSeek V3",
+				api: "openai-completions",
+				reasoning: false,
+				input: ["text"],
+				cost: { input: 0.14, output: 0.28, cacheRead: 0.014, cacheWrite: 0.14 },
+				contextWindow: 65536,
+				maxTokens: 8192,
+			},
+			{
+				id: "deepseek-reasoner",
+				name: "DeepSeek R1",
+				api: "openai-completions",
+				reasoning: true,
+				input: ["text"],
+				cost: { input: 0.55, output: 2.19, cacheRead: 0.14, cacheWrite: 0.55 },
+				contextWindow: 65536,
+				maxTokens: 8192,
+			},
+		],
+	},
+	groq: {
+		baseUrl: "https://api.groq.com/openai/v1",
+		api: "openai-completions",
+		auth: "api-key",
+		apiKey: "${GROQ_API_KEY}",
+		models: [
+			{
+				id: "llama3-70b-8192",
+				name: "LLaMA3 70B (Groq)",
+				api: "openai-completions",
+				reasoning: false,
+				input: ["text"],
+				cost: { input: 0.59, output: 0.79 },
+				contextWindow: 8192,
+				maxTokens: 8192,
+			},
+		],
+	},
+	openrouter: {
+		baseUrl: "https://openrouter.ai/api/v1",
+		api: "openai-completions",
+		auth: "api-key",
+		apiKey: "${OPENROUTER_API_KEY}",
+		models: [
+			{
+				id: "anthropic/claude-3.5-sonnet",
+				name: "Claude 3.5 Sonnet (OpenRouter)",
+				api: "openai-completions",
+				reasoning: false,
+				input: ["text", "image"],
+				cost: { input: 3.0, output: 15.0 },
+				contextWindow: 200000,
+				maxTokens: 8192,
+			},
+		],
+	},
+	mistral: {
+		baseUrl: "https://api.mistral.ai/v1",
+		api: "openai-completions",
+		auth: "api-key",
+		apiKey: "${MISTRAL_API_KEY}",
+		models: [
+			{
+				id: "mistral-large-latest",
+				name: "Mistral Large",
+				api: "openai-completions",
+				reasoning: false,
+				input: ["text"],
+				cost: { input: 2.0, output: 6.0 },
+				contextWindow: 131000,
+				maxTokens: 8192,
+			},
+		],
+	},
+	together: {
+		baseUrl: "https://api.together.xyz/v1",
+		api: "openai-completions",
+		auth: "api-key",
+		apiKey: "${TOGETHER_API_KEY}",
+		models: [
+			{
+				id: "meta-llama/Llama-3.3-70B-Instruct-Turbo",
+				name: "LLaMA 3.3 70B (Together)",
+				api: "openai-completions",
+				reasoning: false,
+				input: ["text"],
+				cost: { input: 0.88, output: 0.88 },
+				contextWindow: 131072,
+				maxTokens: 4096,
+			},
+		],
+	},
+	ollama: {
+		baseUrl: "http://host.docker.internal:11434/v1",
+		api: "openai-completions",
+		auth: "none",
+		models: [
+			{
+				id: "llama3:latest",
+				name: "LLaMA 3 (Local)",
+				api: "openai-completions",
+				reasoning: false,
+				input: ["text"],
+				cost: { input: 0, output: 0 },
+				contextWindow: 8192,
+				maxTokens: 4096,
+			},
+			{
+				id: "deepseek-r1:latest",
+				name: "DeepSeek R1 (Local)",
+				api: "openai-completions",
+				reasoning: true,
+				input: ["text"],
+				cost: { input: 0, output: 0 },
+				contextWindow: 8192,
+				maxTokens: 4096,
+			},
+		],
+	},
+	lmstudio: {
+		baseUrl: "http://host.docker.internal:1234/v1",
+		api: "openai-completions",
+		auth: "none",
+		models: [
+			{
+				id: "local-model",
+				name: "LM Studio Model",
+				api: "openai-completions",
+				reasoning: false,
+				input: ["text"],
+				cost: { input: 0, output: 0 },
+				contextWindow: 8192,
+				maxTokens: 4096,
+			},
+		],
+	},
+	vllm: {
+		baseUrl: "http://host.docker.internal:8000/v1",
+		api: "openai-completions",
+		auth: "none",
+		models: [
+			{
+				id: "local-model",
+				name: "vLLM Model",
+				api: "openai-completions",
+				reasoning: false,
+				input: ["text"],
+				cost: { input: 0, output: 0 },
+				contextWindow: 8192,
+				maxTokens: 4096,
+			},
+		],
+	},
+};
+
+/**
+ * Generates a default `openclaw/config/openclaw.json` tailored
+ * to the services installed in the stack.
+ */
+export function generateOpenClawConfig(resolved: ResolverOutput): string {
+	const defaultSkills: Record<string, { enabled: boolean }> = {};
+
+	// Auto-enable any OpenClaw skills attached to installed companion services
+	for (const { definition } of resolved.services) {
+		for (const skill of definition.skills) {
+			if (skill.autoInstall) {
+				defaultSkills[skill.skillId] = { enabled: true };
+			}
+		}
+	}
+
+	const providers: Record<string, any> = {};
+	const agentsModels: Record<string, { alias: string }> = {};
+	let primaryModel = "";
+
+	// Always default to empty or the first choice, fallback to openai if nothing was passed
+	const selectedProviders =
+		resolved.aiProviders && resolved.aiProviders.length > 0
+			? resolved.aiProviders
+			: (["openai"] as AiProvider[]);
+
+	for (const provider of selectedProviders) {
+		const meta = PROVIDER_CONFIGS[provider];
+		if (!meta) continue;
+
+		providers[provider] = {
+			baseUrl: meta.baseUrl,
+			api: meta.api,
+			auth: meta.auth,
+			...(meta.apiKey ? { apiKey: meta.apiKey } : {}),
+			models: meta.models,
+		};
+
+		for (const m of meta.models) {
+			const fullId = `${provider}/${m.id}`;
+			agentsModels[fullId] = { alias: m.name };
+			if (!primaryModel) primaryModel = fullId; // Use the very first model mapped as the global system default
+		}
+	}
+
+	const authProfiles: Record<string, any> = {
+		"local:default": {
+			provider: "local",
+			mode: "token",
+		},
+	};
+
+	// Add provider auth profiles too
+	for (const provider of Object.keys(providers)) {
+		authProfiles[`${provider}:default`] = {
+			provider: provider,
+			mode: "api_key",
+		};
+	}
+
+	const config = {
+		wizard: {
+			lastRunAt: new Date().toISOString(),
+			lastRunVersion: "2026.2.23",
+			lastRunCommand: "auto-generated-by-better-openclaw",
+			lastRunMode: "local",
+		},
+		auth: {
+			profiles: authProfiles,
+		},
+		models: {
+			mode: "merge",
+			providers,
+		},
+		agents: {
+			defaults: {
+				model: {
+					primary: primaryModel,
+				},
+				models: agentsModels,
+				workspace: "/home/node/.openclaw/workspace",
+				compaction: { mode: "safeguard" },
+				maxConcurrent: 4,
+				subagents: { maxConcurrent: 8 },
+			},
+		},
+		messages: {
+			ackReactionScope: "group-mentions",
+		},
+		commands: {
+			native: "auto",
+			nativeSkills: "auto",
+		},
+		hooks: {
+			internal: {
+				enabled: true,
+				entries: {
+					"boot-md": { enabled: true },
+					"bootstrap-extra-files": { enabled: true },
+					"command-logger": { enabled: true },
+					"session-memory": { enabled: true },
+				},
+			},
+		},
+		channels: {},
+		gateway: {
+			port: 18791,
+			mode: "local",
+			bind: "loopback",
+			auth: {
+				mode: "token",
+				token: "${OPENCLAW_GATEWAY_TOKEN}",
+			},
+			tailscale: {
+				mode: "serve",
+				resetOnExit: true,
+			},
+			nodes: {
+				denyCommands: ["camera.snap", "camera.clip", "screen.record"],
+			},
+		},
+		skills: {
+			install: { nodeManager: "pnpm" },
+			...(Object.keys(defaultSkills).length > 0 ? { entries: defaultSkills } : {}),
+		},
+		plugins: {
+			entries: {
+				"memory-core": { enabled: true },
+			},
+		},
+		meta: {
+			lastTouchedVersion: "2026.2.23",
+			lastTouchedAt: new Date().toISOString(),
+		},
+	};
+
+	return JSON.stringify(config, null, 2);
+}

package/src/index.ts

@@ -83,6 +83,7 @@ export {
 // ─── Types ──────────────────────────────────────────────────────────────────
 export type {
 	AddedDependency,
+	AiProvider,
 	ApiError,
 	CategoryInfo,
 	ComposeOptions,
@@ -94,6 +95,7 @@ export type {
 	GenerationInput,
 	GenerationMetadata,
 	GenerationResult,
+	GsdRuntime,
 	HealthCheck,
 	Maturity,
 	NativePlatform,

package/src/resolver.ts

@@ -248,6 +248,8 @@ export function resolve(input: ResolverInput): ResolverOutput {
 		errors,
 		isValid,
 		estimatedMemoryMB,
+		aiProviders: input.aiProviders ?? [],
+		gsdRuntimes: [],
 	};
 }
 

package/src/schema.ts

@@ -48,6 +48,23 @@ export const DeploymentTargetSchema = z.enum(["local", "vps", "homelab", "clawex
 
 export const OutputFormatSchema = z.enum(["directory", "tar", "zip"]);
 
+export const AiProviderSchema = z.enum([
+	"openai",
+	"anthropic",
+	"google",
+	"xai",
+	"deepseek",
+	"groq",
+	"openrouter",
+	"mistral",
+	"together",
+	"ollama",
+	"lmstudio",
+	"vllm",
+]);
+
+export const GsdRuntimeSchema = z.enum(["claude", "opencode", "gemini", "codex"]);
+
 // ─── Sub-Schemas ────────────────────────────────────────────────────────────
 
 export const PortMappingSchema = z.object({
@@ -213,6 +230,8 @@ export const GenerationInputSchema = z.object({
 		}),
 	services: z.array(z.string()).default([]),
 	skillPacks: z.array(z.string()).default([]),
+	aiProviders: z.array(AiProviderSchema).default([]),
+	gsdRuntimes: z.array(GsdRuntimeSchema).default([]),
 	proxy: ProxyTypeSchema.default("none"),
 	domain: z.string().optional(),
 	gpu: z.boolean().default(false),
@@ -254,6 +273,8 @@ export const ResolverOutputSchema = z.object({
 	errors: z.array(ErrorSchema),
 	isValid: z.boolean(),
 	estimatedMemoryMB: z.number().int().min(0),
+	aiProviders: z.array(AiProviderSchema).default([]),
+	gsdRuntimes: z.array(GsdRuntimeSchema).default([]),
 });
 
 // ─── Compose Options ────────────────────────────────────────────────────────
@@ -275,6 +296,8 @@ export const ComposeOptionsSchema = z.object({
 export const ValidateRequestSchema = z.object({
 	services: z.array(z.string()),
 	skillPacks: z.array(z.string()).default([]),
+	aiProviders: z.array(AiProviderSchema).default([]),
+	gsdRuntimes: z.array(GsdRuntimeSchema).default([]),
 	proxy: ProxyTypeSchema.default("none"),
 	domain: z.string().optional(),
 	gpu: z.boolean().default(false),

package/src/services/definitions/authentik.ts

@@ -0,0 +1,106 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const authentikDefinition: ServiceDefinition = {
+	id: "authentik",
+	name: "Authentik",
+	description: "The open-source Identity Provider that unifies your identity infrastructure.",
+	category: "security",
+	icon: "🛡️",
+
+	image: "ghcr.io/goauthentik/server",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 9000,
+			container: 9000,
+			description: "Authentik HTTP Interface",
+			exposed: true,
+		},
+		{
+			host: 9443,
+			container: 9443,
+			description: "Authentik HTTPS Interface",
+			exposed: false,
+		},
+	],
+	volumes: [
+		{
+			name: "authentik_media",
+			containerPath: "/media",
+			description: "Authentik media storage",
+		},
+		{
+			name: "authentik_custom_templates",
+			containerPath: "/templates",
+			description: "Authentik custom templates",
+		},
+	],
+	environment: [
+		{
+			key: "AUTHENTIK_REDIS__HOST",
+			defaultValue: "redis",
+			secret: false,
+			description: "Redis server hostname",
+			required: true,
+		},
+		{
+			key: "AUTHENTIK_POSTGRESQL__HOST",
+			defaultValue: "postgres",
+			secret: false,
+			description: "Postgres database hostname",
+			required: true,
+		},
+		{
+			key: "AUTHENTIK_POSTGRESQL__USER",
+			defaultValue: "postgres",
+			secret: false,
+			description: "Postgres database user",
+			required: true,
+		},
+		{
+			key: "AUTHENTIK_POSTGRESQL__NAME",
+			defaultValue: "authentik",
+			secret: false,
+			description: "Postgres database name",
+			required: true,
+		},
+		{
+			key: "AUTHENTIK_POSTGRESQL__PASSWORD",
+			defaultValue: "postgres",
+			secret: true,
+			description: "Postgres database password",
+			required: true,
+		},
+		{
+			key: "AUTHENTIK_SECRET_KEY",
+			defaultValue: "authentik_secret_replace_me_in_production",
+			secret: true,
+			description: "Secret key used for cookie signing",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "curl --fail http://localhost:9000/-/health/live/ || exit 1",
+		interval: "30s",
+		timeout: "5s",
+		retries: 3,
+		startPeriod: "30s",
+	},
+	dependsOn: ["postgresql", "redis"],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://docs.goauthentik.io/",
+	tags: ["identity", "sso", "saml", "oidc", "oauth2", "security"],
+	maturity: "stable",
+
+	requires: ["postgresql", "redis"],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 2048,
+	gpuRequired: false,
+};

package/src/services/definitions/crowdsec.ts

@@ -0,0 +1,66 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const crowdsecDefinition: ServiceDefinition = {
+	id: "crowdsec",
+	name: "CrowdSec",
+	description:
+		"Free, open-source and collaborative IPS designed to protect servers, services, and containers.",
+	category: "security",
+	icon: "⚔️",
+
+	image: "crowdsecurity/crowdsec",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 8080,
+			container: 8080,
+			description: "CrowdSec Local API Interface",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "crowdsec_data",
+			containerPath: "/v/lib/crowdsec/data",
+			description: "CrowdSec persistent SQLite data",
+		},
+		{
+			name: "crowdsec_config",
+			containerPath: "/etc/crowdsec",
+			description: "CrowdSec configurations",
+		},
+	],
+	environment: [
+		{
+			key: "COLLECTIONS",
+			defaultValue: "crowdsecurity/linux crowdsecurity/sshd",
+			secret: false,
+			description: "Default collections to install",
+			required: false,
+		},
+	],
+	healthcheck: {
+		test: "cscli metrics || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "15s",
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://docs.crowdsec.net/",
+	tags: ["ips", "ids", "firewall", "security", "threat-intelligence"],
+	maturity: "stable",
+
+	requires: [],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 256,
+	gpuRequired: false,
+};

package/src/services/definitions/ghost.ts

@@ -0,0 +1,60 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const ghostDefinition: ServiceDefinition = {
+	id: "ghost",
+	name: "Ghost",
+	description: "The world's most popular modern open-source publishing platform.",
+	category: "social-media",
+	icon: "👻",
+
+	image: "ghost",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 2368,
+			container: 2368,
+			description: "Ghost Public Interface",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "ghost_content",
+			containerPath: "/var/lib/ghost/content",
+			description: "Ghost images, themes, and content storage",
+		},
+	],
+	environment: [
+		{
+			key: "url",
+			defaultValue: "http://localhost:2368",
+			secret: false,
+			description: "The URL of the Ghost install",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "curl --fail http://localhost:2368/ghost/ || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "30s",
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://ghost.org/docs/",
+	tags: ["blog", "publishing", "writing", "cms", "content"],
+	maturity: "stable",
+
+	requires: [],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 512,
+	gpuRequired: false,
+};