@better-openclaw/core 1.0.16 → 1.0.18

package/dist/generators/bare-metal-install.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bare-metal-install.cjs","names":[],"sources":["../../src/generators/bare-metal-install.ts"],"sourcesContent":["/**\n * Generates platform-specific installer scripts for bare-metal (VPS, computer) deployment.\n * Each script ensures Docker and Docker Compose are installed, then runs the stack.\n * Returns a map of one file: install.sh (Linux/macOS) or install.ps1 (Windows).\n */\nimport type { Platform } from \"../types.js\";\n\nconst LINUX_SCRIPT_PREFIX_NATIVE = `\n# Native services (install/start on host first)\nif [ -f \"native/install-linux.sh\" ]; then\n  info \"Installing and starting native services...\"\n  bash native/install-linux.sh\n  ok \"Native services ready.\"\nfi\n`;\n\nconst LINUX_SCRIPT = `#!/usr/bin/env bash\nset -euo pipefail\n\n# OpenClaw bare-metal installer (Linux)\n# Optionally runs native services script, then Docker + Compose.\n# Idempotent: safe to re-run.\n\nSCRIPT_DIR=\"$(cd \"$(dirname \"\\${BASH_SOURCE[0]}\")\" && pwd)\"\ncd \"$SCRIPT_DIR\"\n\nif [ -t 1 ]; then\n  RED='\\\\033[0;31m'; GREEN='\\\\033[0;32m'; YELLOW='\\\\033[1;33m'; CYAN='\\\\033[0;36m'; NC='\\\\033[0m'\nelse\n  RED=''; GREEN=''; YELLOW=''; CYAN=''; NC=''\nfi\ninfo()  { echo -e \"\\${CYAN}ℹ  $*\\${NC}\"; }\nok()    { echo -e \"\\${GREEN}✅ $*\\${NC}\"; }\nwarn()  { echo -e \"\\${YELLOW}⚠️  $*\\${NC}\"; }\nerr()   { echo -e \"\\${RED}❌ $*\\${NC}\" >&2; }\n__NATIVE_BLOCK__\n# Install Docker if missing\nif ! command -v docker &> /dev/null; then\n  info \"Installing Docker...\"\n  if command -v apt-get &> /dev/null; then\n    sudo apt-get update -qq\n    sudo apt-get install -y -qq ca-certificates curl\n    curl -fsSL https://get.docker.com | sudo sh\n    sudo usermod -aG docker \"$USER\" 2>/dev/null || true\n    ok \"Docker installed. You may need to log out and back in for group changes.\"\n  elif command -v dnf &> /dev/null || command -v yum &> /dev/null; then\n    sudo dnf install -y dnf-plugins-core 2>/dev/null || sudo yum install -y yum-utils\n    sudo dnf config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo 2>/dev/null || sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo\n    sudo dnf install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin 2>/dev/null || sudo yum install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin\n    sudo systemctl enable --now docker\n    sudo usermod -aG docker \"$USER\" 2>/dev/null || true\n    ok \"Docker installed.\"\n  else\n    err \"Unsupported package manager. Install Docker manually: https://docs.docker.com/engine/install/\"\n    exit 1\n  fi\nelse\n  ok \"Docker already installed.\"\nfi\n\nif ! docker compose version &> /dev/null; then\n  err \"Docker Compose (v2) plugin not found. Install it: https://docs.docker.com/compose/install/\"\n  exit 1\nfi\n\nif ! docker info &> /dev/null 2>&1; then\n  err \"Docker daemon not running. Start it (e.g. sudo systemctl start docker) and re-run this script.\"\n  exit 1\nfi\n\n# Use project start script if present, else docker compose up\nif [ -f \"scripts/start.sh\" ]; then\n  info \"Starting stack via scripts/start.sh...\"\n  bash scripts/start.sh\nelse\n  if [ -f \".env.example\" ] && [ ! -f \".env\" ]; then cp .env.example .env; fi\n  info \"Starting stack...\"\n  docker compose up -d --remove-orphans\n  echo \"\"\n  ok \"Stack started. Gateway: http://localhost:\\${OPENCLAW_GATEWAY_PORT:-18789}\"\nfi\n`;\n\nconst MACOS_SCRIPT_PREFIX_NATIVE = `\nif [ -f \"native/install-macos.sh\" ]; then\n  info \"Installing and starting native services...\"\n  bash native/install-macos.sh\n  ok \"Native services ready.\"\nfi\n`;\n\nconst MACOS_SCRIPT = `#!/usr/bin/env bash\nset -euo pipefail\n\n# OpenClaw bare-metal installer (macOS)\n# Optionally runs native services, then Docker Desktop + compose.\n# Idempotent: safe to re-run.\n\nSCRIPT_DIR=\"$(cd \"$(dirname \"\\${BASH_SOURCE[0]}\")\" && pwd)\"\ncd \"$SCRIPT_DIR\"\n\nif [ -t 1 ]; then\n  RED='\\\\033[0;31m'; GREEN='\\\\033[0;32m'; YELLOW='\\\\033[1;33m'; CYAN='\\\\033[0;36m'; NC='\\\\033[0m'\nelse\n  RED=''; GREEN=''; YELLOW=''; CYAN=''; NC=''\nfi\ninfo()  { echo -e \"\\${CYAN}ℹ  $*\\${NC}\"; }\nok()    { echo -e \"\\${GREEN}✅ $*\\${NC}\"; }\nwarn()  { echo -e \"\\${YELLOW}⚠️  $*\\${NC}\"; }\nerr()   { echo -e \"\\${RED}❌ $*\\${NC}\" >&2; }\n__NATIVE_BLOCK__\nif ! command -v docker &> /dev/null; then\n  if command -v brew &> /dev/null; then\n    info \"Installing Docker via Homebrew...\"\n    brew install --cask docker\n    warn \"Docker Desktop was installed. Please open Docker from Applications, then re-run this script.\"\n    exit 0\n  else\n    err \"Docker not found. Install Docker Desktop from https://docs.docker.com/desktop/install/mac-install/ or run: brew install --cask docker\"\n    exit 1\n  fi\nfi\n\nif ! docker info &> /dev/null 2>&1; then\n  err \"Docker daemon not running. Open Docker Desktop from Applications, then re-run this script.\"\n  exit 1\nfi\n\nif ! docker compose version &> /dev/null; then\n  err \"Docker Compose (v2) not available. Ensure Docker Desktop is up to date.\"\n  exit 1\nfi\n\nif [ -f \"scripts/start.sh\" ]; then\n  info \"Starting stack via scripts/start.sh...\"\n  bash scripts/start.sh\nelse\n  if [ -f \".env.example\" ] && [ ! -f \".env\" ]; then cp .env.example .env; fi\n  info \"Starting stack...\"\n  docker compose up -d --remove-orphans\n  echo \"\"\n  ok \"Stack started. Gateway: http://localhost:\\${OPENCLAW_GATEWAY_PORT:-18789}\"\nfi\n`;\n\nconst WINDOWS_SCRIPT_PREFIX_NATIVE = `\nif (Test-Path \"native/install-windows.ps1\") {\n  Info \"Installing and starting native services...\"\n  & .\\\\native\\\\install-windows.ps1\n  Ok \"Native services ready.\"\n}\n`;\n\nconst WINDOWS_SCRIPT = `# OpenClaw bare-metal installer (Windows PowerShell)\n# Optionally runs native services, then Docker Desktop + compose.\n# Idempotent: safe to re-run. Run in PowerShell as Administrator if installing Docker.\n\n$ErrorActionPreference = \"Stop\"\n$ProjectDir = $PSScriptRoot\nSet-Location $ProjectDir\n\nfunction Info { Write-Host \"  $args\" -ForegroundColor Cyan }\nfunction Ok   { Write-Host \"  $args\" -ForegroundColor Green }\nfunction Warn { Write-Host \"  $args\" -ForegroundColor Yellow }\nfunction Err  { Write-Host \"  $args\" -ForegroundColor Red; exit 1 }\n__NATIVE_BLOCK__\n# Check Docker\n$docker = Get-Command docker -ErrorAction SilentlyContinue\nif (-not $docker) {\n  Write-Host \"\"\n  Write-Host \"  Docker not found.\" -ForegroundColor Red\n  Write-Host \"  Install Docker Desktop from: https://docs.docker.com/desktop/install/windows-install/\"\n  Write-Host \"  Then restart PowerShell and run this script again.\"\n  exit 1\n}\n\ntry { docker info 2>$null | Out-Null } catch {\n  Write-Host \"\"\n  Write-Host \"  Docker daemon is not running.\" -ForegroundColor Red\n  Write-Host \"  Start Docker Desktop from the Start menu, then run this script again.\"\n  exit 1\n}\n\ntry { docker compose version 2>$null | Out-Null } catch {\n  Write-Host \"\"\n  Write-Host \"  Docker Compose (v2) not available. Update Docker Desktop.\" -ForegroundColor Red\n  exit 1\n}\n\nOk \"Docker is ready.\"\n\n# Prepare .env\nif (-not (Test-Path \".env\")) {\n  if (Test-Path \".env.example\") {\n    Copy-Item \".env.example\" \".env\"\n    Info \"Created .env from .env.example\"\n  }\n}\n\n# Create dirs\n$configDir = if ($env:OPENCLAW_CONFIG_DIR) { $env:OPENCLAW_CONFIG_DIR } else { \"./openclaw/config\" }\n$workspaceDir = if ($env:OPENCLAW_WORKSPACE_DIR) { $env:OPENCLAW_WORKSPACE_DIR } else { \"./openclaw/workspace\" }\nNew-Item -ItemType Directory -Force -Path $configDir | Out-Null\nNew-Item -ItemType Directory -Force -Path $workspaceDir | Out-Null\nOk \"Directories ready.\"\n\n# Start stack\nInfo \"Starting stack...\"\ndocker compose up -d --remove-orphans\n\n$port = if ($env:OPENCLAW_GATEWAY_PORT) { $env:OPENCLAW_GATEWAY_PORT } else { \"18789\" }\nWrite-Host \"\"\nOk \"Stack started. Gateway: http://localhost:$port\"\n`;\n\nexport interface BareMetalInstallOptions {\n\tplatform: Platform;\n\tprojectName: string;\n\t/** When true, top-level script runs native/install-*.sh|ps1 first, then Docker + compose. */\n\thasNativeServices?: boolean;\n}\n\n/**\n * Returns one file: install.sh (Linux/macOS) or install.ps1 (Windows).\n * When hasNativeServices is true, the script runs the native installer first, then Docker + compose.\n */\nexport function generateBareMetalInstall(options: BareMetalInstallOptions): Record<string, string> {\n\tconst { platform, hasNativeServices } = options;\n\tconst files: Record<string, string> = {};\n\n\tif (platform === \"windows/amd64\") {\n\t\tconst script = hasNativeServices\n\t\t\t? WINDOWS_SCRIPT.replace(\"__NATIVE_BLOCK__\", WINDOWS_SCRIPT_PREFIX_NATIVE)\n\t\t\t: WINDOWS_SCRIPT.replace(\"__NATIVE_BLOCK__\", \"\");\n\t\tfiles[\"install.ps1\"] = script;\n\t\treturn files;\n\t}\n\n\tconst isMac = platform.startsWith(\"macos/\");\n\tconst baseScript = isMac ? MACOS_SCRIPT : LINUX_SCRIPT;\n\tconst prefix = hasNativeServices\n\t\t? isMac\n\t\t\t? MACOS_SCRIPT_PREFIX_NATIVE\n\t\t\t: LINUX_SCRIPT_PREFIX_NATIVE\n\t\t: \"\";\n\tconst script = baseScript.replace(\"__NATIVE_BLOCK__\", prefix);\n\tfiles[\"install.sh\"] = script;\n\treturn files;\n}\n"],"mappings":";;;AAOA,MAAM,6BAA6B;;;;;;;;AASnC,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmErB,MAAM,6BAA6B;;;;;;;AAQnC,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsDrB,MAAM,+BAA+B;;;;;;;AAQrC,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyEvB,SAAgB,yBAAyB,SAA0D;CAClG,MAAM,EAAE,UAAU,sBAAsB;CACxC,MAAM,QAAgC,EAAE;AAExC,KAAI,aAAa,iBAAiB;AAIjC,QAAM,iBAHS,oBACZ,eAAe,QAAQ,oBAAoB,6BAA6B,GACxE,eAAe,QAAQ,oBAAoB,GAAG;AAEjD,SAAO;;CAGR,MAAM,QAAQ,SAAS,WAAW,SAAS;CAC3C,MAAM,aAAa,QAAQ,eAAe;CAC1C,MAAM,SAAS,oBACZ,QACC,6BACA,6BACD;AAEH,OAAM,gBADS,WAAW,QAAQ,oBAAoB,OAAO;AAE7D,QAAO"}

package/dist/generators/bare-metal-install.d.cts

@@ -0,0 +1,17 @@
+import { Platform } from "../types.cjs";
+
+//#region src/generators/bare-metal-install.d.ts
+interface BareMetalInstallOptions {
+  platform: Platform;
+  projectName: string;
+  /** When true, top-level script runs native/install-*.sh|ps1 first, then Docker + compose. */
+  hasNativeServices?: boolean;
+}
+/**
+ * Returns one file: install.sh (Linux/macOS) or install.ps1 (Windows).
+ * When hasNativeServices is true, the script runs the native installer first, then Docker + compose.
+ */
+declare function generateBareMetalInstall(options: BareMetalInstallOptions): Record<string, string>;
+//#endregion
+export { BareMetalInstallOptions, generateBareMetalInstall };
+//# sourceMappingURL=bare-metal-install.d.cts.map

package/dist/generators/bare-metal-install.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bare-metal-install.d.cts","names":[],"sources":["../../src/generators/bare-metal-install.ts"],"mappings":";;;UAuNiB,uBAAA;EAChB,QAAA,EAAU,QAAA;EACV,WAAA;EAAA;EAEA,iBAAA;AAAA;;AAOD;;;iBAAgB,wBAAA,CAAyB,OAAA,EAAS,uBAAA,GAA0B,MAAA"}

package/dist/generators/bare-metal-install.test.cjs

@@ -0,0 +1,47 @@
+const require_vi_2VT5v0um = require('../vi.2VT5v0um-BmRMvymT.cjs');
+const require_generators_bare_metal_install = require('./bare-metal-install.cjs');
+
+//#region src/generators/bare-metal-install.test.ts
+require_vi_2VT5v0um.describe("generateBareMetalInstall", () => {
+	require_vi_2VT5v0um.it("returns install.ps1 for windows/amd64", () => {
+		const result = require_generators_bare_metal_install.generateBareMetalInstall({
+			platform: "windows/amd64",
+			projectName: "my-stack"
+		});
+		require_vi_2VT5v0um.globalExpect(result).toHaveProperty("install.ps1");
+		require_vi_2VT5v0um.globalExpect(Object.keys(result)).toHaveLength(1);
+		require_vi_2VT5v0um.globalExpect(result["install.ps1"]).toContain("docker compose");
+		require_vi_2VT5v0um.globalExpect(result["install.ps1"]).toContain("PowerShell");
+	});
+	require_vi_2VT5v0um.it("returns install.sh for linux/amd64", () => {
+		const result = require_generators_bare_metal_install.generateBareMetalInstall({
+			platform: "linux/amd64",
+			projectName: "my-stack"
+		});
+		require_vi_2VT5v0um.globalExpect(result).toHaveProperty("install.sh");
+		require_vi_2VT5v0um.globalExpect(Object.keys(result)).toHaveLength(1);
+		require_vi_2VT5v0um.globalExpect(result["install.sh"]).toContain("docker");
+		require_vi_2VT5v0um.globalExpect(result["install.sh"]).toContain("compose");
+	});
+	require_vi_2VT5v0um.it("returns install.sh for linux/arm64", () => {
+		const result = require_generators_bare_metal_install.generateBareMetalInstall({
+			platform: "linux/arm64",
+			projectName: "my-stack"
+		});
+		require_vi_2VT5v0um.globalExpect(result).toHaveProperty("install.sh");
+		require_vi_2VT5v0um.globalExpect(result["install.sh"]).toContain("docker");
+	});
+	require_vi_2VT5v0um.it("returns install.sh for macos/amd64 and macos/arm64", () => {
+		for (const platform of ["macos/amd64", "macos/arm64"]) {
+			const result = require_generators_bare_metal_install.generateBareMetalInstall({
+				platform,
+				projectName: "my-stack"
+			});
+			require_vi_2VT5v0um.globalExpect(result).toHaveProperty("install.sh");
+			require_vi_2VT5v0um.globalExpect(result["install.sh"]).toContain("Docker");
+		}
+	});
+});
+
+//#endregion
+//# sourceMappingURL=bare-metal-install.test.cjs.map

package/dist/generators/bare-metal-install.test.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bare-metal-install.test.cjs","names":["describe","generateBareMetalInstall"],"sources":["../../src/generators/bare-metal-install.test.ts"],"sourcesContent":["import { describe, expect, it } from \"vitest\";\nimport { generateBareMetalInstall } from \"./bare-metal-install.js\";\n\ndescribe(\"generateBareMetalInstall\", () => {\n\tit(\"returns install.ps1 for windows/amd64\", () => {\n\t\tconst result = generateBareMetalInstall({\n\t\t\tplatform: \"windows/amd64\",\n\t\t\tprojectName: \"my-stack\",\n\t\t});\n\t\texpect(result).toHaveProperty(\"install.ps1\");\n\t\texpect(Object.keys(result)).toHaveLength(1);\n\t\texpect(result[\"install.ps1\"]).toContain(\"docker compose\");\n\t\texpect(result[\"install.ps1\"]).toContain(\"PowerShell\");\n\t});\n\n\tit(\"returns install.sh for linux/amd64\", () => {\n\t\tconst result = generateBareMetalInstall({\n\t\t\tplatform: \"linux/amd64\",\n\t\t\tprojectName: \"my-stack\",\n\t\t});\n\t\texpect(result).toHaveProperty(\"install.sh\");\n\t\texpect(Object.keys(result)).toHaveLength(1);\n\t\texpect(result[\"install.sh\"]).toContain(\"docker\");\n\t\texpect(result[\"install.sh\"]).toContain(\"compose\");\n\t});\n\n\tit(\"returns install.sh for linux/arm64\", () => {\n\t\tconst result = generateBareMetalInstall({\n\t\t\tplatform: \"linux/arm64\",\n\t\t\tprojectName: \"my-stack\",\n\t\t});\n\t\texpect(result).toHaveProperty(\"install.sh\");\n\t\texpect(result[\"install.sh\"]).toContain(\"docker\");\n\t});\n\n\tit(\"returns install.sh for macos/amd64 and macos/arm64\", () => {\n\t\tfor (const platform of [\"macos/amd64\", \"macos/arm64\"] as const) {\n\t\t\tconst result = generateBareMetalInstall({ platform, projectName: \"my-stack\" });\n\t\t\texpect(result).toHaveProperty(\"install.sh\");\n\t\t\texpect(result[\"install.sh\"]).toContain(\"Docker\");\n\t\t}\n\t});\n});\n"],"mappings":";;;;AAGAA,6BAAS,kCAAkC;AAC1C,wBAAG,+CAA+C;EACjD,MAAM,SAASC,+DAAyB;GACvC,UAAU;GACV,aAAa;GACb,CAAC;AACF,mCAAO,OAAO,CAAC,eAAe,cAAc;AAC5C,mCAAO,OAAO,KAAK,OAAO,CAAC,CAAC,aAAa,EAAE;AAC3C,mCAAO,OAAO,eAAe,CAAC,UAAU,iBAAiB;AACzD,mCAAO,OAAO,eAAe,CAAC,UAAU,aAAa;GACpD;AAEF,wBAAG,4CAA4C;EAC9C,MAAM,SAASA,+DAAyB;GACvC,UAAU;GACV,aAAa;GACb,CAAC;AACF,mCAAO,OAAO,CAAC,eAAe,aAAa;AAC3C,mCAAO,OAAO,KAAK,OAAO,CAAC,CAAC,aAAa,EAAE;AAC3C,mCAAO,OAAO,cAAc,CAAC,UAAU,SAAS;AAChD,mCAAO,OAAO,cAAc,CAAC,UAAU,UAAU;GAChD;AAEF,wBAAG,4CAA4C;EAC9C,MAAM,SAASA,+DAAyB;GACvC,UAAU;GACV,aAAa;GACb,CAAC;AACF,mCAAO,OAAO,CAAC,eAAe,aAAa;AAC3C,mCAAO,OAAO,cAAc,CAAC,UAAU,SAAS;GAC/C;AAEF,wBAAG,4DAA4D;AAC9D,OAAK,MAAM,YAAY,CAAC,eAAe,cAAc,EAAW;GAC/D,MAAM,SAASA,+DAAyB;IAAE;IAAU,aAAa;IAAY,CAAC;AAC9E,oCAAO,OAAO,CAAC,eAAe,aAAa;AAC3C,oCAAO,OAAO,cAAc,CAAC,UAAU,SAAS;;GAEhD;EACD"}

package/dist/generators/bare-metal-install.test.d.cts

@@ -0,0 +1 @@
+export { };

package/dist/generators/bare-metal-install.test.mjs

@@ -1,4 +1,4 @@
-import { n as describe, r as it, t as globalExpect } from "../vi.2VT5v0um-BgmKutxR.mjs";
+import { n as describe, r as it, t as globalExpect } from "../vi.2VT5v0um-CFyDIn0m.mjs";
 import { generateBareMetalInstall } from "./bare-metal-install.mjs";
 
 //#region src/generators/bare-metal-install.test.ts

package/dist/generators/caddy.cjs

@@ -0,0 +1,79 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+//#region src/generators/caddy.ts
+/**
+* Generates a Caddyfile with reverse proxy entries for each exposed service.
+*
+* Each service with exposed ports gets a subdomain route under the provided domain.
+* Services without exposed ports are skipped.
+*
+* @param resolved - The resolved service configuration
+* @param domain - The main domain for routing (e.g. "example.com")
+* @returns The Caddyfile content as a string
+*/
+function generateCaddyfile(resolved, domain) {
+	const sections = [];
+	sections.push(`# ═══════════════════════════════════════════════════════════════════════════════
+# OpenClaw Caddyfile — Auto-generated reverse proxy configuration
+# Domain: ${domain}
+# ═══════════════════════════════════════════════════════════════════════════════
+
+{
+	# Global options
+	email admin@${domain}
+	acme_ca https://acme-v02.api.letsencrypt.org/directory
+}
+`);
+	for (const { definition } of resolved.services) {
+		if (definition.id === "caddy" || definition.id === "traefik") continue;
+		const exposedPorts = definition.ports.filter((p) => p.exposed);
+		if (exposedPorts.length === 0) continue;
+		const primaryPort = exposedPorts[0];
+		const subdomain = `${definition.id}.${domain}`;
+		const block = [
+			`# ${definition.icon} ${definition.name}`,
+			`# ${definition.description}`,
+			`${subdomain} {`,
+			`	reverse_proxy ${definition.id}:${primaryPort.container} {`,
+			`		header_up Host {host}`,
+			`		header_up X-Real-IP {remote_host}`,
+			`		header_up X-Forwarded-For {remote_host}`,
+			`		header_up X-Forwarded-Proto {scheme}`,
+			`	}`
+		];
+		if (definition.healthcheck) {
+			block.push("");
+			block.push(`	# Health check`);
+			block.push(`	handle /health {`);
+			block.push(`		reverse_proxy ${definition.id}:${primaryPort.container}`);
+			block.push(`	}`);
+		}
+		block.push(`}`);
+		block.push("");
+		for (let i = 1; i < exposedPorts.length; i++) {
+			const port = exposedPorts[i];
+			const portSubdomain = `${definition.id}-${port.description.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/-+$/, "")}.${domain}`;
+			block.push(`# ${definition.name} — ${port.description}`);
+			block.push(`${portSubdomain} {`);
+			block.push(`	reverse_proxy ${definition.id}:${port.container}`);
+			block.push(`}`);
+			block.push("");
+		}
+		sections.push(block.join("\n"));
+	}
+	sections.push(`# Root domain — serves the OpenClaw gateway
+${domain} {
+	reverse_proxy openclaw:18789 {
+		header_up Host {host}
+		header_up X-Real-IP {remote_host}
+		header_up X-Forwarded-For {remote_host}
+		header_up X-Forwarded-Proto {scheme}
+	}
+}
+`);
+	return sections.join("\n");
+}
+
+//#endregion
+exports.generateCaddyfile = generateCaddyfile;
+//# sourceMappingURL=caddy.cjs.map

package/dist/generators/caddy.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"caddy.cjs","names":[],"sources":["../../src/generators/caddy.ts"],"sourcesContent":["import type { ResolverOutput } from \"../types.js\";\n\n/**\n * Generates a Caddyfile with reverse proxy entries for each exposed service.\n *\n * Each service with exposed ports gets a subdomain route under the provided domain.\n * Services without exposed ports are skipped.\n *\n * @param resolved - The resolved service configuration\n * @param domain - The main domain for routing (e.g. \"example.com\")\n * @returns The Caddyfile content as a string\n */\nexport function generateCaddyfile(resolved: ResolverOutput, domain: string): string {\n\tconst sections: string[] = [];\n\n\t// ── Global Options ──────────────────────────────────────────────────────\n\n\tsections.push(`# ═══════════════════════════════════════════════════════════════════════════════\n# OpenClaw Caddyfile — Auto-generated reverse proxy configuration\n# Domain: ${domain}\n# ═══════════════════════════════════════════════════════════════════════════════\n\n{\n\t# Global options\n\temail admin@${domain}\n\tacme_ca https://acme-v02.api.letsencrypt.org/directory\n}\n`);\n\n\t// ── Per-Service Reverse Proxy Blocks ─────────────────────────────────────\n\n\tfor (const { definition } of resolved.services) {\n\t\t// Skip the proxy service itself\n\t\tif (definition.id === \"caddy\" || definition.id === \"traefik\") continue;\n\n\t\tconst exposedPorts = definition.ports.filter((p) => p.exposed);\n\t\tif (exposedPorts.length === 0) continue;\n\n\t\t// Use the first exposed port as the primary route target\n\t\tconst primaryPort = exposedPorts[0]!;\n\t\tconst subdomain = `${definition.id}.${domain}`;\n\n\t\tconst block = [\n\t\t\t`# ${definition.icon} ${definition.name}`,\n\t\t\t`# ${definition.description}`,\n\t\t\t`${subdomain} {`,\n\t\t\t`\treverse_proxy ${definition.id}:${primaryPort.container} {`,\n\t\t\t`\t\theader_up Host {host}`,\n\t\t\t`\t\theader_up X-Real-IP {remote_host}`,\n\t\t\t`\t\theader_up X-Forwarded-For {remote_host}`,\n\t\t\t`\t\theader_up X-Forwarded-Proto {scheme}`,\n\t\t\t`\t}`,\n\t\t];\n\n\t\t// Add health check if service has one\n\t\tif (definition.healthcheck) {\n\t\t\tblock.push(\"\");\n\t\t\tblock.push(`\t# Health check`);\n\t\t\tblock.push(`\thandle /health {`);\n\t\t\tblock.push(`\t\treverse_proxy ${definition.id}:${primaryPort.container}`);\n\t\t\tblock.push(`\t}`);\n\t\t}\n\n\t\tblock.push(`}`);\n\t\tblock.push(\"\");\n\n\t\t// If there are additional exposed ports, add them as separate entries\n\t\tfor (let i = 1; i < exposedPorts.length; i++) {\n\t\t\tconst port = exposedPorts[i]!;\n\t\t\tconst portSubdomain = `${definition.id}-${port.description\n\t\t\t\t.toLowerCase()\n\t\t\t\t.replace(/[^a-z0-9]+/g, \"-\")\n\t\t\t\t.replace(/-+$/, \"\")}.${domain}`;\n\n\t\t\tblock.push(`# ${definition.name} — ${port.description}`);\n\t\t\tblock.push(`${portSubdomain} {`);\n\t\t\tblock.push(`\treverse_proxy ${definition.id}:${port.container}`);\n\t\t\tblock.push(`}`);\n\t\t\tblock.push(\"\");\n\t\t}\n\n\t\tsections.push(block.join(\"\\n\"));\n\t}\n\n\t// ── Fallback / Root Domain ──────────────────────────────────────────────\n\n\tsections.push(`# Root domain — serves the OpenClaw gateway\n${domain} {\n\treverse_proxy openclaw:18789 {\n\t\theader_up Host {host}\n\t\theader_up X-Real-IP {remote_host}\n\t\theader_up X-Forwarded-For {remote_host}\n\t\theader_up X-Forwarded-Proto {scheme}\n\t}\n}\n`);\n\n\treturn sections.join(\"\\n\");\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,SAAgB,kBAAkB,UAA0B,QAAwB;CACnF,MAAM,WAAqB,EAAE;AAI7B,UAAS,KAAK;;YAEH,OAAO;;;;;eAKJ,OAAO;;;EAGpB;AAID,MAAK,MAAM,EAAE,gBAAgB,SAAS,UAAU;AAE/C,MAAI,WAAW,OAAO,WAAW,WAAW,OAAO,UAAW;EAE9D,MAAM,eAAe,WAAW,MAAM,QAAQ,MAAM,EAAE,QAAQ;AAC9D,MAAI,aAAa,WAAW,EAAG;EAG/B,MAAM,cAAc,aAAa;EACjC,MAAM,YAAY,GAAG,WAAW,GAAG,GAAG;EAEtC,MAAM,QAAQ;GACb,KAAK,WAAW,KAAK,GAAG,WAAW;GACnC,KAAK,WAAW;GAChB,GAAG,UAAU;GACb,kBAAkB,WAAW,GAAG,GAAG,YAAY,UAAU;GACzD;GACA;GACA;GACA;GACA;GACA;AAGD,MAAI,WAAW,aAAa;AAC3B,SAAM,KAAK,GAAG;AACd,SAAM,KAAK,kBAAkB;AAC7B,SAAM,KAAK,oBAAoB;AAC/B,SAAM,KAAK,mBAAmB,WAAW,GAAG,GAAG,YAAY,YAAY;AACvE,SAAM,KAAK,KAAK;;AAGjB,QAAM,KAAK,IAAI;AACf,QAAM,KAAK,GAAG;AAGd,OAAK,IAAI,IAAI,GAAG,IAAI,aAAa,QAAQ,KAAK;GAC7C,MAAM,OAAO,aAAa;GAC1B,MAAM,gBAAgB,GAAG,WAAW,GAAG,GAAG,KAAK,YAC7C,aAAa,CACb,QAAQ,eAAe,IAAI,CAC3B,QAAQ,OAAO,GAAG,CAAC,GAAG;AAExB,SAAM,KAAK,KAAK,WAAW,KAAK,KAAK,KAAK,cAAc;AACxD,SAAM,KAAK,GAAG,cAAc,IAAI;AAChC,SAAM,KAAK,kBAAkB,WAAW,GAAG,GAAG,KAAK,YAAY;AAC/D,SAAM,KAAK,IAAI;AACf,SAAM,KAAK,GAAG;;AAGf,WAAS,KAAK,MAAM,KAAK,KAAK,CAAC;;AAKhC,UAAS,KAAK;EACb,OAAO;;;;;;;;EAQP;AAED,QAAO,SAAS,KAAK,KAAK"}

package/dist/generators/caddy.d.cts

@@ -0,0 +1,17 @@
+import { ResolverOutput } from "../types.cjs";
+
+//#region src/generators/caddy.d.ts
+/**
+ * Generates a Caddyfile with reverse proxy entries for each exposed service.
+ *
+ * Each service with exposed ports gets a subdomain route under the provided domain.
+ * Services without exposed ports are skipped.
+ *
+ * @param resolved - The resolved service configuration
+ * @param domain - The main domain for routing (e.g. "example.com")
+ * @returns The Caddyfile content as a string
+ */
+declare function generateCaddyfile(resolved: ResolverOutput, domain: string): string;
+//#endregion
+export { generateCaddyfile };
+//# sourceMappingURL=caddy.d.cts.map

package/dist/generators/caddy.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caddy.d.cts","names":[],"sources":["../../src/generators/caddy.ts"],"mappings":";;;;;AAYA;;;;;;;;iBAAgB,iBAAA,CAAkB,QAAA,EAAU,cAAA,EAAgB,MAAA"}

package/dist/generators/caddy.test.cjs

@@ -0,0 +1,44 @@
+const require_vi_2VT5v0um = require('../vi.2VT5v0um-BmRMvymT.cjs');
+const require_generate = require('../generate.cjs');
+
+//#region src/generators/caddy.test.ts
+require_vi_2VT5v0um.describe("generateCaddyfile (via generate)", () => {
+	const baseInput = {
+		projectName: "caddy-test",
+		services: ["redis", "n8n"],
+		skillPacks: [],
+		proxy: "caddy",
+		domain: "example.com",
+		gpu: false,
+		platform: "linux/amd64",
+		deployment: "local",
+		generateSecrets: true,
+		openclawVersion: "latest"
+	};
+	require_vi_2VT5v0um.it("generates Caddyfile when proxy is caddy", () => {
+		const result = require_generate.generate(baseInput);
+		require_vi_2VT5v0um.globalExpect(result.files).toHaveProperty("caddy/Caddyfile");
+		require_vi_2VT5v0um.globalExpect(result.files["caddy/Caddyfile"].length).toBeGreaterThan(0);
+	});
+	require_vi_2VT5v0um.it("does not generate Caddyfile when proxy is none", () => {
+		require_vi_2VT5v0um.globalExpect(require_generate.generate({
+			...baseInput,
+			proxy: "none"
+		}).files).not.toHaveProperty("caddy/Caddyfile");
+	});
+	require_vi_2VT5v0um.it("Caddyfile contains the domain", () => {
+		const caddyfile = require_generate.generate(baseInput).files["caddy/Caddyfile"];
+		require_vi_2VT5v0um.globalExpect(caddyfile).toContain("example.com");
+	});
+	require_vi_2VT5v0um.it("Caddyfile includes reverse proxy directives for services with exposed ports", () => {
+		const caddyfile = require_generate.generate(baseInput).files["caddy/Caddyfile"];
+		require_vi_2VT5v0um.globalExpect(caddyfile).toContain("n8n");
+	});
+	require_vi_2VT5v0um.it("Caddyfile includes TLS configuration", () => {
+		const caddyfile = require_generate.generate(baseInput).files["caddy/Caddyfile"];
+		require_vi_2VT5v0um.globalExpect(caddyfile.length).toBeGreaterThan(50);
+	});
+});
+
+//#endregion
+//# sourceMappingURL=caddy.test.cjs.map

package/dist/generators/caddy.test.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"caddy.test.cjs","names":["describe","generate"],"sources":["../../src/generators/caddy.test.ts"],"sourcesContent":["import { describe, expect, it } from \"vitest\";\nimport { generate } from \"../generate.js\";\n\ndescribe(\"generateCaddyfile (via generate)\", () => {\n\tconst baseInput = {\n\t\tprojectName: \"caddy-test\",\n\t\tservices: [\"redis\", \"n8n\"],\n\t\tskillPacks: [] as string[],\n\t\tproxy: \"caddy\" as const,\n\t\tdomain: \"example.com\",\n\t\tgpu: false,\n\t\tplatform: \"linux/amd64\" as const,\n\t\tdeployment: \"local\" as const,\n\t\tgenerateSecrets: true,\n\t\topenclawVersion: \"latest\",\n\t};\n\n\tit(\"generates Caddyfile when proxy is caddy\", () => {\n\t\tconst result = generate(baseInput);\n\n\t\texpect(result.files).toHaveProperty(\"caddy/Caddyfile\");\n\t\texpect(result.files[\"caddy/Caddyfile\"]!.length).toBeGreaterThan(0);\n\t});\n\n\tit(\"does not generate Caddyfile when proxy is none\", () => {\n\t\tconst result = generate({\n\t\t\t...baseInput,\n\t\t\tproxy: \"none\",\n\t\t});\n\n\t\texpect(result.files).not.toHaveProperty(\"caddy/Caddyfile\");\n\t});\n\n\tit(\"Caddyfile contains the domain\", () => {\n\t\tconst result = generate(baseInput);\n\t\tconst caddyfile = result.files[\"caddy/Caddyfile\"]!;\n\n\t\texpect(caddyfile).toContain(\"example.com\");\n\t});\n\n\tit(\"Caddyfile includes reverse proxy directives for services with exposed ports\", () => {\n\t\tconst result = generate(baseInput);\n\t\tconst caddyfile = result.files[\"caddy/Caddyfile\"]!;\n\n\t\t// Should reference n8n since it has exposed ports\n\t\texpect(caddyfile).toContain(\"n8n\");\n\t});\n\n\tit(\"Caddyfile includes TLS configuration\", () => {\n\t\tconst result = generate(baseInput);\n\t\tconst caddyfile = result.files[\"caddy/Caddyfile\"]!;\n\n\t\t// Caddy auto-enables TLS, so should reference HTTPS or TLS\n\t\texpect(caddyfile.length).toBeGreaterThan(50);\n\t});\n});\n"],"mappings":";;;;AAGAA,6BAAS,0CAA0C;CAClD,MAAM,YAAY;EACjB,aAAa;EACb,UAAU,CAAC,SAAS,MAAM;EAC1B,YAAY,EAAE;EACd,OAAO;EACP,QAAQ;EACR,KAAK;EACL,UAAU;EACV,YAAY;EACZ,iBAAiB;EACjB,iBAAiB;EACjB;AAED,wBAAG,iDAAiD;EACnD,MAAM,SAASC,0BAAS,UAAU;AAElC,mCAAO,OAAO,MAAM,CAAC,eAAe,kBAAkB;AACtD,mCAAO,OAAO,MAAM,mBAAoB,OAAO,CAAC,gBAAgB,EAAE;GACjE;AAEF,wBAAG,wDAAwD;AAM1D,mCALeA,0BAAS;GACvB,GAAG;GACH,OAAO;GACP,CAAC,CAEY,MAAM,CAAC,IAAI,eAAe,kBAAkB;GACzD;AAEF,wBAAG,uCAAuC;EAEzC,MAAM,YADSA,0BAAS,UAAU,CACT,MAAM;AAE/B,mCAAO,UAAU,CAAC,UAAU,cAAc;GACzC;AAEF,wBAAG,qFAAqF;EAEvF,MAAM,YADSA,0BAAS,UAAU,CACT,MAAM;AAG/B,mCAAO,UAAU,CAAC,UAAU,MAAM;GACjC;AAEF,wBAAG,8CAA8C;EAEhD,MAAM,YADSA,0BAAS,UAAU,CACT,MAAM;AAG/B,mCAAO,UAAU,OAAO,CAAC,gBAAgB,GAAG;GAC3C;EACD"}

package/dist/generators/caddy.test.d.cts

@@ -0,0 +1 @@
+export { };

package/dist/generators/caddy.test.mjs

@@ -1,4 +1,4 @@
-import { n as describe, r as it, t as globalExpect } from "../vi.2VT5v0um-BgmKutxR.mjs";
+import { n as describe, r as it, t as globalExpect } from "../vi.2VT5v0um-CFyDIn0m.mjs";
 import { generate } from "../generate.mjs";
 
 //#region src/generators/caddy.test.ts

package/dist/generators/cloud-init.cjs

@@ -0,0 +1,132 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+//#region src/generators/cloud-init.ts
+/**
+* Generates a cloud-init.yml file for deploying the stack to a VPS.
+* Compatible with Hetzner, DigitalOcean, Vultr, Linode, and any provider
+* that supports cloud-init user data.
+*
+* Based on the patterns from openclaw_docker-setup.sh and openclaw_install.sh:
+* 1. Installs Docker via the official convenience script
+* 2. Adds the default user to the docker group
+* 3. Verifies Docker Compose v2 plugin is available
+* 4. Creates /opt/openclaw/ with config, workspace, and identity directories
+* 5. Writes docker-compose.yml and .env inline (env with restrictive 0600 perms)
+* 6. Starts the stack with docker compose up -d
+* 7. Polls the gateway health endpoint until it responds (up to 120s)
+* 8. Logs all operations to /opt/openclaw/deploy.log
+*/
+function generateCloudInit(options) {
+	const gatewayPort = options.gatewayPort ?? 18789;
+	const indentContent = (content) => content.split("\n").map((line) => `        ${line}`).join("\n");
+	return `#cloud-config
+# Cloud-init for ${options.projectName}
+# Generated by better-openclaw
+# Compatible with: Hetzner, DigitalOcean, Vultr, Linode, AWS, GCP
+
+package_update: true
+
+packages:
+  - curl
+  - git
+  - ca-certificates
+  - gnupg
+
+write_files:
+  - path: /opt/openclaw/docker-compose.yml
+    permissions: "0644"
+    content: |
+${indentContent(options.composeYaml)}
+
+  - path: /opt/openclaw/.env
+    permissions: "0600"
+    content: |
+${indentContent(options.envContent)}
+
+  - path: /opt/openclaw/deploy.sh
+    permissions: "0755"
+    content: |
+        #!/usr/bin/env bash
+        # OpenClaw deployment script — runs as runcmd via cloud-init
+        # All output logged to /opt/openclaw/deploy.log
+        set -euo pipefail
+        exec > >(tee -a /opt/openclaw/deploy.log) 2>&1
+        echo "==> [$(date -u +%Y-%m-%dT%H:%M:%SZ)] Starting OpenClaw deployment"
+
+        # Install Docker via official convenience script
+        echo "==> Installing Docker"
+        curl -fsSL https://get.docker.com | sh
+
+        # Enable and start Docker daemon
+        systemctl enable docker
+        systemctl start docker
+
+        # Add default user to docker group (cloud providers commonly use 'ubuntu' or 'root')
+        DEFAULT_USER="\${SUDO_USER:-$(logname 2>/dev/null || echo root)}"
+        if [ "$DEFAULT_USER" != "root" ]; then
+          usermod -aG docker "$DEFAULT_USER"
+          echo "==> Added $DEFAULT_USER to docker group"
+        fi
+
+        # Verify Docker Compose v2 plugin
+        if ! docker compose version >/dev/null 2>&1; then
+          echo "ERROR: Docker Compose v2 plugin not available" >&2
+          exit 1
+        fi
+        echo "==> Docker Compose: $(docker compose version)"
+
+        # Create openclaw directories (matching docker-setup.sh structure)
+        # config: gateway config files (openclaw.json)
+        # workspace: agent workspace and data
+        # identity: device identity for Docker Desktop/Windows bind mount compat
+        mkdir -p /opt/openclaw/openclaw/config
+        mkdir -p /opt/openclaw/openclaw/workspace
+        mkdir -p /opt/openclaw/openclaw/config/identity
+
+        # Start the stack
+        echo "==> Starting stack"
+        cd /opt/openclaw
+        docker compose up -d
+
+        # Health check: poll gateway until it responds (up to 120 seconds)
+        echo "==> Waiting for gateway health check on port ${gatewayPort}"
+        RETRIES=60
+        while [ "$RETRIES" -gt 0 ]; do
+          if curl -sf "http://127.0.0.1:${gatewayPort}" >/dev/null 2>&1; then
+            echo "==> Gateway is healthy"
+            break
+          fi
+          RETRIES=$((RETRIES - 1))
+          sleep 2
+        done
+
+        if [ "$RETRIES" -eq 0 ]; then
+          echo "WARNING: Gateway did not respond within 120s. Check logs with:"
+          echo "  docker compose -f /opt/openclaw/docker-compose.yml logs -f openclaw-gateway"
+        fi
+
+        # Print summary
+        echo ""
+        echo "==> Deployment complete at $(date -u +%Y-%m-%dT%H:%M:%SZ)"
+        echo "    Project: ${options.projectName}"
+        echo "    Gateway: http://$(hostname -I | awk '{print $1}'):${gatewayPort}"
+        echo ""
+        echo "Useful commands:"
+        echo "  docker compose -f /opt/openclaw/docker-compose.yml logs -f"
+        echo "  docker compose -f /opt/openclaw/docker-compose.yml ps"
+        echo "  docker compose -f /opt/openclaw/docker-compose.yml restart"
+        echo ""
+        echo "Channel setup (optional):"
+        echo "  docker compose -f /opt/openclaw/docker-compose.yml run --rm openclaw-cli channels login"
+        echo "  docker compose -f /opt/openclaw/docker-compose.yml run --rm openclaw-cli channels add --channel telegram --token <TOKEN>"
+
+runcmd:
+  - /opt/openclaw/deploy.sh
+
+final_message: "OpenClaw stack '${options.projectName}' is ready! Connect to port ${gatewayPort}."
+`;
+}
+
+//#endregion
+exports.generateCloudInit = generateCloudInit;
+//# sourceMappingURL=cloud-init.cjs.map

package/dist/generators/cloud-init.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-init.cjs","names":[],"sources":["../../src/generators/cloud-init.ts"],"sourcesContent":["/**\n * Generates a cloud-init.yml file for deploying the stack to a VPS.\n * Compatible with Hetzner, DigitalOcean, Vultr, Linode, and any provider\n * that supports cloud-init user data.\n *\n * Based on the patterns from openclaw_docker-setup.sh and openclaw_install.sh:\n * 1. Installs Docker via the official convenience script\n * 2. Adds the default user to the docker group\n * 3. Verifies Docker Compose v2 plugin is available\n * 4. Creates /opt/openclaw/ with config, workspace, and identity directories\n * 5. Writes docker-compose.yml and .env inline (env with restrictive 0600 perms)\n * 6. Starts the stack with docker compose up -d\n * 7. Polls the gateway health endpoint until it responds (up to 120s)\n * 8. Logs all operations to /opt/openclaw/deploy.log\n */\nexport function generateCloudInit(options: {\n\tcomposeYaml: string;\n\tenvContent: string;\n\tprojectName: string;\n\tgatewayPort?: number;\n}): string {\n\tconst gatewayPort = options.gatewayPort ?? 18789;\n\n\t// Escape content for cloud-init write_files (indent by 8 spaces)\n\tconst indentContent = (content: string) =>\n\t\tcontent\n\t\t\t.split(\"\\n\")\n\t\t\t.map((line) => `        ${line}`)\n\t\t\t.join(\"\\n\");\n\n\treturn `#cloud-config\n# Cloud-init for ${options.projectName}\n# Generated by better-openclaw\n# Compatible with: Hetzner, DigitalOcean, Vultr, Linode, AWS, GCP\n\npackage_update: true\n\npackages:\n  - curl\n  - git\n  - ca-certificates\n  - gnupg\n\nwrite_files:\n  - path: /opt/openclaw/docker-compose.yml\n    permissions: \"0644\"\n    content: |\n${indentContent(options.composeYaml)}\n\n  - path: /opt/openclaw/.env\n    permissions: \"0600\"\n    content: |\n${indentContent(options.envContent)}\n\n  - path: /opt/openclaw/deploy.sh\n    permissions: \"0755\"\n    content: |\n        #!/usr/bin/env bash\n        # OpenClaw deployment script — runs as runcmd via cloud-init\n        # All output logged to /opt/openclaw/deploy.log\n        set -euo pipefail\n        exec > >(tee -a /opt/openclaw/deploy.log) 2>&1\n        echo \"==> [$(date -u +%Y-%m-%dT%H:%M:%SZ)] Starting OpenClaw deployment\"\n\n        # Install Docker via official convenience script\n        echo \"==> Installing Docker\"\n        curl -fsSL https://get.docker.com | sh\n\n        # Enable and start Docker daemon\n        systemctl enable docker\n        systemctl start docker\n\n        # Add default user to docker group (cloud providers commonly use 'ubuntu' or 'root')\n        DEFAULT_USER=\"\\${SUDO_USER:-$(logname 2>/dev/null || echo root)}\"\n        if [ \"$DEFAULT_USER\" != \"root\" ]; then\n          usermod -aG docker \"$DEFAULT_USER\"\n          echo \"==> Added $DEFAULT_USER to docker group\"\n        fi\n\n        # Verify Docker Compose v2 plugin\n        if ! docker compose version >/dev/null 2>&1; then\n          echo \"ERROR: Docker Compose v2 plugin not available\" >&2\n          exit 1\n        fi\n        echo \"==> Docker Compose: $(docker compose version)\"\n\n        # Create openclaw directories (matching docker-setup.sh structure)\n        # config: gateway config files (openclaw.json)\n        # workspace: agent workspace and data\n        # identity: device identity for Docker Desktop/Windows bind mount compat\n        mkdir -p /opt/openclaw/openclaw/config\n        mkdir -p /opt/openclaw/openclaw/workspace\n        mkdir -p /opt/openclaw/openclaw/config/identity\n\n        # Start the stack\n        echo \"==> Starting stack\"\n        cd /opt/openclaw\n        docker compose up -d\n\n        # Health check: poll gateway until it responds (up to 120 seconds)\n        echo \"==> Waiting for gateway health check on port ${gatewayPort}\"\n        RETRIES=60\n        while [ \"$RETRIES\" -gt 0 ]; do\n          if curl -sf \"http://127.0.0.1:${gatewayPort}\" >/dev/null 2>&1; then\n            echo \"==> Gateway is healthy\"\n            break\n          fi\n          RETRIES=$((RETRIES - 1))\n          sleep 2\n        done\n\n        if [ \"$RETRIES\" -eq 0 ]; then\n          echo \"WARNING: Gateway did not respond within 120s. Check logs with:\"\n          echo \"  docker compose -f /opt/openclaw/docker-compose.yml logs -f openclaw-gateway\"\n        fi\n\n        # Print summary\n        echo \"\"\n        echo \"==> Deployment complete at $(date -u +%Y-%m-%dT%H:%M:%SZ)\"\n        echo \"    Project: ${options.projectName}\"\n        echo \"    Gateway: http://$(hostname -I | awk '{print $1}'):${gatewayPort}\"\n        echo \"\"\n        echo \"Useful commands:\"\n        echo \"  docker compose -f /opt/openclaw/docker-compose.yml logs -f\"\n        echo \"  docker compose -f /opt/openclaw/docker-compose.yml ps\"\n        echo \"  docker compose -f /opt/openclaw/docker-compose.yml restart\"\n        echo \"\"\n        echo \"Channel setup (optional):\"\n        echo \"  docker compose -f /opt/openclaw/docker-compose.yml run --rm openclaw-cli channels login\"\n        echo \"  docker compose -f /opt/openclaw/docker-compose.yml run --rm openclaw-cli channels add --channel telegram --token <TOKEN>\"\n\nruncmd:\n  - /opt/openclaw/deploy.sh\n\nfinal_message: \"OpenClaw stack '${options.projectName}' is ready! Connect to port ${gatewayPort}.\"\n`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAeA,SAAgB,kBAAkB,SAKvB;CACV,MAAM,cAAc,QAAQ,eAAe;CAG3C,MAAM,iBAAiB,YACtB,QACE,MAAM,KAAK,CACX,KAAK,SAAS,WAAW,OAAO,CAChC,KAAK,KAAK;AAEb,QAAO;mBACW,QAAQ,YAAY;;;;;;;;;;;;;;;;EAgBrC,cAAc,QAAQ,YAAY,CAAC;;;;;EAKnC,cAAc,QAAQ,WAAW,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6DAgDyB,YAAY;;;0CAG/B,YAAY;;;;;;;;;;;;;;;;6BAgBzB,QAAQ,YAAY;sEACqB,YAAY;;;;;;;;;;;;;;kCAchD,QAAQ,YAAY,8BAA8B,YAAY"}

package/dist/generators/cloud-init.d.cts

@@ -0,0 +1,25 @@
+//#region src/generators/cloud-init.d.ts
+/**
+ * Generates a cloud-init.yml file for deploying the stack to a VPS.
+ * Compatible with Hetzner, DigitalOcean, Vultr, Linode, and any provider
+ * that supports cloud-init user data.
+ *
+ * Based on the patterns from openclaw_docker-setup.sh and openclaw_install.sh:
+ * 1. Installs Docker via the official convenience script
+ * 2. Adds the default user to the docker group
+ * 3. Verifies Docker Compose v2 plugin is available
+ * 4. Creates /opt/openclaw/ with config, workspace, and identity directories
+ * 5. Writes docker-compose.yml and .env inline (env with restrictive 0600 perms)
+ * 6. Starts the stack with docker compose up -d
+ * 7. Polls the gateway health endpoint until it responds (up to 120s)
+ * 8. Logs all operations to /opt/openclaw/deploy.log
+ */
+declare function generateCloudInit(options: {
+  composeYaml: string;
+  envContent: string;
+  projectName: string;
+  gatewayPort?: number;
+}): string;
+//#endregion
+export { generateCloudInit };
+//# sourceMappingURL=cloud-init.d.cts.map

package/dist/generators/cloud-init.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-init.d.cts","names":[],"sources":["../../src/generators/cloud-init.ts"],"mappings":";;AAeA;;;;;;;;;;;;;;iBAAgB,iBAAA,CAAkB,OAAA;EACjC,WAAA;EACA,UAAA;EACA,WAAA;EACA,WAAA;AAAA"}

package/dist/generators/cloud-init.d.mts

@@ -0,0 +1,25 @@
+//#region src/generators/cloud-init.d.ts
+/**
+ * Generates a cloud-init.yml file for deploying the stack to a VPS.
+ * Compatible with Hetzner, DigitalOcean, Vultr, Linode, and any provider
+ * that supports cloud-init user data.
+ *
+ * Based on the patterns from openclaw_docker-setup.sh and openclaw_install.sh:
+ * 1. Installs Docker via the official convenience script
+ * 2. Adds the default user to the docker group
+ * 3. Verifies Docker Compose v2 plugin is available
+ * 4. Creates /opt/openclaw/ with config, workspace, and identity directories
+ * 5. Writes docker-compose.yml and .env inline (env with restrictive 0600 perms)
+ * 6. Starts the stack with docker compose up -d
+ * 7. Polls the gateway health endpoint until it responds (up to 120s)
+ * 8. Logs all operations to /opt/openclaw/deploy.log
+ */
+declare function generateCloudInit(options: {
+  composeYaml: string;
+  envContent: string;
+  projectName: string;
+  gatewayPort?: number;
+}): string;
+//#endregion
+export { generateCloudInit };
+//# sourceMappingURL=cloud-init.d.mts.map

package/dist/generators/cloud-init.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-init.d.mts","names":[],"sources":["../../src/generators/cloud-init.ts"],"mappings":";;AAeA;;;;;;;;;;;;;;iBAAgB,iBAAA,CAAkB,OAAA;EACjC,WAAA;EACA,UAAA;EACA,WAAA;EACA,WAAA;AAAA"}

package/dist/generators/cloud-init.mjs

@@ -0,0 +1,130 @@
+//#region src/generators/cloud-init.ts
+/**
+* Generates a cloud-init.yml file for deploying the stack to a VPS.
+* Compatible with Hetzner, DigitalOcean, Vultr, Linode, and any provider
+* that supports cloud-init user data.
+*
+* Based on the patterns from openclaw_docker-setup.sh and openclaw_install.sh:
+* 1. Installs Docker via the official convenience script
+* 2. Adds the default user to the docker group
+* 3. Verifies Docker Compose v2 plugin is available
+* 4. Creates /opt/openclaw/ with config, workspace, and identity directories
+* 5. Writes docker-compose.yml and .env inline (env with restrictive 0600 perms)
+* 6. Starts the stack with docker compose up -d
+* 7. Polls the gateway health endpoint until it responds (up to 120s)
+* 8. Logs all operations to /opt/openclaw/deploy.log
+*/
+function generateCloudInit(options) {
+	const gatewayPort = options.gatewayPort ?? 18789;
+	const indentContent = (content) => content.split("\n").map((line) => `        ${line}`).join("\n");
+	return `#cloud-config
+# Cloud-init for ${options.projectName}
+# Generated by better-openclaw
+# Compatible with: Hetzner, DigitalOcean, Vultr, Linode, AWS, GCP
+
+package_update: true
+
+packages:
+  - curl
+  - git
+  - ca-certificates
+  - gnupg
+
+write_files:
+  - path: /opt/openclaw/docker-compose.yml
+    permissions: "0644"
+    content: |
+${indentContent(options.composeYaml)}
+
+  - path: /opt/openclaw/.env
+    permissions: "0600"
+    content: |
+${indentContent(options.envContent)}
+
+  - path: /opt/openclaw/deploy.sh
+    permissions: "0755"
+    content: |
+        #!/usr/bin/env bash
+        # OpenClaw deployment script — runs as runcmd via cloud-init
+        # All output logged to /opt/openclaw/deploy.log
+        set -euo pipefail
+        exec > >(tee -a /opt/openclaw/deploy.log) 2>&1
+        echo "==> [$(date -u +%Y-%m-%dT%H:%M:%SZ)] Starting OpenClaw deployment"
+
+        # Install Docker via official convenience script
+        echo "==> Installing Docker"
+        curl -fsSL https://get.docker.com | sh
+
+        # Enable and start Docker daemon
+        systemctl enable docker
+        systemctl start docker
+
+        # Add default user to docker group (cloud providers commonly use 'ubuntu' or 'root')
+        DEFAULT_USER="\${SUDO_USER:-$(logname 2>/dev/null || echo root)}"
+        if [ "$DEFAULT_USER" != "root" ]; then
+          usermod -aG docker "$DEFAULT_USER"
+          echo "==> Added $DEFAULT_USER to docker group"
+        fi
+
+        # Verify Docker Compose v2 plugin
+        if ! docker compose version >/dev/null 2>&1; then
+          echo "ERROR: Docker Compose v2 plugin not available" >&2
+          exit 1
+        fi
+        echo "==> Docker Compose: $(docker compose version)"
+
+        # Create openclaw directories (matching docker-setup.sh structure)
+        # config: gateway config files (openclaw.json)
+        # workspace: agent workspace and data
+        # identity: device identity for Docker Desktop/Windows bind mount compat
+        mkdir -p /opt/openclaw/openclaw/config
+        mkdir -p /opt/openclaw/openclaw/workspace
+        mkdir -p /opt/openclaw/openclaw/config/identity
+
+        # Start the stack
+        echo "==> Starting stack"
+        cd /opt/openclaw
+        docker compose up -d
+
+        # Health check: poll gateway until it responds (up to 120 seconds)
+        echo "==> Waiting for gateway health check on port ${gatewayPort}"
+        RETRIES=60
+        while [ "$RETRIES" -gt 0 ]; do
+          if curl -sf "http://127.0.0.1:${gatewayPort}" >/dev/null 2>&1; then
+            echo "==> Gateway is healthy"
+            break
+          fi
+          RETRIES=$((RETRIES - 1))
+          sleep 2
+        done
+
+        if [ "$RETRIES" -eq 0 ]; then
+          echo "WARNING: Gateway did not respond within 120s. Check logs with:"
+          echo "  docker compose -f /opt/openclaw/docker-compose.yml logs -f openclaw-gateway"
+        fi
+
+        # Print summary
+        echo ""
+        echo "==> Deployment complete at $(date -u +%Y-%m-%dT%H:%M:%SZ)"
+        echo "    Project: ${options.projectName}"
+        echo "    Gateway: http://$(hostname -I | awk '{print $1}'):${gatewayPort}"
+        echo ""
+        echo "Useful commands:"
+        echo "  docker compose -f /opt/openclaw/docker-compose.yml logs -f"
+        echo "  docker compose -f /opt/openclaw/docker-compose.yml ps"
+        echo "  docker compose -f /opt/openclaw/docker-compose.yml restart"
+        echo ""
+        echo "Channel setup (optional):"
+        echo "  docker compose -f /opt/openclaw/docker-compose.yml run --rm openclaw-cli channels login"
+        echo "  docker compose -f /opt/openclaw/docker-compose.yml run --rm openclaw-cli channels add --channel telegram --token <TOKEN>"
+
+runcmd:
+  - /opt/openclaw/deploy.sh
+
+final_message: "OpenClaw stack '${options.projectName}' is ready! Connect to port ${gatewayPort}."
+`;
+}
+
+//#endregion
+export { generateCloudInit };
+//# sourceMappingURL=cloud-init.mjs.map