@better-openclaw/core 1.0.16 → 1.0.18

package/dist/generators/cloud-init.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-init.mjs","names":[],"sources":["../../src/generators/cloud-init.ts"],"sourcesContent":["/**\n * Generates a cloud-init.yml file for deploying the stack to a VPS.\n * Compatible with Hetzner, DigitalOcean, Vultr, Linode, and any provider\n * that supports cloud-init user data.\n *\n * Based on the patterns from openclaw_docker-setup.sh and openclaw_install.sh:\n * 1. Installs Docker via the official convenience script\n * 2. Adds the default user to the docker group\n * 3. Verifies Docker Compose v2 plugin is available\n * 4. Creates /opt/openclaw/ with config, workspace, and identity directories\n * 5. Writes docker-compose.yml and .env inline (env with restrictive 0600 perms)\n * 6. Starts the stack with docker compose up -d\n * 7. Polls the gateway health endpoint until it responds (up to 120s)\n * 8. Logs all operations to /opt/openclaw/deploy.log\n */\nexport function generateCloudInit(options: {\n\tcomposeYaml: string;\n\tenvContent: string;\n\tprojectName: string;\n\tgatewayPort?: number;\n}): string {\n\tconst gatewayPort = options.gatewayPort ?? 18789;\n\n\t// Escape content for cloud-init write_files (indent by 8 spaces)\n\tconst indentContent = (content: string) =>\n\t\tcontent\n\t\t\t.split(\"\\n\")\n\t\t\t.map((line) => `        ${line}`)\n\t\t\t.join(\"\\n\");\n\n\treturn `#cloud-config\n# Cloud-init for ${options.projectName}\n# Generated by better-openclaw\n# Compatible with: Hetzner, DigitalOcean, Vultr, Linode, AWS, GCP\n\npackage_update: true\n\npackages:\n  - curl\n  - git\n  - ca-certificates\n  - gnupg\n\nwrite_files:\n  - path: /opt/openclaw/docker-compose.yml\n    permissions: \"0644\"\n    content: |\n${indentContent(options.composeYaml)}\n\n  - path: /opt/openclaw/.env\n    permissions: \"0600\"\n    content: |\n${indentContent(options.envContent)}\n\n  - path: /opt/openclaw/deploy.sh\n    permissions: \"0755\"\n    content: |\n        #!/usr/bin/env bash\n        # OpenClaw deployment script — runs as runcmd via cloud-init\n        # All output logged to /opt/openclaw/deploy.log\n        set -euo pipefail\n        exec > >(tee -a /opt/openclaw/deploy.log) 2>&1\n        echo \"==> [$(date -u +%Y-%m-%dT%H:%M:%SZ)] Starting OpenClaw deployment\"\n\n        # Install Docker via official convenience script\n        echo \"==> Installing Docker\"\n        curl -fsSL https://get.docker.com | sh\n\n        # Enable and start Docker daemon\n        systemctl enable docker\n        systemctl start docker\n\n        # Add default user to docker group (cloud providers commonly use 'ubuntu' or 'root')\n        DEFAULT_USER=\"\\${SUDO_USER:-$(logname 2>/dev/null || echo root)}\"\n        if [ \"$DEFAULT_USER\" != \"root\" ]; then\n          usermod -aG docker \"$DEFAULT_USER\"\n          echo \"==> Added $DEFAULT_USER to docker group\"\n        fi\n\n        # Verify Docker Compose v2 plugin\n        if ! docker compose version >/dev/null 2>&1; then\n          echo \"ERROR: Docker Compose v2 plugin not available\" >&2\n          exit 1\n        fi\n        echo \"==> Docker Compose: $(docker compose version)\"\n\n        # Create openclaw directories (matching docker-setup.sh structure)\n        # config: gateway config files (openclaw.json)\n        # workspace: agent workspace and data\n        # identity: device identity for Docker Desktop/Windows bind mount compat\n        mkdir -p /opt/openclaw/openclaw/config\n        mkdir -p /opt/openclaw/openclaw/workspace\n        mkdir -p /opt/openclaw/openclaw/config/identity\n\n        # Start the stack\n        echo \"==> Starting stack\"\n        cd /opt/openclaw\n        docker compose up -d\n\n        # Health check: poll gateway until it responds (up to 120 seconds)\n        echo \"==> Waiting for gateway health check on port ${gatewayPort}\"\n        RETRIES=60\n        while [ \"$RETRIES\" -gt 0 ]; do\n          if curl -sf \"http://127.0.0.1:${gatewayPort}\" >/dev/null 2>&1; then\n            echo \"==> Gateway is healthy\"\n            break\n          fi\n          RETRIES=$((RETRIES - 1))\n          sleep 2\n        done\n\n        if [ \"$RETRIES\" -eq 0 ]; then\n          echo \"WARNING: Gateway did not respond within 120s. Check logs with:\"\n          echo \"  docker compose -f /opt/openclaw/docker-compose.yml logs -f openclaw-gateway\"\n        fi\n\n        # Print summary\n        echo \"\"\n        echo \"==> Deployment complete at $(date -u +%Y-%m-%dT%H:%M:%SZ)\"\n        echo \"    Project: ${options.projectName}\"\n        echo \"    Gateway: http://$(hostname -I | awk '{print $1}'):${gatewayPort}\"\n        echo \"\"\n        echo \"Useful commands:\"\n        echo \"  docker compose -f /opt/openclaw/docker-compose.yml logs -f\"\n        echo \"  docker compose -f /opt/openclaw/docker-compose.yml ps\"\n        echo \"  docker compose -f /opt/openclaw/docker-compose.yml restart\"\n        echo \"\"\n        echo \"Channel setup (optional):\"\n        echo \"  docker compose -f /opt/openclaw/docker-compose.yml run --rm openclaw-cli channels login\"\n        echo \"  docker compose -f /opt/openclaw/docker-compose.yml run --rm openclaw-cli channels add --channel telegram --token <TOKEN>\"\n\nruncmd:\n  - /opt/openclaw/deploy.sh\n\nfinal_message: \"OpenClaw stack '${options.projectName}' is ready! Connect to port ${gatewayPort}.\"\n`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAeA,SAAgB,kBAAkB,SAKvB;CACV,MAAM,cAAc,QAAQ,eAAe;CAG3C,MAAM,iBAAiB,YACtB,QACE,MAAM,KAAK,CACX,KAAK,SAAS,WAAW,OAAO,CAChC,KAAK,KAAK;AAEb,QAAO;mBACW,QAAQ,YAAY;;;;;;;;;;;;;;;;EAgBrC,cAAc,QAAQ,YAAY,CAAC;;;;;EAKnC,cAAc,QAAQ,WAAW,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6DAgDyB,YAAY;;;0CAG/B,YAAY;;;;;;;;;;;;;;;;6BAgBzB,QAAQ,YAAY;sEACqB,YAAY;;;;;;;;;;;;;;kCAchD,QAAQ,YAAY,8BAA8B,YAAY"}

package/dist/generators/env.cjs

@@ -0,0 +1,325 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_chunk = require('../chunk-C0xms8kb.cjs');
+const require_generators_postgres_init = require('./postgres-init.cjs');
+let node_crypto = require("node:crypto");
+
+//#region src/generators/env.ts
+/**
+* Generates `.env.example` and `.env` file contents from resolved services.
+*
+* - `.env.example`: every env var with descriptive comments, placeholders for secrets
+* - `.env`: same vars but secrets filled with cryptographically random values when generateSecrets is true
+*/
+function generateEnvFiles(resolved, options) {
+	const version = options.openclawVersion ?? "latest";
+	const lines = [];
+	const envVarValues = /* @__PURE__ */ new Map();
+	if (options.composeFiles && options.composeFiles.length > 0) {
+		const separator = process.platform === "win32" ? ";" : ":";
+		const composeFileValue = options.composeFiles.join(separator);
+		lines.push({
+			comment: formatComment("Compose files to load (allows plain `docker compose up -d`)", "Docker Compose", false, false),
+			key: "COMPOSE_FILE",
+			exampleValue: composeFileValue,
+			actualValue: composeFileValue
+		});
+	}
+	if (options.composeProfiles && options.composeProfiles.length > 0) {
+		const profilesValue = options.composeProfiles.join(",");
+		lines.push({
+			comment: formatComment("Profiles to activate (allows plain `docker compose up -d`)", "Docker Compose", false, false),
+			key: "COMPOSE_PROFILES",
+			exampleValue: profilesValue,
+			actualValue: profilesValue
+		});
+	}
+	lines.push({
+		comment: formatComment("OpenClaw version to deploy", "OpenClaw Core", true, false),
+		key: "OPENCLAW_VERSION",
+		exampleValue: version,
+		actualValue: version
+	});
+	const gatewayToken = options.generateSecrets ? (0, node_crypto.randomBytes)(24).toString("hex") : "";
+	lines.push({
+		comment: formatComment("Authentication token for the OpenClaw gateway API", "OpenClaw Core", true, true),
+		key: "OPENCLAW_GATEWAY_TOKEN",
+		exampleValue: "your_gateway_token_here",
+		actualValue: gatewayToken
+	});
+	lines.push({
+		comment: formatComment("Port the OpenClaw gateway listens on", "OpenClaw Core", true, false),
+		key: "OPENCLAW_GATEWAY_PORT",
+		exampleValue: "18789",
+		actualValue: "18789"
+	});
+	lines.push({
+		comment: formatComment("Port for the OpenClaw ACP bridge (WebSocket)", "OpenClaw Core", false, false),
+		key: "OPENCLAW_BRIDGE_PORT",
+		exampleValue: "18790",
+		actualValue: "18790"
+	});
+	lines.push({
+		comment: formatComment("Gateway network bind mode: 'lan' (all interfaces, required for Docker). Use 'loopback' only for native (non-Docker) installs with Tailscale serve/funnel", "OpenClaw Core", false, false),
+		key: "OPENCLAW_GATEWAY_BIND",
+		exampleValue: "lan",
+		actualValue: "lan"
+	});
+	lines.push({
+		comment: formatComment("Host path to OpenClaw configuration directory", "OpenClaw Core", true, false),
+		key: "OPENCLAW_CONFIG_DIR",
+		exampleValue: "./openclaw/config",
+		actualValue: "./openclaw/config"
+	});
+	lines.push({
+		comment: formatComment("Host path to OpenClaw workspace directory", "OpenClaw Core", true, false),
+		key: "OPENCLAW_WORKSPACE_DIR",
+		exampleValue: "./openclaw/workspace",
+		actualValue: "./openclaw/workspace"
+	});
+	const imageValue = {
+		official: "",
+		coolify: "coollabsio/openclaw:latest",
+		alpine: "alpine/openclaw:latest"
+	}[options.openclawImage ?? "official"] ?? "";
+	lines.push({
+		comment: formatComment(`OpenClaw Docker image variant: ${options.openclawImage ?? "official"} (official, coolify, alpine)`, "OpenClaw Core", false, false),
+		key: "OPENCLAW_IMAGE",
+		exampleValue: "",
+		actualValue: imageValue
+	});
+	lines.push({
+		comment: formatComment("Extra bind mounts for gateway and CLI containers (comma-separated, format: source:target[:options])", "OpenClaw Core", false, false),
+		key: "OPENCLAW_EXTRA_MOUNTS",
+		exampleValue: "",
+		actualValue: ""
+	});
+	lines.push({
+		comment: formatComment("Named volume or host path for /home/node persistence across container restarts", "OpenClaw Core", false, false),
+		key: "OPENCLAW_HOME_VOLUME",
+		exampleValue: "",
+		actualValue: ""
+	});
+	lines.push({
+		comment: formatComment("Extra apt packages to install during Docker image build (space-separated)", "OpenClaw Core", false, false),
+		key: "OPENCLAW_DOCKER_APT_PACKAGES",
+		exampleValue: "",
+		actualValue: ""
+	});
+	if (options.domain) lines.push({
+		comment: formatComment("Primary domain for service routing", "OpenClaw Core", false, false),
+		key: "OPENCLAW_DOMAIN",
+		exampleValue: "example.com",
+		actualValue: options.domain
+	});
+	if (resolved.aiProviders && resolved.aiProviders.length > 0) {
+		lines.push({
+			comment: "\n# ═══════════════════════════════════════════════════════════════════════════════\n# AI Provider API Keys\n# ═══════════════════════════════════════════════════════════════════════════════",
+			key: "",
+			exampleValue: "",
+			actualValue: ""
+		});
+		for (const provider of resolved.aiProviders) {
+			if (provider === "ollama" || provider === "lmstudio" || provider === "vllm") continue;
+			const envKey = provider === "ollama-cloud" ? "OLLAMA_API_KEY" : `${provider.toUpperCase()}_API_KEY`;
+			const label = provider === "ollama-cloud" ? "Ollama Cloud" : provider;
+			lines.push({
+				comment: formatComment(`API Key for ${label} AI models`, "OpenClaw Core", true, true),
+				key: envKey,
+				exampleValue: `your_${provider.toLowerCase().replace("-", "_")}_api_key_here`,
+				actualValue: ""
+			});
+		}
+	}
+	lines.push({
+		comment: "\n# ═══════════════════════════════════════════════════════════════════════════════\n# Claude Web Provider (optional)\n# ═══════════════════════════════════════════════════════════════════════════════",
+		key: "",
+		exampleValue: "",
+		actualValue: ""
+	});
+	lines.push({
+		comment: formatComment("Claude AI session key for web provider authentication", "OpenClaw Core", false, true),
+		key: "CLAUDE_AI_SESSION_KEY",
+		exampleValue: "your_claude_ai_session_key_here",
+		actualValue: ""
+	});
+	lines.push({
+		comment: formatComment("Claude web session key for web provider authentication", "OpenClaw Core", false, true),
+		key: "CLAUDE_WEB_SESSION_KEY",
+		exampleValue: "your_claude_web_session_key_here",
+		actualValue: ""
+	});
+	lines.push({
+		comment: formatComment("Claude web cookie for web provider authentication", "OpenClaw Core", false, true),
+		key: "CLAUDE_WEB_COOKIE",
+		exampleValue: "your_claude_web_cookie_here",
+		actualValue: ""
+	});
+	const dbReqs = require_generators_postgres_init.getDbRequirements(resolved);
+	if (dbReqs.length > 0) {
+		lines.push({
+			comment: "\n# ═══════════════════════════════════════════════════════════════════════════════\n# Per-Service Database Passwords\n# Each service gets its own PostgreSQL database and credentials\n# ═══════════════════════════════════════════════════════════════════════════════",
+			key: "",
+			exampleValue: "",
+			actualValue: ""
+		});
+		for (const req of dbReqs) {
+			const secretValue = options.generateSecrets ? (0, node_crypto.randomBytes)(24).toString("hex") : "";
+			envVarValues.set(req.passwordEnvVar, secretValue);
+			lines.push({
+				comment: formatComment(`PostgreSQL password for ${req.serviceName} (database: ${req.dbName}, user: ${req.dbUser})`, req.serviceName, true, true),
+				key: req.passwordEnvVar,
+				exampleValue: `your_${req.passwordEnvVar.toLowerCase()}_here`,
+				actualValue: secretValue
+			});
+		}
+	}
+	const dbPasswordKeys = dbReqs.map((r) => r.passwordEnvVar);
+	const aiProviderKeys = (resolved.aiProviders || []).map((p) => `${p.toUpperCase()}_API_KEY`);
+	const seenKeys = new Set([
+		"OPENCLAW_VERSION",
+		"OPENCLAW_GATEWAY_TOKEN",
+		"OPENCLAW_GATEWAY_PORT",
+		"OPENCLAW_BRIDGE_PORT",
+		"OPENCLAW_GATEWAY_BIND",
+		"OPENCLAW_CONFIG_DIR",
+		"OPENCLAW_WORKSPACE_DIR",
+		"OPENCLAW_IMAGE",
+		"OPENCLAW_EXTRA_MOUNTS",
+		"OPENCLAW_HOME_VOLUME",
+		"OPENCLAW_DOCKER_APT_PACKAGES",
+		"OPENCLAW_DOMAIN",
+		"CLAUDE_AI_SESSION_KEY",
+		"CLAUDE_WEB_SESSION_KEY",
+		"CLAUDE_WEB_COOKIE",
+		...dbPasswordKeys,
+		...aiProviderKeys
+	]);
+	for (const { definition } of resolved.services) {
+		const allEnvVars = [...definition.environment, ...definition.openclawEnvVars];
+		if (allEnvVars.length === 0) continue;
+		lines.push({
+			comment: `\n# ═══════════════════════════════════════════════════════════════════════════════\n# ${definition.icon} ${definition.name}\n# ═══════════════════════════════════════════════════════════════════════════════`,
+			key: "",
+			exampleValue: "",
+			actualValue: ""
+		});
+		const isNative = options.nativeServiceIds?.has(definition.id);
+		for (const envVar of allEnvVars) {
+			if (seenKeys.has(envVar.key)) continue;
+			seenKeys.add(envVar.key);
+			const secretValue = options.generateSecrets ? (0, node_crypto.randomBytes)(24).toString("hex") : "";
+			const isHostVar = envVar.key.endsWith("_HOST");
+			const hostValue = isNative && isHostVar ? "host.docker.internal" : null;
+			const exampleValue = hostValue ? hostValue : envVar.secret ? `your_${envVar.key.toLowerCase()}_here` : envVar.defaultValue;
+			let actualValue;
+			if (hostValue) actualValue = hostValue;
+			else if (envVar.secret) if (envVar.defaultValue.startsWith("${") && envVar.defaultValue.endsWith("}")) {
+				const refKey = envVar.defaultValue.slice(2, -1);
+				actualValue = envVarValues.get(refKey) || envVar.defaultValue;
+			} else actualValue = secretValue;
+			else actualValue = envVar.defaultValue;
+			envVarValues.set(envVar.key, actualValue);
+			lines.push({
+				comment: formatComment(envVar.description, definition.name, envVar.required, envVar.secret),
+				key: envVar.key,
+				exampleValue,
+				actualValue
+			});
+		}
+	}
+	const header = [
+		"# ═══════════════════════════════════════════════════════════════════════════════",
+		"# OpenClaw Environment Configuration",
+		`# Generated at ${(/* @__PURE__ */ new Date()).toISOString()}`,
+		"# ═══════════════════════════════════════════════════════════════════════════════",
+		""
+	].join("\n");
+	let envExample = header;
+	let env = header;
+	for (const line of lines) if (line.key === "") {
+		envExample += `${line.comment}\n`;
+		env += `${line.comment}\n`;
+	} else {
+		envExample += `${line.comment}\n${line.key}=${line.exampleValue}\n\n`;
+		env += `${line.comment}\n${line.key}=${line.actualValue}\n\n`;
+	}
+	return {
+		envExample,
+		env
+	};
+}
+/**
+* Format a descriptive comment block for an environment variable.
+*/
+function formatComment(description, serviceName, required, secret) {
+	return [`# ${description}`, `# Service: ${serviceName} | Required: ${required ? "Yes" : "No"} | Secret: ${secret ? "Yes" : "No"}`].join("\n");
+}
+/**
+* Returns environment variables grouped by service, suitable for UI rendering.
+*
+* - First group is always "OpenClaw Core" with base variables.
+* - Subsequent groups correspond to each resolved service.
+* - Variables are deduplicated across groups (first occurrence wins).
+*/
+function getStructuredEnvVars(resolved) {
+	const groups = [];
+	const seenKeys = /* @__PURE__ */ new Set();
+	const coreVars = [
+		{
+			key: "OPENCLAW_VERSION",
+			description: "OpenClaw version to deploy",
+			secret: false,
+			required: true,
+			defaultValue: "latest"
+		},
+		{
+			key: "OPENCLAW_GATEWAY_TOKEN",
+			description: "Authentication token for the OpenClaw gateway API",
+			secret: true,
+			required: true,
+			defaultValue: ""
+		},
+		{
+			key: "OPENCLAW_GATEWAY_PORT",
+			description: "Port the OpenClaw gateway listens on",
+			secret: false,
+			required: true,
+			defaultValue: "18789"
+		}
+	];
+	for (const v of coreVars) seenKeys.add(v.key);
+	groups.push({
+		serviceName: "OpenClaw Core",
+		serviceIcon: "⚙️",
+		serviceId: "openclaw-core",
+		vars: coreVars
+	});
+	for (const { definition } of resolved.services) {
+		const allEnvVars = [...definition.environment, ...definition.openclawEnvVars];
+		const vars = [];
+		for (const envVar of allEnvVars) {
+			if (seenKeys.has(envVar.key)) continue;
+			seenKeys.add(envVar.key);
+			vars.push({
+				key: envVar.key,
+				description: envVar.description,
+				secret: envVar.secret,
+				required: envVar.required,
+				defaultValue: envVar.defaultValue
+			});
+		}
+		if (vars.length === 0) continue;
+		groups.push({
+			serviceName: definition.name,
+			serviceIcon: definition.icon,
+			serviceId: definition.id,
+			vars
+		});
+	}
+	return groups;
+}
+
+//#endregion
+exports.generateEnvFiles = generateEnvFiles;
+exports.getStructuredEnvVars = getStructuredEnvVars;
+//# sourceMappingURL=env.cjs.map

package/dist/generators/env.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.cjs","names":["getDbRequirements"],"sources":["../../src/generators/env.ts"],"sourcesContent":["import { randomBytes } from \"node:crypto\";\nimport type { ResolverOutput } from \"../types.js\";\nimport { getDbRequirements } from \"./postgres-init.js\";\n\n/**\n * Options for environment file generation.\n */\nexport interface EnvGeneratorOptions {\n\tgenerateSecrets: boolean;\n\tdomain?: string;\n\topenclawVersion?: string;\n\t/** When set, host-like vars (e.g. REDIS_HOST) for these services use host.docker.internal so gateway in Docker can reach native services on host. */\n\tnativeServiceIds?: Set<string>;\n\t/** Compose file names for COMPOSE_FILE env var (enables `docker compose up` without -f flags). */\n\tcomposeFiles?: string[];\n\t/** Compose profiles for COMPOSE_PROFILES env var (enables `docker compose up` without --profile flags). */\n\tcomposeProfiles?: string[];\n\t/** OpenClaw image variant (official, coolify, alpine). */\n\topenclawImage?: \"official\" | \"coolify\" | \"alpine\";\n}\n\n/**\n * Generates `.env.example` and `.env` file contents from resolved services.\n *\n * - `.env.example`: every env var with descriptive comments, placeholders for secrets\n * - `.env`: same vars but secrets filled with cryptographically random values when generateSecrets is true\n */\nexport function generateEnvFiles(\n\tresolved: ResolverOutput,\n\toptions: EnvGeneratorOptions,\n): { envExample: string; env: string } {\n\tconst version = options.openclawVersion ?? \"latest\";\n\tconst lines: { comment: string; key: string; exampleValue: string; actualValue: string }[] = [];\n\n\t// Track all env var values for resolving references later\n\tconst envVarValues = new Map<string, string>();\n\n\t// ── Docker Compose convenience vars ─────────────────────────────────────\n\t// These let you run `docker compose up -d` without -f and --profile flags.\n\n\tif (options.composeFiles && options.composeFiles.length > 0) {\n\t\tconst separator = process.platform === \"win32\" ? \";\" : \":\";\n\t\tconst composeFileValue = options.composeFiles.join(separator);\n\t\tlines.push({\n\t\t\tcomment: formatComment(\n\t\t\t\t\"Compose files to load (allows plain `docker compose up -d`)\",\n\t\t\t\t\"Docker Compose\",\n\t\t\t\tfalse,\n\t\t\t\tfalse,\n\t\t\t),\n\t\t\tkey: \"COMPOSE_FILE\",\n\t\t\texampleValue: composeFileValue,\n\t\t\tactualValue: composeFileValue,\n\t\t});\n\t}\n\n\tif (options.composeProfiles && options.composeProfiles.length > 0) {\n\t\tconst profilesValue = options.composeProfiles.join(\",\");\n\t\tlines.push({\n\t\t\tcomment: formatComment(\n\t\t\t\t\"Profiles to activate (allows plain `docker compose up -d`)\",\n\t\t\t\t\"Docker Compose\",\n\t\t\t\tfalse,\n\t\t\t\tfalse,\n\t\t\t),\n\t\t\tkey: \"COMPOSE_PROFILES\",\n\t\t\texampleValue: profilesValue,\n\t\t\tactualValue: profilesValue,\n\t\t});\n\t}\n\n\t// ── Base OpenClaw Variables ──────────────────────────────────────────────\n\n\tlines.push({\n\t\tcomment: formatComment(\"OpenClaw version to deploy\", \"OpenClaw Core\", true, false),\n\t\tkey: \"OPENCLAW_VERSION\",\n\t\texampleValue: version,\n\t\tactualValue: version,\n\t});\n\n\tconst gatewayToken = options.generateSecrets ? randomBytes(24).toString(\"hex\") : \"\";\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Authentication token for the OpenClaw gateway API\",\n\t\t\t\"OpenClaw Core\",\n\t\t\ttrue,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"OPENCLAW_GATEWAY_TOKEN\",\n\t\texampleValue: \"your_gateway_token_here\",\n\t\tactualValue: gatewayToken,\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\"Port the OpenClaw gateway listens on\", \"OpenClaw Core\", true, false),\n\t\tkey: \"OPENCLAW_GATEWAY_PORT\",\n\t\texampleValue: \"18789\",\n\t\tactualValue: \"18789\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Port for the OpenClaw ACP bridge (WebSocket)\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_BRIDGE_PORT\",\n\t\texampleValue: \"18790\",\n\t\tactualValue: \"18790\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Gateway network bind mode: 'lan' (all interfaces, required for Docker). Use 'loopback' only for native (non-Docker) installs with Tailscale serve/funnel\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_GATEWAY_BIND\",\n\t\texampleValue: \"lan\",\n\t\tactualValue: \"lan\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Host path to OpenClaw configuration directory\",\n\t\t\t\"OpenClaw Core\",\n\t\t\ttrue,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_CONFIG_DIR\",\n\t\texampleValue: \"./openclaw/config\",\n\t\tactualValue: \"./openclaw/config\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Host path to OpenClaw workspace directory\",\n\t\t\t\"OpenClaw Core\",\n\t\t\ttrue,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_WORKSPACE_DIR\",\n\t\texampleValue: \"./openclaw/workspace\",\n\t\tactualValue: \"./openclaw/workspace\",\n\t});\n\n\t// Set OPENCLAW_IMAGE based on variant (empty = use compose default)\n\tconst imageVariantMap: Record<string, string> = {\n\t\tofficial: \"\", // use compose default (ghcr.io/openclaw/openclaw:VERSION)\n\t\tcoolify: \"coollabsio/openclaw:latest\",\n\t\talpine: \"alpine/openclaw:latest\",\n\t};\n\tconst imageValue = imageVariantMap[options.openclawImage ?? \"official\"] ?? \"\";\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t`OpenClaw Docker image variant: ${options.openclawImage ?? \"official\"} (official, coolify, alpine)`,\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_IMAGE\",\n\t\texampleValue: \"\",\n\t\tactualValue: imageValue,\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Extra bind mounts for gateway and CLI containers (comma-separated, format: source:target[:options])\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_EXTRA_MOUNTS\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Named volume or host path for /home/node persistence across container restarts\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_HOME_VOLUME\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Extra apt packages to install during Docker image build (space-separated)\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_DOCKER_APT_PACKAGES\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tif (options.domain) {\n\t\tlines.push({\n\t\t\tcomment: formatComment(\"Primary domain for service routing\", \"OpenClaw Core\", false, false),\n\t\t\tkey: \"OPENCLAW_DOMAIN\",\n\t\t\texampleValue: \"example.com\",\n\t\t\tactualValue: options.domain,\n\t\t});\n\t}\n\n\t// ── AI Provider API Keys ─────────────────────────────────────────────────\n\n\tif (resolved.aiProviders && resolved.aiProviders.length > 0) {\n\t\tlines.push({\n\t\t\tcomment:\n\t\t\t\t\"\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# AI Provider API Keys\\n# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\t\tkey: \"\",\n\t\t\texampleValue: \"\",\n\t\t\tactualValue: \"\",\n\t\t});\n\n\t\tfor (const provider of resolved.aiProviders) {\n\t\t\t// Local-only providers don't need API keys\n\t\t\tif (provider === \"ollama\" || provider === \"lmstudio\" || provider === \"vllm\") continue;\n\n\t\t\t// Ollama Cloud uses OLLAMA_API_KEY (matches Ollama's official env var name)\n\t\t\tconst envKey =\n\t\t\t\tprovider === \"ollama-cloud\" ? \"OLLAMA_API_KEY\" : `${provider.toUpperCase()}_API_KEY`;\n\t\t\tconst label = provider === \"ollama-cloud\" ? \"Ollama Cloud\" : provider;\n\t\t\tlines.push({\n\t\t\t\tcomment: formatComment(`API Key for ${label} AI models`, \"OpenClaw Core\", true, true),\n\t\t\t\tkey: envKey,\n\t\t\t\texampleValue: `your_${provider.toLowerCase().replace(\"-\", \"_\")}_api_key_here`,\n\t\t\t\tactualValue: \"\",\n\t\t\t});\n\t\t}\n\t}\n\n\t// Claude web-provider session variables (optional)\n\tlines.push({\n\t\tcomment:\n\t\t\t\"\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# Claude Web Provider (optional)\\n# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\tkey: \"\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Claude AI session key for web provider authentication\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"CLAUDE_AI_SESSION_KEY\",\n\t\texampleValue: \"your_claude_ai_session_key_here\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Claude web session key for web provider authentication\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"CLAUDE_WEB_SESSION_KEY\",\n\t\texampleValue: \"your_claude_web_session_key_here\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Claude web cookie for web provider authentication\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"CLAUDE_WEB_COOKIE\",\n\t\texampleValue: \"your_claude_web_cookie_here\",\n\t\tactualValue: \"\",\n\t});\n\n\t// ── Per-Service Database Passwords ──────────────────────────────────────\n\n\tconst dbReqs = getDbRequirements(resolved);\n\n\tif (dbReqs.length > 0) {\n\t\tlines.push({\n\t\t\tcomment:\n\t\t\t\t\"\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# Per-Service Database Passwords\\n# Each service gets its own PostgreSQL database and credentials\\n# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\t\tkey: \"\",\n\t\t\texampleValue: \"\",\n\t\t\tactualValue: \"\",\n\t\t});\n\n\t\tfor (const req of dbReqs) {\n\t\t\tconst secretValue = options.generateSecrets ? randomBytes(24).toString(\"hex\") : \"\";\n\n\t\t\t// Store in map for later reference resolution\n\t\t\tenvVarValues.set(req.passwordEnvVar, secretValue);\n\n\t\t\tlines.push({\n\t\t\t\tcomment: formatComment(\n\t\t\t\t\t`PostgreSQL password for ${req.serviceName} (database: ${req.dbName}, user: ${req.dbUser})`,\n\t\t\t\t\treq.serviceName,\n\t\t\t\t\ttrue,\n\t\t\t\t\ttrue,\n\t\t\t\t),\n\t\t\t\tkey: req.passwordEnvVar,\n\t\t\t\texampleValue: `your_${req.passwordEnvVar.toLowerCase()}_here`,\n\t\t\t\tactualValue: secretValue,\n\t\t\t});\n\t\t}\n\t}\n\n\t// ── Service-Specific Variables ───────────────────────────────────────────\n\n\tconst dbPasswordKeys = dbReqs.map((r) => r.passwordEnvVar);\n\tconst aiProviderKeys = (resolved.aiProviders || []).map((p) => `${p.toUpperCase()}_API_KEY`);\n\tconst seenKeys = new Set<string>([\n\t\t\"OPENCLAW_VERSION\",\n\t\t\"OPENCLAW_GATEWAY_TOKEN\",\n\t\t\"OPENCLAW_GATEWAY_PORT\",\n\t\t\"OPENCLAW_BRIDGE_PORT\",\n\t\t\"OPENCLAW_GATEWAY_BIND\",\n\t\t\"OPENCLAW_CONFIG_DIR\",\n\t\t\"OPENCLAW_WORKSPACE_DIR\",\n\t\t\"OPENCLAW_IMAGE\",\n\t\t\"OPENCLAW_EXTRA_MOUNTS\",\n\t\t\"OPENCLAW_HOME_VOLUME\",\n\t\t\"OPENCLAW_DOCKER_APT_PACKAGES\",\n\t\t\"OPENCLAW_DOMAIN\",\n\t\t\"CLAUDE_AI_SESSION_KEY\",\n\t\t\"CLAUDE_WEB_SESSION_KEY\",\n\t\t\"CLAUDE_WEB_COOKIE\",\n\t\t...dbPasswordKeys,\n\t\t...aiProviderKeys,\n\t]);\n\n\tfor (const { definition } of resolved.services) {\n\t\tconst allEnvVars = [...definition.environment, ...definition.openclawEnvVars];\n\n\t\tif (allEnvVars.length === 0) continue;\n\n\t\t// Section separator for this service\n\t\tlines.push({\n\t\t\tcomment: `\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# ${definition.icon} ${definition.name}\\n# ═══════════════════════════════════════════════════════════════════════════════`,\n\t\t\tkey: \"\",\n\t\t\texampleValue: \"\",\n\t\t\tactualValue: \"\",\n\t\t});\n\n\t\tconst isNative = options.nativeServiceIds?.has(definition.id);\n\n\t\tfor (const envVar of allEnvVars) {\n\t\t\tif (seenKeys.has(envVar.key)) continue;\n\t\t\tseenKeys.add(envVar.key);\n\n\t\t\tconst secretValue = options.generateSecrets ? randomBytes(24).toString(\"hex\") : \"\";\n\n\t\t\t// For native services, host-like vars must point to host so gateway (in Docker) can reach them\n\t\t\tconst isHostVar = envVar.key.endsWith(\"_HOST\");\n\t\t\tconst hostValue = isNative && isHostVar ? \"host.docker.internal\" : null;\n\n\t\t\tconst exampleValue = hostValue\n\t\t\t\t? hostValue\n\t\t\t\t: envVar.secret\n\t\t\t\t\t? `your_${envVar.key.toLowerCase()}_here`\n\t\t\t\t\t: envVar.defaultValue;\n\n\t\t\tlet actualValue: string;\n\t\t\tif (hostValue) {\n\t\t\t\tactualValue = hostValue;\n\t\t\t} else if (envVar.secret) {\n\t\t\t\t// Resolve env var references like ${N8N_DB_PASSWORD}\n\t\t\t\tif (envVar.defaultValue.startsWith(\"${\") && envVar.defaultValue.endsWith(\"}\")) {\n\t\t\t\t\tconst refKey = envVar.defaultValue.slice(2, -1); // Extract var name from ${VAR_NAME}\n\t\t\t\t\tactualValue = envVarValues.get(refKey) || envVar.defaultValue;\n\t\t\t\t} else {\n\t\t\t\t\tactualValue = secretValue;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tactualValue = envVar.defaultValue;\n\t\t\t}\n\n\t\t\t// Store in map for later reference resolution\n\t\t\tenvVarValues.set(envVar.key, actualValue);\n\n\t\t\tlines.push({\n\t\t\t\tcomment: formatComment(envVar.description, definition.name, envVar.required, envVar.secret),\n\t\t\t\tkey: envVar.key,\n\t\t\t\texampleValue,\n\t\t\t\tactualValue,\n\t\t\t});\n\t\t}\n\t}\n\n\t// ── Build output strings ────────────────────────────────────────────────\n\n\tconst header = [\n\t\t\"# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\t\"# OpenClaw Environment Configuration\",\n\t\t`# Generated at ${new Date().toISOString()}`,\n\t\t\"# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\t\"\",\n\t].join(\"\\n\");\n\n\tlet envExample = header;\n\tlet env = header;\n\n\tfor (const line of lines) {\n\t\tif (line.key === \"\") {\n\t\t\t// Section comment\n\t\t\tenvExample += `${line.comment}\\n`;\n\t\t\tenv += `${line.comment}\\n`;\n\t\t} else {\n\t\t\tenvExample += `${line.comment}\\n${line.key}=${line.exampleValue}\\n\\n`;\n\t\t\tenv += `${line.comment}\\n${line.key}=${line.actualValue}\\n\\n`;\n\t\t}\n\t}\n\n\treturn { envExample, env };\n}\n\n/**\n * Format a descriptive comment block for an environment variable.\n */\nfunction formatComment(\n\tdescription: string,\n\tserviceName: string,\n\trequired: boolean,\n\tsecret: boolean,\n): string {\n\treturn [\n\t\t`# ${description}`,\n\t\t`# Service: ${serviceName} | Required: ${required ? \"Yes\" : \"No\"} | Secret: ${secret ? \"Yes\" : \"No\"}`,\n\t].join(\"\\n\");\n}\n\n// ── Structured Env Vars ─────────────────────────────────────────────────────\n\nexport interface EnvVarGroup {\n\tserviceName: string;\n\tserviceIcon: string;\n\tserviceId: string;\n\tvars: {\n\t\tkey: string;\n\t\tdescription: string;\n\t\tsecret: boolean;\n\t\trequired: boolean;\n\t\tdefaultValue: string;\n\t}[];\n}\n\n/**\n * Returns environment variables grouped by service, suitable for UI rendering.\n *\n * - First group is always \"OpenClaw Core\" with base variables.\n * - Subsequent groups correspond to each resolved service.\n * - Variables are deduplicated across groups (first occurrence wins).\n */\nexport function getStructuredEnvVars(resolved: ResolverOutput): EnvVarGroup[] {\n\tconst groups: EnvVarGroup[] = [];\n\tconst seenKeys = new Set<string>();\n\n\t// ── OpenClaw Core group ──────────────────────────────────────────────────\n\tconst coreVars: EnvVarGroup[\"vars\"] = [\n\t\t{\n\t\t\tkey: \"OPENCLAW_VERSION\",\n\t\t\tdescription: \"OpenClaw version to deploy\",\n\t\t\tsecret: false,\n\t\t\trequired: true,\n\t\t\tdefaultValue: \"latest\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_GATEWAY_TOKEN\",\n\t\t\tdescription: \"Authentication token for the OpenClaw gateway API\",\n\t\t\tsecret: true,\n\t\t\trequired: true,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_GATEWAY_PORT\",\n\t\t\tdescription: \"Port the OpenClaw gateway listens on\",\n\t\t\tsecret: false,\n\t\t\trequired: true,\n\t\t\tdefaultValue: \"18789\",\n\t\t},\n\t];\n\n\tfor (const v of coreVars) {\n\t\tseenKeys.add(v.key);\n\t}\n\n\tgroups.push({\n\t\tserviceName: \"OpenClaw Core\",\n\t\tserviceIcon: \"⚙️\",\n\t\tserviceId: \"openclaw-core\",\n\t\tvars: coreVars,\n\t});\n\n\t// ── Per-service groups ───────────────────────────────────────────────────\n\tfor (const { definition } of resolved.services) {\n\t\tconst allEnvVars = [...definition.environment, ...definition.openclawEnvVars];\n\n\t\tconst vars: EnvVarGroup[\"vars\"] = [];\n\n\t\tfor (const envVar of allEnvVars) {\n\t\t\tif (seenKeys.has(envVar.key)) continue;\n\t\t\tseenKeys.add(envVar.key);\n\n\t\t\tvars.push({\n\t\t\t\tkey: envVar.key,\n\t\t\t\tdescription: envVar.description,\n\t\t\t\tsecret: envVar.secret,\n\t\t\t\trequired: envVar.required,\n\t\t\t\tdefaultValue: envVar.defaultValue,\n\t\t\t});\n\t\t}\n\n\t\tif (vars.length === 0) continue;\n\n\t\tgroups.push({\n\t\t\tserviceName: definition.name,\n\t\t\tserviceIcon: definition.icon,\n\t\t\tserviceId: definition.id,\n\t\t\tvars,\n\t\t});\n\t}\n\n\treturn groups;\n}\n"],"mappings":";;;;;;;;;;;;AA2BA,SAAgB,iBACf,UACA,SACsC;CACtC,MAAM,UAAU,QAAQ,mBAAmB;CAC3C,MAAM,QAAuF,EAAE;CAG/F,MAAM,+BAAe,IAAI,KAAqB;AAK9C,KAAI,QAAQ,gBAAgB,QAAQ,aAAa,SAAS,GAAG;EAC5D,MAAM,YAAY,QAAQ,aAAa,UAAU,MAAM;EACvD,MAAM,mBAAmB,QAAQ,aAAa,KAAK,UAAU;AAC7D,QAAM,KAAK;GACV,SAAS,cACR,+DACA,kBACA,OACA,MACA;GACD,KAAK;GACL,cAAc;GACd,aAAa;GACb,CAAC;;AAGH,KAAI,QAAQ,mBAAmB,QAAQ,gBAAgB,SAAS,GAAG;EAClE,MAAM,gBAAgB,QAAQ,gBAAgB,KAAK,IAAI;AACvD,QAAM,KAAK;GACV,SAAS,cACR,8DACA,kBACA,OACA,MACA;GACD,KAAK;GACL,cAAc;GACd,aAAa;GACb,CAAC;;AAKH,OAAM,KAAK;EACV,SAAS,cAAc,8BAA8B,iBAAiB,MAAM,MAAM;EAClF,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;CAEF,MAAM,eAAe,QAAQ,+CAA8B,GAAG,CAAC,SAAS,MAAM,GAAG;AAEjF,OAAM,KAAK;EACV,SAAS,cACR,qDACA,iBACA,MACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cAAc,wCAAwC,iBAAiB,MAAM,MAAM;EAC5F,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,gDACA,iBACA,OACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,4JACA,iBACA,OACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,iDACA,iBACA,MACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,6CACA,iBACA,MACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;CAQF,MAAM,aAL0C;EAC/C,UAAU;EACV,SAAS;EACT,QAAQ;EACR,CACkC,QAAQ,iBAAiB,eAAe;AAE3E,OAAM,KAAK;EACV,SAAS,cACR,kCAAkC,QAAQ,iBAAiB,WAAW,+BACtE,iBACA,OACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,uGACA,iBACA,OACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,kFACA,iBACA,OACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,6EACA,iBACA,OACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,KAAI,QAAQ,OACX,OAAM,KAAK;EACV,SAAS,cAAc,sCAAsC,iBAAiB,OAAO,MAAM;EAC3F,KAAK;EACL,cAAc;EACd,aAAa,QAAQ;EACrB,CAAC;AAKH,KAAI,SAAS,eAAe,SAAS,YAAY,SAAS,GAAG;AAC5D,QAAM,KAAK;GACV,SACC;GACD,KAAK;GACL,cAAc;GACd,aAAa;GACb,CAAC;AAEF,OAAK,MAAM,YAAY,SAAS,aAAa;AAE5C,OAAI,aAAa,YAAY,aAAa,cAAc,aAAa,OAAQ;GAG7E,MAAM,SACL,aAAa,iBAAiB,mBAAmB,GAAG,SAAS,aAAa,CAAC;GAC5E,MAAM,QAAQ,aAAa,iBAAiB,iBAAiB;AAC7D,SAAM,KAAK;IACV,SAAS,cAAc,eAAe,MAAM,aAAa,iBAAiB,MAAM,KAAK;IACrF,KAAK;IACL,cAAc,QAAQ,SAAS,aAAa,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC/D,aAAa;IACb,CAAC;;;AAKJ,OAAM,KAAK;EACV,SACC;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,yDACA,iBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,0DACA,iBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,qDACA,iBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;CAIF,MAAM,SAASA,mDAAkB,SAAS;AAE1C,KAAI,OAAO,SAAS,GAAG;AACtB,QAAM,KAAK;GACV,SACC;GACD,KAAK;GACL,cAAc;GACd,aAAa;GACb,CAAC;AAEF,OAAK,MAAM,OAAO,QAAQ;GACzB,MAAM,cAAc,QAAQ,+CAA8B,GAAG,CAAC,SAAS,MAAM,GAAG;AAGhF,gBAAa,IAAI,IAAI,gBAAgB,YAAY;AAEjD,SAAM,KAAK;IACV,SAAS,cACR,2BAA2B,IAAI,YAAY,cAAc,IAAI,OAAO,UAAU,IAAI,OAAO,IACzF,IAAI,aACJ,MACA,KACA;IACD,KAAK,IAAI;IACT,cAAc,QAAQ,IAAI,eAAe,aAAa,CAAC;IACvD,aAAa;IACb,CAAC;;;CAMJ,MAAM,iBAAiB,OAAO,KAAK,MAAM,EAAE,eAAe;CAC1D,MAAM,kBAAkB,SAAS,eAAe,EAAE,EAAE,KAAK,MAAM,GAAG,EAAE,aAAa,CAAC,UAAU;CAC5F,MAAM,WAAW,IAAI,IAAY;EAChC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAG;EACH,GAAG;EACH,CAAC;AAEF,MAAK,MAAM,EAAE,gBAAgB,SAAS,UAAU;EAC/C,MAAM,aAAa,CAAC,GAAG,WAAW,aAAa,GAAG,WAAW,gBAAgB;AAE7E,MAAI,WAAW,WAAW,EAAG;AAG7B,QAAM,KAAK;GACV,SAAS,0FAA0F,WAAW,KAAK,GAAG,WAAW,KAAK;GACtI,KAAK;GACL,cAAc;GACd,aAAa;GACb,CAAC;EAEF,MAAM,WAAW,QAAQ,kBAAkB,IAAI,WAAW,GAAG;AAE7D,OAAK,MAAM,UAAU,YAAY;AAChC,OAAI,SAAS,IAAI,OAAO,IAAI,CAAE;AAC9B,YAAS,IAAI,OAAO,IAAI;GAExB,MAAM,cAAc,QAAQ,+CAA8B,GAAG,CAAC,SAAS,MAAM,GAAG;GAGhF,MAAM,YAAY,OAAO,IAAI,SAAS,QAAQ;GAC9C,MAAM,YAAY,YAAY,YAAY,yBAAyB;GAEnE,MAAM,eAAe,YAClB,YACA,OAAO,SACN,QAAQ,OAAO,IAAI,aAAa,CAAC,SACjC,OAAO;GAEX,IAAI;AACJ,OAAI,UACH,eAAc;YACJ,OAAO,OAEjB,KAAI,OAAO,aAAa,WAAW,KAAK,IAAI,OAAO,aAAa,SAAS,IAAI,EAAE;IAC9E,MAAM,SAAS,OAAO,aAAa,MAAM,GAAG,GAAG;AAC/C,kBAAc,aAAa,IAAI,OAAO,IAAI,OAAO;SAEjD,eAAc;OAGf,eAAc,OAAO;AAItB,gBAAa,IAAI,OAAO,KAAK,YAAY;AAEzC,SAAM,KAAK;IACV,SAAS,cAAc,OAAO,aAAa,WAAW,MAAM,OAAO,UAAU,OAAO,OAAO;IAC3F,KAAK,OAAO;IACZ;IACA;IACA,CAAC;;;CAMJ,MAAM,SAAS;EACd;EACA;EACA,mCAAkB,IAAI,MAAM,EAAC,aAAa;EAC1C;EACA;EACA,CAAC,KAAK,KAAK;CAEZ,IAAI,aAAa;CACjB,IAAI,MAAM;AAEV,MAAK,MAAM,QAAQ,MAClB,KAAI,KAAK,QAAQ,IAAI;AAEpB,gBAAc,GAAG,KAAK,QAAQ;AAC9B,SAAO,GAAG,KAAK,QAAQ;QACjB;AACN,gBAAc,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAI,GAAG,KAAK,aAAa;AAChE,SAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAI,GAAG,KAAK,YAAY;;AAI1D,QAAO;EAAE;EAAY;EAAK;;;;;AAM3B,SAAS,cACR,aACA,aACA,UACA,QACS;AACT,QAAO,CACN,KAAK,eACL,cAAc,YAAY,eAAe,WAAW,QAAQ,KAAK,aAAa,SAAS,QAAQ,OAC/F,CAAC,KAAK,KAAK;;;;;;;;;AAyBb,SAAgB,qBAAqB,UAAyC;CAC7E,MAAM,SAAwB,EAAE;CAChC,MAAM,2BAAW,IAAI,KAAa;CAGlC,MAAM,WAAgC;EACrC;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;AAED,MAAK,MAAM,KAAK,SACf,UAAS,IAAI,EAAE,IAAI;AAGpB,QAAO,KAAK;EACX,aAAa;EACb,aAAa;EACb,WAAW;EACX,MAAM;EACN,CAAC;AAGF,MAAK,MAAM,EAAE,gBAAgB,SAAS,UAAU;EAC/C,MAAM,aAAa,CAAC,GAAG,WAAW,aAAa,GAAG,WAAW,gBAAgB;EAE7E,MAAM,OAA4B,EAAE;AAEpC,OAAK,MAAM,UAAU,YAAY;AAChC,OAAI,SAAS,IAAI,OAAO,IAAI,CAAE;AAC9B,YAAS,IAAI,OAAO,IAAI;AAExB,QAAK,KAAK;IACT,KAAK,OAAO;IACZ,aAAa,OAAO;IACpB,QAAQ,OAAO;IACf,UAAU,OAAO;IACjB,cAAc,OAAO;IACrB,CAAC;;AAGH,MAAI,KAAK,WAAW,EAAG;AAEvB,SAAO,KAAK;GACX,aAAa,WAAW;GACxB,aAAa,WAAW;GACxB,WAAW,WAAW;GACtB;GACA,CAAC;;AAGH,QAAO"}

package/dist/generators/env.d.cts

@@ -0,0 +1,52 @@
+import { ResolverOutput } from "../types.cjs";
+
+//#region src/generators/env.d.ts
+/**
+ * Options for environment file generation.
+ */
+interface EnvGeneratorOptions {
+  generateSecrets: boolean;
+  domain?: string;
+  openclawVersion?: string;
+  /** When set, host-like vars (e.g. REDIS_HOST) for these services use host.docker.internal so gateway in Docker can reach native services on host. */
+  nativeServiceIds?: Set<string>;
+  /** Compose file names for COMPOSE_FILE env var (enables `docker compose up` without -f flags). */
+  composeFiles?: string[];
+  /** Compose profiles for COMPOSE_PROFILES env var (enables `docker compose up` without --profile flags). */
+  composeProfiles?: string[];
+  /** OpenClaw image variant (official, coolify, alpine). */
+  openclawImage?: "official" | "coolify" | "alpine";
+}
+/**
+ * Generates `.env.example` and `.env` file contents from resolved services.
+ *
+ * - `.env.example`: every env var with descriptive comments, placeholders for secrets
+ * - `.env`: same vars but secrets filled with cryptographically random values when generateSecrets is true
+ */
+declare function generateEnvFiles(resolved: ResolverOutput, options: EnvGeneratorOptions): {
+  envExample: string;
+  env: string;
+};
+interface EnvVarGroup {
+  serviceName: string;
+  serviceIcon: string;
+  serviceId: string;
+  vars: {
+    key: string;
+    description: string;
+    secret: boolean;
+    required: boolean;
+    defaultValue: string;
+  }[];
+}
+/**
+ * Returns environment variables grouped by service, suitable for UI rendering.
+ *
+ * - First group is always "OpenClaw Core" with base variables.
+ * - Subsequent groups correspond to each resolved service.
+ * - Variables are deduplicated across groups (first occurrence wins).
+ */
+declare function getStructuredEnvVars(resolved: ResolverOutput): EnvVarGroup[];
+//#endregion
+export { EnvGeneratorOptions, EnvVarGroup, generateEnvFiles, getStructuredEnvVars };
+//# sourceMappingURL=env.d.cts.map

package/dist/generators/env.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.cts","names":[],"sources":["../../src/generators/env.ts"],"mappings":";;;;;AAOA;UAAiB,mBAAA;EAChB,eAAA;EACA,MAAA;EACA,eAAA;EADA;EAGA,gBAAA,GAAmB,GAAA;EAAnB;EAEA,YAAA;EAAA;EAEA,eAAA;EAEA;EAAA,aAAA;AAAA;AASD;;;;;;AAAA,iBAAgB,gBAAA,CACf,QAAA,EAAU,cAAA,EACV,OAAA,EAAS,mBAAA;EACL,UAAA;EAAoB,GAAA;AAAA;AAAA,UAgaR,WAAA;EAChB,WAAA;EACA,WAAA;EACA,SAAA;EACA,IAAA;IACC,GAAA;IACA,WAAA;IACA,MAAA;IACA,QAAA;IACA,YAAA;EAAA;AAAA;;;;;;AAWF;;iBAAgB,oBAAA,CAAqB,QAAA,EAAU,cAAA,GAAiB,WAAA"}

package/dist/generators/env.d.mts

@@ -10,6 +10,12 @@ interface EnvGeneratorOptions {
   openclawVersion?: string;
   /** When set, host-like vars (e.g. REDIS_HOST) for these services use host.docker.internal so gateway in Docker can reach native services on host. */
   nativeServiceIds?: Set<string>;
+  /** Compose file names for COMPOSE_FILE env var (enables `docker compose up` without -f flags). */
+  composeFiles?: string[];
+  /** Compose profiles for COMPOSE_PROFILES env var (enables `docker compose up` without --profile flags). */
+  composeProfiles?: string[];
+  /** OpenClaw image variant (official, coolify, alpine). */
+  openclawImage?: "official" | "coolify" | "alpine";
 }
 /**
  * Generates `.env.example` and `.env` file contents from resolved services.

package/dist/generators/env.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.mts","names":[],"sources":["../../src/generators/env.ts"],"mappings":";;;;;AAOA;UAAiB,mBAAA;EAChB,eAAA;EACA,MAAA;EACA,eAAA;EADA;EAGA,gBAAA,GAAmB,GAAA;AAAA;;;;AASpB;;;iBAAgB,gBAAA,CACf,QAAA,EAAU,cAAA,EACV,OAAA,EAAS,mBAAA;EACL,UAAA;EAAoB,GAAA;AAAA;AAAA,UA4TR,WAAA;EAChB,WAAA;EACA,WAAA;EACA,SAAA;EACA,IAAA;IACC,GAAA;IACA,WAAA;IACA,MAAA;IACA,QAAA;IACA,YAAA;EAAA;AAAA;;;;;;;;iBAWc,oBAAA,CAAqB,QAAA,EAAU,cAAA,GAAiB,WAAA"}
+{"version":3,"file":"env.d.mts","names":[],"sources":["../../src/generators/env.ts"],"mappings":";;;;;AAOA;UAAiB,mBAAA;EAChB,eAAA;EACA,MAAA;EACA,eAAA;EADA;EAGA,gBAAA,GAAmB,GAAA;EAAnB;EAEA,YAAA;EAAA;EAEA,eAAA;EAEA;EAAA,aAAA;AAAA;AASD;;;;;;AAAA,iBAAgB,gBAAA,CACf,QAAA,EAAU,cAAA,EACV,OAAA,EAAS,mBAAA;EACL,UAAA;EAAoB,GAAA;AAAA;AAAA,UAgaR,WAAA;EAChB,WAAA;EACA,WAAA;EACA,SAAA;EACA,IAAA;IACC,GAAA;IACA,WAAA;IACA,MAAA;IACA,QAAA;IACA,YAAA;EAAA;AAAA;;;;;;AAWF;;iBAAgB,oBAAA,CAAqB,QAAA,EAAU,cAAA,GAAiB,WAAA"}

package/dist/generators/env.mjs

@@ -11,6 +11,26 @@ import { randomBytes } from "node:crypto";
 function generateEnvFiles(resolved, options) {
 	const version = options.openclawVersion ?? "latest";
 	const lines = [];
+	const envVarValues = /* @__PURE__ */ new Map();
+	if (options.composeFiles && options.composeFiles.length > 0) {
+		const separator = process.platform === "win32" ? ";" : ":";
+		const composeFileValue = options.composeFiles.join(separator);
+		lines.push({
+			comment: formatComment("Compose files to load (allows plain `docker compose up -d`)", "Docker Compose", false, false),
+			key: "COMPOSE_FILE",
+			exampleValue: composeFileValue,
+			actualValue: composeFileValue
+		});
+	}
+	if (options.composeProfiles && options.composeProfiles.length > 0) {
+		const profilesValue = options.composeProfiles.join(",");
+		lines.push({
+			comment: formatComment("Profiles to activate (allows plain `docker compose up -d`)", "Docker Compose", false, false),
+			key: "COMPOSE_PROFILES",
+			exampleValue: profilesValue,
+			actualValue: profilesValue
+		});
+	}
 	lines.push({
 		comment: formatComment("OpenClaw version to deploy", "OpenClaw Core", true, false),
 		key: "OPENCLAW_VERSION",
@@ -37,7 +57,7 @@ function generateEnvFiles(resolved, options) {
 		actualValue: "18790"
 	});
 	lines.push({
-		comment: formatComment("Gateway network bind mode (lan for Docker networking, loopback for local-only)", "OpenClaw Core", false, false),
+		comment: formatComment("Gateway network bind mode: 'lan' (all interfaces, required for Docker). Use 'loopback' only for native (non-Docker) installs with Tailscale serve/funnel", "OpenClaw Core", false, false),
 		key: "OPENCLAW_GATEWAY_BIND",
 		exampleValue: "lan",
 		actualValue: "lan"
@@ -54,10 +74,33 @@ function generateEnvFiles(resolved, options) {
 		exampleValue: "./openclaw/workspace",
 		actualValue: "./openclaw/workspace"
 	});
+	const imageValue = {
+		official: "",
+		coolify: "coollabsio/openclaw:latest",
+		alpine: "alpine/openclaw:latest"
+	}[options.openclawImage ?? "official"] ?? "";
 	lines.push({
-		comment: formatComment("OpenClaw Docker image override (default uses ghcr.io/openclaw/openclaw)", "OpenClaw Core", false, false),
+		comment: formatComment(`OpenClaw Docker image variant: ${options.openclawImage ?? "official"} (official, coolify, alpine)`, "OpenClaw Core", false, false),
 		key: "OPENCLAW_IMAGE",
 		exampleValue: "",
+		actualValue: imageValue
+	});
+	lines.push({
+		comment: formatComment("Extra bind mounts for gateway and CLI containers (comma-separated, format: source:target[:options])", "OpenClaw Core", false, false),
+		key: "OPENCLAW_EXTRA_MOUNTS",
+		exampleValue: "",
+		actualValue: ""
+	});
+	lines.push({
+		comment: formatComment("Named volume or host path for /home/node persistence across container restarts", "OpenClaw Core", false, false),
+		key: "OPENCLAW_HOME_VOLUME",
+		exampleValue: "",
+		actualValue: ""
+	});
+	lines.push({
+		comment: formatComment("Extra apt packages to install during Docker image build (space-separated)", "OpenClaw Core", false, false),
+		key: "OPENCLAW_DOCKER_APT_PACKAGES",
+		exampleValue: "",
 		actualValue: ""
 	});
 	if (options.domain) lines.push({
@@ -75,11 +118,12 @@ function generateEnvFiles(resolved, options) {
 		});
 		for (const provider of resolved.aiProviders) {
 			if (provider === "ollama" || provider === "lmstudio" || provider === "vllm") continue;
-			const envKey = `${provider.toUpperCase()}_API_KEY`;
+			const envKey = provider === "ollama-cloud" ? "OLLAMA_API_KEY" : `${provider.toUpperCase()}_API_KEY`;
+			const label = provider === "ollama-cloud" ? "Ollama Cloud" : provider;
 			lines.push({
-				comment: formatComment(`API Key for ${provider} AI models`, "OpenClaw Core", true, true),
+				comment: formatComment(`API Key for ${label} AI models`, "OpenClaw Core", true, true),
 				key: envKey,
-				exampleValue: `your_${provider.toLowerCase()}_api_key_here`,
+				exampleValue: `your_${provider.toLowerCase().replace("-", "_")}_api_key_here`,
 				actualValue: ""
 			});
 		}
@@ -118,6 +162,7 @@ function generateEnvFiles(resolved, options) {
 		});
 		for (const req of dbReqs) {
 			const secretValue = options.generateSecrets ? randomBytes(24).toString("hex") : "";
+			envVarValues.set(req.passwordEnvVar, secretValue);
 			lines.push({
 				comment: formatComment(`PostgreSQL password for ${req.serviceName} (database: ${req.dbName}, user: ${req.dbUser})`, req.serviceName, true, true),
 				key: req.passwordEnvVar,
@@ -137,6 +182,9 @@ function generateEnvFiles(resolved, options) {
 		"OPENCLAW_CONFIG_DIR",
 		"OPENCLAW_WORKSPACE_DIR",
 		"OPENCLAW_IMAGE",
+		"OPENCLAW_EXTRA_MOUNTS",
+		"OPENCLAW_HOME_VOLUME",
+		"OPENCLAW_DOCKER_APT_PACKAGES",
 		"OPENCLAW_DOMAIN",
 		"CLAUDE_AI_SESSION_KEY",
 		"CLAUDE_WEB_SESSION_KEY",
@@ -163,8 +211,12 @@ function generateEnvFiles(resolved, options) {
 			const exampleValue = hostValue ? hostValue : envVar.secret ? `your_${envVar.key.toLowerCase()}_here` : envVar.defaultValue;
 			let actualValue;
 			if (hostValue) actualValue = hostValue;
-			else if (envVar.secret) actualValue = envVar.defaultValue.startsWith("${") ? envVar.defaultValue : secretValue;
+			else if (envVar.secret) if (envVar.defaultValue.startsWith("${") && envVar.defaultValue.endsWith("}")) {
+				const refKey = envVar.defaultValue.slice(2, -1);
+				actualValue = envVarValues.get(refKey) || envVar.defaultValue;
+			} else actualValue = secretValue;
 			else actualValue = envVar.defaultValue;
+			envVarValues.set(envVar.key, actualValue);
 			lines.push({
 				comment: formatComment(envVar.description, definition.name, envVar.required, envVar.secret),
 				key: envVar.key,