@better-openclaw/core 1.0.16 → 1.0.19

package/README.md

@@ -61,6 +61,33 @@ export const myCoolService: ServiceDefinition = {
 
 Skills are markdown instructions or code bundles mapped to specific tools. They are defined in `skills/manifest.json`. During generation, if a `SkillPack` is explicitly selected or implicitly included via an auto-installing service, the Core locates the corresponding files and mounts them into the generated stack's Volume pathways.
 
+## PaaS Deployers
+
+The core includes deployer clients for pushing generated stacks directly to self-hosted PaaS platforms:
+
+| Provider    | Module                 | Auth                    |
+|-------------|------------------------|-------------------------|
+| **Dokploy** | `deployers/dokploy.ts` | `x-api-key` header      |
+| **Coolify** | `deployers/coolify.ts` | `Authorization: Bearer` |
+
+All deployers implement the `PaasDeployer` interface (defined in `deployers/types.ts`). To add a new provider, implement the interface and register it in `deployers/index.ts`.
+
+```typescript
+import { getDeployer, getAvailableDeployers } from "@better-openclaw/core";
+
+// List available providers
+const providers = getAvailableDeployers(); // ["dokploy", "coolify"]
+
+// Deploy a stack
+const deployer = getDeployer("dokploy");
+const result = await deployer.deploy({
+  target: { instanceUrl: "https://dokploy.example.com", apiKey: "..." },
+  projectName: "my-stack",
+  composeYaml: "...",
+  envContent: "...",
+});
+```
+
 ## Development
 
 ```bash

package/dist/bare-metal-partition.cjs

@@ -0,0 +1,53 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+//#region src/bare-metal-partition.ts
+/**
+* Maps Platform (e.g. linux/amd64) to NativePlatform (linux, windows, macos).
+*/
+function platformToNativePlatform(platform) {
+	if (platform.startsWith("linux/")) return "linux";
+	if (platform.startsWith("windows/")) return "windows";
+	if (platform.startsWith("macos/")) return "macos";
+	console.warn(`Unknown platform prefix in "${platform}", defaulting to linux`);
+	return "linux";
+}
+/**
+* Partitions resolved services into native (run on host via scripts) vs Docker-only.
+* Gateway and CLI are never native; services with nativeSupported and a matching
+* nativeRecipe for the platform go to native, rest to Docker.
+*/
+function partitionBareMetal(resolved, platform) {
+	const nativePlatform = platformToNativePlatform(platform);
+	const nativeServices = [];
+	const dockerOnlyServices = [];
+	const nativeIds = /* @__PURE__ */ new Set();
+	for (const entry of resolved.services) {
+		const def = entry.definition;
+		if (def.nativeSupported === true && def.nativeRecipes?.length && def.nativeRecipes.some((r) => r.platform === nativePlatform)) {
+			nativeServices.push(entry);
+			nativeIds.add(def.id);
+		} else dockerOnlyServices.push(entry);
+	}
+	return {
+		nativeServices,
+		dockerOnlyServices,
+		nativeIds
+	};
+}
+/**
+* Returns a new ResolverOutput containing only the given service list (same order).
+* Used to build compose for Docker-only subset when bare-metal has native services.
+*/
+function resolvedWithOnlyServices(resolved, services) {
+	const idSet = new Set(services.map((s) => s.definition.id));
+	return {
+		...resolved,
+		services: resolved.services.filter((s) => idSet.has(s.definition.id))
+	};
+}
+
+//#endregion
+exports.partitionBareMetal = partitionBareMetal;
+exports.platformToNativePlatform = platformToNativePlatform;
+exports.resolvedWithOnlyServices = resolvedWithOnlyServices;
+//# sourceMappingURL=bare-metal-partition.cjs.map

package/dist/bare-metal-partition.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bare-metal-partition.cjs","names":[],"sources":["../src/bare-metal-partition.ts"],"sourcesContent":["import type { NativePlatform, Platform, ResolvedService, ResolverOutput } from \"./types.js\";\n\n/**\n * Maps Platform (e.g. linux/amd64) to NativePlatform (linux, windows, macos).\n */\nexport function platformToNativePlatform(platform: Platform): NativePlatform {\n\tif (platform.startsWith(\"linux/\")) return \"linux\";\n\tif (platform.startsWith(\"windows/\")) return \"windows\";\n\tif (platform.startsWith(\"macos/\")) return \"macos\";\n\tconsole.warn(`Unknown platform prefix in \"${platform}\", defaulting to linux`);\n\treturn \"linux\";\n}\n\nexport interface BareMetalPartitionResult {\n\tnativeServices: ResolvedService[];\n\tdockerOnlyServices: ResolvedService[];\n\tnativeIds: Set<string>;\n}\n\n/**\n * Partitions resolved services into native (run on host via scripts) vs Docker-only.\n * Gateway and CLI are never native; services with nativeSupported and a matching\n * nativeRecipe for the platform go to native, rest to Docker.\n */\nexport function partitionBareMetal(\n\tresolved: ResolverOutput,\n\tplatform: Platform,\n): BareMetalPartitionResult {\n\tconst nativePlatform = platformToNativePlatform(platform);\n\tconst nativeServices: ResolvedService[] = [];\n\tconst dockerOnlyServices: ResolvedService[] = [];\n\tconst nativeIds = new Set<string>();\n\n\tfor (const entry of resolved.services) {\n\t\tconst def = entry.definition;\n\t\tconst hasNativeRecipe =\n\t\t\tdef.nativeSupported === true &&\n\t\t\tdef.nativeRecipes?.length &&\n\t\t\tdef.nativeRecipes.some((r) => r.platform === nativePlatform);\n\n\t\tif (hasNativeRecipe) {\n\t\t\tnativeServices.push(entry);\n\t\t\tnativeIds.add(def.id);\n\t\t} else {\n\t\t\tdockerOnlyServices.push(entry);\n\t\t}\n\t}\n\n\treturn { nativeServices, dockerOnlyServices, nativeIds };\n}\n\n/**\n * Returns a new ResolverOutput containing only the given service list (same order).\n * Used to build compose for Docker-only subset when bare-metal has native services.\n */\nexport function resolvedWithOnlyServices(\n\tresolved: ResolverOutput,\n\tservices: ResolvedService[],\n): ResolverOutput {\n\tconst idSet = new Set(services.map((s) => s.definition.id));\n\treturn {\n\t\t...resolved,\n\t\tservices: resolved.services.filter((s) => idSet.has(s.definition.id)),\n\t};\n}\n"],"mappings":";;;;;;AAKA,SAAgB,yBAAyB,UAAoC;AAC5E,KAAI,SAAS,WAAW,SAAS,CAAE,QAAO;AAC1C,KAAI,SAAS,WAAW,WAAW,CAAE,QAAO;AAC5C,KAAI,SAAS,WAAW,SAAS,CAAE,QAAO;AAC1C,SAAQ,KAAK,+BAA+B,SAAS,wBAAwB;AAC7E,QAAO;;;;;;;AAcR,SAAgB,mBACf,UACA,UAC2B;CAC3B,MAAM,iBAAiB,yBAAyB,SAAS;CACzD,MAAM,iBAAoC,EAAE;CAC5C,MAAM,qBAAwC,EAAE;CAChD,MAAM,4BAAY,IAAI,KAAa;AAEnC,MAAK,MAAM,SAAS,SAAS,UAAU;EACtC,MAAM,MAAM,MAAM;AAMlB,MAJC,IAAI,oBAAoB,QACxB,IAAI,eAAe,UACnB,IAAI,cAAc,MAAM,MAAM,EAAE,aAAa,eAAe,EAExC;AACpB,kBAAe,KAAK,MAAM;AAC1B,aAAU,IAAI,IAAI,GAAG;QAErB,oBAAmB,KAAK,MAAM;;AAIhC,QAAO;EAAE;EAAgB;EAAoB;EAAW;;;;;;AAOzD,SAAgB,yBACf,UACA,UACiB;CACjB,MAAM,QAAQ,IAAI,IAAI,SAAS,KAAK,MAAM,EAAE,WAAW,GAAG,CAAC;AAC3D,QAAO;EACN,GAAG;EACH,UAAU,SAAS,SAAS,QAAQ,MAAM,MAAM,IAAI,EAAE,WAAW,GAAG,CAAC;EACrE"}

package/dist/bare-metal-partition.d.cts

@@ -0,0 +1,26 @@
+import { NativePlatform, Platform, ResolvedService, ResolverOutput } from "./types.cjs";
+
+//#region src/bare-metal-partition.d.ts
+/**
+ * Maps Platform (e.g. linux/amd64) to NativePlatform (linux, windows, macos).
+ */
+declare function platformToNativePlatform(platform: Platform): NativePlatform;
+interface BareMetalPartitionResult {
+  nativeServices: ResolvedService[];
+  dockerOnlyServices: ResolvedService[];
+  nativeIds: Set<string>;
+}
+/**
+ * Partitions resolved services into native (run on host via scripts) vs Docker-only.
+ * Gateway and CLI are never native; services with nativeSupported and a matching
+ * nativeRecipe for the platform go to native, rest to Docker.
+ */
+declare function partitionBareMetal(resolved: ResolverOutput, platform: Platform): BareMetalPartitionResult;
+/**
+ * Returns a new ResolverOutput containing only the given service list (same order).
+ * Used to build compose for Docker-only subset when bare-metal has native services.
+ */
+declare function resolvedWithOnlyServices(resolved: ResolverOutput, services: ResolvedService[]): ResolverOutput;
+//#endregion
+export { BareMetalPartitionResult, partitionBareMetal, platformToNativePlatform, resolvedWithOnlyServices };
+//# sourceMappingURL=bare-metal-partition.d.cts.map

package/dist/bare-metal-partition.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bare-metal-partition.d.cts","names":[],"sources":["../src/bare-metal-partition.ts"],"mappings":";;;;;AAKA;iBAAgB,wBAAA,CAAyB,QAAA,EAAU,QAAA,GAAW,cAAA;AAAA,UAQ7C,wBAAA;EAChB,cAAA,EAAgB,eAAA;EAChB,kBAAA,EAAoB,eAAA;EACpB,SAAA,EAAW,GAAA;AAAA;;;AAHZ;;;iBAWgB,kBAAA,CACf,QAAA,EAAU,cAAA,EACV,QAAA,EAAU,QAAA,GACR,wBAAA;;;;;iBA4Ba,wBAAA,CACf,QAAA,EAAU,cAAA,EACV,QAAA,EAAU,eAAA,KACR,cAAA"}

package/dist/bare-metal-partition.test.cjs

@@ -0,0 +1,57 @@
+const require_vi_2VT5v0um = require('./vi.2VT5v0um-BmRMvymT.cjs');
+const require_bare_metal_partition = require('./bare-metal-partition.cjs');
+const require_resolver = require('./resolver.cjs');
+
+//#region src/bare-metal-partition.test.ts
+require_vi_2VT5v0um.describe("bare-metal partition", () => {
+	require_vi_2VT5v0um.it("platformToNativePlatform maps platform to native", () => {
+		require_vi_2VT5v0um.globalExpect(require_bare_metal_partition.platformToNativePlatform("linux/amd64")).toBe("linux");
+		require_vi_2VT5v0um.globalExpect(require_bare_metal_partition.platformToNativePlatform("linux/arm64")).toBe("linux");
+		require_vi_2VT5v0um.globalExpect(require_bare_metal_partition.platformToNativePlatform("windows/amd64")).toBe("windows");
+		require_vi_2VT5v0um.globalExpect(require_bare_metal_partition.platformToNativePlatform("macos/arm64")).toBe("macos");
+	});
+	require_vi_2VT5v0um.it("partitions redis as native on Linux when redis has native recipe", () => {
+		const result = require_bare_metal_partition.partitionBareMetal(require_resolver.resolve({
+			services: ["redis"],
+			skillPacks: [],
+			proxy: "none",
+			gpu: false,
+			platform: "linux/amd64",
+			monitoring: false
+		}), "linux/amd64");
+		require_vi_2VT5v0um.globalExpect(result.nativeIds.has("redis")).toBe(true);
+		require_vi_2VT5v0um.globalExpect(result.nativeServices.length).toBe(1);
+		require_vi_2VT5v0um.globalExpect(result.nativeServices[0].definition.id).toBe("redis");
+		require_vi_2VT5v0um.globalExpect(result.dockerOnlyServices.length).toBe(0);
+	});
+	require_vi_2VT5v0um.it("partitions n8n as Docker-only (no native recipe)", () => {
+		const result = require_bare_metal_partition.partitionBareMetal(require_resolver.resolve({
+			services: ["n8n"],
+			skillPacks: [],
+			proxy: "none",
+			gpu: false,
+			platform: "linux/amd64",
+			monitoring: false
+		}), "linux/amd64");
+		require_vi_2VT5v0um.globalExpect(result.nativeIds.has("n8n")).toBe(false);
+		require_vi_2VT5v0um.globalExpect(result.nativeServices.length).toBe(0);
+		require_vi_2VT5v0um.globalExpect(result.dockerOnlyServices.length).toBeGreaterThanOrEqual(1);
+		require_vi_2VT5v0um.globalExpect(result.dockerOnlyServices.some((s) => s.definition.id === "n8n")).toBe(true);
+	});
+	require_vi_2VT5v0um.it("resolvedWithOnlyServices filters to given service list", () => {
+		const resolved = require_resolver.resolve({
+			services: ["redis", "n8n"],
+			skillPacks: [],
+			proxy: "none",
+			gpu: false,
+			platform: "linux/amd64",
+			monitoring: false
+		});
+		const filtered = require_bare_metal_partition.resolvedWithOnlyServices(resolved, require_bare_metal_partition.partitionBareMetal(resolved, "linux/amd64").dockerOnlyServices);
+		require_vi_2VT5v0um.globalExpect(filtered.services.every((s) => s.definition.id !== "redis")).toBe(true);
+		require_vi_2VT5v0um.globalExpect(filtered.services.some((s) => s.definition.id === "n8n")).toBe(true);
+	});
+});
+
+//#endregion
+//# sourceMappingURL=bare-metal-partition.test.cjs.map

package/dist/bare-metal-partition.test.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bare-metal-partition.test.cjs","names":["describe","platformToNativePlatform","partitionBareMetal","resolve","resolvedWithOnlyServices"],"sources":["../src/bare-metal-partition.test.ts"],"sourcesContent":["import { describe, expect, it } from \"vitest\";\nimport {\n\tpartitionBareMetal,\n\tplatformToNativePlatform,\n\tresolvedWithOnlyServices,\n} from \"./bare-metal-partition.js\";\nimport { resolve } from \"./resolver.js\";\n\ndescribe(\"bare-metal partition\", () => {\n\tit(\"platformToNativePlatform maps platform to native\", () => {\n\t\texpect(platformToNativePlatform(\"linux/amd64\")).toBe(\"linux\");\n\t\texpect(platformToNativePlatform(\"linux/arm64\")).toBe(\"linux\");\n\t\texpect(platformToNativePlatform(\"windows/amd64\")).toBe(\"windows\");\n\t\texpect(platformToNativePlatform(\"macos/arm64\")).toBe(\"macos\");\n\t});\n\n\tit(\"partitions redis as native on Linux when redis has native recipe\", () => {\n\t\tconst resolved = resolve({\n\t\t\tservices: [\"redis\"],\n\t\t\tskillPacks: [],\n\t\t\tproxy: \"none\",\n\t\t\tgpu: false,\n\t\t\tplatform: \"linux/amd64\",\n\t\t\tmonitoring: false,\n\t\t});\n\t\tconst result = partitionBareMetal(resolved, \"linux/amd64\");\n\t\texpect(result.nativeIds.has(\"redis\")).toBe(true);\n\t\texpect(result.nativeServices.length).toBe(1);\n\t\texpect(result.nativeServices[0].definition.id).toBe(\"redis\");\n\t\texpect(result.dockerOnlyServices.length).toBe(0);\n\t});\n\n\tit(\"partitions n8n as Docker-only (no native recipe)\", () => {\n\t\tconst resolved = resolve({\n\t\t\tservices: [\"n8n\"],\n\t\t\tskillPacks: [],\n\t\t\tproxy: \"none\",\n\t\t\tgpu: false,\n\t\t\tplatform: \"linux/amd64\",\n\t\t\tmonitoring: false,\n\t\t});\n\t\tconst result = partitionBareMetal(resolved, \"linux/amd64\");\n\t\texpect(result.nativeIds.has(\"n8n\")).toBe(false);\n\t\texpect(result.nativeServices.length).toBe(0);\n\t\texpect(result.dockerOnlyServices.length).toBeGreaterThanOrEqual(1);\n\t\texpect(result.dockerOnlyServices.some((s) => s.definition.id === \"n8n\")).toBe(true);\n\t});\n\n\tit(\"resolvedWithOnlyServices filters to given service list\", () => {\n\t\tconst resolved = resolve({\n\t\t\tservices: [\"redis\", \"n8n\"],\n\t\t\tskillPacks: [],\n\t\t\tproxy: \"none\",\n\t\t\tgpu: false,\n\t\t\tplatform: \"linux/amd64\",\n\t\t\tmonitoring: false,\n\t\t});\n\t\tconst partition = partitionBareMetal(resolved, \"linux/amd64\");\n\t\tconst filtered = resolvedWithOnlyServices(resolved, partition.dockerOnlyServices);\n\t\texpect(filtered.services.every((s) => s.definition.id !== \"redis\")).toBe(true);\n\t\texpect(filtered.services.some((s) => s.definition.id === \"n8n\")).toBe(true);\n\t});\n});\n"],"mappings":";;;;;AAQAA,6BAAS,8BAA8B;AACtC,wBAAG,0DAA0D;AAC5D,mCAAOC,sDAAyB,cAAc,CAAC,CAAC,KAAK,QAAQ;AAC7D,mCAAOA,sDAAyB,cAAc,CAAC,CAAC,KAAK,QAAQ;AAC7D,mCAAOA,sDAAyB,gBAAgB,CAAC,CAAC,KAAK,UAAU;AACjE,mCAAOA,sDAAyB,cAAc,CAAC,CAAC,KAAK,QAAQ;GAC5D;AAEF,wBAAG,0EAA0E;EAS5E,MAAM,SAASC,gDAREC,yBAAQ;GACxB,UAAU,CAAC,QAAQ;GACnB,YAAY,EAAE;GACd,OAAO;GACP,KAAK;GACL,UAAU;GACV,YAAY;GACZ,CAAC,EAC0C,cAAc;AAC1D,mCAAO,OAAO,UAAU,IAAI,QAAQ,CAAC,CAAC,KAAK,KAAK;AAChD,mCAAO,OAAO,eAAe,OAAO,CAAC,KAAK,EAAE;AAC5C,mCAAO,OAAO,eAAe,GAAG,WAAW,GAAG,CAAC,KAAK,QAAQ;AAC5D,mCAAO,OAAO,mBAAmB,OAAO,CAAC,KAAK,EAAE;GAC/C;AAEF,wBAAG,0DAA0D;EAS5D,MAAM,SAASD,gDAREC,yBAAQ;GACxB,UAAU,CAAC,MAAM;GACjB,YAAY,EAAE;GACd,OAAO;GACP,KAAK;GACL,UAAU;GACV,YAAY;GACZ,CAAC,EAC0C,cAAc;AAC1D,mCAAO,OAAO,UAAU,IAAI,MAAM,CAAC,CAAC,KAAK,MAAM;AAC/C,mCAAO,OAAO,eAAe,OAAO,CAAC,KAAK,EAAE;AAC5C,mCAAO,OAAO,mBAAmB,OAAO,CAAC,uBAAuB,EAAE;AAClE,mCAAO,OAAO,mBAAmB,MAAM,MAAM,EAAE,WAAW,OAAO,MAAM,CAAC,CAAC,KAAK,KAAK;GAClF;AAEF,wBAAG,gEAAgE;EAClE,MAAM,WAAWA,yBAAQ;GACxB,UAAU,CAAC,SAAS,MAAM;GAC1B,YAAY,EAAE;GACd,OAAO;GACP,KAAK;GACL,UAAU;GACV,YAAY;GACZ,CAAC;EAEF,MAAM,WAAWC,sDAAyB,UADxBF,gDAAmB,UAAU,cAAc,CACC,mBAAmB;AACjF,mCAAO,SAAS,SAAS,OAAO,MAAM,EAAE,WAAW,OAAO,QAAQ,CAAC,CAAC,KAAK,KAAK;AAC9E,mCAAO,SAAS,SAAS,MAAM,MAAM,EAAE,WAAW,OAAO,MAAM,CAAC,CAAC,KAAK,KAAK;GAC1E;EACD"}

package/dist/bare-metal-partition.test.d.cts

@@ -0,0 +1 @@
+export { };

package/dist/bare-metal-partition.test.mjs

@@ -1,4 +1,4 @@
-import { n as describe, r as it, t as globalExpect } from "./vi.2VT5v0um-BgmKutxR.mjs";
+import { n as describe, r as it, t as globalExpect } from "./vi.2VT5v0um-CFyDIn0m.mjs";
 import { partitionBareMetal, platformToNativePlatform, resolvedWithOnlyServices } from "./bare-metal-partition.mjs";
 import { resolve } from "./resolver.mjs";
 

package/dist/chunk-C0xms8kb.cjs

@@ -0,0 +1,34 @@
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") {
+		for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+			key = keys[i];
+			if (!__hasOwnProp.call(to, key) && key !== except) {
+				__defProp(to, key, {
+					get: ((k) => from[k]).bind(null, key),
+					enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+				});
+			}
+		}
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+
+//#endregion
+
+Object.defineProperty(exports, '__toESM', {
+  enumerable: true,
+  get: function () {
+    return __toESM;
+  }
+});

package/dist/compose-validation.test.cjs

@@ -0,0 +1,67 @@
+const require_chunk = require('./chunk-C0xms8kb.cjs');
+const require_generate = require('./generate.cjs');
+const require_presets_registry = require('./presets/registry.cjs');
+let yaml = require("yaml");
+yaml = require_chunk.__toESM(yaml);
+
+//#region src/compose-validation.test.ts
+const allPresets = require_presets_registry.getAllPresets();
+describe("docker compose config integration tests", () => {
+	for (const preset of allPresets) describe(`preset "${preset.id}"`, () => {
+		const composeContent = require_generate.generate({
+			projectName: "test-project",
+			services: preset.services,
+			skillPacks: preset.skillPacks,
+			aiProviders: [],
+			gsdRuntimes: [],
+			proxy: "none",
+			gpu: false,
+			platform: "linux/amd64",
+			deployment: "local",
+			deploymentType: "docker",
+			generateSecrets: false,
+			openclawVersion: "latest",
+			monitoring: false
+		}).files["docker-compose.yml"];
+		const parsed = yaml.parse(composeContent);
+		it("parses as valid YAML", () => {
+			expect(parsed).toBeDefined();
+			expect(typeof parsed).toBe("object");
+		});
+		it("every service has an image field", () => {
+			expect(parsed.services).toBeDefined();
+			for (const [name, service] of Object.entries(parsed.services)) expect(service.image, `service "${name}" is missing an image field`).toBeDefined();
+		});
+		it("every service has restart or uses default", () => {
+			for (const [name, service] of Object.entries(parsed.services)) {
+				const svc = service;
+				if (svc.restart !== void 0) expect([
+					"always",
+					"unless-stopped",
+					"on-failure",
+					"no"
+				].includes(svc.restart), `service "${name}" has invalid restart policy: ${svc.restart}`).toBe(true);
+			}
+		});
+		it("has networks defined", () => {
+			expect(parsed.networks).toBeDefined();
+			expect(typeof parsed.networks).toBe("object");
+		});
+		it("named volumes referenced by services are declared in top-level volumes", () => {
+			const topLevelVolumes = parsed.volumes ? new Set(Object.keys(parsed.volumes)) : /* @__PURE__ */ new Set();
+			for (const [serviceName, service] of Object.entries(parsed.services)) {
+				const volumes = service.volumes;
+				if (!volumes) continue;
+				for (const vol of volumes) {
+					const volStr = typeof vol === "string" ? vol : vol?.source;
+					if (typeof volStr !== "string") continue;
+					const source = volStr.split(":")[0];
+					if (source.length > 0 && !source.startsWith(".") && !source.startsWith("/") && !source.startsWith("~") && !source.includes("\\") && !source.startsWith("$") && !source.includes("${")) expect(topLevelVolumes.has(source), `service "${serviceName}" references named volume "${source}" which is not declared in top-level volumes`).toBe(true);
+				}
+			}
+		});
+	});
+});
+
+//#endregion
+//# sourceMappingURL=compose-validation.test.cjs.map

package/dist/compose-validation.test.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose-validation.test.cjs","names":["getAllPresets","generate"],"sources":["../src/compose-validation.test.ts"],"sourcesContent":["import * as yaml from \"yaml\";\nimport { generate } from \"./generate.js\";\nimport { getAllPresets } from \"./presets/registry.js\";\n\nconst allPresets = getAllPresets();\n\ndescribe(\"docker compose config integration tests\", () => {\n\tfor (const preset of allPresets) {\n\t\tdescribe(`preset \"${preset.id}\"`, () => {\n\t\t\tconst result = generate({\n\t\t\t\tprojectName: \"test-project\",\n\t\t\t\tservices: preset.services,\n\t\t\t\tskillPacks: preset.skillPacks,\n\t\t\t\taiProviders: [],\n\t\t\t\tgsdRuntimes: [],\n\t\t\t\tproxy: \"none\",\n\t\t\t\tgpu: false,\n\t\t\t\tplatform: \"linux/amd64\",\n\t\t\t\tdeployment: \"local\",\n\t\t\t\tdeploymentType: \"docker\",\n\t\t\t\tgenerateSecrets: false,\n\t\t\t\topenclawVersion: \"latest\",\n\t\t\t\tmonitoring: false,\n\t\t\t});\n\n\t\t\tconst composeContent = result.files[\"docker-compose.yml\"]!;\n\t\t\tconst parsed = yaml.parse(composeContent);\n\n\t\t\tit(\"parses as valid YAML\", () => {\n\t\t\t\texpect(parsed).toBeDefined();\n\t\t\t\texpect(typeof parsed).toBe(\"object\");\n\t\t\t});\n\n\t\t\tit(\"every service has an image field\", () => {\n\t\t\t\texpect(parsed.services).toBeDefined();\n\t\t\t\tfor (const [name, service] of Object.entries(parsed.services)) {\n\t\t\t\t\texpect(\n\t\t\t\t\t\t(service as Record<string, unknown>).image,\n\t\t\t\t\t\t`service \"${name}\" is missing an image field`,\n\t\t\t\t\t).toBeDefined();\n\t\t\t\t}\n\t\t\t});\n\n\t\t\tit(\"every service has restart or uses default\", () => {\n\t\t\t\tfor (const [name, service] of Object.entries(parsed.services)) {\n\t\t\t\t\tconst svc = service as Record<string, unknown>;\n\t\t\t\t\t// A service should either have an explicit restart policy\n\t\t\t\t\t// or rely on the default (which means the field can be absent).\n\t\t\t\t\t// We just verify that if restart is set, it is a valid value.\n\t\t\t\t\tif (svc.restart !== undefined) {\n\t\t\t\t\t\texpect(\n\t\t\t\t\t\t\t[\"always\", \"unless-stopped\", \"on-failure\", \"no\"].includes(svc.restart as string),\n\t\t\t\t\t\t\t`service \"${name}\" has invalid restart policy: ${svc.restart}`,\n\t\t\t\t\t\t).toBe(true);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t});\n\n\t\t\tit(\"has networks defined\", () => {\n\t\t\t\texpect(parsed.networks).toBeDefined();\n\t\t\t\texpect(typeof parsed.networks).toBe(\"object\");\n\t\t\t});\n\n\t\t\tit(\"named volumes referenced by services are declared in top-level volumes\", () => {\n\t\t\t\tconst topLevelVolumes = parsed.volumes\n\t\t\t\t\t? new Set(Object.keys(parsed.volumes))\n\t\t\t\t\t: new Set<string>();\n\n\t\t\t\tfor (const [serviceName, service] of Object.entries(parsed.services)) {\n\t\t\t\t\tconst svc = service as Record<string, unknown>;\n\t\t\t\t\tconst volumes = svc.volumes as string[] | undefined;\n\t\t\t\t\tif (!volumes) continue;\n\n\t\t\t\t\tfor (const vol of volumes) {\n\t\t\t\t\t\tconst volStr = typeof vol === \"string\" ? vol : (vol as { source?: string })?.source;\n\t\t\t\t\t\tif (typeof volStr !== \"string\") continue;\n\n\t\t\t\t\t\t// Named volumes follow the pattern \"name:path\" (no leading . or /)\n\t\t\t\t\t\t// Bind mounts start with . or / or use an absolute path\n\t\t\t\t\t\tconst parts = volStr.split(\":\");\n\t\t\t\t\t\tconst source = parts[0]!;\n\t\t\t\t\t\tconst isNamedVolume =\n\t\t\t\t\t\t\tsource.length > 0 &&\n\t\t\t\t\t\t\t!source.startsWith(\".\") &&\n\t\t\t\t\t\t\t!source.startsWith(\"/\") &&\n\t\t\t\t\t\t\t!source.startsWith(\"~\") &&\n\t\t\t\t\t\t\t!source.includes(\"\\\\\") &&\n\t\t\t\t\t\t\t!source.startsWith(\"$\") &&\n\t\t\t\t\t\t\t!source.includes(\"${\");\n\n\t\t\t\t\t\tif (isNamedVolume) {\n\t\t\t\t\t\t\texpect(\n\t\t\t\t\t\t\t\ttopLevelVolumes.has(source),\n\t\t\t\t\t\t\t\t`service \"${serviceName}\" references named volume \"${source}\" which is not declared in top-level volumes`,\n\t\t\t\t\t\t\t).toBe(true);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t});\n\t\t});\n\t}\n});\n"],"mappings":";;;;;;;AAIA,MAAM,aAAaA,wCAAe;AAElC,SAAS,iDAAiD;AACzD,MAAK,MAAM,UAAU,WACpB,UAAS,WAAW,OAAO,GAAG,UAAU;EAiBvC,MAAM,iBAhBSC,0BAAS;GACvB,aAAa;GACb,UAAU,OAAO;GACjB,YAAY,OAAO;GACnB,aAAa,EAAE;GACf,aAAa,EAAE;GACf,OAAO;GACP,KAAK;GACL,UAAU;GACV,YAAY;GACZ,gBAAgB;GAChB,iBAAiB;GACjB,iBAAiB;GACjB,YAAY;GACZ,CAAC,CAE4B,MAAM;EACpC,MAAM,SAAS,KAAK,MAAM,eAAe;AAEzC,KAAG,8BAA8B;AAChC,UAAO,OAAO,CAAC,aAAa;AAC5B,UAAO,OAAO,OAAO,CAAC,KAAK,SAAS;IACnC;AAEF,KAAG,0CAA0C;AAC5C,UAAO,OAAO,SAAS,CAAC,aAAa;AACrC,QAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,OAAO,SAAS,CAC5D,QACE,QAAoC,OACrC,YAAY,KAAK,6BACjB,CAAC,aAAa;IAEf;AAEF,KAAG,mDAAmD;AACrD,QAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,OAAO,SAAS,EAAE;IAC9D,MAAM,MAAM;AAIZ,QAAI,IAAI,YAAY,OACnB,QACC;KAAC;KAAU;KAAkB;KAAc;KAAK,CAAC,SAAS,IAAI,QAAkB,EAChF,YAAY,KAAK,gCAAgC,IAAI,UACrD,CAAC,KAAK,KAAK;;IAGb;AAEF,KAAG,8BAA8B;AAChC,UAAO,OAAO,SAAS,CAAC,aAAa;AACrC,UAAO,OAAO,OAAO,SAAS,CAAC,KAAK,SAAS;IAC5C;AAEF,KAAG,gFAAgF;GAClF,MAAM,kBAAkB,OAAO,UAC5B,IAAI,IAAI,OAAO,KAAK,OAAO,QAAQ,CAAC,mBACpC,IAAI,KAAa;AAEpB,QAAK,MAAM,CAAC,aAAa,YAAY,OAAO,QAAQ,OAAO,SAAS,EAAE;IAErE,MAAM,UADM,QACQ;AACpB,QAAI,CAAC,QAAS;AAEd,SAAK,MAAM,OAAO,SAAS;KAC1B,MAAM,SAAS,OAAO,QAAQ,WAAW,MAAO,KAA6B;AAC7E,SAAI,OAAO,WAAW,SAAU;KAKhC,MAAM,SADQ,OAAO,MAAM,IAAI,CACV;AAUrB,SARC,OAAO,SAAS,KAChB,CAAC,OAAO,WAAW,IAAI,IACvB,CAAC,OAAO,WAAW,IAAI,IACvB,CAAC,OAAO,WAAW,IAAI,IACvB,CAAC,OAAO,SAAS,KAAK,IACtB,CAAC,OAAO,WAAW,IAAI,IACvB,CAAC,OAAO,SAAS,KAAK,CAGtB,QACC,gBAAgB,IAAI,OAAO,EAC3B,YAAY,YAAY,6BAA6B,OAAO,8CAC5D,CAAC,KAAK,KAAK;;;IAId;GACD;EAEF"}

package/dist/compose-validation.test.d.cts

@@ -0,0 +1 @@
+export { };

package/dist/compose-validation.test.d.mts

@@ -0,0 +1 @@
+export { };

package/dist/compose-validation.test.mjs

@@ -0,0 +1,66 @@
+import { generate } from "./generate.mjs";
+import { getAllPresets } from "./presets/registry.mjs";
+import * as yaml from "yaml";
+
+//#region src/compose-validation.test.ts
+const allPresets = getAllPresets();
+describe("docker compose config integration tests", () => {
+	for (const preset of allPresets) describe(`preset "${preset.id}"`, () => {
+		const composeContent = generate({
+			projectName: "test-project",
+			services: preset.services,
+			skillPacks: preset.skillPacks,
+			aiProviders: [],
+			gsdRuntimes: [],
+			proxy: "none",
+			gpu: false,
+			platform: "linux/amd64",
+			deployment: "local",
+			deploymentType: "docker",
+			generateSecrets: false,
+			openclawVersion: "latest",
+			monitoring: false
+		}).files["docker-compose.yml"];
+		const parsed = yaml.parse(composeContent);
+		it("parses as valid YAML", () => {
+			expect(parsed).toBeDefined();
+			expect(typeof parsed).toBe("object");
+		});
+		it("every service has an image field", () => {
+			expect(parsed.services).toBeDefined();
+			for (const [name, service] of Object.entries(parsed.services)) expect(service.image, `service "${name}" is missing an image field`).toBeDefined();
+		});
+		it("every service has restart or uses default", () => {
+			for (const [name, service] of Object.entries(parsed.services)) {
+				const svc = service;
+				if (svc.restart !== void 0) expect([
+					"always",
+					"unless-stopped",
+					"on-failure",
+					"no"
+				].includes(svc.restart), `service "${name}" has invalid restart policy: ${svc.restart}`).toBe(true);
+			}
+		});
+		it("has networks defined", () => {
+			expect(parsed.networks).toBeDefined();
+			expect(typeof parsed.networks).toBe("object");
+		});
+		it("named volumes referenced by services are declared in top-level volumes", () => {
+			const topLevelVolumes = parsed.volumes ? new Set(Object.keys(parsed.volumes)) : /* @__PURE__ */ new Set();
+			for (const [serviceName, service] of Object.entries(parsed.services)) {
+				const volumes = service.volumes;
+				if (!volumes) continue;
+				for (const vol of volumes) {
+					const volStr = typeof vol === "string" ? vol : vol?.source;
+					if (typeof volStr !== "string") continue;
+					const source = volStr.split(":")[0];
+					if (source.length > 0 && !source.startsWith(".") && !source.startsWith("/") && !source.startsWith("~") && !source.includes("\\") && !source.startsWith("$") && !source.includes("${")) expect(topLevelVolumes.has(source), `service "${serviceName}" references named volume "${source}" which is not declared in top-level volumes`).toBe(true);
+				}
+			}
+		});
+	});
+});
+
+//#endregion
+export {  };
+//# sourceMappingURL=compose-validation.test.mjs.map

package/dist/compose-validation.test.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose-validation.test.mjs","names":[],"sources":["../src/compose-validation.test.ts"],"sourcesContent":["import * as yaml from \"yaml\";\nimport { generate } from \"./generate.js\";\nimport { getAllPresets } from \"./presets/registry.js\";\n\nconst allPresets = getAllPresets();\n\ndescribe(\"docker compose config integration tests\", () => {\n\tfor (const preset of allPresets) {\n\t\tdescribe(`preset \"${preset.id}\"`, () => {\n\t\t\tconst result = generate({\n\t\t\t\tprojectName: \"test-project\",\n\t\t\t\tservices: preset.services,\n\t\t\t\tskillPacks: preset.skillPacks,\n\t\t\t\taiProviders: [],\n\t\t\t\tgsdRuntimes: [],\n\t\t\t\tproxy: \"none\",\n\t\t\t\tgpu: false,\n\t\t\t\tplatform: \"linux/amd64\",\n\t\t\t\tdeployment: \"local\",\n\t\t\t\tdeploymentType: \"docker\",\n\t\t\t\tgenerateSecrets: false,\n\t\t\t\topenclawVersion: \"latest\",\n\t\t\t\tmonitoring: false,\n\t\t\t});\n\n\t\t\tconst composeContent = result.files[\"docker-compose.yml\"]!;\n\t\t\tconst parsed = yaml.parse(composeContent);\n\n\t\t\tit(\"parses as valid YAML\", () => {\n\t\t\t\texpect(parsed).toBeDefined();\n\t\t\t\texpect(typeof parsed).toBe(\"object\");\n\t\t\t});\n\n\t\t\tit(\"every service has an image field\", () => {\n\t\t\t\texpect(parsed.services).toBeDefined();\n\t\t\t\tfor (const [name, service] of Object.entries(parsed.services)) {\n\t\t\t\t\texpect(\n\t\t\t\t\t\t(service as Record<string, unknown>).image,\n\t\t\t\t\t\t`service \"${name}\" is missing an image field`,\n\t\t\t\t\t).toBeDefined();\n\t\t\t\t}\n\t\t\t});\n\n\t\t\tit(\"every service has restart or uses default\", () => {\n\t\t\t\tfor (const [name, service] of Object.entries(parsed.services)) {\n\t\t\t\t\tconst svc = service as Record<string, unknown>;\n\t\t\t\t\t// A service should either have an explicit restart policy\n\t\t\t\t\t// or rely on the default (which means the field can be absent).\n\t\t\t\t\t// We just verify that if restart is set, it is a valid value.\n\t\t\t\t\tif (svc.restart !== undefined) {\n\t\t\t\t\t\texpect(\n\t\t\t\t\t\t\t[\"always\", \"unless-stopped\", \"on-failure\", \"no\"].includes(svc.restart as string),\n\t\t\t\t\t\t\t`service \"${name}\" has invalid restart policy: ${svc.restart}`,\n\t\t\t\t\t\t).toBe(true);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t});\n\n\t\t\tit(\"has networks defined\", () => {\n\t\t\t\texpect(parsed.networks).toBeDefined();\n\t\t\t\texpect(typeof parsed.networks).toBe(\"object\");\n\t\t\t});\n\n\t\t\tit(\"named volumes referenced by services are declared in top-level volumes\", () => {\n\t\t\t\tconst topLevelVolumes = parsed.volumes\n\t\t\t\t\t? new Set(Object.keys(parsed.volumes))\n\t\t\t\t\t: new Set<string>();\n\n\t\t\t\tfor (const [serviceName, service] of Object.entries(parsed.services)) {\n\t\t\t\t\tconst svc = service as Record<string, unknown>;\n\t\t\t\t\tconst volumes = svc.volumes as string[] | undefined;\n\t\t\t\t\tif (!volumes) continue;\n\n\t\t\t\t\tfor (const vol of volumes) {\n\t\t\t\t\t\tconst volStr = typeof vol === \"string\" ? vol : (vol as { source?: string })?.source;\n\t\t\t\t\t\tif (typeof volStr !== \"string\") continue;\n\n\t\t\t\t\t\t// Named volumes follow the pattern \"name:path\" (no leading . or /)\n\t\t\t\t\t\t// Bind mounts start with . or / or use an absolute path\n\t\t\t\t\t\tconst parts = volStr.split(\":\");\n\t\t\t\t\t\tconst source = parts[0]!;\n\t\t\t\t\t\tconst isNamedVolume =\n\t\t\t\t\t\t\tsource.length > 0 &&\n\t\t\t\t\t\t\t!source.startsWith(\".\") &&\n\t\t\t\t\t\t\t!source.startsWith(\"/\") &&\n\t\t\t\t\t\t\t!source.startsWith(\"~\") &&\n\t\t\t\t\t\t\t!source.includes(\"\\\\\") &&\n\t\t\t\t\t\t\t!source.startsWith(\"$\") &&\n\t\t\t\t\t\t\t!source.includes(\"${\");\n\n\t\t\t\t\t\tif (isNamedVolume) {\n\t\t\t\t\t\t\texpect(\n\t\t\t\t\t\t\t\ttopLevelVolumes.has(source),\n\t\t\t\t\t\t\t\t`service \"${serviceName}\" references named volume \"${source}\" which is not declared in top-level volumes`,\n\t\t\t\t\t\t\t).toBe(true);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t});\n\t\t});\n\t}\n});\n"],"mappings":";;;;;AAIA,MAAM,aAAa,eAAe;AAElC,SAAS,iDAAiD;AACzD,MAAK,MAAM,UAAU,WACpB,UAAS,WAAW,OAAO,GAAG,UAAU;EAiBvC,MAAM,iBAhBS,SAAS;GACvB,aAAa;GACb,UAAU,OAAO;GACjB,YAAY,OAAO;GACnB,aAAa,EAAE;GACf,aAAa,EAAE;GACf,OAAO;GACP,KAAK;GACL,UAAU;GACV,YAAY;GACZ,gBAAgB;GAChB,iBAAiB;GACjB,iBAAiB;GACjB,YAAY;GACZ,CAAC,CAE4B,MAAM;EACpC,MAAM,SAAS,KAAK,MAAM,eAAe;AAEzC,KAAG,8BAA8B;AAChC,UAAO,OAAO,CAAC,aAAa;AAC5B,UAAO,OAAO,OAAO,CAAC,KAAK,SAAS;IACnC;AAEF,KAAG,0CAA0C;AAC5C,UAAO,OAAO,SAAS,CAAC,aAAa;AACrC,QAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,OAAO,SAAS,CAC5D,QACE,QAAoC,OACrC,YAAY,KAAK,6BACjB,CAAC,aAAa;IAEf;AAEF,KAAG,mDAAmD;AACrD,QAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,OAAO,SAAS,EAAE;IAC9D,MAAM,MAAM;AAIZ,QAAI,IAAI,YAAY,OACnB,QACC;KAAC;KAAU;KAAkB;KAAc;KAAK,CAAC,SAAS,IAAI,QAAkB,EAChF,YAAY,KAAK,gCAAgC,IAAI,UACrD,CAAC,KAAK,KAAK;;IAGb;AAEF,KAAG,8BAA8B;AAChC,UAAO,OAAO,SAAS,CAAC,aAAa;AACrC,UAAO,OAAO,OAAO,SAAS,CAAC,KAAK,SAAS;IAC5C;AAEF,KAAG,gFAAgF;GAClF,MAAM,kBAAkB,OAAO,UAC5B,IAAI,IAAI,OAAO,KAAK,OAAO,QAAQ,CAAC,mBACpC,IAAI,KAAa;AAEpB,QAAK,MAAM,CAAC,aAAa,YAAY,OAAO,QAAQ,OAAO,SAAS,EAAE;IAErE,MAAM,UADM,QACQ;AACpB,QAAI,CAAC,QAAS;AAEd,SAAK,MAAM,OAAO,SAAS;KAC1B,MAAM,SAAS,OAAO,QAAQ,WAAW,MAAO,KAA6B;AAC7E,SAAI,OAAO,WAAW,SAAU;KAKhC,MAAM,SADQ,OAAO,MAAM,IAAI,CACV;AAUrB,SARC,OAAO,SAAS,KAChB,CAAC,OAAO,WAAW,IAAI,IACvB,CAAC,OAAO,WAAW,IAAI,IACvB,CAAC,OAAO,WAAW,IAAI,IACvB,CAAC,OAAO,SAAS,KAAK,IACtB,CAAC,OAAO,WAAW,IAAI,IACvB,CAAC,OAAO,SAAS,KAAK,CAGtB,QACC,gBAAgB,IAAI,OAAO,EAC3B,YAAY,YAAY,6BAA6B,OAAO,8CAC5D,CAAC,KAAK,KAAK;;;IAId;GACD;EAEF"}