@better-openclaw/core 1.0.21 → 1.0.22

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-openclaw/core",
-  "version": "1.0.21",
+  "version": "1.0.22",
   "private": false,
   "description": "Core logic for better-openclaw: schemas, service registry, resolver, composer, validators and generators",
   "author": "bidew.io <bachir@bidew.io>",
@@ -50,12 +50,12 @@
   "devDependencies": {
     "@biomejs/biome": "^2.4.4",
     "@types/node": "^25.3.3",
-    "tsdown": "^0.20.3",
+    "tsdown": "^0.21.0",
     "typescript": "^5.9.3",
     "vitest": "^4.0.18"
   },
   "engines": {
-    "node": ">=18"
+    "node": ">=22"
   },
   "keywords": [
     "openclaw",

package/src/generators/postgres-init.ts

@@ -38,6 +38,12 @@ const DB_REQUIREMENTS: Record<string, Omit<DbRequirement, "serviceId" | "service
 	"cal-com": { dbName: "calcom", dbUser: "calcom", passwordEnvVar: "CALCOM_DB_PASSWORD" },
 	immich: { dbName: "immich", dbUser: "immich", passwordEnvVar: "IMMICH_DB_PASSWORD" },
 	authentik: { dbName: "authentik", dbUser: "authentik", passwordEnvVar: "AUTHENTIK_DB_PASSWORD" },
+	chatwoot: { dbName: "chatwoot", dbUser: "chatwoot", passwordEnvVar: "CHATWOOT_DB_PASSWORD" },
+	firecrawl: { dbName: "firecrawl", dbUser: "firecrawl", passwordEnvVar: "FIRECRAWL_DB_PASSWORD" },
+	flagsmith: { dbName: "flagsmith", dbUser: "flagsmith", passwordEnvVar: "FLAGSMITH_DB_PASSWORD" },
+	infisical: { dbName: "infisical", dbUser: "infisical", passwordEnvVar: "INFISICAL_DB_PASSWORD" },
+	keycloak: { dbName: "keycloak", dbUser: "keycloak", passwordEnvVar: "KEYCLOAK_DB_PASSWORD" },
+	listmonk: { dbName: "listmonk", dbUser: "listmonk", passwordEnvVar: "LISTMONK_DB_PASSWORD" },
 	"lasuite-meet-backend": {
 		dbName: "meet",
 		dbUser: "meet",

package/src/presets/presets.test.ts

@@ -43,6 +43,10 @@ describe("preset smoke tests", () => {
 				generateSecrets: false,
 				openclawVersion: "latest",
 				monitoring: false,
+				openclawImage: "official",
+				openclawInstallMethod: "docker",
+				deployTarget: "local",
+				hardened: false,
 			});
 
 			expect(result.files["docker-compose.yml"]).toBeDefined();

package/src/presets/registry.ts

@@ -128,6 +128,94 @@ const presets: Preset[] = [
 		skillPacks: [],
 		estimatedMemoryMB: 2048,
 	},
+	// ── New service presets ─────────────────────────────────────────────────
+	{
+		id: "backend-platform",
+		name: "Backend Platform",
+		description:
+			"BaaS stack with Appwrite, MariaDB, Redis, RabbitMQ for auth, storage, and async workflows",
+		services: ["appwrite", "mariadb", "redis", "rabbitmq", "caddy"],
+		skillPacks: ["appwrite-platform"],
+		estimatedMemoryMB: 3072,
+	},
+	{
+		id: "rag-platform",
+		name: "RAG Platform",
+		description:
+			"RAGFlow with MySQL, Redis, MinIO, OpenSearch for knowledge ingestion and grounded AI assistants",
+		services: ["ragflow", "mysql", "redis", "minio", "opensearch", "caddy"],
+		skillPacks: ["ragflow-platform"],
+		estimatedMemoryMB: 6144,
+	},
+	{
+		id: "zero-trust",
+		name: "Zero-Trust Security",
+		description:
+			"SSO, secrets management, and access control with Authelia, Keycloak, and Infisical",
+		services: ["authelia", "keycloak", "infisical", "postgresql", "redis", "caddy"],
+		skillPacks: ["authelia-security"],
+		estimatedMemoryMB: 3584,
+	},
+	{
+		id: "content-platform",
+		name: "Content Platform",
+		description: "CMS and newsletter stack with Directus, Strapi, Listmonk, and Stirling PDF",
+		services: ["directus", "strapi", "listmonk", "postgresql", "redis", "stirling-pdf", "caddy"],
+		skillPacks: ["cms-stack"],
+		estimatedMemoryMB: 3584,
+	},
+	{
+		id: "ai-orchestrator",
+		name: "AI Orchestrator",
+		description: "Langflow and Firecrawl for building and deploying AI workflows",
+		services: ["langflow", "firecrawl", "postgresql", "redis", "caddy"],
+		skillPacks: ["ai-agent-orchestra"],
+		estimatedMemoryMB: 3072,
+	},
+	// ── New Presets (from feature analysis) ───────────────────────────────────
+	{
+		id: "support-desk",
+		name: "Support Desk",
+		description:
+			"AI-powered customer support with live chat, LLM observability, and ticket management",
+		services: ["chatwoot", "chatwoot-worker", "langfuse", "redis", "postgresql", "caddy"],
+		skillPacks: ["customer-support"],
+		estimatedMemoryMB: 3072,
+	},
+	{
+		id: "sales-machine",
+		name: "Sales Machine",
+		description:
+			"CRM-driven sales pipeline with email marketing, newsletters, and workflow automation",
+		services: ["twenty", "mautic", "listmonk", "n8n", "postgresql", "mysql", "redis", "caddy"],
+		skillPacks: ["sales-pipeline"],
+		estimatedMemoryMB: 4096,
+	},
+	{
+		id: "data-warehouse",
+		name: "Data Warehouse",
+		description: "End-to-end data pipeline with DAG orchestration, 300+ connectors, and monitoring",
+		services: ["airflow", "airbyte", "postgresql", "grafana", "prometheus", "redis", "caddy"],
+		skillPacks: ["data-pipeline"],
+		estimatedMemoryMB: 4096,
+	},
+	{
+		id: "voice-center",
+		name: "Voice Center",
+		description:
+			"AI voice agent stack with programmable telephony, transcription, and real-time comms",
+		services: ["fonoster", "livekit", "whisper", "redis", "caddy"],
+		skillPacks: ["voice-agent"],
+		estimatedMemoryMB: 3072,
+	},
+	{
+		id: "shopfront",
+		name: "Shopfront",
+		description: "AI-managed headless e-commerce with product management and object storage",
+		services: ["medusa", "minio", "postgresql", "redis", "caddy"],
+		skillPacks: ["ecommerce-ops"],
+		estimatedMemoryMB: 2560,
+	},
 ];
 
 const presetMap = new Map<string, Preset>();

package/src/schema.ts

@@ -23,6 +23,17 @@ export const ServiceCategorySchema = z.enum([
 	"desktop",
 	"streaming",
 	"security",
+	"billing",
+	"crm",
+	"email-marketing",
+	"forms",
+	"api-gateway",
+	"backup",
+	"voice",
+	"ecommerce",
+	"collaboration",
+	"ai-observability",
+	"fine-tuning",
 ]);
 
 export const MaturitySchema = z.enum(["stable", "beta", "experimental"]);

package/src/services/definitions/airbyte.ts

@@ -0,0 +1,75 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const airbyteDefinition: ServiceDefinition = {
+	id: "airbyte",
+	name: "Airbyte",
+	description:
+		"Open-source data integration platform with 300+ connectors for syncing data between databases, APIs, SaaS tools, and warehouses.",
+	category: "automation",
+	icon: "🔄",
+
+	image: "airbyte/airbyte-bootloader",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 8000,
+			container: 8000,
+			description: "Airbyte web UI",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "airbyte-data",
+			containerPath: "/data",
+			description: "Airbyte workspace and connection data",
+		},
+	],
+	environment: [
+		{
+			key: "DATABASE_URL",
+			defaultValue: "jdbc:postgresql://postgresql:5432/airbyte",
+			secret: false,
+			description: "PostgreSQL connection URL",
+			required: true,
+		},
+		{
+			key: "DATABASE_USER",
+			defaultValue: "airbyte",
+			secret: false,
+			description: "Database username",
+			required: true,
+		},
+		{
+			key: "DATABASE_PASSWORD",
+			defaultValue: "${AIRBYTE_DB_PASSWORD}",
+			secret: true,
+			description: "Database password",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "curl -sf http://localhost:8000/api/v1/health || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 5,
+		startPeriod: "60s",
+	},
+	dependsOn: ["postgresql"],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://docs.airbyte.com/deploying-airbyte/docker-compose",
+	tags: ["data", "integration", "etl", "connectors", "sync", "pipeline"],
+	maturity: "stable",
+
+	requires: ["postgresql"],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 1024,
+	gpuRequired: false,
+};

package/src/services/definitions/airflow.ts

@@ -0,0 +1,109 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const airflowDefinition: ServiceDefinition = {
+	id: "airflow",
+	name: "Apache Airflow",
+	description:
+		"Industry-standard DAG-based workflow orchestration platform for scheduling, monitoring, and managing data pipelines and ETL jobs.",
+	category: "automation",
+	icon: "🌬️",
+
+	image: "apache/airflow",
+	imageTag: "2.10.4",
+	ports: [
+		{
+			host: 8080,
+			container: 8080,
+			description: "Airflow web UI",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "airflow-dags",
+			containerPath: "/opt/airflow/dags",
+			description: "Airflow DAG definitions",
+		},
+		{
+			name: "airflow-logs",
+			containerPath: "/opt/airflow/logs",
+			description: "Airflow task logs",
+		},
+	],
+	environment: [
+		{
+			key: "AIRFLOW__CORE__EXECUTOR",
+			defaultValue: "LocalExecutor",
+			secret: false,
+			description: "Airflow executor type",
+			required: true,
+		},
+		{
+			key: "AIRFLOW__DATABASE__SQL_ALCHEMY_CONN",
+			defaultValue: "postgresql+psycopg2://airflow:${AIRFLOW_DB_PASSWORD}@postgresql:5432/airflow",
+			secret: true,
+			description: "Database connection string",
+			required: true,
+		},
+		{
+			key: "AIRFLOW__CORE__FERNET_KEY",
+			defaultValue: "${AIRFLOW_FERNET_KEY}",
+			secret: true,
+			description: "Fernet encryption key for connections",
+			required: true,
+		},
+		{
+			key: "AIRFLOW__WEBSERVER__SECRET_KEY",
+			defaultValue: "${AIRFLOW_SECRET_KEY}",
+			secret: true,
+			description: "Secret key for webserver sessions",
+			required: true,
+		},
+		{
+			key: "_AIRFLOW_WWW_USER_CREATE",
+			defaultValue: "true",
+			secret: false,
+			description: "Create default admin user on startup",
+			required: false,
+		},
+		{
+			key: "_AIRFLOW_WWW_USER_USERNAME",
+			defaultValue: "admin",
+			secret: false,
+			description: "Default admin username",
+			required: false,
+		},
+		{
+			key: "_AIRFLOW_WWW_USER_PASSWORD",
+			defaultValue: "${AIRFLOW_ADMIN_PASSWORD}",
+			secret: true,
+			description: "Default admin password",
+			required: false,
+		},
+	],
+	command: "standalone",
+	healthcheck: {
+		test: "curl -sf http://localhost:8080/health || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 5,
+		startPeriod: "60s",
+	},
+	dependsOn: ["postgresql"],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://airflow.apache.org/docs/",
+	tags: ["etl", "dag", "pipeline", "orchestration", "scheduling", "data"],
+	maturity: "stable",
+
+	requires: ["postgresql"],
+	recommends: ["redis"],
+	conflictsWith: [],
+
+	minMemoryMB: 1024,
+	gpuRequired: false,
+};

package/src/services/definitions/appwrite.ts

@@ -0,0 +1,181 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const appwriteDefinition: ServiceDefinition = {
+	id: "appwrite",
+	name: "Appwrite",
+	description:
+		"Self-hosted backend platform for auth, databases, storage, functions, and realtime APIs for web and mobile apps.",
+	category: "dev-tools",
+	icon: "🧱",
+
+	image: "appwrite/appwrite",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 8114,
+			container: 80,
+			description: "Appwrite API and console",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "appwrite-storage",
+			containerPath: "/storage",
+			description: "Appwrite file storage and persistent assets",
+		},
+	],
+	environment: [
+		{
+			key: "_APP_ENV",
+			defaultValue: "production",
+			secret: false,
+			description: "Appwrite runtime environment",
+			required: true,
+		},
+		{
+			key: "_APP_OPENSSL_KEY_V1",
+			defaultValue: "${APPWRITE_OPENSSL_KEY_V1}",
+			secret: true,
+			description: "Primary encryption key for Appwrite secrets and storage",
+			required: true,
+		},
+		{
+			key: "_APP_DOMAIN",
+			defaultValue: "localhost",
+			secret: false,
+			description: "Primary Appwrite domain",
+			required: true,
+		},
+		{
+			key: "_APP_DOMAIN_TARGET",
+			defaultValue: "localhost",
+			secret: false,
+			description: "Target domain for Appwrite endpoints",
+			required: true,
+		},
+		{
+			key: "_APP_DOMAIN_FUNCTIONS",
+			defaultValue: "localhost",
+			secret: false,
+			description: "Domain for Appwrite functions",
+			required: true,
+		},
+		{
+			key: "_APP_DB_HOST",
+			defaultValue: "mariadb",
+			secret: false,
+			description: "MariaDB host",
+			required: true,
+		},
+		{
+			key: "_APP_DB_PORT",
+			defaultValue: "3306",
+			secret: false,
+			description: "MariaDB port",
+			required: true,
+		},
+		{
+			key: "_APP_DB_SCHEMA",
+			defaultValue: "appwrite",
+			secret: false,
+			description: "MariaDB schema name",
+			required: true,
+		},
+		{
+			key: "_APP_DB_USER",
+			defaultValue: "appwrite",
+			secret: false,
+			description: "MariaDB user",
+			required: true,
+		},
+		{
+			key: "_APP_DB_PASS",
+			defaultValue: "${APPWRITE_DB_PASSWORD}",
+			secret: true,
+			description: "MariaDB password",
+			required: true,
+		},
+		{
+			key: "_APP_REDIS_HOST",
+			defaultValue: "redis",
+			secret: false,
+			description: "Redis host",
+			required: true,
+		},
+		{
+			key: "_APP_REDIS_PORT",
+			defaultValue: "6379",
+			secret: false,
+			description: "Redis port",
+			required: true,
+		},
+		{
+			key: "_APP_REDIS_PASS",
+			defaultValue: "${REDIS_PASSWORD}",
+			secret: true,
+			description: "Redis password",
+			required: true,
+		},
+		{
+			key: "_APP_RABBITMQ",
+			defaultValue: "amqp://openclaw:${RABBITMQ_PASSWORD}@rabbitmq:5672/",
+			secret: true,
+			description: "RabbitMQ connection URL",
+			required: true,
+		},
+		{
+			key: "_APP_SYSTEM_EMAIL_NAME",
+			defaultValue: "Appwrite",
+			secret: false,
+			description: "System email sender name",
+			required: true,
+		},
+		{
+			key: "_APP_SYSTEM_EMAIL_ADDRESS",
+			defaultValue: "noreply@appwrite.local",
+			secret: false,
+			description: "System email sender address",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "curl -sf http://localhost/v1/health || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 5,
+		startPeriod: "60s",
+	},
+	dependsOn: ["mariadb", "redis", "rabbitmq"],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [{ skillId: "appwrite-backend", autoInstall: true }],
+	openclawEnvVars: [
+		{
+			key: "APPWRITE_HOST",
+			defaultValue: "appwrite",
+			description: "Appwrite service host for API calls",
+			secret: false,
+			required: false,
+		},
+		{
+			key: "APPWRITE_PORT",
+			defaultValue: "80",
+			description: "Appwrite HTTP port",
+			secret: false,
+			required: false,
+		},
+	],
+
+	docsUrl: "https://appwrite.io/docs/advanced/self-hosting/installation",
+	tags: ["backend", "baas", "auth", "storage", "functions", "realtime"],
+	maturity: "beta",
+
+	requires: ["mariadb", "redis", "rabbitmq"],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 1024,
+	gpuRequired: false,
+};

package/src/services/definitions/authelia.ts

@@ -0,0 +1,145 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const autheliaDefinition: ServiceDefinition = {
+	id: "authelia",
+	name: "Authelia",
+	description:
+		"Authentication and authorization server for protecting self-hosted apps with SSO, MFA, and access policies behind your reverse proxy.",
+	category: "security",
+	icon: "🔒",
+
+	image: "authelia/authelia",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 9091,
+			container: 9091,
+			description: "Authelia web portal and API",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "authelia-config",
+			containerPath: "/config",
+			description: "Authelia configuration, sqlite storage, and notifier output",
+		},
+	],
+	environment: [
+		{
+			key: "TZ",
+			defaultValue: "UTC",
+			secret: false,
+			description: "Container timezone",
+			required: true,
+		},
+		{
+			key: "AUTHELIA_DOMAIN",
+			defaultValue: "localhost",
+			secret: false,
+			description: "Default protected domain for Authelia session cookies",
+			required: true,
+		},
+		{
+			key: "AUTHELIA_JWT_SECRET",
+			defaultValue: "${AUTHELIA_JWT_SECRET}",
+			secret: true,
+			description: "JWT secret used for identity validation flows",
+			required: true,
+		},
+		{
+			key: "AUTHELIA_SESSION_SECRET",
+			defaultValue: "${AUTHELIA_SESSION_SECRET}",
+			secret: true,
+			description: "Session secret for cookie encryption",
+			required: true,
+		},
+		{
+			key: "AUTHELIA_STORAGE_ENCRYPTION_KEY",
+			defaultValue: "${AUTHELIA_STORAGE_ENCRYPTION_KEY}",
+			secret: true,
+			description: "Encryption key for the local Authelia sqlite storage",
+			required: true,
+		},
+		{
+			key: "AUTHELIA_DEFAULT_USER_PASSWORD_HASH",
+			defaultValue:
+				"$6$rounds=50000$BpLnfgDsc2WD8F2q$Zis.ixdg9s/UOJYrs56b5QEZFiZECu0qZVNsIYxBaNJ7ucIL.nlxVCT5tqh8KHG8X4tlwCFm5r6NTOZZ5qRFN/",
+			secret: false,
+			description:
+				"Password hash for the generated default admin user. Replace with a value from `authelia crypto hash generate argon2` before production use.",
+			required: true,
+		},
+	],
+	command: `/bin/sh -c "mkdir -p /config && cat >/config/users_database.yml <<EOF
+users:
+  admin:
+    disabled: false
+    displayname: 'Admin'
+    password: '\${AUTHELIA_DEFAULT_USER_PASSWORD_HASH}'
+    email: 'admin@localhost'
+    groups:
+      - admins
+EOF
+cat >/config/configuration.yml <<EOF
+server:
+  address: 'tcp://0.0.0.0:9091'
+log:
+  level: 'info'
+theme: 'dark'
+jwt_secret: '\${AUTHELIA_JWT_SECRET}'
+default_redirection_url: 'http://localhost'
+totp:
+  issuer: 'better-openclaw'
+authentication_backend:
+  file:
+    path: '/config/users_database.yml'
+access_control:
+  default_policy: 'deny'
+session:
+  secret: '\${AUTHELIA_SESSION_SECRET}'
+  cookies:
+    - domain: '\${AUTHELIA_DOMAIN}'
+      authelia_url: 'http://localhost:9091'
+storage:
+  encryption_key: '\${AUTHELIA_STORAGE_ENCRYPTION_KEY}'
+  local:
+    path: '/config/db.sqlite3'
+notifier:
+  filesystem:
+    filename: '/config/notification.txt'
+EOF
+authelia --config /config/configuration.yml"`,
+	healthcheck: {
+		test: "curl -sf http://localhost:9091/api/health || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 5,
+		startPeriod: "30s",
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [{ skillId: "authelia-auth", autoInstall: true }],
+	openclawEnvVars: [
+		{
+			key: "AUTHELIA_PORTAL_URL",
+			defaultValue: "http://authelia:9091",
+			description: "Authelia portal URL for reverse proxy",
+			secret: false,
+			required: false,
+		},
+	],
+
+	docsUrl: "https://www.authelia.com/",
+	tags: ["auth", "sso", "mfa", "access-control", "reverse-proxy", "security"],
+	maturity: "beta",
+
+	requires: [],
+	recommends: ["caddy", "traefik"],
+	conflictsWith: [],
+
+	minMemoryMB: 256,
+	gpuRequired: false,
+};