@better-openclaw/core 1.0.26 → 1.0.31

package/dist/generators/cloud-init.test.mjs

@@ -0,0 +1,59 @@
+import { a as describe, o as it, t as globalExpect } from "../test.CTcmp4Su-BRa7-bTj.mjs";
+import { generateCloudInit } from "./cloud-init.mjs";
+//#region src/generators/cloud-init.test.ts
+describe("generateCloudInit", () => {
+	const baseOptions = {
+		composeYaml: "version: '3'\nservices:\n  redis:\n    image: redis:7",
+		envContent: "REDIS_PASSWORD=secret123",
+		projectName: "my-stack"
+	};
+	it("generates valid cloud-init YAML starting with #cloud-config", () => {
+		globalExpect(generateCloudInit(baseOptions)).toMatch(/^#cloud-config/);
+	});
+	it("embeds the compose YAML content", () => {
+		globalExpect(generateCloudInit(baseOptions)).toContain("redis:7");
+	});
+	it("embeds the env content with restrictive permissions", () => {
+		const result = generateCloudInit(baseOptions);
+		globalExpect(result).toContain("REDIS_PASSWORD=secret123");
+		globalExpect(result).toContain("\"0600\"");
+	});
+	it("includes project name in the output", () => {
+		globalExpect(generateCloudInit(baseOptions)).toContain("my-stack");
+	});
+	it("uses default gateway port 18789 when not specified", () => {
+		globalExpect(generateCloudInit(baseOptions)).toContain("18789");
+	});
+	it("uses custom gateway port when specified", () => {
+		const result = generateCloudInit({
+			...baseOptions,
+			gatewayPort: 9999
+		});
+		globalExpect(result).toContain("9999");
+		globalExpect(result).not.toContain("18789");
+	});
+	it("includes Docker installation via convenience script", () => {
+		globalExpect(generateCloudInit(baseOptions)).toContain("get.docker.com");
+	});
+	it("includes health check polling logic", () => {
+		const result = generateCloudInit(baseOptions);
+		globalExpect(result).toContain("RETRIES=");
+		globalExpect(result).toContain("curl");
+	});
+	it("includes runcmd section", () => {
+		globalExpect(generateCloudInit(baseOptions)).toContain("runcmd:");
+	});
+	it("includes final_message", () => {
+		globalExpect(generateCloudInit(baseOptions)).toContain("final_message:");
+	});
+	it("includes required packages", () => {
+		const result = generateCloudInit(baseOptions);
+		globalExpect(result).toContain("packages:");
+		globalExpect(result).toContain("curl");
+		globalExpect(result).toContain("git");
+	});
+});
+//#endregion
+export {};
+
+//# sourceMappingURL=cloud-init.test.mjs.map

package/dist/generators/cloud-init.test.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-init.test.mjs","names":[],"sources":["../../src/generators/cloud-init.test.ts"],"sourcesContent":["import { describe, expect, it } from \"vitest\";\nimport { generateCloudInit } from \"./cloud-init.js\";\n\ndescribe(\"generateCloudInit\", () => {\n\tconst baseOptions = {\n\t\tcomposeYaml: \"version: '3'\\nservices:\\n  redis:\\n    image: redis:7\",\n\t\tenvContent: \"REDIS_PASSWORD=secret123\",\n\t\tprojectName: \"my-stack\",\n\t};\n\n\tit(\"generates valid cloud-init YAML starting with #cloud-config\", () => {\n\t\tconst result = generateCloudInit(baseOptions);\n\t\texpect(result).toMatch(/^#cloud-config/);\n\t});\n\n\tit(\"embeds the compose YAML content\", () => {\n\t\tconst result = generateCloudInit(baseOptions);\n\t\texpect(result).toContain(\"redis:7\");\n\t});\n\n\tit(\"embeds the env content with restrictive permissions\", () => {\n\t\tconst result = generateCloudInit(baseOptions);\n\t\texpect(result).toContain(\"REDIS_PASSWORD=secret123\");\n\t\texpect(result).toContain('\"0600\"');\n\t});\n\n\tit(\"includes project name in the output\", () => {\n\t\tconst result = generateCloudInit(baseOptions);\n\t\texpect(result).toContain(\"my-stack\");\n\t});\n\n\tit(\"uses default gateway port 18789 when not specified\", () => {\n\t\tconst result = generateCloudInit(baseOptions);\n\t\texpect(result).toContain(\"18789\");\n\t});\n\n\tit(\"uses custom gateway port when specified\", () => {\n\t\tconst result = generateCloudInit({ ...baseOptions, gatewayPort: 9999 });\n\t\texpect(result).toContain(\"9999\");\n\t\texpect(result).not.toContain(\"18789\");\n\t});\n\n\tit(\"includes Docker installation via convenience script\", () => {\n\t\tconst result = generateCloudInit(baseOptions);\n\t\texpect(result).toContain(\"get.docker.com\");\n\t});\n\n\tit(\"includes health check polling logic\", () => {\n\t\tconst result = generateCloudInit(baseOptions);\n\t\texpect(result).toContain(\"RETRIES=\");\n\t\texpect(result).toContain(\"curl\");\n\t});\n\n\tit(\"includes runcmd section\", () => {\n\t\tconst result = generateCloudInit(baseOptions);\n\t\texpect(result).toContain(\"runcmd:\");\n\t});\n\n\tit(\"includes final_message\", () => {\n\t\tconst result = generateCloudInit(baseOptions);\n\t\texpect(result).toContain(\"final_message:\");\n\t});\n\n\tit(\"includes required packages\", () => {\n\t\tconst result = generateCloudInit(baseOptions);\n\t\texpect(result).toContain(\"packages:\");\n\t\texpect(result).toContain(\"curl\");\n\t\texpect(result).toContain(\"git\");\n\t});\n});\n"],"mappings":";;;AAGA,SAAS,2BAA2B;CACnC,MAAM,cAAc;EACnB,aAAa;EACb,YAAY;EACZ,aAAa;EACb;AAED,IAAG,qEAAqE;AAEvE,eADe,kBAAkB,YAAY,CAC/B,CAAC,QAAQ,iBAAiB;GACvC;AAEF,IAAG,yCAAyC;AAE3C,eADe,kBAAkB,YAAY,CAC/B,CAAC,UAAU,UAAU;GAClC;AAEF,IAAG,6DAA6D;EAC/D,MAAM,SAAS,kBAAkB,YAAY;AAC7C,eAAO,OAAO,CAAC,UAAU,2BAA2B;AACpD,eAAO,OAAO,CAAC,UAAU,WAAS;GACjC;AAEF,IAAG,6CAA6C;AAE/C,eADe,kBAAkB,YAAY,CAC/B,CAAC,UAAU,WAAW;GACnC;AAEF,IAAG,4DAA4D;AAE9D,eADe,kBAAkB,YAAY,CAC/B,CAAC,UAAU,QAAQ;GAChC;AAEF,IAAG,iDAAiD;EACnD,MAAM,SAAS,kBAAkB;GAAE,GAAG;GAAa,aAAa;GAAM,CAAC;AACvE,eAAO,OAAO,CAAC,UAAU,OAAO;AAChC,eAAO,OAAO,CAAC,IAAI,UAAU,QAAQ;GACpC;AAEF,IAAG,6DAA6D;AAE/D,eADe,kBAAkB,YAAY,CAC/B,CAAC,UAAU,iBAAiB;GACzC;AAEF,IAAG,6CAA6C;EAC/C,MAAM,SAAS,kBAAkB,YAAY;AAC7C,eAAO,OAAO,CAAC,UAAU,WAAW;AACpC,eAAO,OAAO,CAAC,UAAU,OAAO;GAC/B;AAEF,IAAG,iCAAiC;AAEnC,eADe,kBAAkB,YAAY,CAC/B,CAAC,UAAU,UAAU;GAClC;AAEF,IAAG,gCAAgC;AAElC,eADe,kBAAkB,YAAY,CAC/B,CAAC,UAAU,iBAAiB;GACzC;AAEF,IAAG,oCAAoC;EACtC,MAAM,SAAS,kBAAkB,YAAY;AAC7C,eAAO,OAAO,CAAC,UAAU,YAAY;AACrC,eAAO,OAAO,CAAC,UAAU,OAAO;AAChC,eAAO,OAAO,CAAC,UAAU,MAAM;GAC9B;EACD"}

package/dist/generators/env.cjs

@@ -1,5 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-require("../skills-BSF7iNa4.cjs");
+require("../skills-uPxJVmKk.cjs");
+const require_frameworks_registry = require("../frameworks/registry.cjs");
+require("../frameworks/index.cjs");
 const require_generators_postgres_init = require("./postgres-init.cjs");
 let node_crypto = require("node:crypto");
 //#region src/generators/env.ts
@@ -32,108 +34,31 @@ function generateEnvFiles(resolved, options) {
 			actualValue: profilesValue
 		});
 	}
-	lines.push({
-		comment: formatComment("OpenClaw version to deploy", "OpenClaw Core", true, false),
-		key: "OPENCLAW_VERSION",
-		exampleValue: version,
-		actualValue: version
-	});
-	const gatewayToken = options.generateSecrets ? (0, node_crypto.randomBytes)(24).toString("hex") : "";
-	lines.push({
-		comment: formatComment("Authentication token for the OpenClaw gateway API", "OpenClaw Core", true, true),
-		key: "OPENCLAW_GATEWAY_TOKEN",
-		exampleValue: "your_gateway_token_here",
-		actualValue: gatewayToken
-	});
-	lines.push({
-		comment: formatComment("Port the OpenClaw gateway listens on", "OpenClaw Core", true, false),
-		key: "OPENCLAW_GATEWAY_PORT",
-		exampleValue: "18789",
-		actualValue: "18789"
-	});
-	lines.push({
-		comment: formatComment("Port for the OpenClaw ACP bridge (WebSocket)", "OpenClaw Core", false, false),
-		key: "OPENCLAW_BRIDGE_PORT",
-		exampleValue: "18790",
-		actualValue: "18790"
-	});
-	lines.push({
-		comment: formatComment("Gateway network bind mode: 'lan' (all interfaces, required for Docker). Use 'loopback' only for native (non-Docker) installs with Tailscale serve/funnel", "OpenClaw Core", false, false),
-		key: "OPENCLAW_GATEWAY_BIND",
-		exampleValue: "lan",
-		actualValue: "lan"
-	});
-	lines.push({
-		comment: formatComment("Host path to OpenClaw configuration directory", "OpenClaw Core", true, false),
-		key: "OPENCLAW_CONFIG_DIR",
-		exampleValue: "./openclaw/config",
-		actualValue: "./openclaw/config"
-	});
-	lines.push({
-		comment: formatComment("Host path to OpenClaw workspace directory", "OpenClaw Core", true, false),
-		key: "OPENCLAW_WORKSPACE_DIR",
-		exampleValue: "./openclaw/workspace",
-		actualValue: "./openclaw/workspace"
-	});
-	const imageValue = {
-		official: "",
-		coolify: "coollabsio/openclaw:latest",
-		alpine: "alpine/openclaw:latest"
-	}[options.openclawImage ?? "official"] ?? "";
-	lines.push({
-		comment: formatComment(`OpenClaw Docker image variant: ${options.openclawImage ?? "official"} (official, coolify, alpine)`, "OpenClaw Core", false, false),
-		key: "OPENCLAW_IMAGE",
-		exampleValue: "",
-		actualValue: imageValue
-	});
-	lines.push({
-		comment: formatComment("Extra bind mounts for gateway and CLI containers (comma-separated, format: source:target[:options])", "OpenClaw Core", false, false),
-		key: "OPENCLAW_EXTRA_MOUNTS",
-		exampleValue: "",
-		actualValue: ""
-	});
-	lines.push({
-		comment: formatComment("Named volume or host path for /home/node persistence across container restarts", "OpenClaw Core", false, false),
-		key: "OPENCLAW_HOME_VOLUME",
-		exampleValue: "",
-		actualValue: ""
-	});
-	lines.push({
-		comment: formatComment("Extra apt packages to install during Docker image build (space-separated)", "OpenClaw Core", false, false),
-		key: "OPENCLAW_DOCKER_APT_PACKAGES",
-		exampleValue: "",
-		actualValue: ""
-	});
-	lines.push({
-		comment: formatComment("Alternative auth: gateway password (use token OR password, not both)", "OpenClaw Core", false, true),
-		key: "OPENCLAW_GATEWAY_PASSWORD",
-		exampleValue: "",
-		actualValue: ""
-	});
-	lines.push({
-		comment: formatComment("Override state directory path (default: ~/.openclaw)", "OpenClaw Core", false, false),
-		key: "OPENCLAW_STATE_DIR",
-		exampleValue: "",
-		actualValue: ""
-	});
-	lines.push({
-		comment: formatComment("Override config file path (default: ~/.openclaw/openclaw.json)", "OpenClaw Core", false, false),
-		key: "OPENCLAW_CONFIG_PATH",
-		exampleValue: "",
-		actualValue: ""
-	});
-	lines.push({
-		comment: formatComment("Import missing keys from login shell profile (set to 1 to enable)", "OpenClaw Core", false, false),
-		key: "OPENCLAW_LOAD_SHELL_ENV",
-		exampleValue: "",
-		actualValue: ""
-	});
-	if (options.domain) lines.push({
-		comment: formatComment("Primary domain for service routing", "OpenClaw Core", false, false),
-		key: "OPENCLAW_DOMAIN",
-		exampleValue: "example.com",
-		actualValue: options.domain
-	});
+	const framework = require_frameworks_registry.getFrameworkById(options.primaryFramework ?? "openclaw");
+	if (framework) {
+		const sectionName = framework.getEnvSectionName();
+		const fwEnvVars = framework.getBaseEnvVars({
+			generateSecrets: options.generateSecrets,
+			domain: options.domain,
+			frameworkVersion: version,
+			frameworkImageVariant: options.openclawImage ?? "official"
+		});
+		for (const envLine of fwEnvVars) lines.push({
+			comment: formatComment(envLine.comment, sectionName, false, envLine.key.includes("TOKEN") || envLine.key.includes("PASSWORD")),
+			key: envLine.key,
+			exampleValue: envLine.exampleValue,
+			actualValue: envLine.actualValue
+		});
+	}
+	if (options.domain) {
+		const sectionName = framework?.getEnvSectionName() ?? "Core";
+		lines.push({
+			comment: formatComment("Primary domain for service routing", sectionName, false, false),
+			key: "OPENCLAW_DOMAIN",
+			exampleValue: "example.com",
+			actualValue: options.domain
+		});
+	}
 	lines.push({
 		comment: "\n# ═══════════════════════════════════════════════════════════════════════════════\n# Tools API Keys (web search, fetch, voice)\n# ═══════════════════════════════════════════════════════════════════════════════",
 		key: "",

package/dist/generators/env.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"env.cjs","names":["getDbRequirements"],"sources":["../../src/generators/env.ts"],"sourcesContent":["import { randomBytes } from \"node:crypto\";\nimport type { ResolverOutput } from \"../types.js\";\nimport { getDbRequirements } from \"./postgres-init.js\";\n\n/**\n * Options for environment file generation.\n */\nexport interface EnvGeneratorOptions {\n\tgenerateSecrets: boolean;\n\tdomain?: string;\n\topenclawVersion?: string;\n\t/** When set, host-like vars (e.g. REDIS_HOST) for these services use host.docker.internal so gateway in Docker can reach native services on host. */\n\tnativeServiceIds?: Set<string>;\n\t/** Compose file names for COMPOSE_FILE env var (enables `docker compose up` without -f flags). */\n\tcomposeFiles?: string[];\n\t/** Compose profiles for COMPOSE_PROFILES env var (enables `docker compose up` without --profile flags). */\n\tcomposeProfiles?: string[];\n\t/** OpenClaw image variant (official, coolify, alpine). */\n\topenclawImage?: \"official\" | \"coolify\" | \"alpine\";\n}\n\n/**\n * Generates `.env.example` and `.env` file contents from resolved services.\n *\n * - `.env.example`: every env var with descriptive comments, placeholders for secrets\n * - `.env`: same vars but secrets filled with cryptographically random values when generateSecrets is true\n */\nexport function generateEnvFiles(\n\tresolved: ResolverOutput,\n\toptions: EnvGeneratorOptions,\n): { envExample: string; env: string } {\n\tconst version = options.openclawVersion ?? \"latest\";\n\tconst lines: { comment: string; key: string; exampleValue: string; actualValue: string }[] = [];\n\n\t// Track all env var values for resolving references later\n\tconst envVarValues = new Map<string, string>();\n\n\t// ── Docker Compose convenience vars ─────────────────────────────────────\n\t// These let you run `docker compose up -d` without -f and --profile flags.\n\n\tif (options.composeFiles && options.composeFiles.length > 0) {\n\t\tconst separator = process.platform === \"win32\" ? \";\" : \":\";\n\t\tconst composeFileValue = options.composeFiles.join(separator);\n\t\tlines.push({\n\t\t\tcomment: formatComment(\n\t\t\t\t\"Compose files to load (allows plain `docker compose up -d`)\",\n\t\t\t\t\"Docker Compose\",\n\t\t\t\tfalse,\n\t\t\t\tfalse,\n\t\t\t),\n\t\t\tkey: \"COMPOSE_FILE\",\n\t\t\texampleValue: composeFileValue,\n\t\t\tactualValue: composeFileValue,\n\t\t});\n\t}\n\n\tif (options.composeProfiles && options.composeProfiles.length > 0) {\n\t\tconst profilesValue = options.composeProfiles.join(\",\");\n\t\tlines.push({\n\t\t\tcomment: formatComment(\n\t\t\t\t\"Profiles to activate (allows plain `docker compose up -d`)\",\n\t\t\t\t\"Docker Compose\",\n\t\t\t\tfalse,\n\t\t\t\tfalse,\n\t\t\t),\n\t\t\tkey: \"COMPOSE_PROFILES\",\n\t\t\texampleValue: profilesValue,\n\t\t\tactualValue: profilesValue,\n\t\t});\n\t}\n\n\t// ── Base OpenClaw Variables ──────────────────────────────────────────────\n\n\tlines.push({\n\t\tcomment: formatComment(\"OpenClaw version to deploy\", \"OpenClaw Core\", true, false),\n\t\tkey: \"OPENCLAW_VERSION\",\n\t\texampleValue: version,\n\t\tactualValue: version,\n\t});\n\n\tconst gatewayToken = options.generateSecrets ? randomBytes(24).toString(\"hex\") : \"\";\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Authentication token for the OpenClaw gateway API\",\n\t\t\t\"OpenClaw Core\",\n\t\t\ttrue,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"OPENCLAW_GATEWAY_TOKEN\",\n\t\texampleValue: \"your_gateway_token_here\",\n\t\tactualValue: gatewayToken,\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\"Port the OpenClaw gateway listens on\", \"OpenClaw Core\", true, false),\n\t\tkey: \"OPENCLAW_GATEWAY_PORT\",\n\t\texampleValue: \"18789\",\n\t\tactualValue: \"18789\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Port for the OpenClaw ACP bridge (WebSocket)\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_BRIDGE_PORT\",\n\t\texampleValue: \"18790\",\n\t\tactualValue: \"18790\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Gateway network bind mode: 'lan' (all interfaces, required for Docker). Use 'loopback' only for native (non-Docker) installs with Tailscale serve/funnel\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_GATEWAY_BIND\",\n\t\texampleValue: \"lan\",\n\t\tactualValue: \"lan\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Host path to OpenClaw configuration directory\",\n\t\t\t\"OpenClaw Core\",\n\t\t\ttrue,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_CONFIG_DIR\",\n\t\texampleValue: \"./openclaw/config\",\n\t\tactualValue: \"./openclaw/config\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Host path to OpenClaw workspace directory\",\n\t\t\t\"OpenClaw Core\",\n\t\t\ttrue,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_WORKSPACE_DIR\",\n\t\texampleValue: \"./openclaw/workspace\",\n\t\tactualValue: \"./openclaw/workspace\",\n\t});\n\n\t// Set OPENCLAW_IMAGE based on variant (empty = use compose default)\n\tconst imageVariantMap: Record<string, string> = {\n\t\tofficial: \"\", // use compose default (ghcr.io/openclaw/openclaw:VERSION)\n\t\tcoolify: \"coollabsio/openclaw:latest\",\n\t\talpine: \"alpine/openclaw:latest\",\n\t};\n\tconst imageValue = imageVariantMap[options.openclawImage ?? \"official\"] ?? \"\";\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t`OpenClaw Docker image variant: ${options.openclawImage ?? \"official\"} (official, coolify, alpine)`,\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_IMAGE\",\n\t\texampleValue: \"\",\n\t\tactualValue: imageValue,\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Extra bind mounts for gateway and CLI containers (comma-separated, format: source:target[:options])\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_EXTRA_MOUNTS\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Named volume or host path for /home/node persistence across container restarts\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_HOME_VOLUME\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Extra apt packages to install during Docker image build (space-separated)\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_DOCKER_APT_PACKAGES\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Alternative auth: gateway password (use token OR password, not both)\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"OPENCLAW_GATEWAY_PASSWORD\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Override state directory path (default: ~/.openclaw)\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_STATE_DIR\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Override config file path (default: ~/.openclaw/openclaw.json)\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_CONFIG_PATH\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Import missing keys from login shell profile (set to 1 to enable)\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\tfalse,\n\t\t),\n\t\tkey: \"OPENCLAW_LOAD_SHELL_ENV\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tif (options.domain) {\n\t\tlines.push({\n\t\t\tcomment: formatComment(\"Primary domain for service routing\", \"OpenClaw Core\", false, false),\n\t\t\tkey: \"OPENCLAW_DOMAIN\",\n\t\t\texampleValue: \"example.com\",\n\t\t\tactualValue: options.domain,\n\t\t});\n\t}\n\n\t// ── Tools API Keys (web search, fetch) ──────────────────────────────────\n\n\tlines.push({\n\t\tcomment:\n\t\t\t\"\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# Tools API Keys (web search, fetch, voice)\\n# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\tkey: \"\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Brave Search API key for web search tool (default provider)\",\n\t\t\t\"OpenClaw Tools\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"BRAVE_API_KEY\",\n\t\texampleValue: \"your_brave_api_key_here\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Perplexity API key for web search tool (alternative provider)\",\n\t\t\t\"OpenClaw Tools\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"PERPLEXITY_API_KEY\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Firecrawl API key for enhanced web fetch fallback\",\n\t\t\t\"OpenClaw Tools\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"FIRECRAWL_API_KEY\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"ElevenLabs API key for Talk mode (text-to-speech)\",\n\t\t\t\"OpenClaw Tools\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"ELEVENLABS_API_KEY\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\t// ── Swarm / Remote Gateway ───────────────────────────────────────────────\n\n\tlines.push({\n\t\tcomment:\n\t\t\t\"\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# Swarm / Remote Gateway Connection\\n# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\tkey: \"\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Auth token for connecting to a remote OpenClaw gateway (swarm upstream)\",\n\t\t\t\"OpenClaw Swarm\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"OPENCLAW_REMOTE_GATEWAY_TOKEN\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Password for remote gateway auth (alternative to token)\",\n\t\t\t\"OpenClaw Swarm\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"OPENCLAW_REMOTE_GATEWAY_PASSWORD\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\t// ── AI Provider API Keys ─────────────────────────────────────────────────\n\n\tif (resolved.aiProviders && resolved.aiProviders.length > 0) {\n\t\tlines.push({\n\t\t\tcomment:\n\t\t\t\t\"\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# AI Provider API Keys\\n# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\t\tkey: \"\",\n\t\t\texampleValue: \"\",\n\t\t\tactualValue: \"\",\n\t\t});\n\n\t\tfor (const provider of resolved.aiProviders) {\n\t\t\t// Local-only providers don't need API keys\n\t\t\tif (provider === \"ollama\" || provider === \"lmstudio\" || provider === \"vllm\") continue;\n\n\t\t\t// Ollama Cloud uses OLLAMA_API_KEY (matches Ollama's official env var name)\n\t\t\tconst envKey =\n\t\t\t\tprovider === \"ollama-cloud\" ? \"OLLAMA_API_KEY\" : `${provider.toUpperCase()}_API_KEY`;\n\t\t\tconst label = provider === \"ollama-cloud\" ? \"Ollama Cloud\" : provider;\n\t\t\tlines.push({\n\t\t\t\tcomment: formatComment(`API Key for ${label} AI models`, \"OpenClaw Core\", true, true),\n\t\t\t\tkey: envKey,\n\t\t\t\texampleValue: `your_${provider.toLowerCase().replace(\"-\", \"_\")}_api_key_here`,\n\t\t\t\tactualValue: \"\",\n\t\t\t});\n\t\t}\n\t}\n\n\t// Claude web-provider session variables (optional)\n\tlines.push({\n\t\tcomment:\n\t\t\t\"\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# Claude Web Provider (optional)\\n# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\tkey: \"\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Claude AI session key for web provider authentication\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"CLAUDE_AI_SESSION_KEY\",\n\t\texampleValue: \"your_claude_ai_session_key_here\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Claude web session key for web provider authentication\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"CLAUDE_WEB_SESSION_KEY\",\n\t\texampleValue: \"your_claude_web_session_key_here\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Claude web cookie for web provider authentication\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"CLAUDE_WEB_COOKIE\",\n\t\texampleValue: \"your_claude_web_cookie_here\",\n\t\tactualValue: \"\",\n\t});\n\n\t// ── Per-Service Database Passwords ──────────────────────────────────────\n\n\tconst dbReqs = getDbRequirements(resolved);\n\n\tif (dbReqs.length > 0) {\n\t\tlines.push({\n\t\t\tcomment:\n\t\t\t\t\"\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# Per-Service Database Passwords\\n# Each service gets its own PostgreSQL database and credentials\\n# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\t\tkey: \"\",\n\t\t\texampleValue: \"\",\n\t\t\tactualValue: \"\",\n\t\t});\n\n\t\tfor (const req of dbReqs) {\n\t\t\tconst secretValue = options.generateSecrets ? randomBytes(24).toString(\"hex\") : \"\";\n\n\t\t\t// Store in map for later reference resolution\n\t\t\tenvVarValues.set(req.passwordEnvVar, secretValue);\n\n\t\t\tlines.push({\n\t\t\t\tcomment: formatComment(\n\t\t\t\t\t`PostgreSQL password for ${req.serviceName} (database: ${req.dbName}, user: ${req.dbUser})`,\n\t\t\t\t\treq.serviceName,\n\t\t\t\t\ttrue,\n\t\t\t\t\ttrue,\n\t\t\t\t),\n\t\t\t\tkey: req.passwordEnvVar,\n\t\t\t\texampleValue: `your_${req.passwordEnvVar.toLowerCase()}_here`,\n\t\t\t\tactualValue: secretValue,\n\t\t\t});\n\t\t}\n\t}\n\n\t// ── Service-Specific Variables ───────────────────────────────────────────\n\n\tconst dbPasswordKeys = dbReqs.map((r) => r.passwordEnvVar);\n\tconst aiProviderKeys = (resolved.aiProviders || []).map((p) => `${p.toUpperCase()}_API_KEY`);\n\tconst seenKeys = new Set<string>([\n\t\t\"OPENCLAW_VERSION\",\n\t\t\"OPENCLAW_GATEWAY_TOKEN\",\n\t\t\"OPENCLAW_GATEWAY_PORT\",\n\t\t\"OPENCLAW_BRIDGE_PORT\",\n\t\t\"OPENCLAW_GATEWAY_BIND\",\n\t\t\"OPENCLAW_CONFIG_DIR\",\n\t\t\"OPENCLAW_WORKSPACE_DIR\",\n\t\t\"OPENCLAW_IMAGE\",\n\t\t\"OPENCLAW_EXTRA_MOUNTS\",\n\t\t\"OPENCLAW_HOME_VOLUME\",\n\t\t\"OPENCLAW_DOCKER_APT_PACKAGES\",\n\t\t\"OPENCLAW_GATEWAY_PASSWORD\",\n\t\t\"OPENCLAW_STATE_DIR\",\n\t\t\"OPENCLAW_CONFIG_PATH\",\n\t\t\"OPENCLAW_LOAD_SHELL_ENV\",\n\t\t\"OPENCLAW_DOMAIN\",\n\t\t\"BRAVE_API_KEY\",\n\t\t\"PERPLEXITY_API_KEY\",\n\t\t\"FIRECRAWL_API_KEY\",\n\t\t\"ELEVENLABS_API_KEY\",\n\t\t\"OPENCLAW_REMOTE_GATEWAY_TOKEN\",\n\t\t\"OPENCLAW_REMOTE_GATEWAY_PASSWORD\",\n\t\t\"CLAUDE_AI_SESSION_KEY\",\n\t\t\"CLAUDE_WEB_SESSION_KEY\",\n\t\t\"CLAUDE_WEB_COOKIE\",\n\t\t...dbPasswordKeys,\n\t\t...aiProviderKeys,\n\t]);\n\n\tfor (const { definition } of resolved.services) {\n\t\tconst allEnvVars = [...definition.environment, ...definition.openclawEnvVars];\n\n\t\tif (allEnvVars.length === 0) continue;\n\n\t\t// Section separator for this service\n\t\tlines.push({\n\t\t\tcomment: `\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# ${definition.icon} ${definition.name}\\n# ═══════════════════════════════════════════════════════════════════════════════`,\n\t\t\tkey: \"\",\n\t\t\texampleValue: \"\",\n\t\t\tactualValue: \"\",\n\t\t});\n\n\t\tconst isNative = options.nativeServiceIds?.has(definition.id);\n\n\t\tfor (const envVar of allEnvVars) {\n\t\t\tif (seenKeys.has(envVar.key)) continue;\n\t\t\tseenKeys.add(envVar.key);\n\n\t\t\tconst secretValue = options.generateSecrets ? randomBytes(24).toString(\"hex\") : \"\";\n\n\t\t\t// For native services, host-like vars must point to host so gateway (in Docker) can reach them\n\t\t\tconst isHostVar = envVar.key.endsWith(\"_HOST\");\n\t\t\tconst hostValue = isNative && isHostVar ? \"host.docker.internal\" : null;\n\n\t\t\tconst exampleValue = hostValue\n\t\t\t\t? hostValue\n\t\t\t\t: envVar.secret\n\t\t\t\t\t? `your_${envVar.key.toLowerCase()}_here`\n\t\t\t\t\t: envVar.defaultValue;\n\n\t\t\tlet actualValue: string;\n\t\t\tif (hostValue) {\n\t\t\t\tactualValue = hostValue;\n\t\t\t} else if (envVar.secret) {\n\t\t\t\t// Resolve env var references like ${N8N_DB_PASSWORD}\n\t\t\t\tif (envVar.defaultValue.startsWith(\"${\") && envVar.defaultValue.endsWith(\"}\")) {\n\t\t\t\t\tconst refKey = envVar.defaultValue.slice(2, -1); // Extract var name from ${VAR_NAME}\n\t\t\t\t\tactualValue = envVarValues.get(refKey) || envVar.defaultValue;\n\t\t\t\t} else {\n\t\t\t\t\tactualValue = secretValue;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tactualValue = envVar.defaultValue;\n\t\t\t}\n\n\t\t\t// Store in map for later reference resolution\n\t\t\tenvVarValues.set(envVar.key, actualValue);\n\n\t\t\tlines.push({\n\t\t\t\tcomment: formatComment(envVar.description, definition.name, envVar.required, envVar.secret),\n\t\t\t\tkey: envVar.key,\n\t\t\t\texampleValue,\n\t\t\t\tactualValue,\n\t\t\t});\n\t\t}\n\t}\n\n\t// ── Build output strings ────────────────────────────────────────────────\n\n\tconst header = [\n\t\t\"# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\t\"# OpenClaw Environment Configuration\",\n\t\t`# Generated at ${new Date().toISOString()}`,\n\t\t\"# Docs: https://better-openclaw.dev/docs | Cloud: https://clawexa.net\",\n\t\t\"# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\t\"\",\n\t].join(\"\\n\");\n\n\tlet envExample = header;\n\tlet env = header;\n\n\tfor (const line of lines) {\n\t\tif (line.key === \"\") {\n\t\t\t// Section comment\n\t\t\tenvExample += `${line.comment}\\n`;\n\t\t\tenv += `${line.comment}\\n`;\n\t\t} else {\n\t\t\tenvExample += `${line.comment}\\n${line.key}=${line.exampleValue}\\n\\n`;\n\t\t\tenv += `${line.comment}\\n${line.key}=${line.actualValue}\\n\\n`;\n\t\t}\n\t}\n\n\treturn { envExample, env };\n}\n\n/**\n * Format a descriptive comment block for an environment variable.\n */\nfunction formatComment(\n\tdescription: string,\n\tserviceName: string,\n\trequired: boolean,\n\tsecret: boolean,\n): string {\n\treturn [\n\t\t`# ${description}`,\n\t\t`# Service: ${serviceName} | Required: ${required ? \"Yes\" : \"No\"} | Secret: ${secret ? \"Yes\" : \"No\"}`,\n\t].join(\"\\n\");\n}\n\n// ── Structured Env Vars ─────────────────────────────────────────────────────\n\nexport interface EnvVarGroup {\n\tserviceName: string;\n\tserviceIcon: string;\n\tserviceId: string;\n\tvars: {\n\t\tkey: string;\n\t\tdescription: string;\n\t\tsecret: boolean;\n\t\trequired: boolean;\n\t\tdefaultValue: string;\n\t}[];\n}\n\n/**\n * Returns environment variables grouped by service, suitable for UI rendering.\n *\n * - First group is always \"OpenClaw Core\" with base variables.\n * - Subsequent groups correspond to each resolved service.\n * - Variables are deduplicated across groups (first occurrence wins).\n */\nexport function getStructuredEnvVars(resolved: ResolverOutput): EnvVarGroup[] {\n\tconst groups: EnvVarGroup[] = [];\n\tconst seenKeys = new Set<string>();\n\n\t// ── OpenClaw Core group ──────────────────────────────────────────────────\n\tconst coreVars: EnvVarGroup[\"vars\"] = [\n\t\t{\n\t\t\tkey: \"OPENCLAW_VERSION\",\n\t\t\tdescription: \"OpenClaw version to deploy\",\n\t\t\tsecret: false,\n\t\t\trequired: true,\n\t\t\tdefaultValue: \"latest\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_GATEWAY_TOKEN\",\n\t\t\tdescription: \"Authentication token for the OpenClaw gateway API\",\n\t\t\tsecret: true,\n\t\t\trequired: true,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_GATEWAY_PORT\",\n\t\t\tdescription: \"Port the OpenClaw gateway listens on\",\n\t\t\tsecret: false,\n\t\t\trequired: true,\n\t\t\tdefaultValue: \"18789\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_GATEWAY_PASSWORD\",\n\t\t\tdescription: \"Alternative auth: gateway password (use token OR password)\",\n\t\t\tsecret: true,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_STATE_DIR\",\n\t\t\tdescription: \"Override state directory path (default: ~/.openclaw)\",\n\t\t\tsecret: false,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_CONFIG_PATH\",\n\t\t\tdescription: \"Override config file path (default: ~/.openclaw/openclaw.json)\",\n\t\t\tsecret: false,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"BRAVE_API_KEY\",\n\t\t\tdescription: \"Brave Search API key for web search tool (default provider)\",\n\t\t\tsecret: true,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"PERPLEXITY_API_KEY\",\n\t\t\tdescription: \"Perplexity API key for web search (alternative provider)\",\n\t\t\tsecret: true,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"FIRECRAWL_API_KEY\",\n\t\t\tdescription: \"Firecrawl API key for enhanced web fetch fallback\",\n\t\t\tsecret: true,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"ELEVENLABS_API_KEY\",\n\t\t\tdescription: \"ElevenLabs API key for Talk mode (text-to-speech)\",\n\t\t\tsecret: true,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_REMOTE_GATEWAY_TOKEN\",\n\t\t\tdescription: \"Auth token for connecting to a remote OpenClaw gateway (swarm upstream)\",\n\t\t\tsecret: true,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_REMOTE_GATEWAY_PASSWORD\",\n\t\t\tdescription: \"Password for remote gateway auth (alternative to token)\",\n\t\t\tsecret: true,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t];\n\n\tfor (const v of coreVars) {\n\t\tseenKeys.add(v.key);\n\t}\n\n\tgroups.push({\n\t\tserviceName: \"OpenClaw Core\",\n\t\tserviceIcon: \"⚙️\",\n\t\tserviceId: \"openclaw-core\",\n\t\tvars: coreVars,\n\t});\n\n\t// ── Per-service groups ───────────────────────────────────────────────────\n\tfor (const { definition } of resolved.services) {\n\t\tconst allEnvVars = [...definition.environment, ...definition.openclawEnvVars];\n\n\t\tconst vars: EnvVarGroup[\"vars\"] = [];\n\n\t\tfor (const envVar of allEnvVars) {\n\t\t\tif (seenKeys.has(envVar.key)) continue;\n\t\t\tseenKeys.add(envVar.key);\n\n\t\t\tvars.push({\n\t\t\t\tkey: envVar.key,\n\t\t\t\tdescription: envVar.description,\n\t\t\t\tsecret: envVar.secret,\n\t\t\t\trequired: envVar.required,\n\t\t\t\tdefaultValue: envVar.defaultValue,\n\t\t\t});\n\t\t}\n\n\t\tif (vars.length === 0) continue;\n\n\t\tgroups.push({\n\t\t\tserviceName: definition.name,\n\t\t\tserviceIcon: definition.icon,\n\t\t\tserviceId: definition.id,\n\t\t\tvars,\n\t\t});\n\t}\n\n\treturn groups;\n}\n"],"mappings":";;;;;;;;;;;AA2BA,SAAgB,iBACf,UACA,SACsC;CACtC,MAAM,UAAU,QAAQ,mBAAmB;CAC3C,MAAM,QAAuF,EAAE;CAG/F,MAAM,+BAAe,IAAI,KAAqB;AAK9C,KAAI,QAAQ,gBAAgB,QAAQ,aAAa,SAAS,GAAG;EAC5D,MAAM,YAAY,QAAQ,aAAa,UAAU,MAAM;EACvD,MAAM,mBAAmB,QAAQ,aAAa,KAAK,UAAU;AAC7D,QAAM,KAAK;GACV,SAAS,cACR,+DACA,kBACA,OACA,MACA;GACD,KAAK;GACL,cAAc;GACd,aAAa;GACb,CAAC;;AAGH,KAAI,QAAQ,mBAAmB,QAAQ,gBAAgB,SAAS,GAAG;EAClE,MAAM,gBAAgB,QAAQ,gBAAgB,KAAK,IAAI;AACvD,QAAM,KAAK;GACV,SAAS,cACR,8DACA,kBACA,OACA,MACA;GACD,KAAK;GACL,cAAc;GACd,aAAa;GACb,CAAC;;AAKH,OAAM,KAAK;EACV,SAAS,cAAc,8BAA8B,iBAAiB,MAAM,MAAM;EAClF,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;CAEF,MAAM,eAAe,QAAQ,mBAAA,GAAA,YAAA,aAA8B,GAAG,CAAC,SAAS,MAAM,GAAG;AAEjF,OAAM,KAAK;EACV,SAAS,cACR,qDACA,iBACA,MACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cAAc,wCAAwC,iBAAiB,MAAM,MAAM;EAC5F,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,gDACA,iBACA,OACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,4JACA,iBACA,OACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,iDACA,iBACA,MACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,6CACA,iBACA,MACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;CAQF,MAAM,aAL0C;EAC/C,UAAU;EACV,SAAS;EACT,QAAQ;EACR,CACkC,QAAQ,iBAAiB,eAAe;AAE3E,OAAM,KAAK;EACV,SAAS,cACR,kCAAkC,QAAQ,iBAAiB,WAAW,+BACtE,iBACA,OACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,uGACA,iBACA,OACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,kFACA,iBACA,OACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,6EACA,iBACA,OACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,wEACA,iBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,wDACA,iBACA,OACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,kEACA,iBACA,OACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,qEACA,iBACA,OACA,MACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,KAAI,QAAQ,OACX,OAAM,KAAK;EACV,SAAS,cAAc,sCAAsC,iBAAiB,OAAO,MAAM;EAC3F,KAAK;EACL,cAAc;EACd,aAAa,QAAQ;EACrB,CAAC;AAKH,OAAM,KAAK;EACV,SACC;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,+DACA,kBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,iEACA,kBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,qDACA,kBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,qDACA,kBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAIF,OAAM,KAAK;EACV,SACC;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,2EACA,kBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,2DACA,kBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAIF,KAAI,SAAS,eAAe,SAAS,YAAY,SAAS,GAAG;AAC5D,QAAM,KAAK;GACV,SACC;GACD,KAAK;GACL,cAAc;GACd,aAAa;GACb,CAAC;AAEF,OAAK,MAAM,YAAY,SAAS,aAAa;AAE5C,OAAI,aAAa,YAAY,aAAa,cAAc,aAAa,OAAQ;GAG7E,MAAM,SACL,aAAa,iBAAiB,mBAAmB,GAAG,SAAS,aAAa,CAAC;GAC5E,MAAM,QAAQ,aAAa,iBAAiB,iBAAiB;AAC7D,SAAM,KAAK;IACV,SAAS,cAAc,eAAe,MAAM,aAAa,iBAAiB,MAAM,KAAK;IACrF,KAAK;IACL,cAAc,QAAQ,SAAS,aAAa,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC/D,aAAa;IACb,CAAC;;;AAKJ,OAAM,KAAK;EACV,SACC;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,yDACA,iBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,0DACA,iBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,qDACA,iBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;CAIF,MAAM,SAASA,iCAAAA,kBAAkB,SAAS;AAE1C,KAAI,OAAO,SAAS,GAAG;AACtB,QAAM,KAAK;GACV,SACC;GACD,KAAK;GACL,cAAc;GACd,aAAa;GACb,CAAC;AAEF,OAAK,MAAM,OAAO,QAAQ;GACzB,MAAM,cAAc,QAAQ,mBAAA,GAAA,YAAA,aAA8B,GAAG,CAAC,SAAS,MAAM,GAAG;AAGhF,gBAAa,IAAI,IAAI,gBAAgB,YAAY;AAEjD,SAAM,KAAK;IACV,SAAS,cACR,2BAA2B,IAAI,YAAY,cAAc,IAAI,OAAO,UAAU,IAAI,OAAO,IACzF,IAAI,aACJ,MACA,KACA;IACD,KAAK,IAAI;IACT,cAAc,QAAQ,IAAI,eAAe,aAAa,CAAC;IACvD,aAAa;IACb,CAAC;;;CAMJ,MAAM,iBAAiB,OAAO,KAAK,MAAM,EAAE,eAAe;CAC1D,MAAM,kBAAkB,SAAS,eAAe,EAAE,EAAE,KAAK,MAAM,GAAG,EAAE,aAAa,CAAC,UAAU;CAC5F,MAAM,WAAW,IAAI,IAAY;EAChC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAG;EACH,GAAG;EACH,CAAC;AAEF,MAAK,MAAM,EAAE,gBAAgB,SAAS,UAAU;EAC/C,MAAM,aAAa,CAAC,GAAG,WAAW,aAAa,GAAG,WAAW,gBAAgB;AAE7E,MAAI,WAAW,WAAW,EAAG;AAG7B,QAAM,KAAK;GACV,SAAS,0FAA0F,WAAW,KAAK,GAAG,WAAW,KAAK;GACtI,KAAK;GACL,cAAc;GACd,aAAa;GACb,CAAC;EAEF,MAAM,WAAW,QAAQ,kBAAkB,IAAI,WAAW,GAAG;AAE7D,OAAK,MAAM,UAAU,YAAY;AAChC,OAAI,SAAS,IAAI,OAAO,IAAI,CAAE;AAC9B,YAAS,IAAI,OAAO,IAAI;GAExB,MAAM,cAAc,QAAQ,mBAAA,GAAA,YAAA,aAA8B,GAAG,CAAC,SAAS,MAAM,GAAG;GAGhF,MAAM,YAAY,OAAO,IAAI,SAAS,QAAQ;GAC9C,MAAM,YAAY,YAAY,YAAY,yBAAyB;GAEnE,MAAM,eAAe,YAClB,YACA,OAAO,SACN,QAAQ,OAAO,IAAI,aAAa,CAAC,SACjC,OAAO;GAEX,IAAI;AACJ,OAAI,UACH,eAAc;YACJ,OAAO,OAEjB,KAAI,OAAO,aAAa,WAAW,KAAK,IAAI,OAAO,aAAa,SAAS,IAAI,EAAE;IAC9E,MAAM,SAAS,OAAO,aAAa,MAAM,GAAG,GAAG;AAC/C,kBAAc,aAAa,IAAI,OAAO,IAAI,OAAO;SAEjD,eAAc;OAGf,eAAc,OAAO;AAItB,gBAAa,IAAI,OAAO,KAAK,YAAY;AAEzC,SAAM,KAAK;IACV,SAAS,cAAc,OAAO,aAAa,WAAW,MAAM,OAAO,UAAU,OAAO,OAAO;IAC3F,KAAK,OAAO;IACZ;IACA;IACA,CAAC;;;CAMJ,MAAM,SAAS;EACd;EACA;EACA,mCAAkB,IAAI,MAAM,EAAC,aAAa;EAC1C;EACA;EACA;EACA,CAAC,KAAK,KAAK;CAEZ,IAAI,aAAa;CACjB,IAAI,MAAM;AAEV,MAAK,MAAM,QAAQ,MAClB,KAAI,KAAK,QAAQ,IAAI;AAEpB,gBAAc,GAAG,KAAK,QAAQ;AAC9B,SAAO,GAAG,KAAK,QAAQ;QACjB;AACN,gBAAc,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAI,GAAG,KAAK,aAAa;AAChE,SAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAI,GAAG,KAAK,YAAY;;AAI1D,QAAO;EAAE;EAAY;EAAK;;;;;AAM3B,SAAS,cACR,aACA,aACA,UACA,QACS;AACT,QAAO,CACN,KAAK,eACL,cAAc,YAAY,eAAe,WAAW,QAAQ,KAAK,aAAa,SAAS,QAAQ,OAC/F,CAAC,KAAK,KAAK;;;;;;;;;AAyBb,SAAgB,qBAAqB,UAAyC;CAC7E,MAAM,SAAwB,EAAE;CAChC,MAAM,2BAAW,IAAI,KAAa;CAGlC,MAAM,WAAgC;EACrC;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;AAED,MAAK,MAAM,KAAK,SACf,UAAS,IAAI,EAAE,IAAI;AAGpB,QAAO,KAAK;EACX,aAAa;EACb,aAAa;EACb,WAAW;EACX,MAAM;EACN,CAAC;AAGF,MAAK,MAAM,EAAE,gBAAgB,SAAS,UAAU;EAC/C,MAAM,aAAa,CAAC,GAAG,WAAW,aAAa,GAAG,WAAW,gBAAgB;EAE7E,MAAM,OAA4B,EAAE;AAEpC,OAAK,MAAM,UAAU,YAAY;AAChC,OAAI,SAAS,IAAI,OAAO,IAAI,CAAE;AAC9B,YAAS,IAAI,OAAO,IAAI;AAExB,QAAK,KAAK;IACT,KAAK,OAAO;IACZ,aAAa,OAAO;IACpB,QAAQ,OAAO;IACf,UAAU,OAAO;IACjB,cAAc,OAAO;IACrB,CAAC;;AAGH,MAAI,KAAK,WAAW,EAAG;AAEvB,SAAO,KAAK;GACX,aAAa,WAAW;GACxB,aAAa,WAAW;GACxB,WAAW,WAAW;GACtB;GACA,CAAC;;AAGH,QAAO"}
+{"version":3,"file":"env.cjs","names":["getFrameworkById","getDbRequirements"],"sources":["../../src/generators/env.ts"],"sourcesContent":["import { randomBytes } from \"node:crypto\";\nimport { getFrameworkById } from \"../frameworks/index.js\";\nimport type { AgentFrameworkId } from \"../frameworks/types.js\";\nimport type { ResolverOutput } from \"../types.js\";\nimport { getDbRequirements } from \"./postgres-init.js\";\n\n/**\n * Options for environment file generation.\n */\nexport interface EnvGeneratorOptions {\n\tgenerateSecrets: boolean;\n\tdomain?: string;\n\topenclawVersion?: string;\n\t/** When set, host-like vars (e.g. REDIS_HOST) for these services use host.docker.internal so gateway in Docker can reach native services on host. */\n\tnativeServiceIds?: Set<string>;\n\t/** Compose file names for COMPOSE_FILE env var (enables `docker compose up` without -f flags). */\n\tcomposeFiles?: string[];\n\t/** Compose profiles for COMPOSE_PROFILES env var (enables `docker compose up` without --profile flags). */\n\tcomposeProfiles?: string[];\n\t/** OpenClaw image variant (official, coolify, alpine). */\n\topenclawImage?: \"official\" | \"coolify\" | \"alpine\";\n\t/** Primary agent framework (defaults to \"openclaw\"). */\n\tprimaryFramework?: AgentFrameworkId;\n}\n\n/**\n * Generates `.env.example` and `.env` file contents from resolved services.\n *\n * - `.env.example`: every env var with descriptive comments, placeholders for secrets\n * - `.env`: same vars but secrets filled with cryptographically random values when generateSecrets is true\n */\nexport function generateEnvFiles(\n\tresolved: ResolverOutput,\n\toptions: EnvGeneratorOptions,\n): { envExample: string; env: string } {\n\tconst version = options.openclawVersion ?? \"latest\";\n\tconst lines: { comment: string; key: string; exampleValue: string; actualValue: string }[] = [];\n\n\t// Track all env var values for resolving references later\n\tconst envVarValues = new Map<string, string>();\n\n\t// ── Docker Compose convenience vars ─────────────────────────────────────\n\t// These let you run `docker compose up -d` without -f and --profile flags.\n\n\tif (options.composeFiles && options.composeFiles.length > 0) {\n\t\tconst separator = process.platform === \"win32\" ? \";\" : \":\";\n\t\tconst composeFileValue = options.composeFiles.join(separator);\n\t\tlines.push({\n\t\t\tcomment: formatComment(\n\t\t\t\t\"Compose files to load (allows plain `docker compose up -d`)\",\n\t\t\t\t\"Docker Compose\",\n\t\t\t\tfalse,\n\t\t\t\tfalse,\n\t\t\t),\n\t\t\tkey: \"COMPOSE_FILE\",\n\t\t\texampleValue: composeFileValue,\n\t\t\tactualValue: composeFileValue,\n\t\t});\n\t}\n\n\tif (options.composeProfiles && options.composeProfiles.length > 0) {\n\t\tconst profilesValue = options.composeProfiles.join(\",\");\n\t\tlines.push({\n\t\t\tcomment: formatComment(\n\t\t\t\t\"Profiles to activate (allows plain `docker compose up -d`)\",\n\t\t\t\t\"Docker Compose\",\n\t\t\t\tfalse,\n\t\t\t\tfalse,\n\t\t\t),\n\t\t\tkey: \"COMPOSE_PROFILES\",\n\t\t\texampleValue: profilesValue,\n\t\t\tactualValue: profilesValue,\n\t\t});\n\t}\n\n\t// ── Framework-Specific Base Variables ────────────────────────────────────\n\n\tconst framework = getFrameworkById(options.primaryFramework ?? \"openclaw\");\n\tif (framework) {\n\t\tconst sectionName = framework.getEnvSectionName();\n\t\tconst fwEnvVars = framework.getBaseEnvVars({\n\t\t\tgenerateSecrets: options.generateSecrets,\n\t\t\tdomain: options.domain,\n\t\t\tframeworkVersion: version,\n\t\t\tframeworkImageVariant: options.openclawImage ?? \"official\",\n\t\t});\n\n\t\tfor (const envLine of fwEnvVars) {\n\t\t\tlines.push({\n\t\t\t\tcomment: formatComment(\n\t\t\t\t\tenvLine.comment,\n\t\t\t\t\tsectionName,\n\t\t\t\t\tfalse,\n\t\t\t\t\tenvLine.key.includes(\"TOKEN\") || envLine.key.includes(\"PASSWORD\"),\n\t\t\t\t),\n\t\t\t\tkey: envLine.key,\n\t\t\t\texampleValue: envLine.exampleValue,\n\t\t\t\tactualValue: envLine.actualValue,\n\t\t\t});\n\t\t}\n\t}\n\n\tif (options.domain) {\n\t\tconst sectionName = framework?.getEnvSectionName() ?? \"Core\";\n\t\tlines.push({\n\t\t\tcomment: formatComment(\"Primary domain for service routing\", sectionName, false, false),\n\t\t\tkey: \"OPENCLAW_DOMAIN\",\n\t\t\texampleValue: \"example.com\",\n\t\t\tactualValue: options.domain,\n\t\t});\n\t}\n\n\t// ── Tools API Keys (web search, fetch) ──────────────────────────────────\n\n\tlines.push({\n\t\tcomment:\n\t\t\t\"\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# Tools API Keys (web search, fetch, voice)\\n# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\tkey: \"\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Brave Search API key for web search tool (default provider)\",\n\t\t\t\"OpenClaw Tools\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"BRAVE_API_KEY\",\n\t\texampleValue: \"your_brave_api_key_here\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Perplexity API key for web search tool (alternative provider)\",\n\t\t\t\"OpenClaw Tools\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"PERPLEXITY_API_KEY\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Firecrawl API key for enhanced web fetch fallback\",\n\t\t\t\"OpenClaw Tools\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"FIRECRAWL_API_KEY\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"ElevenLabs API key for Talk mode (text-to-speech)\",\n\t\t\t\"OpenClaw Tools\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"ELEVENLABS_API_KEY\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\t// ── Swarm / Remote Gateway ───────────────────────────────────────────────\n\n\tlines.push({\n\t\tcomment:\n\t\t\t\"\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# Swarm / Remote Gateway Connection\\n# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\tkey: \"\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Auth token for connecting to a remote OpenClaw gateway (swarm upstream)\",\n\t\t\t\"OpenClaw Swarm\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"OPENCLAW_REMOTE_GATEWAY_TOKEN\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Password for remote gateway auth (alternative to token)\",\n\t\t\t\"OpenClaw Swarm\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"OPENCLAW_REMOTE_GATEWAY_PASSWORD\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\t// ── AI Provider API Keys ─────────────────────────────────────────────────\n\n\tif (resolved.aiProviders && resolved.aiProviders.length > 0) {\n\t\tlines.push({\n\t\t\tcomment:\n\t\t\t\t\"\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# AI Provider API Keys\\n# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\t\tkey: \"\",\n\t\t\texampleValue: \"\",\n\t\t\tactualValue: \"\",\n\t\t});\n\n\t\tfor (const provider of resolved.aiProviders) {\n\t\t\t// Local-only providers don't need API keys\n\t\t\tif (provider === \"ollama\" || provider === \"lmstudio\" || provider === \"vllm\") continue;\n\n\t\t\t// Ollama Cloud uses OLLAMA_API_KEY (matches Ollama's official env var name)\n\t\t\tconst envKey =\n\t\t\t\tprovider === \"ollama-cloud\" ? \"OLLAMA_API_KEY\" : `${provider.toUpperCase()}_API_KEY`;\n\t\t\tconst label = provider === \"ollama-cloud\" ? \"Ollama Cloud\" : provider;\n\t\t\tlines.push({\n\t\t\t\tcomment: formatComment(`API Key for ${label} AI models`, \"OpenClaw Core\", true, true),\n\t\t\t\tkey: envKey,\n\t\t\t\texampleValue: `your_${provider.toLowerCase().replace(\"-\", \"_\")}_api_key_here`,\n\t\t\t\tactualValue: \"\",\n\t\t\t});\n\t\t}\n\t}\n\n\t// Claude web-provider session variables (optional)\n\tlines.push({\n\t\tcomment:\n\t\t\t\"\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# Claude Web Provider (optional)\\n# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\tkey: \"\",\n\t\texampleValue: \"\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Claude AI session key for web provider authentication\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"CLAUDE_AI_SESSION_KEY\",\n\t\texampleValue: \"your_claude_ai_session_key_here\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Claude web session key for web provider authentication\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"CLAUDE_WEB_SESSION_KEY\",\n\t\texampleValue: \"your_claude_web_session_key_here\",\n\t\tactualValue: \"\",\n\t});\n\n\tlines.push({\n\t\tcomment: formatComment(\n\t\t\t\"Claude web cookie for web provider authentication\",\n\t\t\t\"OpenClaw Core\",\n\t\t\tfalse,\n\t\t\ttrue,\n\t\t),\n\t\tkey: \"CLAUDE_WEB_COOKIE\",\n\t\texampleValue: \"your_claude_web_cookie_here\",\n\t\tactualValue: \"\",\n\t});\n\n\t// ── Per-Service Database Passwords ──────────────────────────────────────\n\n\tconst dbReqs = getDbRequirements(resolved);\n\n\tif (dbReqs.length > 0) {\n\t\tlines.push({\n\t\t\tcomment:\n\t\t\t\t\"\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# Per-Service Database Passwords\\n# Each service gets its own PostgreSQL database and credentials\\n# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\t\tkey: \"\",\n\t\t\texampleValue: \"\",\n\t\t\tactualValue: \"\",\n\t\t});\n\n\t\tfor (const req of dbReqs) {\n\t\t\tconst secretValue = options.generateSecrets ? randomBytes(24).toString(\"hex\") : \"\";\n\n\t\t\t// Store in map for later reference resolution\n\t\t\tenvVarValues.set(req.passwordEnvVar, secretValue);\n\n\t\t\tlines.push({\n\t\t\t\tcomment: formatComment(\n\t\t\t\t\t`PostgreSQL password for ${req.serviceName} (database: ${req.dbName}, user: ${req.dbUser})`,\n\t\t\t\t\treq.serviceName,\n\t\t\t\t\ttrue,\n\t\t\t\t\ttrue,\n\t\t\t\t),\n\t\t\t\tkey: req.passwordEnvVar,\n\t\t\t\texampleValue: `your_${req.passwordEnvVar.toLowerCase()}_here`,\n\t\t\t\tactualValue: secretValue,\n\t\t\t});\n\t\t}\n\t}\n\n\t// ── Service-Specific Variables ───────────────────────────────────────────\n\n\tconst dbPasswordKeys = dbReqs.map((r) => r.passwordEnvVar);\n\tconst aiProviderKeys = (resolved.aiProviders || []).map((p) => `${p.toUpperCase()}_API_KEY`);\n\tconst seenKeys = new Set<string>([\n\t\t\"OPENCLAW_VERSION\",\n\t\t\"OPENCLAW_GATEWAY_TOKEN\",\n\t\t\"OPENCLAW_GATEWAY_PORT\",\n\t\t\"OPENCLAW_BRIDGE_PORT\",\n\t\t\"OPENCLAW_GATEWAY_BIND\",\n\t\t\"OPENCLAW_CONFIG_DIR\",\n\t\t\"OPENCLAW_WORKSPACE_DIR\",\n\t\t\"OPENCLAW_IMAGE\",\n\t\t\"OPENCLAW_EXTRA_MOUNTS\",\n\t\t\"OPENCLAW_HOME_VOLUME\",\n\t\t\"OPENCLAW_DOCKER_APT_PACKAGES\",\n\t\t\"OPENCLAW_GATEWAY_PASSWORD\",\n\t\t\"OPENCLAW_STATE_DIR\",\n\t\t\"OPENCLAW_CONFIG_PATH\",\n\t\t\"OPENCLAW_LOAD_SHELL_ENV\",\n\t\t\"OPENCLAW_DOMAIN\",\n\t\t\"BRAVE_API_KEY\",\n\t\t\"PERPLEXITY_API_KEY\",\n\t\t\"FIRECRAWL_API_KEY\",\n\t\t\"ELEVENLABS_API_KEY\",\n\t\t\"OPENCLAW_REMOTE_GATEWAY_TOKEN\",\n\t\t\"OPENCLAW_REMOTE_GATEWAY_PASSWORD\",\n\t\t\"CLAUDE_AI_SESSION_KEY\",\n\t\t\"CLAUDE_WEB_SESSION_KEY\",\n\t\t\"CLAUDE_WEB_COOKIE\",\n\t\t...dbPasswordKeys,\n\t\t...aiProviderKeys,\n\t]);\n\n\tfor (const { definition } of resolved.services) {\n\t\tconst allEnvVars = [...definition.environment, ...definition.openclawEnvVars];\n\n\t\tif (allEnvVars.length === 0) continue;\n\n\t\t// Section separator for this service\n\t\tlines.push({\n\t\t\tcomment: `\\n# ═══════════════════════════════════════════════════════════════════════════════\\n# ${definition.icon} ${definition.name}\\n# ═══════════════════════════════════════════════════════════════════════════════`,\n\t\t\tkey: \"\",\n\t\t\texampleValue: \"\",\n\t\t\tactualValue: \"\",\n\t\t});\n\n\t\tconst isNative = options.nativeServiceIds?.has(definition.id);\n\n\t\tfor (const envVar of allEnvVars) {\n\t\t\tif (seenKeys.has(envVar.key)) continue;\n\t\t\tseenKeys.add(envVar.key);\n\n\t\t\tconst secretValue = options.generateSecrets ? randomBytes(24).toString(\"hex\") : \"\";\n\n\t\t\t// For native services, host-like vars must point to host so gateway (in Docker) can reach them\n\t\t\tconst isHostVar = envVar.key.endsWith(\"_HOST\");\n\t\t\tconst hostValue = isNative && isHostVar ? \"host.docker.internal\" : null;\n\n\t\t\tconst exampleValue = hostValue\n\t\t\t\t? hostValue\n\t\t\t\t: envVar.secret\n\t\t\t\t\t? `your_${envVar.key.toLowerCase()}_here`\n\t\t\t\t\t: envVar.defaultValue;\n\n\t\t\tlet actualValue: string;\n\t\t\tif (hostValue) {\n\t\t\t\tactualValue = hostValue;\n\t\t\t} else if (envVar.secret) {\n\t\t\t\t// Resolve env var references like ${N8N_DB_PASSWORD}\n\t\t\t\tif (envVar.defaultValue.startsWith(\"${\") && envVar.defaultValue.endsWith(\"}\")) {\n\t\t\t\t\tconst refKey = envVar.defaultValue.slice(2, -1); // Extract var name from ${VAR_NAME}\n\t\t\t\t\tactualValue = envVarValues.get(refKey) || envVar.defaultValue;\n\t\t\t\t} else {\n\t\t\t\t\tactualValue = secretValue;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tactualValue = envVar.defaultValue;\n\t\t\t}\n\n\t\t\t// Store in map for later reference resolution\n\t\t\tenvVarValues.set(envVar.key, actualValue);\n\n\t\t\tlines.push({\n\t\t\t\tcomment: formatComment(envVar.description, definition.name, envVar.required, envVar.secret),\n\t\t\t\tkey: envVar.key,\n\t\t\t\texampleValue,\n\t\t\t\tactualValue,\n\t\t\t});\n\t\t}\n\t}\n\n\t// ── Build output strings ────────────────────────────────────────────────\n\n\tconst header = [\n\t\t\"# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\t\"# OpenClaw Environment Configuration\",\n\t\t`# Generated at ${new Date().toISOString()}`,\n\t\t\"# Docs: https://better-openclaw.dev/docs | Cloud: https://clawexa.net\",\n\t\t\"# ═══════════════════════════════════════════════════════════════════════════════\",\n\t\t\"\",\n\t].join(\"\\n\");\n\n\tlet envExample = header;\n\tlet env = header;\n\n\tfor (const line of lines) {\n\t\tif (line.key === \"\") {\n\t\t\t// Section comment\n\t\t\tenvExample += `${line.comment}\\n`;\n\t\t\tenv += `${line.comment}\\n`;\n\t\t} else {\n\t\t\tenvExample += `${line.comment}\\n${line.key}=${line.exampleValue}\\n\\n`;\n\t\t\tenv += `${line.comment}\\n${line.key}=${line.actualValue}\\n\\n`;\n\t\t}\n\t}\n\n\treturn { envExample, env };\n}\n\n/**\n * Format a descriptive comment block for an environment variable.\n */\nfunction formatComment(\n\tdescription: string,\n\tserviceName: string,\n\trequired: boolean,\n\tsecret: boolean,\n): string {\n\treturn [\n\t\t`# ${description}`,\n\t\t`# Service: ${serviceName} | Required: ${required ? \"Yes\" : \"No\"} | Secret: ${secret ? \"Yes\" : \"No\"}`,\n\t].join(\"\\n\");\n}\n\n// ── Structured Env Vars ─────────────────────────────────────────────────────\n\nexport interface EnvVarGroup {\n\tserviceName: string;\n\tserviceIcon: string;\n\tserviceId: string;\n\tvars: {\n\t\tkey: string;\n\t\tdescription: string;\n\t\tsecret: boolean;\n\t\trequired: boolean;\n\t\tdefaultValue: string;\n\t}[];\n}\n\n/**\n * Returns environment variables grouped by service, suitable for UI rendering.\n *\n * - First group is always \"OpenClaw Core\" with base variables.\n * - Subsequent groups correspond to each resolved service.\n * - Variables are deduplicated across groups (first occurrence wins).\n */\nexport function getStructuredEnvVars(resolved: ResolverOutput): EnvVarGroup[] {\n\tconst groups: EnvVarGroup[] = [];\n\tconst seenKeys = new Set<string>();\n\n\t// ── OpenClaw Core group ──────────────────────────────────────────────────\n\tconst coreVars: EnvVarGroup[\"vars\"] = [\n\t\t{\n\t\t\tkey: \"OPENCLAW_VERSION\",\n\t\t\tdescription: \"OpenClaw version to deploy\",\n\t\t\tsecret: false,\n\t\t\trequired: true,\n\t\t\tdefaultValue: \"latest\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_GATEWAY_TOKEN\",\n\t\t\tdescription: \"Authentication token for the OpenClaw gateway API\",\n\t\t\tsecret: true,\n\t\t\trequired: true,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_GATEWAY_PORT\",\n\t\t\tdescription: \"Port the OpenClaw gateway listens on\",\n\t\t\tsecret: false,\n\t\t\trequired: true,\n\t\t\tdefaultValue: \"18789\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_GATEWAY_PASSWORD\",\n\t\t\tdescription: \"Alternative auth: gateway password (use token OR password)\",\n\t\t\tsecret: true,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_STATE_DIR\",\n\t\t\tdescription: \"Override state directory path (default: ~/.openclaw)\",\n\t\t\tsecret: false,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_CONFIG_PATH\",\n\t\t\tdescription: \"Override config file path (default: ~/.openclaw/openclaw.json)\",\n\t\t\tsecret: false,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"BRAVE_API_KEY\",\n\t\t\tdescription: \"Brave Search API key for web search tool (default provider)\",\n\t\t\tsecret: true,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"PERPLEXITY_API_KEY\",\n\t\t\tdescription: \"Perplexity API key for web search (alternative provider)\",\n\t\t\tsecret: true,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"FIRECRAWL_API_KEY\",\n\t\t\tdescription: \"Firecrawl API key for enhanced web fetch fallback\",\n\t\t\tsecret: true,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"ELEVENLABS_API_KEY\",\n\t\t\tdescription: \"ElevenLabs API key for Talk mode (text-to-speech)\",\n\t\t\tsecret: true,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_REMOTE_GATEWAY_TOKEN\",\n\t\t\tdescription: \"Auth token for connecting to a remote OpenClaw gateway (swarm upstream)\",\n\t\t\tsecret: true,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t\t{\n\t\t\tkey: \"OPENCLAW_REMOTE_GATEWAY_PASSWORD\",\n\t\t\tdescription: \"Password for remote gateway auth (alternative to token)\",\n\t\t\tsecret: true,\n\t\t\trequired: false,\n\t\t\tdefaultValue: \"\",\n\t\t},\n\t];\n\n\tfor (const v of coreVars) {\n\t\tseenKeys.add(v.key);\n\t}\n\n\tgroups.push({\n\t\tserviceName: \"OpenClaw Core\",\n\t\tserviceIcon: \"⚙️\",\n\t\tserviceId: \"openclaw-core\",\n\t\tvars: coreVars,\n\t});\n\n\t// ── Per-service groups ───────────────────────────────────────────────────\n\tfor (const { definition } of resolved.services) {\n\t\tconst allEnvVars = [...definition.environment, ...definition.openclawEnvVars];\n\n\t\tconst vars: EnvVarGroup[\"vars\"] = [];\n\n\t\tfor (const envVar of allEnvVars) {\n\t\t\tif (seenKeys.has(envVar.key)) continue;\n\t\t\tseenKeys.add(envVar.key);\n\n\t\t\tvars.push({\n\t\t\t\tkey: envVar.key,\n\t\t\t\tdescription: envVar.description,\n\t\t\t\tsecret: envVar.secret,\n\t\t\t\trequired: envVar.required,\n\t\t\t\tdefaultValue: envVar.defaultValue,\n\t\t\t});\n\t\t}\n\n\t\tif (vars.length === 0) continue;\n\n\t\tgroups.push({\n\t\t\tserviceName: definition.name,\n\t\t\tserviceIcon: definition.icon,\n\t\t\tserviceId: definition.id,\n\t\t\tvars,\n\t\t});\n\t}\n\n\treturn groups;\n}\n"],"mappings":";;;;;;;;;;;;;AA+BA,SAAgB,iBACf,UACA,SACsC;CACtC,MAAM,UAAU,QAAQ,mBAAmB;CAC3C,MAAM,QAAuF,EAAE;CAG/F,MAAM,+BAAe,IAAI,KAAqB;AAK9C,KAAI,QAAQ,gBAAgB,QAAQ,aAAa,SAAS,GAAG;EAC5D,MAAM,YAAY,QAAQ,aAAa,UAAU,MAAM;EACvD,MAAM,mBAAmB,QAAQ,aAAa,KAAK,UAAU;AAC7D,QAAM,KAAK;GACV,SAAS,cACR,+DACA,kBACA,OACA,MACA;GACD,KAAK;GACL,cAAc;GACd,aAAa;GACb,CAAC;;AAGH,KAAI,QAAQ,mBAAmB,QAAQ,gBAAgB,SAAS,GAAG;EAClE,MAAM,gBAAgB,QAAQ,gBAAgB,KAAK,IAAI;AACvD,QAAM,KAAK;GACV,SAAS,cACR,8DACA,kBACA,OACA,MACA;GACD,KAAK;GACL,cAAc;GACd,aAAa;GACb,CAAC;;CAKH,MAAM,YAAYA,4BAAAA,iBAAiB,QAAQ,oBAAoB,WAAW;AAC1E,KAAI,WAAW;EACd,MAAM,cAAc,UAAU,mBAAmB;EACjD,MAAM,YAAY,UAAU,eAAe;GAC1C,iBAAiB,QAAQ;GACzB,QAAQ,QAAQ;GAChB,kBAAkB;GAClB,uBAAuB,QAAQ,iBAAiB;GAChD,CAAC;AAEF,OAAK,MAAM,WAAW,UACrB,OAAM,KAAK;GACV,SAAS,cACR,QAAQ,SACR,aACA,OACA,QAAQ,IAAI,SAAS,QAAQ,IAAI,QAAQ,IAAI,SAAS,WAAW,CACjE;GACD,KAAK,QAAQ;GACb,cAAc,QAAQ;GACtB,aAAa,QAAQ;GACrB,CAAC;;AAIJ,KAAI,QAAQ,QAAQ;EACnB,MAAM,cAAc,WAAW,mBAAmB,IAAI;AACtD,QAAM,KAAK;GACV,SAAS,cAAc,sCAAsC,aAAa,OAAO,MAAM;GACvF,KAAK;GACL,cAAc;GACd,aAAa,QAAQ;GACrB,CAAC;;AAKH,OAAM,KAAK;EACV,SACC;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,+DACA,kBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,iEACA,kBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,qDACA,kBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,qDACA,kBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAIF,OAAM,KAAK;EACV,SACC;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,2EACA,kBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,2DACA,kBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAIF,KAAI,SAAS,eAAe,SAAS,YAAY,SAAS,GAAG;AAC5D,QAAM,KAAK;GACV,SACC;GACD,KAAK;GACL,cAAc;GACd,aAAa;GACb,CAAC;AAEF,OAAK,MAAM,YAAY,SAAS,aAAa;AAE5C,OAAI,aAAa,YAAY,aAAa,cAAc,aAAa,OAAQ;GAG7E,MAAM,SACL,aAAa,iBAAiB,mBAAmB,GAAG,SAAS,aAAa,CAAC;GAC5E,MAAM,QAAQ,aAAa,iBAAiB,iBAAiB;AAC7D,SAAM,KAAK;IACV,SAAS,cAAc,eAAe,MAAM,aAAa,iBAAiB,MAAM,KAAK;IACrF,KAAK;IACL,cAAc,QAAQ,SAAS,aAAa,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC/D,aAAa;IACb,CAAC;;;AAKJ,OAAM,KAAK;EACV,SACC;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,yDACA,iBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,0DACA,iBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;AAEF,OAAM,KAAK;EACV,SAAS,cACR,qDACA,iBACA,OACA,KACA;EACD,KAAK;EACL,cAAc;EACd,aAAa;EACb,CAAC;CAIF,MAAM,SAASC,iCAAAA,kBAAkB,SAAS;AAE1C,KAAI,OAAO,SAAS,GAAG;AACtB,QAAM,KAAK;GACV,SACC;GACD,KAAK;GACL,cAAc;GACd,aAAa;GACb,CAAC;AAEF,OAAK,MAAM,OAAO,QAAQ;GACzB,MAAM,cAAc,QAAQ,mBAAA,GAAA,YAAA,aAA8B,GAAG,CAAC,SAAS,MAAM,GAAG;AAGhF,gBAAa,IAAI,IAAI,gBAAgB,YAAY;AAEjD,SAAM,KAAK;IACV,SAAS,cACR,2BAA2B,IAAI,YAAY,cAAc,IAAI,OAAO,UAAU,IAAI,OAAO,IACzF,IAAI,aACJ,MACA,KACA;IACD,KAAK,IAAI;IACT,cAAc,QAAQ,IAAI,eAAe,aAAa,CAAC;IACvD,aAAa;IACb,CAAC;;;CAMJ,MAAM,iBAAiB,OAAO,KAAK,MAAM,EAAE,eAAe;CAC1D,MAAM,kBAAkB,SAAS,eAAe,EAAE,EAAE,KAAK,MAAM,GAAG,EAAE,aAAa,CAAC,UAAU;CAC5F,MAAM,WAAW,IAAI,IAAY;EAChC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAG;EACH,GAAG;EACH,CAAC;AAEF,MAAK,MAAM,EAAE,gBAAgB,SAAS,UAAU;EAC/C,MAAM,aAAa,CAAC,GAAG,WAAW,aAAa,GAAG,WAAW,gBAAgB;AAE7E,MAAI,WAAW,WAAW,EAAG;AAG7B,QAAM,KAAK;GACV,SAAS,0FAA0F,WAAW,KAAK,GAAG,WAAW,KAAK;GACtI,KAAK;GACL,cAAc;GACd,aAAa;GACb,CAAC;EAEF,MAAM,WAAW,QAAQ,kBAAkB,IAAI,WAAW,GAAG;AAE7D,OAAK,MAAM,UAAU,YAAY;AAChC,OAAI,SAAS,IAAI,OAAO,IAAI,CAAE;AAC9B,YAAS,IAAI,OAAO,IAAI;GAExB,MAAM,cAAc,QAAQ,mBAAA,GAAA,YAAA,aAA8B,GAAG,CAAC,SAAS,MAAM,GAAG;GAGhF,MAAM,YAAY,OAAO,IAAI,SAAS,QAAQ;GAC9C,MAAM,YAAY,YAAY,YAAY,yBAAyB;GAEnE,MAAM,eAAe,YAClB,YACA,OAAO,SACN,QAAQ,OAAO,IAAI,aAAa,CAAC,SACjC,OAAO;GAEX,IAAI;AACJ,OAAI,UACH,eAAc;YACJ,OAAO,OAEjB,KAAI,OAAO,aAAa,WAAW,KAAK,IAAI,OAAO,aAAa,SAAS,IAAI,EAAE;IAC9E,MAAM,SAAS,OAAO,aAAa,MAAM,GAAG,GAAG;AAC/C,kBAAc,aAAa,IAAI,OAAO,IAAI,OAAO;SAEjD,eAAc;OAGf,eAAc,OAAO;AAItB,gBAAa,IAAI,OAAO,KAAK,YAAY;AAEzC,SAAM,KAAK;IACV,SAAS,cAAc,OAAO,aAAa,WAAW,MAAM,OAAO,UAAU,OAAO,OAAO;IAC3F,KAAK,OAAO;IACZ;IACA;IACA,CAAC;;;CAMJ,MAAM,SAAS;EACd;EACA;EACA,mCAAkB,IAAI,MAAM,EAAC,aAAa;EAC1C;EACA;EACA;EACA,CAAC,KAAK,KAAK;CAEZ,IAAI,aAAa;CACjB,IAAI,MAAM;AAEV,MAAK,MAAM,QAAQ,MAClB,KAAI,KAAK,QAAQ,IAAI;AAEpB,gBAAc,GAAG,KAAK,QAAQ;AAC9B,SAAO,GAAG,KAAK,QAAQ;QACjB;AACN,gBAAc,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAI,GAAG,KAAK,aAAa;AAChE,SAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAI,GAAG,KAAK,YAAY;;AAI1D,QAAO;EAAE;EAAY;EAAK;;;;;AAM3B,SAAS,cACR,aACA,aACA,UACA,QACS;AACT,QAAO,CACN,KAAK,eACL,cAAc,YAAY,eAAe,WAAW,QAAQ,KAAK,aAAa,SAAS,QAAQ,OAC/F,CAAC,KAAK,KAAK;;;;;;;;;AAyBb,SAAgB,qBAAqB,UAAyC;CAC7E,MAAM,SAAwB,EAAE;CAChC,MAAM,2BAAW,IAAI,KAAa;CAGlC,MAAM,WAAgC;EACrC;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;GACC,KAAK;GACL,aAAa;GACb,QAAQ;GACR,UAAU;GACV,cAAc;GACd;EACD;AAED,MAAK,MAAM,KAAK,SACf,UAAS,IAAI,EAAE,IAAI;AAGpB,QAAO,KAAK;EACX,aAAa;EACb,aAAa;EACb,WAAW;EACX,MAAM;EACN,CAAC;AAGF,MAAK,MAAM,EAAE,gBAAgB,SAAS,UAAU;EAC/C,MAAM,aAAa,CAAC,GAAG,WAAW,aAAa,GAAG,WAAW,gBAAgB;EAE7E,MAAM,OAA4B,EAAE;AAEpC,OAAK,MAAM,UAAU,YAAY;AAChC,OAAI,SAAS,IAAI,OAAO,IAAI,CAAE;AAC9B,YAAS,IAAI,OAAO,IAAI;AAExB,QAAK,KAAK;IACT,KAAK,OAAO;IACZ,aAAa,OAAO;IACpB,QAAQ,OAAO;IACf,UAAU,OAAO;IACjB,cAAc,OAAO;IACrB,CAAC;;AAGH,MAAI,KAAK,WAAW,EAAG;AAEvB,SAAO,KAAK;GACX,aAAa,WAAW;GACxB,aAAa,WAAW;GACxB,WAAW,WAAW;GACtB;GACA,CAAC;;AAGH,QAAO"}

package/dist/generators/env.d.cts

@@ -1,4 +1,5 @@
-import { ResolverOutput } from "../types.cjs";
+import { B as ResolverOutput } from "../types-Bsn0XzSP.cjs";
+import { n as AgentFrameworkId } from "../types-DIsPc-hb.cjs";
 
 //#region src/generators/env.d.ts
 /**
@@ -16,6 +17,8 @@ interface EnvGeneratorOptions {
   composeProfiles?: string[];
   /** OpenClaw image variant (official, coolify, alpine). */
   openclawImage?: "official" | "coolify" | "alpine";
+  /** Primary agent framework (defaults to "openclaw"). */
+  primaryFramework?: AgentFrameworkId;
 }
 /**
  * Generates `.env.example` and `.env` file contents from resolved services.

package/dist/generators/env.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.cts","names":[],"sources":["../../src/generators/env.ts"],"mappings":";;;;;AAOA;UAAiB,mBAAA;EAChB,eAAA;EACA,MAAA;EACA,eAAA;EADA;EAGA,gBAAA,GAAmB,GAAA;EAAnB;EAEA,YAAA;EAAA;EAEA,eAAA;EAEA;EAAA,aAAA;AAAA;AASD;;;;;;AAAA,iBAAgB,gBAAA,CACf,QAAA,EAAU,cAAA,EACV,OAAA,EAAS,mBAAA;EACL,UAAA;EAAoB,GAAA;AAAA;AAAA,UAujBR,WAAA;EAChB,WAAA;EACA,WAAA;EACA,SAAA;EACA,IAAA;IACC,GAAA;IACA,WAAA;IACA,MAAA;IACA,QAAA;IACA,YAAA;EAAA;AAAA;;;;;;AAWF;;iBAAgB,oBAAA,CAAqB,QAAA,EAAU,cAAA,GAAiB,WAAA"}
+{"version":3,"file":"env.d.cts","names":[],"sources":["../../src/generators/env.ts"],"mappings":";;;;;;AASA;UAAiB,mBAAA;EAChB,eAAA;EACA,MAAA;EACA,eAAA;EADA;EAGA,gBAAA,GAAmB,GAAA;EAAnB;EAEA,YAAA;EAAA;EAEA,eAAA;EAEA;EAAA,aAAA;EAEmB;EAAnB,gBAAA,GAAmB,gBAAA;AAAA;AASpB;;;;;;AAAA,iBAAgB,gBAAA,CACf,QAAA,EAAU,cAAA,EACV,OAAA,EAAS,mBAAA;EACL,UAAA;EAAoB,GAAA;AAAA;AAAA,UA6ZR,WAAA;EAChB,WAAA;EACA,WAAA;EACA,SAAA;EACA,IAAA;IACC,GAAA;IACA,WAAA;IACA,MAAA;IACA,QAAA;IACA,YAAA;EAAA;AAAA;;;;;;AAWF;;iBAAgB,oBAAA,CAAqB,QAAA,EAAU,cAAA,GAAiB,WAAA"}

package/dist/generators/env.d.mts

@@ -1,4 +1,5 @@
-import { ResolverOutput } from "../types.mjs";
+import { B as ResolverOutput } from "../types-DwTKyCZ9.mjs";
+import { n as AgentFrameworkId } from "../types-DbXajvYq.mjs";
 
 //#region src/generators/env.d.ts
 /**
@@ -16,6 +17,8 @@ interface EnvGeneratorOptions {
   composeProfiles?: string[];
   /** OpenClaw image variant (official, coolify, alpine). */
   openclawImage?: "official" | "coolify" | "alpine";
+  /** Primary agent framework (defaults to "openclaw"). */
+  primaryFramework?: AgentFrameworkId;
 }
 /**
  * Generates `.env.example` and `.env` file contents from resolved services.

package/dist/generators/env.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.mts","names":[],"sources":["../../src/generators/env.ts"],"mappings":";;;;;;UAOiB,mBAAA;EAChB,eAAA;EACA,MAAA;EACA,eAAA;EAFA;EAIA,gBAAA,GAAmB,GAAA;EAFnB;EAIA,YAAA;EAFmB;EAInB,eAAA;EAAA;EAEA,aAAA;AAAA;;AASD;;;;;iBAAgB,gBAAA,CACf,QAAA,EAAU,cAAA,EACV,OAAA,EAAS,mBAAA;EACL,UAAA;EAAoB,GAAA;AAAA;AAAA,UAujBR,WAAA;EAChB,WAAA;EACA,WAAA;EACA,SAAA;EACA,IAAA;IACC,GAAA;IACA,WAAA;IACA,MAAA;IACA,QAAA;IACA,YAAA;EAAA;AAAA;;;;;;;AAWF;iBAAgB,oBAAA,CAAqB,QAAA,EAAU,cAAA,GAAiB,WAAA"}
+{"version":3,"file":"env.d.mts","names":[],"sources":["../../src/generators/env.ts"],"mappings":";;;;;;;UASiB,mBAAA;EAChB,eAAA;EACA,MAAA;EACA,eAAA;EAFA;EAIA,gBAAA,GAAmB,GAAA;EAFnB;EAIA,YAAA;EAFmB;EAInB,eAAA;EAAA;EAEA,aAAA;EAEA;EAAA,gBAAA,GAAmB,gBAAA;AAAA;;AASpB;;;;;iBAAgB,gBAAA,CACf,QAAA,EAAU,cAAA,EACV,OAAA,EAAS,mBAAA;EACL,UAAA;EAAoB,GAAA;AAAA;AAAA,UA6ZR,WAAA;EAChB,WAAA;EACA,WAAA;EACA,SAAA;EACA,IAAA;IACC,GAAA;IACA,WAAA;IACA,MAAA;IACA,QAAA;IACA,YAAA;EAAA;AAAA;;;;;;;AAWF;iBAAgB,oBAAA,CAAqB,QAAA,EAAU,cAAA,GAAiB,WAAA"}

package/dist/generators/env.mjs

@@ -1,3 +1,5 @@
+import { getFrameworkById } from "../frameworks/registry.mjs";
+import "../frameworks/index.mjs";
 import { getDbRequirements } from "./postgres-init.mjs";
 import { randomBytes } from "node:crypto";
 //#region src/generators/env.ts
@@ -30,108 +32,31 @@ function generateEnvFiles(resolved, options) {
 			actualValue: profilesValue
 		});
 	}
-	lines.push({
-		comment: formatComment("OpenClaw version to deploy", "OpenClaw Core", true, false),
-		key: "OPENCLAW_VERSION",
-		exampleValue: version,
-		actualValue: version
-	});
-	const gatewayToken = options.generateSecrets ? randomBytes(24).toString("hex") : "";
-	lines.push({
-		comment: formatComment("Authentication token for the OpenClaw gateway API", "OpenClaw Core", true, true),
-		key: "OPENCLAW_GATEWAY_TOKEN",
-		exampleValue: "your_gateway_token_here",
-		actualValue: gatewayToken
-	});
-	lines.push({
-		comment: formatComment("Port the OpenClaw gateway listens on", "OpenClaw Core", true, false),
-		key: "OPENCLAW_GATEWAY_PORT",
-		exampleValue: "18789",
-		actualValue: "18789"
-	});
-	lines.push({
-		comment: formatComment("Port for the OpenClaw ACP bridge (WebSocket)", "OpenClaw Core", false, false),
-		key: "OPENCLAW_BRIDGE_PORT",
-		exampleValue: "18790",
-		actualValue: "18790"
-	});
-	lines.push({
-		comment: formatComment("Gateway network bind mode: 'lan' (all interfaces, required for Docker). Use 'loopback' only for native (non-Docker) installs with Tailscale serve/funnel", "OpenClaw Core", false, false),
-		key: "OPENCLAW_GATEWAY_BIND",
-		exampleValue: "lan",
-		actualValue: "lan"
-	});
-	lines.push({
-		comment: formatComment("Host path to OpenClaw configuration directory", "OpenClaw Core", true, false),
-		key: "OPENCLAW_CONFIG_DIR",
-		exampleValue: "./openclaw/config",
-		actualValue: "./openclaw/config"
-	});
-	lines.push({
-		comment: formatComment("Host path to OpenClaw workspace directory", "OpenClaw Core", true, false),
-		key: "OPENCLAW_WORKSPACE_DIR",
-		exampleValue: "./openclaw/workspace",
-		actualValue: "./openclaw/workspace"
-	});
-	const imageValue = {
-		official: "",
-		coolify: "coollabsio/openclaw:latest",
-		alpine: "alpine/openclaw:latest"
-	}[options.openclawImage ?? "official"] ?? "";
-	lines.push({
-		comment: formatComment(`OpenClaw Docker image variant: ${options.openclawImage ?? "official"} (official, coolify, alpine)`, "OpenClaw Core", false, false),
-		key: "OPENCLAW_IMAGE",
-		exampleValue: "",
-		actualValue: imageValue
-	});
-	lines.push({
-		comment: formatComment("Extra bind mounts for gateway and CLI containers (comma-separated, format: source:target[:options])", "OpenClaw Core", false, false),
-		key: "OPENCLAW_EXTRA_MOUNTS",
-		exampleValue: "",
-		actualValue: ""
-	});
-	lines.push({
-		comment: formatComment("Named volume or host path for /home/node persistence across container restarts", "OpenClaw Core", false, false),
-		key: "OPENCLAW_HOME_VOLUME",
-		exampleValue: "",
-		actualValue: ""
-	});
-	lines.push({
-		comment: formatComment("Extra apt packages to install during Docker image build (space-separated)", "OpenClaw Core", false, false),
-		key: "OPENCLAW_DOCKER_APT_PACKAGES",
-		exampleValue: "",
-		actualValue: ""
-	});
-	lines.push({
-		comment: formatComment("Alternative auth: gateway password (use token OR password, not both)", "OpenClaw Core", false, true),
-		key: "OPENCLAW_GATEWAY_PASSWORD",
-		exampleValue: "",
-		actualValue: ""
-	});
-	lines.push({
-		comment: formatComment("Override state directory path (default: ~/.openclaw)", "OpenClaw Core", false, false),
-		key: "OPENCLAW_STATE_DIR",
-		exampleValue: "",
-		actualValue: ""
-	});
-	lines.push({
-		comment: formatComment("Override config file path (default: ~/.openclaw/openclaw.json)", "OpenClaw Core", false, false),
-		key: "OPENCLAW_CONFIG_PATH",
-		exampleValue: "",
-		actualValue: ""
-	});
-	lines.push({
-		comment: formatComment("Import missing keys from login shell profile (set to 1 to enable)", "OpenClaw Core", false, false),
-		key: "OPENCLAW_LOAD_SHELL_ENV",
-		exampleValue: "",
-		actualValue: ""
-	});
-	if (options.domain) lines.push({
-		comment: formatComment("Primary domain for service routing", "OpenClaw Core", false, false),
-		key: "OPENCLAW_DOMAIN",
-		exampleValue: "example.com",
-		actualValue: options.domain
-	});
+	const framework = getFrameworkById(options.primaryFramework ?? "openclaw");
+	if (framework) {
+		const sectionName = framework.getEnvSectionName();
+		const fwEnvVars = framework.getBaseEnvVars({
+			generateSecrets: options.generateSecrets,
+			domain: options.domain,
+			frameworkVersion: version,
+			frameworkImageVariant: options.openclawImage ?? "official"
+		});
+		for (const envLine of fwEnvVars) lines.push({
+			comment: formatComment(envLine.comment, sectionName, false, envLine.key.includes("TOKEN") || envLine.key.includes("PASSWORD")),
+			key: envLine.key,
+			exampleValue: envLine.exampleValue,
+			actualValue: envLine.actualValue
+		});
+	}
+	if (options.domain) {
+		const sectionName = framework?.getEnvSectionName() ?? "Core";
+		lines.push({
+			comment: formatComment("Primary domain for service routing", sectionName, false, false),
+			key: "OPENCLAW_DOMAIN",
+			exampleValue: "example.com",
+			actualValue: options.domain
+		});
+	}
 	lines.push({
 		comment: "\n# ═══════════════════════════════════════════════════════════════════════════════\n# Tools API Keys (web search, fetch, voice)\n# ═══════════════════════════════════════════════════════════════════════════════",
 		key: "",