openclaw_client/scripts/setup.js

import crypto from 'node:crypto';
import fs from 'node:fs';
import path from 'node:path';
import { fileURLToPath } from 'node:url';
import { ensureUserEnv, readPorts } from './ports.mjs';

const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
const API_ENV = path.join(ROOT, 'api', '.env');

ensureUserEnv();
const { apiPort, clientPort } = readPorts();

if (fs.existsSync(API_ENV)) {
  console.log(`${API_ENV} already exists; skipping setup.`);
  process.exit(0);
}

const JWT_SECRET = crypto.randomBytes(32).toString('hex');

// ALLOWED_DOMAIN / API_PUBLIC_URL are deliberately omitted: the API has
// a permissive CORS default and derives public URLs from the request
// host so the same install works on localhost, LAN, and Tailscale.
// Users who want strict CORS can set `ALLOWED_DOMAIN=...` and
// `OPENCLAW_STRICT_CORS=1` themselves.
fs.writeFileSync(
  API_ENV,
  [
    `NODE_ENV=development`,
    `JWT_SECRET=${JWT_SECRET}`,
    `DB_PATH=./data/openclaw.sqlite`,
    `PORT=${apiPort}`,
    '',
  ].join('\n'),
);

console.log('Environment file created at api/.env');
console.log(`Port configuration at ~/.openclaw_client/.env (api=${apiPort}, client=${clientPort})`);