@better-openclaw/core 1.0.20 → 1.0.22

package/src/services/definitions/ragflow.ts

@@ -0,0 +1,175 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const ragflowDefinition: ServiceDefinition = {
+	id: "ragflow",
+	name: "RAGFlow",
+	description:
+		"End-to-end retrieval-augmented generation platform for ingesting knowledge, indexing content, and serving grounded AI assistants over your own data.",
+	category: "ai-platform",
+	icon: "🧠",
+
+	image: "infiniflow/ragflow",
+	imageTag: "v0.15.0-slim",
+	ports: [
+		{
+			host: 9380,
+			container: 9380,
+			description: "RAGFlow web UI and API",
+			exposed: true,
+		},
+	],
+	volumes: [],
+	environment: [
+		{
+			key: "SVR_HTTP_PORT",
+			defaultValue: "9380",
+			secret: false,
+			description: "RAGFlow HTTP port",
+			required: true,
+		},
+		{
+			key: "MYSQL_HOST",
+			defaultValue: "mysql",
+			secret: false,
+			description: "MySQL host for RAGFlow metadata",
+			required: true,
+		},
+		{
+			key: "MYSQL_PORT",
+			defaultValue: "3306",
+			secret: false,
+			description: "MySQL port",
+			required: true,
+		},
+		{
+			key: "MYSQL_USER",
+			defaultValue: "ragflow",
+			secret: false,
+			description: "MySQL user for RAGFlow",
+			required: true,
+		},
+		{
+			key: "MYSQL_PASSWORD",
+			defaultValue: "${RAGFLOW_DB_PASSWORD}",
+			secret: true,
+			description: "MySQL password for RAGFlow",
+			required: true,
+		},
+		{
+			key: "MYSQL_DATABASE",
+			defaultValue: "ragflow",
+			secret: false,
+			description: "MySQL database name for RAGFlow",
+			required: true,
+		},
+		{
+			key: "REDIS_HOST",
+			defaultValue: "redis",
+			secret: false,
+			description: "Redis host for queues and caching",
+			required: true,
+		},
+		{
+			key: "REDIS_PORT",
+			defaultValue: "6379",
+			secret: false,
+			description: "Redis port",
+			required: true,
+		},
+		{
+			key: "REDIS_PASSWORD",
+			defaultValue: "${REDIS_PASSWORD}",
+			secret: true,
+			description: "Redis password",
+			required: true,
+		},
+		{
+			key: "MINIO_HOST",
+			defaultValue: "minio",
+			secret: false,
+			description: "MinIO host for object storage",
+			required: true,
+		},
+		{
+			key: "MINIO_PORT",
+			defaultValue: "9000",
+			secret: false,
+			description: "MinIO API port",
+			required: true,
+		},
+		{
+			key: "MINIO_USER",
+			defaultValue: "minioadmin",
+			secret: false,
+			description: "MinIO access key",
+			required: true,
+		},
+		{
+			key: "MINIO_PASSWORD",
+			defaultValue: "${MINIO_ROOT_PASSWORD}",
+			secret: true,
+			description: "MinIO secret key",
+			required: true,
+		},
+		{
+			key: "OPENSEARCH_HOST",
+			defaultValue: "opensearch",
+			secret: false,
+			description: "OpenSearch host for retrieval indexes",
+			required: true,
+		},
+		{
+			key: "OPENSEARCH_PORT",
+			defaultValue: "9200",
+			secret: false,
+			description: "OpenSearch HTTP port",
+			required: true,
+		},
+		{
+			key: "OPENSEARCH_PASSWORD",
+			defaultValue: "${OPENSEARCH_INITIAL_ADMIN_PASSWORD}",
+			secret: true,
+			description: "OpenSearch admin password",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "curl -sf http://localhost:9380/ || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 5,
+		startPeriod: "60s",
+	},
+	dependsOn: ["mysql", "redis", "minio", "opensearch"],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [{ skillId: "ragflow-pipeline", autoInstall: true }],
+	openclawEnvVars: [
+		{
+			key: "RAGFLOW_HOST",
+			defaultValue: "ragflow",
+			description: "RAGFlow API host",
+			secret: false,
+			required: false,
+		},
+		{
+			key: "RAGFLOW_PORT",
+			defaultValue: "9380",
+			description: "RAGFlow HTTP port",
+			secret: false,
+			required: false,
+		},
+	],
+
+	docsUrl: "https://ragflow.io/docs/configurations",
+	tags: ["rag", "knowledge", "retrieval", "ai-platform", "search", "documents"],
+	maturity: "beta",
+
+	requires: ["mysql", "redis", "minio", "opensearch"],
+	recommends: ["open-webui", "qdrant", "meilisearch"],
+	conflictsWith: [],
+
+	minMemoryMB: 4096,
+	gpuRequired: false,
+};

package/src/services/definitions/restic.ts

@@ -0,0 +1,60 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const resticDefinition: ServiceDefinition = {
+	id: "restic",
+	name: "Restic REST Server",
+	description:
+		"Fast, secure, encrypted backup server with deduplication, supporting S3/MinIO/local storage backends.",
+	category: "backup",
+	icon: "💾",
+
+	image: "restic/rest-server",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 8500,
+			container: 8000,
+			description: "Restic REST API",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "restic-data",
+			containerPath: "/data",
+			description: "Restic backup repository",
+		},
+	],
+	environment: [
+		{
+			key: "OPTIONS",
+			defaultValue: "--no-auth",
+			secret: false,
+			description: "Server options (use --no-auth for dev, configure auth in production)",
+			required: false,
+		},
+	],
+	healthcheck: {
+		test: "curl -sf http://localhost:8000/ || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://restic.readthedocs.io/en/latest/",
+	tags: ["backup", "restore", "encryption", "deduplication", "s3"],
+	maturity: "stable",
+
+	requires: [],
+	recommends: ["minio"],
+	conflictsWith: [],
+
+	minMemoryMB: 128,
+	gpuRequired: false,
+};

package/src/services/definitions/saleor.ts

@@ -0,0 +1,75 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const saleorDefinition: ServiceDefinition = {
+	id: "saleor",
+	name: "Saleor",
+	description:
+		"GraphQL-first headless e-commerce platform for multi-channel commerce with product management, checkout, and payments.",
+	category: "ecommerce",
+	icon: "🏪",
+
+	image: "ghcr.io/saleor/saleor",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 8003,
+			container: 8000,
+			description: "Saleor GraphQL API",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "saleor-media",
+			containerPath: "/app/media",
+			description: "Saleor product media uploads",
+		},
+	],
+	environment: [
+		{
+			key: "DATABASE_URL",
+			defaultValue: "postgresql://saleor:${SALEOR_DB_PASSWORD}@postgresql:5432/saleor",
+			secret: true,
+			description: "PostgreSQL connection URL",
+			required: true,
+		},
+		{
+			key: "CACHE_URL",
+			defaultValue: "redis://:${REDIS_PASSWORD}@redis:6379/0",
+			secret: true,
+			description: "Redis cache URL",
+			required: true,
+		},
+		{
+			key: "SECRET_KEY",
+			defaultValue: "${SALEOR_SECRET_KEY}",
+			secret: true,
+			description: "Django secret key",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "curl -sf http://localhost:8000/health/ || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "30s",
+	},
+	dependsOn: ["postgresql", "redis"],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://docs.saleor.io/docs/3.x/setup/docker-compose",
+	tags: ["ecommerce", "graphql", "store", "products", "checkout", "payments"],
+	maturity: "stable",
+
+	requires: ["postgresql", "redis"],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 512,
+	gpuRequired: false,
+};

package/src/services/definitions/stirling-pdf.ts

@@ -0,0 +1,73 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const stirlingPdfDefinition: ServiceDefinition = {
+	id: "stirling-pdf",
+	name: "Stirling PDF",
+	description:
+		"Self-hosted PDF toolkit for merging, splitting, OCR, compressing, redacting, and transforming documents before they enter knowledge workflows.",
+	category: "knowledge",
+	icon: "📄",
+
+	image: "stirlingtools/stirling-pdf",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 8113,
+			container: 8080,
+			description: "Stirling PDF web UI",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "stirling-pdf-configs",
+			containerPath: "/configs",
+			description: "Stirling PDF configuration and custom settings",
+		},
+		{
+			name: "stirling-pdf-custom-files",
+			containerPath: "/customFiles",
+			description: "Custom fonts, assets, and extra files",
+		},
+	],
+	environment: [
+		{
+			key: "DOCKER_ENABLE_SECURITY",
+			defaultValue: "false",
+			secret: false,
+			description: "Enable built-in Stirling PDF login and security mode",
+			required: true,
+		},
+		{
+			key: "LANGS",
+			defaultValue: "en_GB",
+			secret: false,
+			description: "Enabled UI languages",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "curl -sf http://localhost:8080/ || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 5,
+		startPeriod: "20s",
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://docs.stirlingpdf.com/",
+	tags: ["pdf", "documents", "ocr", "merge", "split", "transform"],
+	maturity: "stable",
+
+	requires: [],
+	recommends: ["paperless-ngx", "outline", "docsgpt"],
+	conflictsWith: [],
+
+	minMemoryMB: 512,
+	gpuRequired: false,
+};

package/src/services/definitions/strapi.ts

@@ -0,0 +1,124 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const strapiDefinition: ServiceDefinition = {
+	id: "strapi",
+	name: "Strapi",
+	description:
+		"Headless CMS for content-rich products and editorial workflows, with customizable APIs and admin experiences.",
+	category: "knowledge",
+	icon: "📰",
+
+	image: "naskio/strapi",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 1337,
+			container: 1337,
+			description: "Strapi admin UI and API",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "strapi-data",
+			containerPath: "/srv/app",
+			description: "Strapi application data, sqlite DB, uploads, and generated assets",
+		},
+	],
+	environment: [
+		{
+			key: "NODE_ENV",
+			defaultValue: "production",
+			secret: false,
+			description: "Runtime environment",
+			required: true,
+		},
+		{
+			key: "HOST",
+			defaultValue: "0.0.0.0",
+			secret: false,
+			description: "Strapi host binding",
+			required: true,
+		},
+		{
+			key: "PORT",
+			defaultValue: "1337",
+			secret: false,
+			description: "Strapi port",
+			required: true,
+		},
+		{
+			key: "DATABASE_CLIENT",
+			defaultValue: "sqlite",
+			secret: false,
+			description: "Database client",
+			required: true,
+		},
+		{
+			key: "DATABASE_FILENAME",
+			defaultValue: "/srv/app/data/data.db",
+			secret: false,
+			description: "Path to the Strapi sqlite database file",
+			required: true,
+		},
+		{
+			key: "APP_KEYS",
+			defaultValue: "${STRAPI_APP_KEYS}",
+			secret: true,
+			description: "Comma-separated Strapi app keys",
+			required: true,
+		},
+		{
+			key: "API_TOKEN_SALT",
+			defaultValue: "${STRAPI_API_TOKEN_SALT}",
+			secret: true,
+			description: "Salt for API tokens",
+			required: true,
+		},
+		{
+			key: "ADMIN_JWT_SECRET",
+			defaultValue: "${STRAPI_ADMIN_JWT_SECRET}",
+			secret: true,
+			description: "Admin JWT secret",
+			required: true,
+		},
+		{
+			key: "TRANSFER_TOKEN_SALT",
+			defaultValue: "${STRAPI_TRANSFER_TOKEN_SALT}",
+			secret: true,
+			description: "Salt for transfer tokens",
+			required: true,
+		},
+		{
+			key: "JWT_SECRET",
+			defaultValue: "${STRAPI_JWT_SECRET}",
+			secret: true,
+			description: "JWT secret used by Strapi auth flows",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "curl -sf http://localhost:1337/admin || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 5,
+		startPeriod: "40s",
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://docs.strapi.io/",
+	tags: ["cms", "headless", "content", "api", "editorial"],
+	maturity: "beta",
+
+	requires: [],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 512,
+	gpuRequired: false,
+};

package/src/services/definitions/twenty.ts

@@ -0,0 +1,82 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const twentyDefinition: ServiceDefinition = {
+	id: "twenty",
+	name: "Twenty",
+	description:
+		"Modern open-source CRM with a beautiful UI, GraphQL API, customizable data models, and integrations for managing customer relationships.",
+	category: "crm",
+	icon: "🤝",
+
+	image: "twentycrm/twenty",
+	imageTag: "latest",
+	ports: [
+		{
+			host: 3037,
+			container: 3000,
+			description: "Twenty CRM web UI",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "twenty-storage",
+			containerPath: "/app/packages/twenty-server/.local-storage",
+			description: "Twenty server local storage",
+		},
+	],
+	environment: [
+		{
+			key: "PG_DATABASE_URL",
+			defaultValue: "postgresql://twenty:${TWENTY_DB_PASSWORD}@postgresql:5432/twenty",
+			secret: true,
+			description: "PostgreSQL connection URL",
+			required: true,
+		},
+		{
+			key: "REDIS_URL",
+			defaultValue: "redis://:${REDIS_PASSWORD}@redis:6379",
+			secret: true,
+			description: "Redis connection URL",
+			required: true,
+		},
+		{
+			key: "APP_SECRET",
+			defaultValue: "${TWENTY_APP_SECRET}",
+			secret: true,
+			description: "Application secret for signing tokens",
+			required: true,
+		},
+		{
+			key: "FRONT_BASE_URL",
+			defaultValue: "http://localhost:3037",
+			secret: false,
+			description: "Public frontend URL",
+			required: true,
+		},
+	],
+	healthcheck: {
+		test: "curl -sf http://localhost:3000/healthz || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "30s",
+	},
+	dependsOn: ["postgresql", "redis"],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://twenty.com/developers/section/self-hosting",
+	tags: ["crm", "sales", "customer", "contacts", "pipeline", "graphql"],
+	maturity: "stable",
+
+	requires: ["postgresql", "redis"],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 512,
+	gpuRequired: false,
+};

package/src/services/definitions/vault.ts

@@ -0,0 +1,74 @@
+import type { ServiceDefinition } from "../../types.js";
+
+export const vaultDefinition: ServiceDefinition = {
+	id: "vault",
+	name: "HashiCorp Vault",
+	description:
+		"Industry-standard secrets management with dynamic credentials, encryption-as-a-service, audit logging, and access control policies.",
+	category: "security",
+	icon: "🔐",
+
+	image: "hashicorp/vault",
+	imageTag: "1.18",
+	ports: [
+		{
+			host: 8200,
+			container: 8200,
+			description: "Vault API and web UI",
+			exposed: true,
+		},
+	],
+	volumes: [
+		{
+			name: "vault-data",
+			containerPath: "/vault/data",
+			description: "Vault data and audit logs",
+		},
+		{
+			name: "vault-config",
+			containerPath: "/vault/config",
+			description: "Vault server configuration",
+		},
+	],
+	environment: [
+		{
+			key: "VAULT_ADDR",
+			defaultValue: "http://0.0.0.0:8200",
+			secret: false,
+			description: "Vault listener address",
+			required: true,
+		},
+		{
+			key: "VAULT_DEV_ROOT_TOKEN_ID",
+			defaultValue: "${VAULT_ROOT_TOKEN}",
+			secret: true,
+			description: "Root token for dev mode",
+			required: false,
+		},
+	],
+	command: "server -dev",
+	healthcheck: {
+		test: "vault status || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 3,
+		startPeriod: "15s",
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+
+	skills: [],
+	openclawEnvVars: [],
+
+	docsUrl: "https://developer.hashicorp.com/vault/docs",
+	tags: ["secrets", "vault", "encryption", "credentials", "access-control", "security"],
+	maturity: "stable",
+
+	requires: [],
+	recommends: [],
+	conflictsWith: [],
+
+	minMemoryMB: 256,
+	gpuRequired: false,
+};

package/src/skills/manifest.json

@@ -882,6 +882,14 @@
         "authentik"
       ]
     },
+    {
+      "id": "authelia-auth",
+      "path": "authelia-auth/SKILL.md",
+      "emoji": "🔒",
+      "services": [
+        "authelia"
+      ]
+    },
     {
       "id": "haystack-rag",
       "path": "haystack-rag/SKILL.md",