@better-openclaw/core 1.0.21 → 1.0.22

package/dist/services/definitions/appwrite.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"appwrite.mjs","names":[],"sources":["../../../src/services/definitions/appwrite.ts"],"sourcesContent":["import type { ServiceDefinition } from \"../../types.js\";\n\nexport const appwriteDefinition: ServiceDefinition = {\n\tid: \"appwrite\",\n\tname: \"Appwrite\",\n\tdescription:\n\t\t\"Self-hosted backend platform for auth, databases, storage, functions, and realtime APIs for web and mobile apps.\",\n\tcategory: \"dev-tools\",\n\ticon: \"🧱\",\n\n\timage: \"appwrite/appwrite\",\n\timageTag: \"latest\",\n\tports: [\n\t\t{\n\t\t\thost: 8114,\n\t\t\tcontainer: 80,\n\t\t\tdescription: \"Appwrite API and console\",\n\t\t\texposed: true,\n\t\t},\n\t],\n\tvolumes: [\n\t\t{\n\t\t\tname: \"appwrite-storage\",\n\t\t\tcontainerPath: \"/storage\",\n\t\t\tdescription: \"Appwrite file storage and persistent assets\",\n\t\t},\n\t],\n\tenvironment: [\n\t\t{\n\t\t\tkey: \"_APP_ENV\",\n\t\t\tdefaultValue: \"production\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Appwrite runtime environment\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"_APP_OPENSSL_KEY_V1\",\n\t\t\tdefaultValue: \"${APPWRITE_OPENSSL_KEY_V1}\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"Primary encryption key for Appwrite secrets and storage\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"_APP_DOMAIN\",\n\t\t\tdefaultValue: \"localhost\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Primary Appwrite domain\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"_APP_DOMAIN_TARGET\",\n\t\t\tdefaultValue: \"localhost\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Target domain for Appwrite endpoints\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"_APP_DOMAIN_FUNCTIONS\",\n\t\t\tdefaultValue: \"localhost\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Domain for Appwrite functions\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"_APP_DB_HOST\",\n\t\t\tdefaultValue: \"mariadb\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"MariaDB host\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"_APP_DB_PORT\",\n\t\t\tdefaultValue: \"3306\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"MariaDB port\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"_APP_DB_SCHEMA\",\n\t\t\tdefaultValue: \"appwrite\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"MariaDB schema name\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"_APP_DB_USER\",\n\t\t\tdefaultValue: \"appwrite\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"MariaDB user\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"_APP_DB_PASS\",\n\t\t\tdefaultValue: \"${APPWRITE_DB_PASSWORD}\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"MariaDB password\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"_APP_REDIS_HOST\",\n\t\t\tdefaultValue: \"redis\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Redis host\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"_APP_REDIS_PORT\",\n\t\t\tdefaultValue: \"6379\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Redis port\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"_APP_REDIS_PASS\",\n\t\t\tdefaultValue: \"${REDIS_PASSWORD}\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"Redis password\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"_APP_RABBITMQ\",\n\t\t\tdefaultValue: \"amqp://openclaw:${RABBITMQ_PASSWORD}@rabbitmq:5672/\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"RabbitMQ connection URL\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"_APP_SYSTEM_EMAIL_NAME\",\n\t\t\tdefaultValue: \"Appwrite\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"System email sender name\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"_APP_SYSTEM_EMAIL_ADDRESS\",\n\t\t\tdefaultValue: \"noreply@appwrite.local\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"System email sender address\",\n\t\t\trequired: true,\n\t\t},\n\t],\n\thealthcheck: {\n\t\ttest: \"curl -sf http://localhost/v1/health || exit 1\",\n\t\tinterval: \"30s\",\n\t\ttimeout: \"10s\",\n\t\tretries: 5,\n\t\tstartPeriod: \"60s\",\n\t},\n\tdependsOn: [\"mariadb\", \"redis\", \"rabbitmq\"],\n\trestartPolicy: \"unless-stopped\",\n\tnetworks: [\"openclaw-network\"],\n\n\tskills: [{ skillId: \"appwrite-backend\", autoInstall: true }],\n\topenclawEnvVars: [\n\t\t{\n\t\t\tkey: \"APPWRITE_HOST\",\n\t\t\tdefaultValue: \"appwrite\",\n\t\t\tdescription: \"Appwrite service host for API calls\",\n\t\t\tsecret: false,\n\t\t\trequired: false,\n\t\t},\n\t\t{\n\t\t\tkey: \"APPWRITE_PORT\",\n\t\t\tdefaultValue: \"80\",\n\t\t\tdescription: \"Appwrite HTTP port\",\n\t\t\tsecret: false,\n\t\t\trequired: false,\n\t\t},\n\t],\n\n\tdocsUrl: \"https://appwrite.io/docs/advanced/self-hosting/installation\",\n\ttags: [\"backend\", \"baas\", \"auth\", \"storage\", \"functions\", \"realtime\"],\n\tmaturity: \"beta\",\n\n\trequires: [\"mariadb\", \"redis\", \"rabbitmq\"],\n\trecommends: [],\n\tconflictsWith: [],\n\n\tminMemoryMB: 1024,\n\tgpuRequired: false,\n};\n"],"mappings":";AAEA,MAAa,qBAAwC;CACpD,IAAI;CACJ,MAAM;CACN,aACC;CACD,UAAU;CACV,MAAM;CAEN,OAAO;CACP,UAAU;CACV,OAAO,CACN;EACC,MAAM;EACN,WAAW;EACX,aAAa;EACb,SAAS;EACT,CACD;CACD,SAAS,CACR;EACC,MAAM;EACN,eAAe;EACf,aAAa;EACb,CACD;CACD,aAAa;EACZ;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;CACD,aAAa;EACZ,MAAM;EACN,UAAU;EACV,SAAS;EACT,SAAS;EACT,aAAa;EACb;CACD,WAAW;EAAC;EAAW;EAAS;EAAW;CAC3C,eAAe;CACf,UAAU,CAAC,mBAAmB;CAE9B,QAAQ,CAAC;EAAE,SAAS;EAAoB,aAAa;EAAM,CAAC;CAC5D,iBAAiB,CAChB;EACC,KAAK;EACL,cAAc;EACd,aAAa;EACb,QAAQ;EACR,UAAU;EACV,EACD;EACC,KAAK;EACL,cAAc;EACd,aAAa;EACb,QAAQ;EACR,UAAU;EACV,CACD;CAED,SAAS;CACT,MAAM;EAAC;EAAW;EAAQ;EAAQ;EAAW;EAAa;EAAW;CACrE,UAAU;CAEV,UAAU;EAAC;EAAW;EAAS;EAAW;CAC1C,YAAY,EAAE;CACd,eAAe,EAAE;CAEjB,aAAa;CACb,aAAa;CACb"}

package/dist/services/definitions/authelia.cjs

@@ -0,0 +1,145 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/services/definitions/authelia.ts
+const autheliaDefinition = {
+	id: "authelia",
+	name: "Authelia",
+	description: "Authentication and authorization server for protecting self-hosted apps with SSO, MFA, and access policies behind your reverse proxy.",
+	category: "security",
+	icon: "🔒",
+	image: "authelia/authelia",
+	imageTag: "latest",
+	ports: [{
+		host: 9091,
+		container: 9091,
+		description: "Authelia web portal and API",
+		exposed: true
+	}],
+	volumes: [{
+		name: "authelia-config",
+		containerPath: "/config",
+		description: "Authelia configuration, sqlite storage, and notifier output"
+	}],
+	environment: [
+		{
+			key: "TZ",
+			defaultValue: "UTC",
+			secret: false,
+			description: "Container timezone",
+			required: true
+		},
+		{
+			key: "AUTHELIA_DOMAIN",
+			defaultValue: "localhost",
+			secret: false,
+			description: "Default protected domain for Authelia session cookies",
+			required: true
+		},
+		{
+			key: "AUTHELIA_JWT_SECRET",
+			defaultValue: "${AUTHELIA_JWT_SECRET}",
+			secret: true,
+			description: "JWT secret used for identity validation flows",
+			required: true
+		},
+		{
+			key: "AUTHELIA_SESSION_SECRET",
+			defaultValue: "${AUTHELIA_SESSION_SECRET}",
+			secret: true,
+			description: "Session secret for cookie encryption",
+			required: true
+		},
+		{
+			key: "AUTHELIA_STORAGE_ENCRYPTION_KEY",
+			defaultValue: "${AUTHELIA_STORAGE_ENCRYPTION_KEY}",
+			secret: true,
+			description: "Encryption key for the local Authelia sqlite storage",
+			required: true
+		},
+		{
+			key: "AUTHELIA_DEFAULT_USER_PASSWORD_HASH",
+			defaultValue: "$6$rounds=50000$BpLnfgDsc2WD8F2q$Zis.ixdg9s/UOJYrs56b5QEZFiZECu0qZVNsIYxBaNJ7ucIL.nlxVCT5tqh8KHG8X4tlwCFm5r6NTOZZ5qRFN/",
+			secret: false,
+			description: "Password hash for the generated default admin user. Replace with a value from `authelia crypto hash generate argon2` before production use.",
+			required: true
+		}
+	],
+	command: `/bin/sh -c "mkdir -p /config && cat >/config/users_database.yml <<EOF
+users:
+  admin:
+    disabled: false
+    displayname: 'Admin'
+    password: '\${AUTHELIA_DEFAULT_USER_PASSWORD_HASH}'
+    email: 'admin@localhost'
+    groups:
+      - admins
+EOF
+cat >/config/configuration.yml <<EOF
+server:
+  address: 'tcp://0.0.0.0:9091'
+log:
+  level: 'info'
+theme: 'dark'
+jwt_secret: '\${AUTHELIA_JWT_SECRET}'
+default_redirection_url: 'http://localhost'
+totp:
+  issuer: 'better-openclaw'
+authentication_backend:
+  file:
+    path: '/config/users_database.yml'
+access_control:
+  default_policy: 'deny'
+session:
+  secret: '\${AUTHELIA_SESSION_SECRET}'
+  cookies:
+    - domain: '\${AUTHELIA_DOMAIN}'
+      authelia_url: 'http://localhost:9091'
+storage:
+  encryption_key: '\${AUTHELIA_STORAGE_ENCRYPTION_KEY}'
+  local:
+    path: '/config/db.sqlite3'
+notifier:
+  filesystem:
+    filename: '/config/notification.txt'
+EOF
+authelia --config /config/configuration.yml"`,
+	healthcheck: {
+		test: "curl -sf http://localhost:9091/api/health || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 5,
+		startPeriod: "30s"
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+	skills: [{
+		skillId: "authelia-auth",
+		autoInstall: true
+	}],
+	openclawEnvVars: [{
+		key: "AUTHELIA_PORTAL_URL",
+		defaultValue: "http://authelia:9091",
+		description: "Authelia portal URL for reverse proxy",
+		secret: false,
+		required: false
+	}],
+	docsUrl: "https://www.authelia.com/",
+	tags: [
+		"auth",
+		"sso",
+		"mfa",
+		"access-control",
+		"reverse-proxy",
+		"security"
+	],
+	maturity: "beta",
+	requires: [],
+	recommends: ["caddy", "traefik"],
+	conflictsWith: [],
+	minMemoryMB: 256,
+	gpuRequired: false
+};
+//#endregion
+exports.autheliaDefinition = autheliaDefinition;
+
+//# sourceMappingURL=authelia.cjs.map

package/dist/services/definitions/authelia.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authelia.cjs","names":[],"sources":["../../../src/services/definitions/authelia.ts"],"sourcesContent":["import type { ServiceDefinition } from \"../../types.js\";\n\nexport const autheliaDefinition: ServiceDefinition = {\n\tid: \"authelia\",\n\tname: \"Authelia\",\n\tdescription:\n\t\t\"Authentication and authorization server for protecting self-hosted apps with SSO, MFA, and access policies behind your reverse proxy.\",\n\tcategory: \"security\",\n\ticon: \"🔒\",\n\n\timage: \"authelia/authelia\",\n\timageTag: \"latest\",\n\tports: [\n\t\t{\n\t\t\thost: 9091,\n\t\t\tcontainer: 9091,\n\t\t\tdescription: \"Authelia web portal and API\",\n\t\t\texposed: true,\n\t\t},\n\t],\n\tvolumes: [\n\t\t{\n\t\t\tname: \"authelia-config\",\n\t\t\tcontainerPath: \"/config\",\n\t\t\tdescription: \"Authelia configuration, sqlite storage, and notifier output\",\n\t\t},\n\t],\n\tenvironment: [\n\t\t{\n\t\t\tkey: \"TZ\",\n\t\t\tdefaultValue: \"UTC\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Container timezone\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHELIA_DOMAIN\",\n\t\t\tdefaultValue: \"localhost\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Default protected domain for Authelia session cookies\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHELIA_JWT_SECRET\",\n\t\t\tdefaultValue: \"${AUTHELIA_JWT_SECRET}\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"JWT secret used for identity validation flows\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHELIA_SESSION_SECRET\",\n\t\t\tdefaultValue: \"${AUTHELIA_SESSION_SECRET}\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"Session secret for cookie encryption\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHELIA_STORAGE_ENCRYPTION_KEY\",\n\t\t\tdefaultValue: \"${AUTHELIA_STORAGE_ENCRYPTION_KEY}\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"Encryption key for the local Authelia sqlite storage\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHELIA_DEFAULT_USER_PASSWORD_HASH\",\n\t\t\tdefaultValue:\n\t\t\t\t\"$6$rounds=50000$BpLnfgDsc2WD8F2q$Zis.ixdg9s/UOJYrs56b5QEZFiZECu0qZVNsIYxBaNJ7ucIL.nlxVCT5tqh8KHG8X4tlwCFm5r6NTOZZ5qRFN/\",\n\t\t\tsecret: false,\n\t\t\tdescription:\n\t\t\t\t\"Password hash for the generated default admin user. Replace with a value from `authelia crypto hash generate argon2` before production use.\",\n\t\t\trequired: true,\n\t\t},\n\t],\n\tcommand: `/bin/sh -c \"mkdir -p /config && cat >/config/users_database.yml <<EOF\nusers:\n  admin:\n    disabled: false\n    displayname: 'Admin'\n    password: '\\${AUTHELIA_DEFAULT_USER_PASSWORD_HASH}'\n    email: 'admin@localhost'\n    groups:\n      - admins\nEOF\ncat >/config/configuration.yml <<EOF\nserver:\n  address: 'tcp://0.0.0.0:9091'\nlog:\n  level: 'info'\ntheme: 'dark'\njwt_secret: '\\${AUTHELIA_JWT_SECRET}'\ndefault_redirection_url: 'http://localhost'\ntotp:\n  issuer: 'better-openclaw'\nauthentication_backend:\n  file:\n    path: '/config/users_database.yml'\naccess_control:\n  default_policy: 'deny'\nsession:\n  secret: '\\${AUTHELIA_SESSION_SECRET}'\n  cookies:\n    - domain: '\\${AUTHELIA_DOMAIN}'\n      authelia_url: 'http://localhost:9091'\nstorage:\n  encryption_key: '\\${AUTHELIA_STORAGE_ENCRYPTION_KEY}'\n  local:\n    path: '/config/db.sqlite3'\nnotifier:\n  filesystem:\n    filename: '/config/notification.txt'\nEOF\nauthelia --config /config/configuration.yml\"`,\n\thealthcheck: {\n\t\ttest: \"curl -sf http://localhost:9091/api/health || exit 1\",\n\t\tinterval: \"30s\",\n\t\ttimeout: \"10s\",\n\t\tretries: 5,\n\t\tstartPeriod: \"30s\",\n\t},\n\tdependsOn: [],\n\trestartPolicy: \"unless-stopped\",\n\tnetworks: [\"openclaw-network\"],\n\n\tskills: [{ skillId: \"authelia-auth\", autoInstall: true }],\n\topenclawEnvVars: [\n\t\t{\n\t\t\tkey: \"AUTHELIA_PORTAL_URL\",\n\t\t\tdefaultValue: \"http://authelia:9091\",\n\t\t\tdescription: \"Authelia portal URL for reverse proxy\",\n\t\t\tsecret: false,\n\t\t\trequired: false,\n\t\t},\n\t],\n\n\tdocsUrl: \"https://www.authelia.com/\",\n\ttags: [\"auth\", \"sso\", \"mfa\", \"access-control\", \"reverse-proxy\", \"security\"],\n\tmaturity: \"beta\",\n\n\trequires: [],\n\trecommends: [\"caddy\", \"traefik\"],\n\tconflictsWith: [],\n\n\tminMemoryMB: 256,\n\tgpuRequired: false,\n};\n"],"mappings":";;AAEA,MAAa,qBAAwC;CACpD,IAAI;CACJ,MAAM;CACN,aACC;CACD,UAAU;CACV,MAAM;CAEN,OAAO;CACP,UAAU;CACV,OAAO,CACN;EACC,MAAM;EACN,WAAW;EACX,aAAa;EACb,SAAS;EACT,CACD;CACD,SAAS,CACR;EACC,MAAM;EACN,eAAe;EACf,aAAa;EACb,CACD;CACD,aAAa;EACZ;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cACC;GACD,QAAQ;GACR,aACC;GACD,UAAU;GACV;EACD;CACD,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuCT,aAAa;EACZ,MAAM;EACN,UAAU;EACV,SAAS;EACT,SAAS;EACT,aAAa;EACb;CACD,WAAW,EAAE;CACb,eAAe;CACf,UAAU,CAAC,mBAAmB;CAE9B,QAAQ,CAAC;EAAE,SAAS;EAAiB,aAAa;EAAM,CAAC;CACzD,iBAAiB,CAChB;EACC,KAAK;EACL,cAAc;EACd,aAAa;EACb,QAAQ;EACR,UAAU;EACV,CACD;CAED,SAAS;CACT,MAAM;EAAC;EAAQ;EAAO;EAAO;EAAkB;EAAiB;EAAW;CAC3E,UAAU;CAEV,UAAU,EAAE;CACZ,YAAY,CAAC,SAAS,UAAU;CAChC,eAAe,EAAE;CAEjB,aAAa;CACb,aAAa;CACb"}

package/dist/services/definitions/authelia.d.cts

@@ -0,0 +1,7 @@
+import { ServiceDefinition } from "../../types.cjs";
+
+//#region src/services/definitions/authelia.d.ts
+declare const autheliaDefinition: ServiceDefinition;
+//#endregion
+export { autheliaDefinition };
+//# sourceMappingURL=authelia.d.cts.map

package/dist/services/definitions/authelia.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authelia.d.cts","names":[],"sources":["../../../src/services/definitions/authelia.ts"],"mappings":";;;cAEa,kBAAA,EAAoB,iBAAA"}

package/dist/services/definitions/authelia.d.mts

@@ -0,0 +1,7 @@
+import { ServiceDefinition } from "../../types.mjs";
+
+//#region src/services/definitions/authelia.d.ts
+declare const autheliaDefinition: ServiceDefinition;
+//#endregion
+export { autheliaDefinition };
+//# sourceMappingURL=authelia.d.mts.map

package/dist/services/definitions/authelia.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authelia.d.mts","names":[],"sources":["../../../src/services/definitions/authelia.ts"],"mappings":";;;cAEa,kBAAA,EAAoB,iBAAA"}

package/dist/services/definitions/authelia.mjs

@@ -0,0 +1,144 @@
+//#region src/services/definitions/authelia.ts
+const autheliaDefinition = {
+	id: "authelia",
+	name: "Authelia",
+	description: "Authentication and authorization server for protecting self-hosted apps with SSO, MFA, and access policies behind your reverse proxy.",
+	category: "security",
+	icon: "🔒",
+	image: "authelia/authelia",
+	imageTag: "latest",
+	ports: [{
+		host: 9091,
+		container: 9091,
+		description: "Authelia web portal and API",
+		exposed: true
+	}],
+	volumes: [{
+		name: "authelia-config",
+		containerPath: "/config",
+		description: "Authelia configuration, sqlite storage, and notifier output"
+	}],
+	environment: [
+		{
+			key: "TZ",
+			defaultValue: "UTC",
+			secret: false,
+			description: "Container timezone",
+			required: true
+		},
+		{
+			key: "AUTHELIA_DOMAIN",
+			defaultValue: "localhost",
+			secret: false,
+			description: "Default protected domain for Authelia session cookies",
+			required: true
+		},
+		{
+			key: "AUTHELIA_JWT_SECRET",
+			defaultValue: "${AUTHELIA_JWT_SECRET}",
+			secret: true,
+			description: "JWT secret used for identity validation flows",
+			required: true
+		},
+		{
+			key: "AUTHELIA_SESSION_SECRET",
+			defaultValue: "${AUTHELIA_SESSION_SECRET}",
+			secret: true,
+			description: "Session secret for cookie encryption",
+			required: true
+		},
+		{
+			key: "AUTHELIA_STORAGE_ENCRYPTION_KEY",
+			defaultValue: "${AUTHELIA_STORAGE_ENCRYPTION_KEY}",
+			secret: true,
+			description: "Encryption key for the local Authelia sqlite storage",
+			required: true
+		},
+		{
+			key: "AUTHELIA_DEFAULT_USER_PASSWORD_HASH",
+			defaultValue: "$6$rounds=50000$BpLnfgDsc2WD8F2q$Zis.ixdg9s/UOJYrs56b5QEZFiZECu0qZVNsIYxBaNJ7ucIL.nlxVCT5tqh8KHG8X4tlwCFm5r6NTOZZ5qRFN/",
+			secret: false,
+			description: "Password hash for the generated default admin user. Replace with a value from `authelia crypto hash generate argon2` before production use.",
+			required: true
+		}
+	],
+	command: `/bin/sh -c "mkdir -p /config && cat >/config/users_database.yml <<EOF
+users:
+  admin:
+    disabled: false
+    displayname: 'Admin'
+    password: '\${AUTHELIA_DEFAULT_USER_PASSWORD_HASH}'
+    email: 'admin@localhost'
+    groups:
+      - admins
+EOF
+cat >/config/configuration.yml <<EOF
+server:
+  address: 'tcp://0.0.0.0:9091'
+log:
+  level: 'info'
+theme: 'dark'
+jwt_secret: '\${AUTHELIA_JWT_SECRET}'
+default_redirection_url: 'http://localhost'
+totp:
+  issuer: 'better-openclaw'
+authentication_backend:
+  file:
+    path: '/config/users_database.yml'
+access_control:
+  default_policy: 'deny'
+session:
+  secret: '\${AUTHELIA_SESSION_SECRET}'
+  cookies:
+    - domain: '\${AUTHELIA_DOMAIN}'
+      authelia_url: 'http://localhost:9091'
+storage:
+  encryption_key: '\${AUTHELIA_STORAGE_ENCRYPTION_KEY}'
+  local:
+    path: '/config/db.sqlite3'
+notifier:
+  filesystem:
+    filename: '/config/notification.txt'
+EOF
+authelia --config /config/configuration.yml"`,
+	healthcheck: {
+		test: "curl -sf http://localhost:9091/api/health || exit 1",
+		interval: "30s",
+		timeout: "10s",
+		retries: 5,
+		startPeriod: "30s"
+	},
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+	skills: [{
+		skillId: "authelia-auth",
+		autoInstall: true
+	}],
+	openclawEnvVars: [{
+		key: "AUTHELIA_PORTAL_URL",
+		defaultValue: "http://authelia:9091",
+		description: "Authelia portal URL for reverse proxy",
+		secret: false,
+		required: false
+	}],
+	docsUrl: "https://www.authelia.com/",
+	tags: [
+		"auth",
+		"sso",
+		"mfa",
+		"access-control",
+		"reverse-proxy",
+		"security"
+	],
+	maturity: "beta",
+	requires: [],
+	recommends: ["caddy", "traefik"],
+	conflictsWith: [],
+	minMemoryMB: 256,
+	gpuRequired: false
+};
+//#endregion
+export { autheliaDefinition };
+
+//# sourceMappingURL=authelia.mjs.map

package/dist/services/definitions/authelia.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authelia.mjs","names":[],"sources":["../../../src/services/definitions/authelia.ts"],"sourcesContent":["import type { ServiceDefinition } from \"../../types.js\";\n\nexport const autheliaDefinition: ServiceDefinition = {\n\tid: \"authelia\",\n\tname: \"Authelia\",\n\tdescription:\n\t\t\"Authentication and authorization server for protecting self-hosted apps with SSO, MFA, and access policies behind your reverse proxy.\",\n\tcategory: \"security\",\n\ticon: \"🔒\",\n\n\timage: \"authelia/authelia\",\n\timageTag: \"latest\",\n\tports: [\n\t\t{\n\t\t\thost: 9091,\n\t\t\tcontainer: 9091,\n\t\t\tdescription: \"Authelia web portal and API\",\n\t\t\texposed: true,\n\t\t},\n\t],\n\tvolumes: [\n\t\t{\n\t\t\tname: \"authelia-config\",\n\t\t\tcontainerPath: \"/config\",\n\t\t\tdescription: \"Authelia configuration, sqlite storage, and notifier output\",\n\t\t},\n\t],\n\tenvironment: [\n\t\t{\n\t\t\tkey: \"TZ\",\n\t\t\tdefaultValue: \"UTC\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Container timezone\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHELIA_DOMAIN\",\n\t\t\tdefaultValue: \"localhost\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Default protected domain for Authelia session cookies\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHELIA_JWT_SECRET\",\n\t\t\tdefaultValue: \"${AUTHELIA_JWT_SECRET}\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"JWT secret used for identity validation flows\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHELIA_SESSION_SECRET\",\n\t\t\tdefaultValue: \"${AUTHELIA_SESSION_SECRET}\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"Session secret for cookie encryption\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHELIA_STORAGE_ENCRYPTION_KEY\",\n\t\t\tdefaultValue: \"${AUTHELIA_STORAGE_ENCRYPTION_KEY}\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"Encryption key for the local Authelia sqlite storage\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHELIA_DEFAULT_USER_PASSWORD_HASH\",\n\t\t\tdefaultValue:\n\t\t\t\t\"$6$rounds=50000$BpLnfgDsc2WD8F2q$Zis.ixdg9s/UOJYrs56b5QEZFiZECu0qZVNsIYxBaNJ7ucIL.nlxVCT5tqh8KHG8X4tlwCFm5r6NTOZZ5qRFN/\",\n\t\t\tsecret: false,\n\t\t\tdescription:\n\t\t\t\t\"Password hash for the generated default admin user. Replace with a value from `authelia crypto hash generate argon2` before production use.\",\n\t\t\trequired: true,\n\t\t},\n\t],\n\tcommand: `/bin/sh -c \"mkdir -p /config && cat >/config/users_database.yml <<EOF\nusers:\n  admin:\n    disabled: false\n    displayname: 'Admin'\n    password: '\\${AUTHELIA_DEFAULT_USER_PASSWORD_HASH}'\n    email: 'admin@localhost'\n    groups:\n      - admins\nEOF\ncat >/config/configuration.yml <<EOF\nserver:\n  address: 'tcp://0.0.0.0:9091'\nlog:\n  level: 'info'\ntheme: 'dark'\njwt_secret: '\\${AUTHELIA_JWT_SECRET}'\ndefault_redirection_url: 'http://localhost'\ntotp:\n  issuer: 'better-openclaw'\nauthentication_backend:\n  file:\n    path: '/config/users_database.yml'\naccess_control:\n  default_policy: 'deny'\nsession:\n  secret: '\\${AUTHELIA_SESSION_SECRET}'\n  cookies:\n    - domain: '\\${AUTHELIA_DOMAIN}'\n      authelia_url: 'http://localhost:9091'\nstorage:\n  encryption_key: '\\${AUTHELIA_STORAGE_ENCRYPTION_KEY}'\n  local:\n    path: '/config/db.sqlite3'\nnotifier:\n  filesystem:\n    filename: '/config/notification.txt'\nEOF\nauthelia --config /config/configuration.yml\"`,\n\thealthcheck: {\n\t\ttest: \"curl -sf http://localhost:9091/api/health || exit 1\",\n\t\tinterval: \"30s\",\n\t\ttimeout: \"10s\",\n\t\tretries: 5,\n\t\tstartPeriod: \"30s\",\n\t},\n\tdependsOn: [],\n\trestartPolicy: \"unless-stopped\",\n\tnetworks: [\"openclaw-network\"],\n\n\tskills: [{ skillId: \"authelia-auth\", autoInstall: true }],\n\topenclawEnvVars: [\n\t\t{\n\t\t\tkey: \"AUTHELIA_PORTAL_URL\",\n\t\t\tdefaultValue: \"http://authelia:9091\",\n\t\t\tdescription: \"Authelia portal URL for reverse proxy\",\n\t\t\tsecret: false,\n\t\t\trequired: false,\n\t\t},\n\t],\n\n\tdocsUrl: \"https://www.authelia.com/\",\n\ttags: [\"auth\", \"sso\", \"mfa\", \"access-control\", \"reverse-proxy\", \"security\"],\n\tmaturity: \"beta\",\n\n\trequires: [],\n\trecommends: [\"caddy\", \"traefik\"],\n\tconflictsWith: [],\n\n\tminMemoryMB: 256,\n\tgpuRequired: false,\n};\n"],"mappings":";AAEA,MAAa,qBAAwC;CACpD,IAAI;CACJ,MAAM;CACN,aACC;CACD,UAAU;CACV,MAAM;CAEN,OAAO;CACP,UAAU;CACV,OAAO,CACN;EACC,MAAM;EACN,WAAW;EACX,aAAa;EACb,SAAS;EACT,CACD;CACD,SAAS,CACR;EACC,MAAM;EACN,eAAe;EACf,aAAa;EACb,CACD;CACD,aAAa;EACZ;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cACC;GACD,QAAQ;GACR,aACC;GACD,UAAU;GACV;EACD;CACD,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuCT,aAAa;EACZ,MAAM;EACN,UAAU;EACV,SAAS;EACT,SAAS;EACT,aAAa;EACb;CACD,WAAW,EAAE;CACb,eAAe;CACf,UAAU,CAAC,mBAAmB;CAE9B,QAAQ,CAAC;EAAE,SAAS;EAAiB,aAAa;EAAM,CAAC;CACzD,iBAAiB,CAChB;EACC,KAAK;EACL,cAAc;EACd,aAAa;EACb,QAAQ;EACR,UAAU;EACV,CACD;CAED,SAAS;CACT,MAAM;EAAC;EAAQ;EAAO;EAAO;EAAkB;EAAiB;EAAW;CAC3E,UAAU;CAEV,UAAU,EAAE;CACZ,YAAY,CAAC,SAAS,UAAU;CAChC,eAAe,EAAE;CAEjB,aAAa;CACb,aAAa;CACb"}

package/dist/services/definitions/authentik.cjs

@@ -1,5 +1,4 @@
-Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 //#region src/services/definitions/authentik.ts
 const authentikDefinition = {
 	id: "authentik",
@@ -101,7 +100,7 @@ const authentikDefinition = {
 	minMemoryMB: 2048,
 	gpuRequired: false
 };
-
 //#endregion
 exports.authentikDefinition = authentikDefinition;
+
 //# sourceMappingURL=authentik.cjs.map

package/dist/services/definitions/authentik.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"authentik.cjs","names":[],"sources":["../../../src/services/definitions/authentik.ts"],"sourcesContent":["import type { ServiceDefinition } from \"../../types.js\";\n\nexport const authentikDefinition: ServiceDefinition = {\n\tid: \"authentik\",\n\tname: \"Authentik\",\n\tdescription: \"The open-source Identity Provider that unifies your identity infrastructure.\",\n\tcategory: \"security\",\n\ticon: \"🛡️\",\n\n\timage: \"ghcr.io/goauthentik/server\",\n\timageTag: \"2026.2.0\",\n\tports: [\n\t\t{\n\t\t\thost: 9015,\n\t\t\tcontainer: 9000,\n\t\t\tdescription: \"Authentik HTTP Interface\",\n\t\t\texposed: true,\n\t\t},\n\t\t{\n\t\t\thost: 9443,\n\t\t\tcontainer: 9443,\n\t\t\tdescription: \"Authentik HTTPS Interface\",\n\t\t\texposed: false,\n\t\t},\n\t],\n\tvolumes: [\n\t\t{\n\t\t\tname: \"authentik_media\",\n\t\t\tcontainerPath: \"/media\",\n\t\t\tdescription: \"Authentik media storage\",\n\t\t},\n\t\t{\n\t\t\tname: \"authentik_custom_templates\",\n\t\t\tcontainerPath: \"/templates\",\n\t\t\tdescription: \"Authentik custom templates\",\n\t\t},\n\t],\n\tenvironment: [\n\t\t{\n\t\t\tkey: \"AUTHENTIK_REDIS__HOST\",\n\t\t\tdefaultValue: \"redis\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Redis server hostname\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHENTIK_POSTGRESQL__HOST\",\n\t\t\tdefaultValue: \"postgresql\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Postgres database hostname\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHENTIK_POSTGRESQL__USER\",\n\t\t\tdefaultValue: \"authentik\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Postgres database user\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHENTIK_POSTGRESQL__NAME\",\n\t\t\tdefaultValue: \"authentik\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Postgres database name\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHENTIK_POSTGRESQL__PASSWORD\",\n\t\t\tdefaultValue: \"${AUTHENTIK_DB_PASSWORD}\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"Postgres database password\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHENTIK_SECRET_KEY\",\n\t\t\tdefaultValue: \"authentik_secret_replace_me_in_production\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"Secret key used for cookie signing\",\n\t\t\trequired: true,\n\t\t},\n\t],\n\thealthcheck: {\n\t\ttest: \"curl --fail http://localhost:9000/-/health/live/ || exit 1\",\n\t\tinterval: \"30s\",\n\t\ttimeout: \"5s\",\n\t\tretries: 3,\n\t\tstartPeriod: \"30s\",\n\t},\n\tdependsOn: [\"postgresql\", \"redis\"],\n\trestartPolicy: \"unless-stopped\",\n\tnetworks: [\"openclaw-network\"],\n\n\tskills: [],\n\topenclawEnvVars: [],\n\n\tdocsUrl: \"https://docs.goauthentik.io/\",\n\ttags: [\"identity\", \"sso\", \"saml\", \"oidc\", \"oauth2\", \"security\"],\n\tmaturity: \"stable\",\n\n\trequires: [\"postgresql\", \"redis\"],\n\trecommends: [],\n\tconflictsWith: [],\n\n\tminMemoryMB: 2048,\n\tgpuRequired: false,\n};\n"],"mappings":";;;AAEA,MAAa,sBAAyC;CACrD,IAAI;CACJ,MAAM;CACN,aAAa;CACb,UAAU;CACV,MAAM;CAEN,OAAO;CACP,UAAU;CACV,OAAO,CACN;EACC,MAAM;EACN,WAAW;EACX,aAAa;EACb,SAAS;EACT,EACD;EACC,MAAM;EACN,WAAW;EACX,aAAa;EACb,SAAS;EACT,CACD;CACD,SAAS,CACR;EACC,MAAM;EACN,eAAe;EACf,aAAa;EACb,EACD;EACC,MAAM;EACN,eAAe;EACf,aAAa;EACb,CACD;CACD,aAAa;EACZ;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;CACD,aAAa;EACZ,MAAM;EACN,UAAU;EACV,SAAS;EACT,SAAS;EACT,aAAa;EACb;CACD,WAAW,CAAC,cAAc,QAAQ;CAClC,eAAe;CACf,UAAU,CAAC,mBAAmB;CAE9B,QAAQ,EAAE;CACV,iBAAiB,EAAE;CAEnB,SAAS;CACT,MAAM;EAAC;EAAY;EAAO;EAAQ;EAAQ;EAAU;EAAW;CAC/D,UAAU;CAEV,UAAU,CAAC,cAAc,QAAQ;CACjC,YAAY,EAAE;CACd,eAAe,EAAE;CAEjB,aAAa;CACb,aAAa;CACb"}
+{"version":3,"file":"authentik.cjs","names":[],"sources":["../../../src/services/definitions/authentik.ts"],"sourcesContent":["import type { ServiceDefinition } from \"../../types.js\";\n\nexport const authentikDefinition: ServiceDefinition = {\n\tid: \"authentik\",\n\tname: \"Authentik\",\n\tdescription: \"The open-source Identity Provider that unifies your identity infrastructure.\",\n\tcategory: \"security\",\n\ticon: \"🛡️\",\n\n\timage: \"ghcr.io/goauthentik/server\",\n\timageTag: \"2026.2.0\",\n\tports: [\n\t\t{\n\t\t\thost: 9015,\n\t\t\tcontainer: 9000,\n\t\t\tdescription: \"Authentik HTTP Interface\",\n\t\t\texposed: true,\n\t\t},\n\t\t{\n\t\t\thost: 9443,\n\t\t\tcontainer: 9443,\n\t\t\tdescription: \"Authentik HTTPS Interface\",\n\t\t\texposed: false,\n\t\t},\n\t],\n\tvolumes: [\n\t\t{\n\t\t\tname: \"authentik_media\",\n\t\t\tcontainerPath: \"/media\",\n\t\t\tdescription: \"Authentik media storage\",\n\t\t},\n\t\t{\n\t\t\tname: \"authentik_custom_templates\",\n\t\t\tcontainerPath: \"/templates\",\n\t\t\tdescription: \"Authentik custom templates\",\n\t\t},\n\t],\n\tenvironment: [\n\t\t{\n\t\t\tkey: \"AUTHENTIK_REDIS__HOST\",\n\t\t\tdefaultValue: \"redis\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Redis server hostname\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHENTIK_POSTGRESQL__HOST\",\n\t\t\tdefaultValue: \"postgresql\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Postgres database hostname\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHENTIK_POSTGRESQL__USER\",\n\t\t\tdefaultValue: \"authentik\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Postgres database user\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHENTIK_POSTGRESQL__NAME\",\n\t\t\tdefaultValue: \"authentik\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Postgres database name\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHENTIK_POSTGRESQL__PASSWORD\",\n\t\t\tdefaultValue: \"${AUTHENTIK_DB_PASSWORD}\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"Postgres database password\",\n\t\t\trequired: true,\n\t\t},\n\t\t{\n\t\t\tkey: \"AUTHENTIK_SECRET_KEY\",\n\t\t\tdefaultValue: \"authentik_secret_replace_me_in_production\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"Secret key used for cookie signing\",\n\t\t\trequired: true,\n\t\t},\n\t],\n\thealthcheck: {\n\t\ttest: \"curl --fail http://localhost:9000/-/health/live/ || exit 1\",\n\t\tinterval: \"30s\",\n\t\ttimeout: \"5s\",\n\t\tretries: 3,\n\t\tstartPeriod: \"30s\",\n\t},\n\tdependsOn: [\"postgresql\", \"redis\"],\n\trestartPolicy: \"unless-stopped\",\n\tnetworks: [\"openclaw-network\"],\n\n\tskills: [],\n\topenclawEnvVars: [],\n\n\tdocsUrl: \"https://docs.goauthentik.io/\",\n\ttags: [\"identity\", \"sso\", \"saml\", \"oidc\", \"oauth2\", \"security\"],\n\tmaturity: \"stable\",\n\n\trequires: [\"postgresql\", \"redis\"],\n\trecommends: [],\n\tconflictsWith: [],\n\n\tminMemoryMB: 2048,\n\tgpuRequired: false,\n};\n"],"mappings":";;AAEA,MAAa,sBAAyC;CACrD,IAAI;CACJ,MAAM;CACN,aAAa;CACb,UAAU;CACV,MAAM;CAEN,OAAO;CACP,UAAU;CACV,OAAO,CACN;EACC,MAAM;EACN,WAAW;EACX,aAAa;EACb,SAAS;EACT,EACD;EACC,MAAM;EACN,WAAW;EACX,aAAa;EACb,SAAS;EACT,CACD;CACD,SAAS,CACR;EACC,MAAM;EACN,eAAe;EACf,aAAa;EACb,EACD;EACC,MAAM;EACN,eAAe;EACf,aAAa;EACb,CACD;CACD,aAAa;EACZ;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;GACC,KAAK;GACL,cAAc;GACd,QAAQ;GACR,aAAa;GACb,UAAU;GACV;EACD;CACD,aAAa;EACZ,MAAM;EACN,UAAU;EACV,SAAS;EACT,SAAS;EACT,aAAa;EACb;CACD,WAAW,CAAC,cAAc,QAAQ;CAClC,eAAe;CACf,UAAU,CAAC,mBAAmB;CAE9B,QAAQ,EAAE;CACV,iBAAiB,EAAE;CAEnB,SAAS;CACT,MAAM;EAAC;EAAY;EAAO;EAAQ;EAAQ;EAAU;EAAW;CAC/D,UAAU;CAEV,UAAU,CAAC,cAAc,QAAQ;CACjC,YAAY,EAAE;CACd,eAAe,EAAE;CAEjB,aAAa;CACb,aAAa;CACb"}

package/dist/services/definitions/authentik.mjs

@@ -99,7 +99,7 @@ const authentikDefinition = {
 	minMemoryMB: 2048,
 	gpuRequired: false
 };
-
 //#endregion
 export { authentikDefinition };
+
 //# sourceMappingURL=authentik.mjs.map

package/dist/services/definitions/axolotl.cjs

@@ -0,0 +1,67 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/services/definitions/axolotl.ts
+const axolotlDefinition = {
+	id: "axolotl",
+	name: "Axolotl",
+	description: "Streamlined LLM fine-tuning framework supporting LoRA, QLoRA, and full fine-tuning with YAML-based configuration.",
+	category: "fine-tuning",
+	icon: "🎯",
+	image: "winglian/axolotl",
+	imageTag: "main-latest",
+	ports: [],
+	volumes: [
+		{
+			name: "axolotl-models",
+			containerPath: "/workspace/models",
+			description: "Base models and fine-tuned outputs"
+		},
+		{
+			name: "axolotl-data",
+			containerPath: "/workspace/data",
+			description: "Training datasets"
+		},
+		{
+			name: "axolotl-configs",
+			containerPath: "/workspace/configs",
+			description: "Training configuration YAML files"
+		}
+	],
+	environment: [{
+		key: "WANDB_DISABLED",
+		defaultValue: "true",
+		secret: false,
+		description: "Disable Weights & Biases logging by default",
+		required: false
+	}, {
+		key: "HF_TOKEN",
+		defaultValue: "${HF_TOKEN}",
+		secret: true,
+		description: "HuggingFace token for gated model access",
+		required: false
+	}],
+	command: "sleep infinity",
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+	skills: [],
+	openclawEnvVars: [],
+	docsUrl: "https://github.com/axolotl-ai-cloud/axolotl",
+	tags: [
+		"fine-tuning",
+		"llm",
+		"lora",
+		"qlora",
+		"training",
+		"ai"
+	],
+	maturity: "beta",
+	requires: [],
+	recommends: ["ollama", "minio"],
+	conflictsWith: [],
+	minMemoryMB: 4096,
+	gpuRequired: true
+};
+//#endregion
+exports.axolotlDefinition = axolotlDefinition;
+
+//# sourceMappingURL=axolotl.cjs.map

package/dist/services/definitions/axolotl.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"axolotl.cjs","names":[],"sources":["../../../src/services/definitions/axolotl.ts"],"sourcesContent":["import type { ServiceDefinition } from \"../../types.js\";\n\nexport const axolotlDefinition: ServiceDefinition = {\n\tid: \"axolotl\",\n\tname: \"Axolotl\",\n\tdescription:\n\t\t\"Streamlined LLM fine-tuning framework supporting LoRA, QLoRA, and full fine-tuning with YAML-based configuration.\",\n\tcategory: \"fine-tuning\",\n\ticon: \"🎯\",\n\n\timage: \"winglian/axolotl\",\n\timageTag: \"main-latest\",\n\tports: [],\n\tvolumes: [\n\t\t{\n\t\t\tname: \"axolotl-models\",\n\t\t\tcontainerPath: \"/workspace/models\",\n\t\t\tdescription: \"Base models and fine-tuned outputs\",\n\t\t},\n\t\t{\n\t\t\tname: \"axolotl-data\",\n\t\t\tcontainerPath: \"/workspace/data\",\n\t\t\tdescription: \"Training datasets\",\n\t\t},\n\t\t{\n\t\t\tname: \"axolotl-configs\",\n\t\t\tcontainerPath: \"/workspace/configs\",\n\t\t\tdescription: \"Training configuration YAML files\",\n\t\t},\n\t],\n\tenvironment: [\n\t\t{\n\t\t\tkey: \"WANDB_DISABLED\",\n\t\t\tdefaultValue: \"true\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Disable Weights & Biases logging by default\",\n\t\t\trequired: false,\n\t\t},\n\t\t{\n\t\t\tkey: \"HF_TOKEN\",\n\t\t\tdefaultValue: \"${HF_TOKEN}\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"HuggingFace token for gated model access\",\n\t\t\trequired: false,\n\t\t},\n\t],\n\tcommand: \"sleep infinity\",\n\tdependsOn: [],\n\trestartPolicy: \"unless-stopped\",\n\tnetworks: [\"openclaw-network\"],\n\n\tskills: [],\n\topenclawEnvVars: [],\n\n\tdocsUrl: \"https://github.com/axolotl-ai-cloud/axolotl\",\n\ttags: [\"fine-tuning\", \"llm\", \"lora\", \"qlora\", \"training\", \"ai\"],\n\tmaturity: \"beta\",\n\n\trequires: [],\n\trecommends: [\"ollama\", \"minio\"],\n\tconflictsWith: [],\n\n\tminMemoryMB: 4096,\n\tgpuRequired: true,\n};\n"],"mappings":";;AAEA,MAAa,oBAAuC;CACnD,IAAI;CACJ,MAAM;CACN,aACC;CACD,UAAU;CACV,MAAM;CAEN,OAAO;CACP,UAAU;CACV,OAAO,EAAE;CACT,SAAS;EACR;GACC,MAAM;GACN,eAAe;GACf,aAAa;GACb;EACD;GACC,MAAM;GACN,eAAe;GACf,aAAa;GACb;EACD;GACC,MAAM;GACN,eAAe;GACf,aAAa;GACb;EACD;CACD,aAAa,CACZ;EACC,KAAK;EACL,cAAc;EACd,QAAQ;EACR,aAAa;EACb,UAAU;EACV,EACD;EACC,KAAK;EACL,cAAc;EACd,QAAQ;EACR,aAAa;EACb,UAAU;EACV,CACD;CACD,SAAS;CACT,WAAW,EAAE;CACb,eAAe;CACf,UAAU,CAAC,mBAAmB;CAE9B,QAAQ,EAAE;CACV,iBAAiB,EAAE;CAEnB,SAAS;CACT,MAAM;EAAC;EAAe;EAAO;EAAQ;EAAS;EAAY;EAAK;CAC/D,UAAU;CAEV,UAAU,EAAE;CACZ,YAAY,CAAC,UAAU,QAAQ;CAC/B,eAAe,EAAE;CAEjB,aAAa;CACb,aAAa;CACb"}

package/dist/services/definitions/axolotl.d.cts

@@ -0,0 +1,7 @@
+import { ServiceDefinition } from "../../types.cjs";
+
+//#region src/services/definitions/axolotl.d.ts
+declare const axolotlDefinition: ServiceDefinition;
+//#endregion
+export { axolotlDefinition };
+//# sourceMappingURL=axolotl.d.cts.map

package/dist/services/definitions/axolotl.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"axolotl.d.cts","names":[],"sources":["../../../src/services/definitions/axolotl.ts"],"mappings":";;;cAEa,iBAAA,EAAmB,iBAAA"}

package/dist/services/definitions/axolotl.d.mts

@@ -0,0 +1,7 @@
+import { ServiceDefinition } from "../../types.mjs";
+
+//#region src/services/definitions/axolotl.d.ts
+declare const axolotlDefinition: ServiceDefinition;
+//#endregion
+export { axolotlDefinition };
+//# sourceMappingURL=axolotl.d.mts.map

package/dist/services/definitions/axolotl.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"axolotl.d.mts","names":[],"sources":["../../../src/services/definitions/axolotl.ts"],"mappings":";;;cAEa,iBAAA,EAAmB,iBAAA"}

package/dist/services/definitions/axolotl.mjs

@@ -0,0 +1,66 @@
+//#region src/services/definitions/axolotl.ts
+const axolotlDefinition = {
+	id: "axolotl",
+	name: "Axolotl",
+	description: "Streamlined LLM fine-tuning framework supporting LoRA, QLoRA, and full fine-tuning with YAML-based configuration.",
+	category: "fine-tuning",
+	icon: "🎯",
+	image: "winglian/axolotl",
+	imageTag: "main-latest",
+	ports: [],
+	volumes: [
+		{
+			name: "axolotl-models",
+			containerPath: "/workspace/models",
+			description: "Base models and fine-tuned outputs"
+		},
+		{
+			name: "axolotl-data",
+			containerPath: "/workspace/data",
+			description: "Training datasets"
+		},
+		{
+			name: "axolotl-configs",
+			containerPath: "/workspace/configs",
+			description: "Training configuration YAML files"
+		}
+	],
+	environment: [{
+		key: "WANDB_DISABLED",
+		defaultValue: "true",
+		secret: false,
+		description: "Disable Weights & Biases logging by default",
+		required: false
+	}, {
+		key: "HF_TOKEN",
+		defaultValue: "${HF_TOKEN}",
+		secret: true,
+		description: "HuggingFace token for gated model access",
+		required: false
+	}],
+	command: "sleep infinity",
+	dependsOn: [],
+	restartPolicy: "unless-stopped",
+	networks: ["openclaw-network"],
+	skills: [],
+	openclawEnvVars: [],
+	docsUrl: "https://github.com/axolotl-ai-cloud/axolotl",
+	tags: [
+		"fine-tuning",
+		"llm",
+		"lora",
+		"qlora",
+		"training",
+		"ai"
+	],
+	maturity: "beta",
+	requires: [],
+	recommends: ["ollama", "minio"],
+	conflictsWith: [],
+	minMemoryMB: 4096,
+	gpuRequired: true
+};
+//#endregion
+export { axolotlDefinition };
+
+//# sourceMappingURL=axolotl.mjs.map

package/dist/services/definitions/axolotl.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"axolotl.mjs","names":[],"sources":["../../../src/services/definitions/axolotl.ts"],"sourcesContent":["import type { ServiceDefinition } from \"../../types.js\";\n\nexport const axolotlDefinition: ServiceDefinition = {\n\tid: \"axolotl\",\n\tname: \"Axolotl\",\n\tdescription:\n\t\t\"Streamlined LLM fine-tuning framework supporting LoRA, QLoRA, and full fine-tuning with YAML-based configuration.\",\n\tcategory: \"fine-tuning\",\n\ticon: \"🎯\",\n\n\timage: \"winglian/axolotl\",\n\timageTag: \"main-latest\",\n\tports: [],\n\tvolumes: [\n\t\t{\n\t\t\tname: \"axolotl-models\",\n\t\t\tcontainerPath: \"/workspace/models\",\n\t\t\tdescription: \"Base models and fine-tuned outputs\",\n\t\t},\n\t\t{\n\t\t\tname: \"axolotl-data\",\n\t\t\tcontainerPath: \"/workspace/data\",\n\t\t\tdescription: \"Training datasets\",\n\t\t},\n\t\t{\n\t\t\tname: \"axolotl-configs\",\n\t\t\tcontainerPath: \"/workspace/configs\",\n\t\t\tdescription: \"Training configuration YAML files\",\n\t\t},\n\t],\n\tenvironment: [\n\t\t{\n\t\t\tkey: \"WANDB_DISABLED\",\n\t\t\tdefaultValue: \"true\",\n\t\t\tsecret: false,\n\t\t\tdescription: \"Disable Weights & Biases logging by default\",\n\t\t\trequired: false,\n\t\t},\n\t\t{\n\t\t\tkey: \"HF_TOKEN\",\n\t\t\tdefaultValue: \"${HF_TOKEN}\",\n\t\t\tsecret: true,\n\t\t\tdescription: \"HuggingFace token for gated model access\",\n\t\t\trequired: false,\n\t\t},\n\t],\n\tcommand: \"sleep infinity\",\n\tdependsOn: [],\n\trestartPolicy: \"unless-stopped\",\n\tnetworks: [\"openclaw-network\"],\n\n\tskills: [],\n\topenclawEnvVars: [],\n\n\tdocsUrl: \"https://github.com/axolotl-ai-cloud/axolotl\",\n\ttags: [\"fine-tuning\", \"llm\", \"lora\", \"qlora\", \"training\", \"ai\"],\n\tmaturity: \"beta\",\n\n\trequires: [],\n\trecommends: [\"ollama\", \"minio\"],\n\tconflictsWith: [],\n\n\tminMemoryMB: 4096,\n\tgpuRequired: true,\n};\n"],"mappings":";AAEA,MAAa,oBAAuC;CACnD,IAAI;CACJ,MAAM;CACN,aACC;CACD,UAAU;CACV,MAAM;CAEN,OAAO;CACP,UAAU;CACV,OAAO,EAAE;CACT,SAAS;EACR;GACC,MAAM;GACN,eAAe;GACf,aAAa;GACb;EACD;GACC,MAAM;GACN,eAAe;GACf,aAAa;GACb;EACD;GACC,MAAM;GACN,eAAe;GACf,aAAa;GACb;EACD;CACD,aAAa,CACZ;EACC,KAAK;EACL,cAAc;EACd,QAAQ;EACR,aAAa;EACb,UAAU;EACV,EACD;EACC,KAAK;EACL,cAAc;EACd,QAAQ;EACR,aAAa;EACb,UAAU;EACV,CACD;CACD,SAAS;CACT,WAAW,EAAE;CACb,eAAe;CACf,UAAU,CAAC,mBAAmB;CAE9B,QAAQ,EAAE;CACV,iBAAiB,EAAE;CAEnB,SAAS;CACT,MAAM;EAAC;EAAe;EAAO;EAAQ;EAAS;EAAY;EAAK;CAC/D,UAAU;CAEV,UAAU,EAAE;CACZ,YAAY,CAAC,UAAU,QAAQ;CAC/B,eAAe,EAAE;CAEjB,aAAa;CACb,aAAa;CACb"}

package/dist/services/definitions/beszel.cjs

@@ -1,5 +1,4 @@
-Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 //#region src/services/definitions/beszel.ts
 const beszelDefinition = {
 	id: "beszel",
@@ -41,7 +40,7 @@ const beszelDefinition = {
 	minMemoryMB: 64,
 	gpuRequired: false
 };
-
 //#endregion
 exports.beszelDefinition = beszelDefinition;
+
 //# sourceMappingURL=beszel.cjs.map

package/dist/services/definitions/beszel.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"beszel.cjs","names":[],"sources":["../../../src/services/definitions/beszel.ts"],"sourcesContent":["import type { ServiceDefinition } from \"../../types.js\";\n\nexport const beszelDefinition: ServiceDefinition = {\n\tid: \"beszel\",\n\tname: \"Beszel\",\n\tdescription:\n\t\t\"Lightweight server monitoring dashboard with Docker stats, alerts, and historical data.\",\n\tcategory: \"dev-tools\",\n\ticon: \"📟\",\n\n\timage: \"henrygd/beszel\",\n\timageTag: \"0.1.2\",\n\tports: [\n\t\t{\n\t\t\thost: 8099,\n\t\t\tcontainer: 8090,\n\t\t\tdescription: \"Beszel Web UI\",\n\t\t\texposed: true,\n\t\t},\n\t],\n\tvolumes: [\n\t\t{\n\t\t\tname: \"beszel-data\",\n\t\t\tcontainerPath: \"/beszel_data\",\n\t\t\tdescription: \"Beszel data\",\n\t\t},\n\t],\n\tenvironment: [],\n\tdependsOn: [],\n\trestartPolicy: \"unless-stopped\",\n\tnetworks: [\"openclaw-network\"],\n\n\tskills: [],\n\topenclawEnvVars: [],\n\n\tdocsUrl: \"https://beszel.dev/\",\n\ttags: [\"monitoring\", \"server\", \"dashboard\", \"docker-stats\", \"alerts\"],\n\tmaturity: \"beta\",\n\n\trequires: [],\n\trecommends: [],\n\tconflictsWith: [],\n\n\tminMemoryMB: 64,\n\tgpuRequired: false,\n};\n"],"mappings":";;;AAEA,MAAa,mBAAsC;CAClD,IAAI;CACJ,MAAM;CACN,aACC;CACD,UAAU;CACV,MAAM;CAEN,OAAO;CACP,UAAU;CACV,OAAO,CACN;EACC,MAAM;EACN,WAAW;EACX,aAAa;EACb,SAAS;EACT,CACD;CACD,SAAS,CACR;EACC,MAAM;EACN,eAAe;EACf,aAAa;EACb,CACD;CACD,aAAa,EAAE;CACf,WAAW,EAAE;CACb,eAAe;CACf,UAAU,CAAC,mBAAmB;CAE9B,QAAQ,EAAE;CACV,iBAAiB,EAAE;CAEnB,SAAS;CACT,MAAM;EAAC;EAAc;EAAU;EAAa;EAAgB;EAAS;CACrE,UAAU;CAEV,UAAU,EAAE;CACZ,YAAY,EAAE;CACd,eAAe,EAAE;CAEjB,aAAa;CACb,aAAa;CACb"}
+{"version":3,"file":"beszel.cjs","names":[],"sources":["../../../src/services/definitions/beszel.ts"],"sourcesContent":["import type { ServiceDefinition } from \"../../types.js\";\n\nexport const beszelDefinition: ServiceDefinition = {\n\tid: \"beszel\",\n\tname: \"Beszel\",\n\tdescription:\n\t\t\"Lightweight server monitoring dashboard with Docker stats, alerts, and historical data.\",\n\tcategory: \"dev-tools\",\n\ticon: \"📟\",\n\n\timage: \"henrygd/beszel\",\n\timageTag: \"0.1.2\",\n\tports: [\n\t\t{\n\t\t\thost: 8099,\n\t\t\tcontainer: 8090,\n\t\t\tdescription: \"Beszel Web UI\",\n\t\t\texposed: true,\n\t\t},\n\t],\n\tvolumes: [\n\t\t{\n\t\t\tname: \"beszel-data\",\n\t\t\tcontainerPath: \"/beszel_data\",\n\t\t\tdescription: \"Beszel data\",\n\t\t},\n\t],\n\tenvironment: [],\n\tdependsOn: [],\n\trestartPolicy: \"unless-stopped\",\n\tnetworks: [\"openclaw-network\"],\n\n\tskills: [],\n\topenclawEnvVars: [],\n\n\tdocsUrl: \"https://beszel.dev/\",\n\ttags: [\"monitoring\", \"server\", \"dashboard\", \"docker-stats\", \"alerts\"],\n\tmaturity: \"beta\",\n\n\trequires: [],\n\trecommends: [],\n\tconflictsWith: [],\n\n\tminMemoryMB: 64,\n\tgpuRequired: false,\n};\n"],"mappings":";;AAEA,MAAa,mBAAsC;CAClD,IAAI;CACJ,MAAM;CACN,aACC;CACD,UAAU;CACV,MAAM;CAEN,OAAO;CACP,UAAU;CACV,OAAO,CACN;EACC,MAAM;EACN,WAAW;EACX,aAAa;EACb,SAAS;EACT,CACD;CACD,SAAS,CACR;EACC,MAAM;EACN,eAAe;EACf,aAAa;EACb,CACD;CACD,aAAa,EAAE;CACf,WAAW,EAAE;CACb,eAAe;CACf,UAAU,CAAC,mBAAmB;CAE9B,QAAQ,EAAE;CACV,iBAAiB,EAAE;CAEnB,SAAS;CACT,MAAM;EAAC;EAAc;EAAU;EAAa;EAAgB;EAAS;CACrE,UAAU;CAEV,UAAU,EAAE;CACZ,YAAY,EAAE;CACd,eAAe,EAAE;CAEjB,aAAa;CACb,aAAa;CACb"}

package/dist/services/definitions/beszel.mjs

@@ -39,7 +39,7 @@ const beszelDefinition = {
 	minMemoryMB: 64,
 	gpuRequired: false
 };
-
 //#endregion
 export { beszelDefinition };
+
 //# sourceMappingURL=beszel.mjs.map

package/dist/services/definitions/browserless.cjs

@@ -1,5 +1,4 @@
-Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 //#region src/services/definitions/browserless.ts
 const browserlessDefinition = {
 	id: "browserless",
@@ -81,7 +80,7 @@ const browserlessDefinition = {
 	minMemoryMB: 512,
 	gpuRequired: false
 };
-
 //#endregion
 exports.browserlessDefinition = browserlessDefinition;
+
 //# sourceMappingURL=browserless.cjs.map