jishushell 0.4.30 → 0.5.15

package/apps/anythingllm-container.yaml

@@ -0,0 +1,287 @@
+id: anythingllm-container
+name: AnythingLLM
+version: "1.0.0"
+jishushell:
+  min_version: "0.5.15"
+description: "Mintplex Labs 开源 RAG 引擎：单容器 + 内置 LanceDB 向量库 + 内置 Xenova ONNX embedder（默认零外部依赖）+ OpenAI 兼容 chat API；通过 anythingllm-shim 暴露 kb_search 工具给 OpenClaw agent"
+singleInstance: true
+
+# 拓扑（单容器，无 sidecar）
+#   anythingllm (port 3001) ── host :18097 ── 用户浏览器 / shim API 调
+#                          └─ /app/server/storage (LanceDB + sqlite + 上传文件 + Xenova embedder ONNX 模型)
+#
+# 端到端调用链（agent 模式 / 路 2）：
+#   Feishu 用户 → claw1 (MiniMax) → 决定调 kb_search → mcporter call kb.kb_search
+#     → anythingllm-shim → POST http://host.docker.internal:18097/api/v1/openai/chat/completions
+#     → AnythingLLM workspace 自动 RAG 检索 + 拼 prompt → AnythingLLM 上游 LLM
+#     → 答案 + citation → 回 claw1 → Feishu 用户
+#
+# 关键裁剪 / 配置：
+#   - SERVER_PORT 3001（AnythingLLM 默认 unified port）
+#   - STORAGE_DIR 落到 bind-mounted /app/server/storage，模型/向量/文件全持久化
+#   - DISABLE_TELEMETRY=true 不发数据回 Mintplex
+#   - 默认 embedder 内置（Xenova/all-MiniLM-L6-v2 ONNX）—— 不配 EMBEDDING_ENGINE 走 native
+#   - LLM provider 不预设；用户首启时 setup wizard 或 API 配，或者让 shim 通过 API 预填
+#
+# 端口选择：18097 在 panel 18xxx 段，避开 18088 filebrowser / 18092-18096 weknora 段
+# (虽然 weknora 已卸) / 18099 fastembed-bge (已删) / 18790 openclaw gateway。
+#
+# host_network: docker_bridge 让 anythingllm-shim 容器（实际跑在 claw1 gateway
+# 容器内）经 host.docker.internal:18097 调 AnythingLLM（跟之前 fastembed-bge
+# 同套路；nomad.hcl 已经声明 docker_bridge host_network）。同时用户浏览器
+# 走 LAN IP 10.188.5.25:18097 直接访问 UI（双地址 docker-proxy 自动处理）。
+
+tasks:
+  - name: anythingllm
+    role: service
+    runtime: container
+    image: "mintplexlabs/anythingllm:latest"
+    # AnythingLLM 镜像 Dockerfile 用 `USER anythingllm` 设了非 root user (uid 1000)，
+    # bind-mount /app/server/storage 给 panel-user (uid 1000) 拥有 → 容器侧
+    # uid 1000 (anythingllm user) 能写。"host" 解析到 1000:1000 跟镜像默认对上，
+    # 不需要 cap_add，干净。
+    user: "host"
+    env:
+      # 监听端口（unified backend + frontend）
+      SERVER_PORT: "3001"
+      # 数据持久化目录。镜像默认就是这个，显式声明便于看 spec 时一目了然。
+      STORAGE_DIR: "/app/server/storage"
+      # 关 telemetry，本地用不需要给 Mintplex 上报。
+      DISABLE_TELEMETRY: "true"
+      # 关闭强制 setup wizard 的 onboarding 锁（首启可直接调 API 创建 workspace
+      # 而不必先点完 UI 向导）。
+      DISABLE_SETUP_GUIDED_TOUR: "true"
+      TZ: "Asia/Shanghai"
+    resources:
+      # AnythingLLM 实际跑 ~400-700MB RSS：Node.js backend + Xenova ONNX embedder
+      # + LanceDB (mmap)。给 1024Mi 留 buffer。
+      cpu: "1500m"
+      memory: "1024Mi"
+    ports:
+      - name: http
+        port: 18097
+        container_port: 3001
+        visibility: external
+        # 不指定 host_network → 默认 0.0.0.0 publish：LAN（用户浏览器）和
+        # docker0 (172.17.0.1，shim 经 host.docker.internal 调) 全覆盖。
+        # 之前 docker_bridge 只绑 172.17.0.1，UI 不可达。
+    volumes:
+      # 单一数据卷涵盖 sqlite + LanceDB + workspace docs + embedder ONNX cache。
+      # 跟其它 app 数据目录保持隔离习惯。
+      - source: "~/.jishushell/apps/${app_id}/data"
+        target: "/app/server/storage"
+    health:
+      http:
+        # AnythingLLM 健康检查 endpoint —— /api/ping 在 backend 起来后即 200。
+        # 首启要 Node 启动 ~5s + 初始化 sqlite + 加载 ONNX embedder（首次解压 ~150MB
+        # ONNX 模型到 /app/server/storage/models/Xenova/ ~30s on Pi）。
+        path: /api/ping
+        port: 3001
+      interval: "15s"
+      timeout: "5s"
+      retries: 6
+      start_period: "180s"
+
+provides:
+  # 通用 capability：让其它 agent / shim `requires: knowledge` 时
+  # panel 注入 ANYTHINGLLM_BASE_URL。命名遵循 `<category>-<name>` 约定
+  # （见 scripts/check-app-spec.mjs 的 categoryOf 分类规则）。
+  - capability: "knowledge-anythingllm"
+    task: "anythingllm"
+    port: 18097
+    path: "/api/v1"
+    protocol: "http"
+    visibility: "external"
+    description: "AnythingLLM OpenAI 兼容 chat-with-rag endpoint (/api/v1/openai/chat/completions)"
+
+  # Web UI capability：通过 panel `/apps/anythingllm/*` 反代 或者用户直接访问
+  # LAN IP:18097。AnythingLLM 默认 SPA 不绑 sub-path → 走端口直连（同 weknora 套路）。
+  - capability: "anythingllm-ui"
+    task: "anythingllm"
+    port: 18097
+    path: "/"
+    protocol: "http"
+    visibility: "external"
+    description: "AnythingLLM Web UI"
+
+lifecycle:
+  install:
+    # ~1 GB 压缩镜像，~2GB 解压。给 30 min idle timeout 兜 Pi 慢网（同 weknora-app 同等级）。
+    # idle_timeout_ms 字段最近修过，现在真透传到 docker pull 的 stall 检测。
+    - downloadImage: "mintplexlabs/anythingllm:latest"
+      timeout_ms: 1800000
+      idle_timeout_ms: 1800000
+    - mkdir: "~/.jishushell/apps/${app_id}/data"
+
+  pre_start:
+    # 幂等：start/restart 都过这条路径，目录被误删可自愈。
+    - mkdir: "~/.jishushell/apps/${app_id}/data"
+
+  post_start:
+    # 首启自动布线，幂等可重跑：
+    #   1) 等 /api/ping 200（首启要解压 ~150MB Xenova ONNX，Pi 上 ~60-120s）
+    #   2) 从 panel 拿默认 LLM provider 凭据（GET /api/internal/default-provider）
+    #      panel 端 default_provider 没设 → ready:false → 跳过 LLM 自配，
+    #      留给用户在 UI 里手动选
+    #   3) ready:true 时把 generic-openai provider 灌进去（无视用户上游真协议；
+    #      panel proxy 反正只暴露 OpenAI 兼容口子）
+    #   4) 生成 AnythingLLM dev API key（POST /api/system/generate-api-key，
+    #      单用户模式无 auth），落 credentials.json
+    #   5) 建默认 workspace "default"（已存在则忽略，AnythingLLM 自身的 unique 约束）
+    #
+    # 关键设计：整个脚本必须幂等。每次 start/restart 都重跑，但：
+    #   - update-env 重复 POST = 同样的环境值再写一遍，OK
+    #   - generate-api-key 重复调 = 多生成几把 key（不丢失旧的，但旧的也能用，
+    #     credentials.json 只保留最新一把，shim 端拿这把就行）
+    #   - workspace/new 重复调 = AnythingLLM 返回 409 / 重复，被 || true 吞掉
+    #
+    # 失败处理：任何一步失败都 set -e 兜，post_start 整体失败 → app 状态停留
+    # 在 "installed" 但 currentTaskStatus=error，用户在 UI 上看得到，重启再跑。
+    # 全部 JSON 解析 / 文件写入走 `node -e` —— node 是 panel 装机后**唯一**
+    # 必定存在的运行时（jishushell 本身跑在 node 上）。jq 在 Pi/Debian 默认不装；
+    # python3 在 Alpine slim / 极简 Linux 上不一定有。用 node 才能保证第三方
+    # 用户初装即可用。
+    - run: |
+        set -e
+        BASE_URL="http://${JISHUSHELL_LAN_HOST:-127.0.0.1}:18097"
+        CRED_DIR="$HOME/.jishushell/apps/anythingllm-container"
+        CRED_FILE="$CRED_DIR/credentials.json"
+        mkdir -p "$CRED_DIR"
+
+        # jget <dot.path> — read JSON from stdin, print field at path, empty on miss
+        jget() {
+          node -e 'let s="";process.stdin.on("data",c=>s+=c).on("end",()=>{try{let v=JSON.parse(s);for(const k of process.argv[1].split("."))v=v?.[k];process.stdout.write(v==null?"":String(v));}catch{process.stdout.write("")}})' "$1"
+        }
+
+        echo "[post_start] waiting for AnythingLLM /api/ping ..."
+        for i in $(seq 1 60); do
+          code=$(curl -s -o /dev/null -w '%{http_code}' --max-time 5 "$BASE_URL/api/ping" || echo 000)
+          if [ "$code" = "200" ]; then
+            echo "[post_start] /api/ping is 200 (after ${i}x2s)"
+            break
+          fi
+          sleep 2
+        done
+        # final check; if still down, post_start fails fast
+        curl -sf --max-time 5 "$BASE_URL/api/ping" >/dev/null
+
+        echo "[post_start] fetching panel default provider ..."
+        DP_JSON=$(curl -sf --max-time 8 \
+          -H "X-Jishushell-Internal-Token: $JISHUSHELL_INTERNAL_TOKEN" \
+          "$JISHUSHELL_PANEL_URL/api/internal/default-provider" || echo '{"ready":false,"reason":"panel_unreachable"}')
+        READY=$(printf '%s' "$DP_JSON" | jget ready)
+
+        if [ "$READY" = "true" ]; then
+          MODEL=$(printf '%s' "$DP_JSON" | jget modelId)
+          # W1 直连上游：用户上游 baseUrl + decrypted apiKey 直接给 AnythingLLM。
+          # 牺牲了 panel proxy 的 rate-limit / circuit-break / usage logging —
+          # W2 加 app-scoped proxy key 后切回经 proxy。
+          BASE=$(printf '%s' "$DP_JSON" | jget baseUrl)
+          KEY=$(printf '%s' "$DP_JSON" | jget apiKey)
+          echo "[post_start] configuring LLM provider: $MODEL @ $BASE"
+          # Build update-env body in node so apiKey / baseUrl / modelId can contain
+          # `"`, `\`, newlines, or any other JSON-significant chars without breaking
+          # the shell-interpolated payload (review finding F5).
+          UPDATE_BODY=$(BASE="$BASE" KEY="$KEY" MODEL="$MODEL" node -e '
+            process.stdout.write(JSON.stringify({
+              LLMProvider: "generic-openai",
+              GenericOpenAiBasePath: process.env.BASE,
+              GenericOpenAiKey: process.env.KEY,
+              GenericOpenAiModelPref: process.env.MODEL,
+              GenericOpenAiMaxTokens: "4096",
+            }));
+          ')
+          # Tolerate 401/403 — AnythingLLM ships single-user no-auth by default,
+          # but a user can opt-in to password protection via UI. validatedRequest
+          # then mandates a JWT we don't have, and there's no admin-bootstrap
+          # endpoint we can call here. Log the actionable next step and continue
+          # so the script stays idempotent (review finding F1).
+          UPDATE_HTTP=$(curl -s -o /tmp/anyllm-upd.txt -w '%{http_code}' --max-time 10 \
+            -X POST "$BASE_URL/api/system/update-env" \
+            -H "Content-Type: application/json" \
+            --data "$UPDATE_BODY" || echo 000)
+          case "$UPDATE_HTTP" in
+            2*) echo "[post_start] LLM provider configured" ;;
+            401|403)
+              echo "[post_start] WARN: AnythingLLM /api/system/update-env returned HTTP $UPDATE_HTTP — looks like a password is set; configure LLM in the UI then restart"
+              ;;
+            *)
+              echo "[post_start] WARN: update-env HTTP $UPDATE_HTTP — leaving LLM unconfigured"
+              [ -s /tmp/anyllm-upd.txt ] && head -c 400 /tmp/anyllm-upd.txt
+              ;;
+          esac
+        else
+          REASON=$(printf '%s' "$DP_JSON" | jget reason)
+          echo "[post_start] skip LLM auto-config (reason=${REASON:-unknown}); user will pick in UI"
+        fi
+
+        # 复用已存在的 dev API key（generate-api-key 增量、不可撤销，
+        # 每次重启重生只会堆 key；credentials.json 保稳定）。
+        if [ -f "$CRED_FILE" ]; then
+          KEY_JSON=$(CRED_FILE="$CRED_FILE" node -e 'try{const j=JSON.parse(require("fs").readFileSync(process.env.CRED_FILE,"utf-8"));process.stdout.write(String(j.apiKey||""))}catch{process.stdout.write("")}')
+        else
+          KEY_JSON=""
+        fi
+        if [ -n "$KEY_JSON" ]; then
+          echo "[post_start] reusing existing dev API key from $CRED_FILE"
+        else
+          echo "[post_start] generating new dev API key ..."
+          # Same 401 tolerance as update-env: if the user enabled password
+          # protection, generate-api-key needs a JWT. Surface the next step
+          # and exit cleanly so OpenClaw adapters fall back to "knowledge
+          # unconfigured" instead of leaving post_start in a permanent error.
+          GEN_HTTP=$(curl -s -o /tmp/anyllm-gen.json -w '%{http_code}' --max-time 8 \
+            -X POST "$BASE_URL/api/system/generate-api-key" || echo 000)
+          case "$GEN_HTTP" in
+            2*)
+              KEY_JSON=$(jget apiKey.secret < /tmp/anyllm-gen.json)
+              if [ -z "$KEY_JSON" ]; then
+                echo "[post_start] WARN: generate-api-key returned 2xx but apiKey.secret missing — skipping kb wiring"
+                head -c 400 /tmp/anyllm-gen.json; echo
+              fi
+              ;;
+            401|403)
+              echo "[post_start] WARN: generate-api-key HTTP $GEN_HTTP — AnythingLLM is password-protected. Generate a dev API key in the UI (Settings → API Keys) and write it to $CRED_FILE, then restart. Skipping kb wiring for this start."
+              ;;
+            *)
+              echo "[post_start] WARN: generate-api-key HTTP $GEN_HTTP — skipping kb wiring"
+              [ -s /tmp/anyllm-gen.json ] && head -c 400 /tmp/anyllm-gen.json
+              ;;
+          esac
+        fi
+
+        if [ -z "$KEY_JSON" ]; then
+          echo "[post_start] no API key available; skipping workspace seed + credentials write (post_start still considered success)"
+          echo "[post_start] DONE"
+          exit 0
+        fi
+
+        echo "[post_start] ensuring default workspace ..."
+        WS_HTTP=$(curl -s -o /tmp/anyllm-ws.json -w '%{http_code}' --max-time 10 \
+          -X POST "$BASE_URL/api/v1/workspace/new" \
+          -H "Authorization: Bearer $KEY_JSON" \
+          -H "Content-Type: application/json" \
+          -d '{"name":"default"}')
+        echo "[post_start] workspace POST → HTTP $WS_HTTP"
+        case "$WS_HTTP" in
+          2*) : ;;
+          4*) echo "  (likely already exists; ignoring)" ;;
+          *)  echo "[post_start] FAIL: workspace creation HTTP $WS_HTTP"; cat /tmp/anyllm-ws.json; exit 1 ;;
+        esac
+
+        # 写 credentials.json — 用 node 避免 shell quote 注入风险。
+        APIKEY="$KEY_JSON" BASEURL="$BASE_URL" CREDFILE="$CRED_FILE" node -e '
+          const fs = require("fs");
+          fs.writeFileSync(process.env.CREDFILE, JSON.stringify({
+            apiKey: process.env.APIKEY,
+            workspace: "default",
+            baseUrl: process.env.BASEURL,
+          }, null, 2));
+          fs.chmodSync(process.env.CREDFILE, 0o600);
+        '
+        echo "[post_start] credentials.json written → $CRED_FILE"
+        echo "[post_start] DONE"
+      timeout_ms: 300000
+
+  uninstall:
+    - deleteImage: "mintplexlabs/anythingllm:latest"

package/apps/browserless-chromium-container.yaml

@@ -10,6 +10,11 @@ tasks:
   - name: browserless
     role: service
     runtime: container
+    # rebrowser 镜像在 Chromium 源码层面 patch 了 CDP Runtime.Enable 泄露问题，
+    # 是目前对抗自动化检测最彻底的方案（适用于小红书/淘宝等强风控场景）。
+    # 如遇 ghcr.io/browserless/chromium 仍被风控，可切换为：
+    #   image: "ghcr.io/browserless/chromium:rebrowser"
+    # （rebrowser 分支由 browserless 官方维护，与 latest 保持同步）
     image: "ghcr.io/browserless/chromium:latest"
     env:
       HOST: "0.0.0.0"
@@ -18,13 +23,19 @@ tasks:
       CONCURRENT: "5"
       QUEUED: "10"
       TIMEOUT: "120000"
-      # 防反爬虫配置
-      DEFAULT_USER_AGENT: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
-      FUNCTION_ENABLE_INCOGNITO: "true"
+      # 反风控配置
+      # STEALTH=true: 启用 puppeteer-extra-plugin-stealth，注入多项 evasion 补丁：
+      #   修复 navigator.plugins/languages、WebGL vendor、canvas 指纹、chrome 对象等
+      STEALTH: "true"
+      # UA 不指定版本号，由 Chromium 自行上报实际版本，避免版本不一致被检测
+      DEFAULT_USER_AGENT: ""
+      FUNCTION_ENABLE_INCOGNITO: "false"
       NAVIGATION_TIMEOUT: "30000"
-      # 减少自动化检测特征
-      DEFAULT_LAUNCH_ARGS: "--disable-blink-features=AutomationControlled --disable-infobars --window-size=1920,1080 --start-maximized"
-      DEFAULT_HEADLESS: "new"
+      # --disable-blink-features=AutomationControlled: 隐藏 navigator.webdriver
+      # headed 模式（不加 --headless）：小红书/百度会检测 headless 特征，
+      #   browserless 容器内置 Xvfb，直接使用 headed 模式即可
+      DEFAULT_LAUNCH_ARGS: "--disable-blink-features=AutomationControlled --disable-infobars --window-size=1920,1080 --start-maximized --no-first-run --no-default-browser-check"
+      DEFAULT_HEADLESS: "false"
       # 持久化用户数据（cookies/localStorage/session），登录后会话保持
       DATA_DIR: "/tmp/browserless-data"
     volumes:
@@ -53,6 +64,7 @@ provides:
     protocol: "http"
     description: "Browserless Debug Viewer，可在实例页中嵌入浏览器画面"
   - capability: "browserless-api"
+    task: "browserless"
     port: 3000
     path: "/"
     protocol: "http"

package/apps/filebrowser-container.yaml

@@ -0,0 +1,163 @@
+id: filebrowser-container
+name: File Browser
+version: "1.0.0"
+jishushell:
+  min_version: "0.5.15"
+description: "通过浏览器管理本地文件的 Web UI"
+singleInstance: true
+
+tasks:
+  - name: filebrowser
+    role: service
+    runtime: container
+    image: "filebrowser/filebrowser:latest"
+    # Run as the panel user's uid:gid so files written via Filebrowser are
+    # owned by the same user that owns ~/.jishushell/files and the drive_*
+    # HTTP path. Mirrors openwebui's "user: host". Avoids the PUID/PGID
+    # entrypoint dance from the :s6 variant — uid/gid is set once at job
+    # build time.
+    user: "host"
+    args:
+      # Filebrowser CLI flag precedence is Flags > Env > Config file > DB.
+      # The image's init.sh seeds /config/settings.json from baked-in
+      # defaults (baseURL=""), which would otherwise mask the DB value —
+      # so we re-assert baseURL/root/etc here at runtime. auth.method is
+      # not exposed as a runtime flag and lives in the DB only (seeded
+      # during lifecycle/install below).
+      - "--root=/srv"
+      - "--database=/database/filebrowser.db"
+      - "--address=0.0.0.0"
+      - "--port=8080"
+      - "--baseURL=/apps/filebrowser"
+    resources:
+      cpu: "200m"
+      memory: "128Mi"
+    ports:
+      - name: http
+        # Host port 18088 is in the panel-managed 18xxx range (OpenClaw
+        # gateway uses 18790). Picked outside common defaults so it
+        # never collides with SearXNG (8080), OpenWebUI (3000), or the
+        # panel itself (8090). Container internal port stays at 8080
+        # — Filebrowser's natural default and what `--port=8080` in
+        # args wires it to.
+        port: 18088
+        container_port: 8080
+        visibility: external
+    volumes:
+      # The user's file tree — POSIX source of truth, shared with the panel
+      # drive_* substrate (src/services/files-manager.ts) and the drive-shim
+      # MCP path. Both sides operate on the same inodes.
+      - source: "~/.jishushell/files"
+        target: "/srv"
+      # SQLite settings DB + the auto-seeded admin user record.
+      - source: "~/.jishushell/apps/${app_id}/database"
+        target: "/database"
+      # Filebrowser image's init.sh writes /config/settings.json from defaults
+      # on first run; bind-mounting an app-owned dir lets us persist any
+      # branding tweaks without baking them into the image.
+      - source: "~/.jishushell/apps/${app_id}/config"
+        target: "/config"
+    health:
+      http:
+        # `--baseURL=/apps/filebrowser` is set in the DB by lifecycle/install
+        # below; the SPA serves from that prefix. Root / redirects 302 →
+        # /apps/filebrowser/ which answers HEAD with 200.
+        path: /apps/filebrowser/
+        port: 8080
+      interval: "15s"
+      timeout: "5s"
+      retries: 6
+      start_period: "20s"
+
+provides:
+  # Canonical capability used by the panel's reverse-proxy resolver to mount
+  # Filebrowser at /apps/filebrowser/*.  No `auth:` block — Filebrowser
+  # itself runs in noauth mode and authentication is enforced one layer
+  # higher, in src/server.ts middleware, via the panel JWT cookie.
+  - capability: "filebrowser-ui"
+    task: "filebrowser"
+    port: 18088
+    path: "/"
+    protocol: "http"
+    visibility: "external"
+    description: "Filebrowser Web UI；panel 反代到 /apps/filebrowser/*"
+  # Web-* convention (matches web-openwebui / web-searxng) so adapters that
+  # iterate "web-*" capabilities pick it up for dashboard tiles.
+  - capability: "web-filebrowser"
+    task: "filebrowser"
+    port: 18088
+    path: "/"
+    protocol: "http"
+    visibility: "external"
+    description: "Filebrowser Web UI（web-* convention 别名）"
+  # files-* convention: satisfies `requires: files` on consumer specs (OpenClaw
+  # etc.). The `files` category is UI-only — binding injects FILES_BROWSER_URL
+  # into the agent env so it can surface /apps/filebrowser/ to users in chat.
+  # Does NOT gate any API calls; Filebrowser itself runs noauth and is guarded
+  # by the panel JWT reverse-proxy layer.
+  - capability: "files-filebrowser"
+    task: "filebrowser"
+    port: 18088
+    path: "/apps/filebrowser"
+    protocol: "http"
+    visibility: "external"
+    description: "Filebrowser 文件管理 UI；满足 agent requires:files 绑定"
+
+lifecycle:
+  install:
+    - downloadImage: "filebrowser/filebrowser:latest"
+    - mkdir: "~/.jishushell/apps/${app_id}/database"
+    - mkdir: "~/.jishushell/apps/${app_id}/config"
+    # Seed the SQLite DB with three things Filebrowser needs in noauth mode:
+    #   1. `config init --auth.method=noauth` — creates DB with noauth scheme
+    #   2. `config set --baseURL=/apps/filebrowser` — bakes the sub-path so the
+    #      Vue SPA hash router resolves assets under the panel reverse proxy
+    #   3. `users add admin <random-pw> --perm.admin` — Filebrowser's noauth
+    #      mode still requires a user record; POST /api/login mints a token
+    #      for this user without checking the password. The password is
+    #      throwaway (placeholder for the ≥12-char rule) and never used at
+    #      runtime since the panel JWT layer guards the reverse proxy.
+    # Idempotent: skipped when DB already exists. Mirrors searxng's heredoc
+    # settings.yml generation pattern.
+    - run: |
+        DB_DIR="$HOME/.jishushell/apps/${app_id}/database"
+        CONFIG_DIR="$HOME/.jishushell/apps/${app_id}/config"
+        DB_FILE="$DB_DIR/filebrowser.db"
+        if [ ! -f "$DB_FILE" ]; then
+          docker run --rm \
+            --user "$(id -u):$(id -g)" \
+            -v "$DB_DIR:/database" \
+            -v "$CONFIG_DIR:/config" \
+            filebrowser/filebrowser:latest \
+            config init \
+              --database=/database/filebrowser.db \
+              --auth.method=noauth >/dev/null
+          docker run --rm \
+            --user "$(id -u):$(id -g)" \
+            -v "$DB_DIR:/database" \
+            -v "$CONFIG_DIR:/config" \
+            filebrowser/filebrowser:latest \
+            config set \
+              --database=/database/filebrowser.db \
+              --auth.method=noauth \
+              --baseURL=/apps/filebrowser \
+              --address=0.0.0.0 \
+              --port=8080 >/dev/null
+          # Password is throwaway: noauth mode never checks it, but Filebrowser
+          # enforces a 12-char minimum at create time. Generate a 32-char random
+          # to satisfy the rule without leaving a guessable trail.
+          PLACEHOLDER_PW="$(head -c 48 /dev/urandom | base64 | tr -dc 'A-Za-z0-9' | head -c 32)"
+          docker run --rm \
+            --user "$(id -u):$(id -g)" \
+            -v "$DB_DIR:/database" \
+            -v "$CONFIG_DIR:/config" \
+            filebrowser/filebrowser:latest \
+            users add admin "$PLACEHOLDER_PW" \
+              --database=/database/filebrowser.db \
+              --perm.admin >/dev/null
+        fi
+  pre_start:
+    - mkdir: "~/.jishushell/apps/${app_id}/database"
+    - mkdir: "~/.jishushell/apps/${app_id}/config"
+  uninstall:
+    - deleteImage: "filebrowser/filebrowser:latest"

package/apps/openclaw-binary.yaml

@@ -64,6 +64,14 @@ requires:
     inject_as: "MCP_SERVERS"
     required: false
     cardinality: "many"
+  - capability: "files"
+    inject_as: "FILES_BROWSER_URL"
+    required: false
+    cardinality: "one"
+  - capability: "knowledge"
+    inject_as: "KNOWLEDGE_BASE_URL"
+    required: false
+    cardinality: "one"
 
 lifecycle:
   install:

package/apps/openclaw-container.yaml

@@ -69,4 +69,12 @@ requires:
   - capability: "mcp"
     inject_as: "MCP_SERVERS"
     required: false
-    cardinality: "many"
+    cardinality: "many"
+  - capability: "files"
+    inject_as: "FILES_BROWSER_URL"
+    required: false
+    cardinality: "one"
+  - capability: "knowledge"
+    inject_as: "KNOWLEDGE_BASE_URL"
+    required: false
+    cardinality: "one"

package/apps/openclaw-with-searxng-container.yaml

@@ -87,6 +87,10 @@ requires:
   - capability: "search-searxng"
     inject_as: "SEARCH_API_BASE_URL"
     required: false
+  - capability: "files"
+    inject_as: "FILES_BROWSER_URL"
+    required: false
+    cardinality: "one"
 
 lifecycle:
   install:

package/apps/searxng-container.yaml

@@ -20,7 +20,8 @@ tasks:
       memory: "512Mi"
     ports:
       - name: http
-        port: 8080
+        port: 18080
+        container_port: 8080
         visibility: external
     volumes:
       - source: "~/.jishushell/apps/${app_id}/settings/settings.yml"
@@ -41,17 +42,17 @@ tasks:
 provides:
   - capability: "web-ui"
     task: "searxng"
-    port: 8080
+    port: 18080
     protocol: "http"
     description: "SearXNG Web UI（legacy capability，请改用 web-searxng）"
   - capability: "web-searxng"
     task: "searxng"
-    port: 8080
+    port: 18080
     protocol: "http"
     description: "SearXNG Web UI"
   - capability: "search-searxng"
     task: "searxng"
-    port: 8080
+    port: 18080
     path: "/search"
     protocol: "http"
     description: "SearXNG 搜索 API，支持 JSON 格式 (/search?q=xxx&format=json)"