jishushell 0.6.5 → 0.6.18

package/apps/anythingllm-container.yaml

@@ -5,6 +5,8 @@ jishushell:
   min_version: "0.5.15"
 description: "Mintplex Labs 开源 RAG 引擎：单容器 + 内置 LanceDB 向量库 + 内置 Xenova ONNX embedder（默认零外部依赖）+ OpenAI 兼容 chat API；通过 anythingllm-shim 暴露 kb_search 工具给 OpenClaw agent"
 singleInstance: true
+integrations:
+  - kind: anythingllm
 
 # 拓扑（单容器，无 sidecar）
 #   anythingllm (port 3001) ── host :18097 ── 用户浏览器 / shim API 调
@@ -21,7 +23,11 @@ singleInstance: true
 #   - STORAGE_DIR 落到 bind-mounted /app/server/storage，模型/向量/文件全持久化
 #   - DISABLE_TELEMETRY=true 不发数据回 Mintplex
 #   - 默认 embedder 内置（Xenova/all-MiniLM-L6-v2 ONNX）—— 不配 EMBEDDING_ENGINE 走 native
-#   - LLM provider 不预设；用户首启时 setup wizard 或 API 配，或者让 shim 通过 API 预填
+#   - AnythingLLM 的启动后 bootstrap 由 `anythingllm` integration 负责：
+#     等 /api/ping、写 Generic OpenAI provider、生成 dev API key、写
+#     provider-credentials、建 default workspace。
+#   - 该 bootstrap 现在写的是 Core proxy URL + instance-scoped proxy token，
+#     不再把真实 upstream key 写进 AnythingLLM 私有配置。
 #
 # 端口选择：18097 在 panel 18xxx 段，避开 18088 filebrowser / 18092-18096 weknora 段
 # (虽然 weknora 已卸) / 18099 fastembed-bge (已删) / 18790 openclaw gateway。
@@ -66,7 +72,7 @@ tasks:
     volumes:
       # 单一数据卷涵盖 sqlite + LanceDB + workspace docs + embedder ONNX cache。
       # 跟其它 app 数据目录保持隔离习惯。
-      - source: "~/.jishushell/apps/${app_id}/data"
+      - source: "~/.jishushell/apps/${instance.id}/data"
         target: "/app/server/storage"
     health:
       http:
@@ -85,8 +91,13 @@ provides:
   # panel 注入 ANYTHINGLLM_BASE_URL。命名遵循 `<category>-<name>` 约定
   # （见 scripts/check-app-spec.mjs 的 categoryOf 分类规则）。
   - capability: "knowledge-anythingllm"
+    id: "anythingllm"
+    kind: "knowledge"
+    interface: "kb-search"
     task: "anythingllm"
     port: 18097
+    endpoint:
+      portName: "http"
     path: "/api/v1"
     protocol: "http"
     visibility: "external"
@@ -109,177 +120,11 @@ lifecycle:
     - downloadImage: "mintplexlabs/anythingllm:latest"
       timeout_ms: 1800000
       idle_timeout_ms: 1800000
-    - mkdir: "~/.jishushell/apps/${app_id}/data"
+    - mkdir: "~/.jishushell/apps/${instance.id}/data"
 
   pre_start:
     # 幂等：start/restart 都过这条路径，目录被误删可自愈。
-    - mkdir: "~/.jishushell/apps/${app_id}/data"
-
-  post_start:
-    # 首启自动布线，幂等可重跑：
-    #   1) 等 /api/ping 200（首启要解压 ~150MB Xenova ONNX，Pi 上 ~60-120s）
-    #   2) 从 core 拿默认 LLM provider 凭据（GET /api/internal/default-provider）
-    #      core 端 default_provider 没设 → ready:false → 跳过 LLM 自配，
-    #      留给用户在 UI 里手动选
-    #   3) ready:true 时把 generic-openai provider 灌进去（无视用户上游真协议；
-    #      core proxy 反正只暴露 OpenAI 兼容口子）
-    #   4) 生成 AnythingLLM dev API key（POST /api/system/generate-api-key，
-    #      单用户模式无 auth），落 credentials.json
-    #   5) 建默认 workspace "default"（已存在则忽略，AnythingLLM 自身的 unique 约束）
-    #
-    # 关键设计：整个脚本必须幂等。每次 start/restart 都重跑，但：
-    #   - update-env 重复 POST = 同样的环境值再写一遍，OK
-    #   - generate-api-key 重复调 = 多生成几把 key（不丢失旧的，但旧的也能用，
-    #     credentials.json 只保留最新一把，shim 端拿这把就行）
-    #   - workspace/new 重复调 = AnythingLLM 返回 409 / 重复，被 || true 吞掉
-    #
-    # 失败处理：任何一步失败都 set -e 兜，post_start 整体失败 → app 状态停留
-    # 在 "installed" 但 currentTaskStatus=error，用户在 UI 上看得到，重启再跑。
-    # 全部 JSON 解析 / 文件写入走 `node -e` —— node 是 panel 装机后**唯一**
-    # 必定存在的运行时（jishushell 本身跑在 node 上）。jq 在 Pi/Debian 默认不装；
-    # python3 在 Alpine slim / 极简 Linux 上不一定有。用 node 才能保证第三方
-    # 用户初装即可用。
-    - run: |
-        set -e
-        BASE_URL="http://${JISHUSHELL_LAN_HOST:-127.0.0.1}:18097"
-        CRED_DIR="$HOME/.jishushell/apps/anythingllm-container"
-        CRED_FILE="$CRED_DIR/credentials.json"
-        mkdir -p "$CRED_DIR"
-
-        # jget <dot.path> — read JSON from stdin, print field at path, empty on miss
-        jget() {
-          node -e 'let s="";process.stdin.on("data",c=>s+=c).on("end",()=>{try{let v=JSON.parse(s);for(const k of process.argv[1].split("."))v=v?.[k];process.stdout.write(v==null?"":String(v));}catch{process.stdout.write("")}})' "$1"
-        }
-
-        echo "[post_start] waiting for AnythingLLM /api/ping ..."
-        for i in $(seq 1 60); do
-          code=$(curl -s -o /dev/null -w '%{http_code}' --max-time 5 "$BASE_URL/api/ping" || echo 000)
-          if [ "$code" = "200" ]; then
-            echo "[post_start] /api/ping is 200 (after ${i}x2s)"
-            break
-          fi
-          sleep 2
-        done
-        # final check; if still down, post_start fails fast
-        curl -sf --max-time 5 "$BASE_URL/api/ping" >/dev/null
-
-        echo "[post_start] fetching core default provider ..."
-        DP_JSON=$(curl -sf --max-time 8 \
-          -H "X-Jishushell-Internal-Token: $JISHUSHELL_INTERNAL_TOKEN" \
-          "$JISHUSHELL_CORE_URL/api/internal/default-provider" || echo '{"ready":false,"reason":"core_unreachable"}')
-        READY=$(printf '%s' "$DP_JSON" | jget ready)
-
-        if [ "$READY" = "true" ]; then
-          MODEL=$(printf '%s' "$DP_JSON" | jget modelId)
-          # W1 直连上游：用户上游 baseUrl + decrypted apiKey 直接给 AnythingLLM。
-          # 牺牲了 core proxy 的 rate-limit / circuit-break / usage logging —
-          # W2 加 app-scoped proxy key 后切回经 proxy。
-          BASE=$(printf '%s' "$DP_JSON" | jget baseUrl)
-          KEY=$(printf '%s' "$DP_JSON" | jget apiKey)
-          echo "[post_start] configuring LLM provider: $MODEL @ $BASE"
-          # Build update-env body in node so apiKey / baseUrl / modelId can contain
-          # `"`, `\`, newlines, or any other JSON-significant chars without breaking
-          # the shell-interpolated payload (review finding F5).
-          UPDATE_BODY=$(BASE="$BASE" KEY="$KEY" MODEL="$MODEL" node -e '
-            process.stdout.write(JSON.stringify({
-              LLMProvider: "generic-openai",
-              GenericOpenAiBasePath: process.env.BASE,
-              GenericOpenAiKey: process.env.KEY,
-              GenericOpenAiModelPref: process.env.MODEL,
-              GenericOpenAiMaxTokens: "4096",
-            }));
-          ')
-          # Tolerate 401/403 — AnythingLLM ships single-user no-auth by default,
-          # but a user can opt-in to password protection via UI. validatedRequest
-          # then mandates a JWT we don't have, and there's no admin-bootstrap
-          # endpoint we can call here. Log the actionable next step and continue
-          # so the script stays idempotent (review finding F1).
-          UPDATE_HTTP=$(curl -s -o /tmp/anyllm-upd.txt -w '%{http_code}' --max-time 10 \
-            -X POST "$BASE_URL/api/system/update-env" \
-            -H "Content-Type: application/json" \
-            --data "$UPDATE_BODY" || echo 000)
-          case "$UPDATE_HTTP" in
-            2*) echo "[post_start] LLM provider configured" ;;
-            401|403)
-              echo "[post_start] WARN: AnythingLLM /api/system/update-env returned HTTP $UPDATE_HTTP — looks like a password is set; configure LLM in the UI then restart"
-              ;;
-            *)
-              echo "[post_start] WARN: update-env HTTP $UPDATE_HTTP — leaving LLM unconfigured"
-              [ -s /tmp/anyllm-upd.txt ] && head -c 400 /tmp/anyllm-upd.txt
-              ;;
-          esac
-        else
-          REASON=$(printf '%s' "$DP_JSON" | jget reason)
-          echo "[post_start] skip LLM auto-config (reason=${REASON:-unknown}); user will pick in UI"
-        fi
-
-        # 复用已存在的 dev API key（generate-api-key 增量、不可撤销，
-        # 每次重启重生只会堆 key；credentials.json 保稳定）。
-        if [ -f "$CRED_FILE" ]; then
-          KEY_JSON=$(CRED_FILE="$CRED_FILE" node -e 'try{const j=JSON.parse(require("fs").readFileSync(process.env.CRED_FILE,"utf-8"));process.stdout.write(String(j.apiKey||""))}catch{process.stdout.write("")}')
-        else
-          KEY_JSON=""
-        fi
-        if [ -n "$KEY_JSON" ]; then
-          echo "[post_start] reusing existing dev API key from $CRED_FILE"
-        else
-          echo "[post_start] generating new dev API key ..."
-          # Same 401 tolerance as update-env: if the user enabled password
-          # protection, generate-api-key needs a JWT. Surface the next step
-          # and exit cleanly so OpenClaw adapters fall back to "knowledge
-          # unconfigured" instead of leaving post_start in a permanent error.
-          GEN_HTTP=$(curl -s -o /tmp/anyllm-gen.json -w '%{http_code}' --max-time 8 \
-            -X POST "$BASE_URL/api/system/generate-api-key" || echo 000)
-          case "$GEN_HTTP" in
-            2*)
-              KEY_JSON=$(jget apiKey.secret < /tmp/anyllm-gen.json)
-              if [ -z "$KEY_JSON" ]; then
-                echo "[post_start] WARN: generate-api-key returned 2xx but apiKey.secret missing — skipping kb wiring"
-                head -c 400 /tmp/anyllm-gen.json; echo
-              fi
-              ;;
-            401|403)
-              echo "[post_start] WARN: generate-api-key HTTP $GEN_HTTP — AnythingLLM is password-protected. Generate a dev API key in the UI (Settings → API Keys) and write it to $CRED_FILE, then restart. Skipping kb wiring for this start."
-              ;;
-            *)
-              echo "[post_start] WARN: generate-api-key HTTP $GEN_HTTP — skipping kb wiring"
-              [ -s /tmp/anyllm-gen.json ] && head -c 400 /tmp/anyllm-gen.json
-              ;;
-          esac
-        fi
-
-        if [ -z "$KEY_JSON" ]; then
-          echo "[post_start] no API key available; skipping workspace seed + credentials write (post_start still considered success)"
-          echo "[post_start] DONE"
-          exit 0
-        fi
-
-        echo "[post_start] ensuring default workspace ..."
-        WS_HTTP=$(curl -s -o /tmp/anyllm-ws.json -w '%{http_code}' --max-time 10 \
-          -X POST "$BASE_URL/api/v1/workspace/new" \
-          -H "Authorization: Bearer $KEY_JSON" \
-          -H "Content-Type: application/json" \
-          -d '{"name":"default"}')
-        echo "[post_start] workspace POST → HTTP $WS_HTTP"
-        case "$WS_HTTP" in
-          2*) : ;;
-          4*) echo "  (likely already exists; ignoring)" ;;
-          *)  echo "[post_start] FAIL: workspace creation HTTP $WS_HTTP"; cat /tmp/anyllm-ws.json; exit 1 ;;
-        esac
-
-        # 写 credentials.json — 用 node 避免 shell quote 注入风险。
-        APIKEY="$KEY_JSON" BASEURL="$BASE_URL" CREDFILE="$CRED_FILE" node -e '
-          const fs = require("fs");
-          fs.writeFileSync(process.env.CREDFILE, JSON.stringify({
-            apiKey: process.env.APIKEY,
-            workspace: "default",
-            baseUrl: process.env.BASEURL,
-          }, null, 2));
-          fs.chmodSync(process.env.CREDFILE, 0o600);
-        '
-        echo "[post_start] credentials.json written → $CRED_FILE"
-        echo "[post_start] DONE"
-      timeout_ms: 300000
+    - mkdir: "~/.jishushell/apps/${instance.id}/data"
 
   uninstall:
     - deleteImage: "mintplexlabs/anythingllm:latest"

package/apps/browserless-chromium-container.yaml

@@ -10,11 +10,8 @@ tasks:
   - name: browserless
     role: service
     runtime: container
-    # rebrowser 镜像在 Chromium 源码层面 patch 了 CDP Runtime.Enable 泄露问题，
-    # 是目前对抗自动化检测最彻底的方案（适用于小红书/淘宝等强风控场景）。
-    # 如遇 ghcr.io/browserless/chromium 仍被风控，可切换为：
-    #   image: "ghcr.io/browserless/chromium:rebrowser"
-    # （rebrowser 分支由 browserless 官方维护，与 latest 保持同步）
+    # 使用 Browserless 官方公开镜像标签。ghcr.io/browserless/chromium:rebrowser
+    # 当前不存在，安装时会被 GHCR 永久拒绝为 manifest unknown。
     image: "ghcr.io/browserless/chromium:latest"
     env:
       HOST: "0.0.0.0"
@@ -22,7 +19,7 @@ tasks:
       TOKEN: ""
       CONCURRENT: "2"
       QUEUED: "10"
-      TIMEOUT: "120000"
+      TIMEOUT: "600000"
       # 反风控配置
       # STEALTH=true: 启用 puppeteer-extra-plugin-stealth，注入多项 evasion 补丁：
       #   修复 navigator.plugins/languages、WebGL vendor、canvas 指纹、chrome 对象等
@@ -39,7 +36,7 @@ tasks:
       # 持久化用户数据（cookies/localStorage/session），登录后会话保持
       DATA_DIR: "/tmp/browserless-data"
     volumes:
-      - source: "~/.jishushell/apps/${app_id}/data"
+      - source: "~/.jishushell/apps/${instance.id}/data"
         target: "/tmp/browserless-data"
     resources:
       cpu: "1000m"
@@ -59,9 +56,12 @@ tasks:
 
 provides:
   - capability: "browserless-debugger"
+    kind: "ui"
+    interface: "web-ui"
     port: 3000
     path: "/debugger/"
     protocol: "http"
+    embedded: "proxy"
     description: "Browserless Debug Viewer，可在实例页中嵌入浏览器画面"
   - capability: "browserless-api"
     task: "browserless"
@@ -75,16 +75,21 @@ provides:
     protocol: "http"
     description: "Browserless API 文档页"
   - capability: "browser-ws"
+    id: "browserless"
+    kind: "browser"
+    interface: "cdp-ws"
     task: "browserless"
     port: 3000
+    endpoint:
+      portName: "http"
     protocol: "ws"
     description: "Browserless CDP/WebSocket 连接端点（ws://host:3000），用于 browser 类 require 自动绑定（命名遵循 <category>-<vendor> 约定）"
 
 lifecycle:
   install:
     - downloadImage: "ghcr.io/browserless/chromium:latest"
-    - mkdir: "~/.jishushell/apps/${app_id}/data"
+    - mkdir: "~/.jishushell/apps/${instance.id}/data"
   pre_start:
-    - mkdir: "~/.jishushell/apps/${app_id}/data"
+    - mkdir: "~/.jishushell/apps/${instance.id}/data"
   uninstall:
-    - deleteImage: "ghcr.io/browserless/chromium:latest"
+    - deleteImage: "ghcr.io/browserless/chromium:latest"

package/apps/filebrowser-container.yaml

@@ -58,12 +58,12 @@ tasks:
       - source: "~/.jishushell/files"
         target: "/srv"
       # SQLite settings DB + the auto-seeded admin user record.
-      - source: "~/.jishushell/apps/${app_id}/database"
+      - source: "~/.jishushell/apps/${instance.id}/database"
         target: "/database"
       # Filebrowser image's init.sh writes /config/settings.json from defaults
       # on first run; bind-mounting an app-owned dir lets us persist any
       # branding tweaks without baking them into the image.
-      - source: "~/.jishushell/apps/${app_id}/config"
+      - source: "~/.jishushell/apps/${instance.id}/config"
         target: "/config"
     health:
       http:
@@ -90,7 +90,7 @@ provides:
     protocol: "http"
     visibility: "external"
     description: "Filebrowser Web UI；panel 反代到 /apps/filebrowser/*"
-  # Web-* convention (matches web-openwebui / web-searxng) so adapters that
+  # Web-* convention (matches web-openwebui / web-searxng) so integration logic that
   # iterate "web-*" capabilities pick it up for dashboard tiles.
   - capability: "web-filebrowser"
     task: "filebrowser"
@@ -105,8 +105,13 @@ provides:
   # Does NOT gate any API calls; Filebrowser itself runs noauth and is guarded
   # by the panel JWT reverse-proxy layer.
   - capability: "files-filebrowser"
+    id: "filebrowser"
+    kind: "files"
+    interface: "web-file-manager"
     task: "filebrowser"
     port: 18088
+    endpoint:
+      portName: "http"
     path: "/apps/filebrowser"
     protocol: "http"
     visibility: "external"
@@ -115,8 +120,8 @@ provides:
 lifecycle:
   install:
     - downloadImage: "filebrowser/filebrowser:latest"
-    - mkdir: "~/.jishushell/apps/${app_id}/database"
-    - mkdir: "~/.jishushell/apps/${app_id}/config"
+    - mkdir: "~/.jishushell/apps/${instance.id}/database"
+    - mkdir: "~/.jishushell/apps/${instance.id}/config"
     # Seed the SQLite DB with three things Filebrowser needs in noauth mode:
     #   1. `config init --auth.method=noauth` — creates DB with noauth scheme
     #   2. `config set --baseURL=/apps/filebrowser` — bakes the sub-path so the
@@ -129,8 +134,8 @@ lifecycle:
     # Idempotent: skipped when DB already exists. Mirrors searxng's heredoc
     # settings.yml generation pattern.
     - run: |
-        DB_DIR="$HOME/.jishushell/apps/${app_id}/database"
-        CONFIG_DIR="$HOME/.jishushell/apps/${app_id}/config"
+        DB_DIR="$HOME/.jishushell/apps/${instance.id}/database"
+        CONFIG_DIR="$HOME/.jishushell/apps/${instance.id}/config"
         DB_FILE="$DB_DIR/filebrowser.db"
         if [ ! -f "$DB_FILE" ]; then
           docker run --rm \
@@ -166,7 +171,7 @@ lifecycle:
               --perm.admin >/dev/null
         fi
   pre_start:
-    - mkdir: "~/.jishushell/apps/${app_id}/database"
-    - mkdir: "~/.jishushell/apps/${app_id}/config"
+    - mkdir: "~/.jishushell/apps/${instance.id}/database"
+    - mkdir: "~/.jishushell/apps/${instance.id}/config"
   uninstall:
     - deleteImage: "filebrowser/filebrowser:latest"

package/apps/hermes-container.yaml

@@ -3,7 +3,8 @@ name: Hermes Agent
 version: "1.0.0"
 jishushell:
   min_version: "0.4.30"
-agentType: hermes
+integrations:
+  - kind: hermes
 description: "Hermes Agent 容器运行时，使用 apps 目录作为统一安装根"
 singleInstance: false
 
@@ -39,10 +40,18 @@ provides:
     task: "gateway"
     port: 8642
     protocol: "http"
+    health:
+      kind: "http"
+      path: "/health"
     description: "Hermes Agent Web UI"
   - capability: "llm-agent"
+    id: "hermes"
+    kind: "llm"
+    interface: "openai-compatible"
     task: "gateway"
     port: 8642
+    endpoint:
+      portName: "gateway"
     protocol: "http"
     path: "/v1"
     auth:
@@ -52,18 +61,30 @@ provides:
 
 requires:
   - capability: "llm"
+    slot: "llm"
+    kind: "llm"
+    interface: "openai-compatible"
     inject_as: "LLM_ENDPOINT"
     required: false
     cardinality: "one"
   - capability: "search"
+    slot: "search"
+    kind: "search"
+    interface: "searxng-json"
     inject_as: "SEARCH_API_BASE_URL"
     required: false
     cardinality: "one"
   - capability: "browser"
+    slot: "browser"
+    kind: "browser"
+    interface: "cdp-ws"
     inject_as: "BROWSER_CDP_URL"
     required: false
     cardinality: "one"
   - capability: "mcp"
+    slot: "mcp"
+    kind: "mcp"
+    interface: "mcp-http"
     inject_as: "MCP_SERVERS"
     required: false
-    cardinality: "many"
+    cardinality: "many"