7b56927c3c
- Protocol: 10 context categories (apps, system, network, bitcoin, media, files, notes, search, ai-local, wallet) - ContextBroker: real data wiring for all categories with sanitization - Permissions: user toggles for all categories in Settings - Nginx: Claude API, OpenRouter, SearXNG proxy pass-through - Actions: launch-app, search-web, install-app handlers - Chat.vue: loading state + connection indicator - Integration test page: test-aiui.html Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1.5 KiB
1.5 KiB
name, description, disable-model-invocation, allowed-tools, argument-hint
| name | description | disable-model-invocation | allowed-tools | argument-hint |
|---|---|---|---|---|
| add-app | Step-by-step guide for adding a new containerized app to Archipelago | true | Bash, Read, Write, Edit, Glob, Grep | [app-name] |
Add a new containerized app ($ARGUMENTS) to Archipelago.
Steps
1. Create the manifest
Create apps/{app-id}/manifest.yml following the spec in docs/app-manifest-spec.md:
app.id(kebab-case),app.name,app.version(SemVer)container.image(pinned version, NEVERlatest)security: readonly_root, dropped capabilities, non-root UID > 1000health_check,dependencies
2. Add app icon
Place icon at neode-ui/public/assets/img/app-icons/{app-id}.{png|webp|svg}
3. Create status UI (if no native web UI)
For apps without their own web interface, create a UI container in docker/{app-id}-ui/ following the patterns in .cursor/rules/APP-UI-STANDARDS.md.
Reference implementations:
- Bitcoin UI:
docker/bitcoin-ui/ - LND UI:
docker/lnd-ui/
4. Update backend
- Add port mapping in
core/archipelago/src/container/docker_packages.rs - Add env vars in
get_app_config()incore/archipelago/src/api/rpc.rs
5. Deploy and test
- Deploy:
./scripts/deploy-to-target.sh --live - Install from marketplace UI at http://192.168.1.228
- Verify it launches and auto-connects to dependencies
- Check logs:
sudo podman logs {container-name}
6. Security review
- Verify readonly root, dropped caps, non-root user
- Check network isolation
- No hardcoded secrets