{ "manifest_version": "1.0.0", "template": { "id": "45bcd422-9360-4bf2-8d60-3dd42a03ed81", "slug": "qwenpaw-v2-personal-ai-assistant", "name": "QwenPaw v2 Personal AI Assistant", "description": "Always-on personal AI assistant with chat apps, memory and skills.", "url": "https://railway.com/deploy/qwenpaw-v2-personal-ai-assistant", "upstream": { "repo_url": "https://github.com/baranberkay96/qwenpaw-railway" } }, "services": [ { "name": "QwenPaw", "source": { "repo": "https://github.com/baranberkay96/qwenpaw-railway" }, "needs_volume": true, "volume_mount_path": "/data", "http": true } ], "required_inputs": [ { "key": "TZ", "service": "QwenPaw", "description": "IANA timezone stored as the user timezone on the first boot (e.g. Europe/Istanbul); used for cron jobs and heartbeats. Change it later in the Console.", "secret": false, "strategy": "default", "default": "UTC" }, { "key": "PORT", "service": "QwenPaw", "description": "Port of the QwenPaw console and API. Railway's healthcheck and the public domain use it; keep 8088 unless you also change the domain's target port.", "secret": false, "strategy": "default", "default": "8088" }, { "key": "QWENPAW_AUTH_PASSWORD", "service": "QwenPaw", "description": "Console login password (min. 12 characters), generated at deploy. Change it here to reset the password on the next restart; a password changed in the Console is kept until this variable changes.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "QWENPAW_AUTH_USERNAME", "service": "QwenPaw", "description": "Console login name, generated at deploy (random on purpose: five wrong passwords lock a username for 15 minutes). Changing it later renames the account on the next restart.", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "QWENPAW_AGENT_LANGUAGE", "service": "QwenPaw", "description": "Language of the default agent and its persona files, chosen on the first boot only: en, zh, ru or id. Change it later per agent in the Console.", "secret": false, "strategy": "default", "default": "en" }, { "key": "QWENPAW_TRUSTED_PROXIES", "service": "QwenPaw", "description": "Proxy networks whose X-Forwarded-For QwenPaw trusts, so login lockouts count real client IPs instead of Railway's edge. Written to security.trusted_proxies on every start; empty = trust none.", "secret": false, "strategy": "default", "default": "10.0.0.0/8,100.64.0.0/10,172.16.0.0/12,192.168.0.0/16,fd00::/8" }, { "key": "QWENPAW_DISABLED_CHANNELS", "service": "QwenPaw", "description": "Channels hidden from the Console. iMessage needs macOS and SIP needs inbound UDP, neither of which Railway offers.", "secret": false, "strategy": "default", "default": "imessage,sip" }, { "key": "QWENPAW_TELEMETRY_DISABLED", "service": "QwenPaw", "description": "true = no install or daily usage pings to the QwenPaw team (nobody sees upstream's consent prompt on Railway). Set false to share anonymous environment stats.", "secret": false, "strategy": "default", "default": "true" }, { "key": "QWENPAW_TOOL_GUARD_ENABLED", "service": "QwenPaw", "description": "true forces QwenPaw's Tool Guard on (risky tool calls wait for your approval and catastrophic commands are blocked). Empty = the Console toggle decides.", "secret": false, "strategy": "default", "default": "true" }, { "key": "RAILWAY_DEPLOYMENT_DRAINING_SECONDS", "service": "QwenPaw", "description": "Seconds the old container gets to finish running replies and flush memory before a redeploy stops it.", "secret": false, "strategy": "default", "default": "30" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "qwenpaw-v2-personal-ai-assistant" } }, "cli": "railway deploy --template qwenpaw-v2-personal-ai-assistant", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "45bcd422-9360-4bf2-8d60-3dd42a03ed81", "serializedConfig": { "buckets": {}, "services": { "f2b0b48c-066a-50ff-b0c2-1ad8daf4b9cf": { "icon": "https://cdn.jsdelivr.net/gh/agentscope-ai/QwenPaw@v2.2.2/website/public/qwenpaw-symbol.svg", "name": "QwenPaw", "build": { "builder": "DOCKERFILE" }, "deploy": { "healthcheckPath": "/api/version", "restartPolicyType": "ALWAYS", "healthcheckTimeout": 600 }, "source": { "repo": "baranberkay96/qwenpaw-railway", "branch": "main", "rootDirectory": "/services/qwenpaw" }, "variables": { "TZ": { "isOptional": true, "description": "IANA timezone stored as the user timezone on the first boot (e.g. Europe/Istanbul); used for cron jobs and heartbeats. Change it later in the Console.", "defaultValue": "UTC" }, "PORT": { "isOptional": true, "description": "Port of the QwenPaw console and API. Railway's healthcheck and the public domain use it; keep 8088 unless you also change the domain's target port.", "defaultValue": "8088" }, "QQ_APP_ID": { "isOptional": true, "description": "Optional. QQ bot AppID; with QQ_CLIENT_SECRET enables the QQ channel.", "defaultValue": "" }, "WECOM_BOT_ID": { "isOptional": true, "description": "Optional. WeCom (WeChat Work) AI bot ID; with WECOM_SECRET enables the WeCom channel.", "defaultValue": "" }, "WECOM_SECRET": { "isOptional": true, "description": "Optional. WeCom AI bot secret.", "defaultValue": "" }, "FEISHU_APP_ID": { "isOptional": true, "description": "Optional. Feishu/Lark app ID (cli_...); with FEISHU_APP_SECRET enables the Feishu channel (WebSocket long connection).", "defaultValue": "" }, "FEISHU_DOMAIN": { "isOptional": true, "description": "Optional. feishu (China, default) or lark (international).", "defaultValue": "" }, "SLACK_APP_TOKEN": { "isOptional": true, "description": "Optional. Slack app-level token (xapp-...) with connections:write, for Socket Mode.", "defaultValue": "" }, "SLACK_BOT_TOKEN": { "isOptional": true, "description": "Optional. Slack bot token (xoxb-...). Needs SLACK_APP_TOKEN too (Socket Mode, no public webhook).", "defaultValue": "" }, "QQ_CLIENT_SECRET": { "isOptional": true, "description": "Optional. QQ bot AppSecret.", "defaultValue": "" }, "DISCORD_BOT_TOKEN": { "isOptional": true, "description": "Optional. Discord bot token (Developer Portal > Bot, enable the Message Content intent); enables the Discord channel.", "defaultValue": "" }, "FEISHU_APP_SECRET": { "isOptional": true, "description": "Optional. Feishu/Lark app secret.", "defaultValue": "" }, "LLAMA_ARG_THREADS": { "isOptional": true, "description": "Optional. CPU threads for in-container llama.cpp models (QwenPaw Local). Empty = derived from the container's CPU quota, capped at 8.", "defaultValue": "" }, "DINGTALK_CLIENT_ID": { "isOptional": true, "description": "Optional. DingTalk app Client ID (AppKey); with DINGTALK_CLIENT_SECRET enables the DingTalk channel (Stream mode).", "defaultValue": "" }, "TELEGRAM_BOT_TOKEN": { "isOptional": true, "description": "Optional. Telegram bot token from @BotFather; enables the Telegram channel. Unknown senders must be approved in the Console first.", "defaultValue": "" }, "QWENPAW_AUTH_PASSWORD": { "isOptional": true, "description": "Console login password (min. 12 characters), generated at deploy. Change it here to reset the password on the next restart; a password changed in the Console is kept until this variable changes.", "defaultValue": "{{QWENPAW_AUTH_PASSWORD}}" }, "QWENPAW_AUTH_USERNAME": { "isOptional": true, "description": "Console login name, generated at deploy (random on purpose: five wrong passwords lock a username for 15 minutes). Changing it later renames the account on the next restart.", "defaultValue": "{{QWENPAW_AUTH_USERNAME}}" }, "DINGTALK_CLIENT_SECRET": { "isOptional": true, "description": "Optional. DingTalk app Client Secret (AppSecret).", "defaultValue": "" }, "QWENPAW_AGENT_LANGUAGE": { "isOptional": true, "description": "Language of the default agent and its persona files, chosen on the first boot only: en, zh, ru or id. Change it later per agent in the Console.", "defaultValue": "en" }, "QWENPAW_TRUSTED_PROXIES": { "isOptional": true, "description": "Proxy networks whose X-Forwarded-For QwenPaw trusts, so login lockouts count real client IPs instead of Railway's edge. Written to security.trusted_proxies on every start; empty = trust none.", "defaultValue": "10.0.0.0/8,100.64.0.0/10,172.16.0.0/12,192.168.0.0/16,fd00::/8" }, "QWENPAW_DISABLED_CHANNELS": { "isOptional": true, "description": "Channels hidden from the Console. iMessage needs macOS and SIP needs inbound UDP, neither of which Railway offers.", "defaultValue": "imessage,sip" }, "QWENPAW_TELEMETRY_DISABLED": { "isOptional": true, "description": "true = no install or daily usage pings to the QwenPaw team (nobody sees upstream's consent prompt on Railway). Set false to share anonymous environment stats.", "defaultValue": "true" }, "QWENPAW_TOOL_GUARD_ENABLED": { "isOptional": true, "description": "true forces QwenPaw's Tool Guard on (risky tool calls wait for your approval and catastrophic commands are blocked). Empty = the Console toggle decides.", "defaultValue": "true" }, "QWENPAW_TOOL_GUARD_DENIED_TOOLS": { "isOptional": true, "description": "Optional. Comma-separated tools the agent may never call, e.g. execute_shell_command to switch off shell access entirely.", "defaultValue": "" }, "RAILWAY_DEPLOYMENT_DRAINING_SECONDS": { "isOptional": true, "description": "Seconds the old container gets to finish running replies and flush memory before a redeploy stops it.", "defaultValue": "30" } }, "networking": { "tcpProxies": {}, "serviceDomains": { ":8088": { "port": 8088 } } }, "volumeMounts": { "7b4fe11c-fcaf-5fc9-b20b-a5a18d06f67d": { "mountPath": "/data" } } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "QwenPaw", "method": "GET", "path": "/api/version", "expect_status": 200 } }, "resources": { "expected_services": 1, "needs_volume": true }, "generated_at": "2026-10-19T22:14:48.327Z", "generator_version": "0.1.0", "status": "validated", "validated_at": "2026-10-19T22:08:49.844Z", "success_rate_30d": 1, "validation": { "last_run_id": "run_5a35e1d961754958a54c", "checks": [ { "name": "workflow_completed", "passed": true }, { "name": "all_services_deployed", "passed": true }, { "name": "healthcheck", "passed": true }, { "name": "stays_up", "passed": true } ], "typical_ready_seconds": 230, "typical_build_seconds": 111, "typical_start_seconds": 44, "slowest_service": "QwenPaw" } }