القائمة
OpenClaw container integration with JAcoworks gateway. Use when deploying, configuring, debugging, or extending OpenClaw containers, the WS protocol bridge, or container_type dispatch logic.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Searches the web using the built-in web_search tool. Use when the user asks for fresh information, web research, recent news, documentation lookup, or current facts.
Generates images, videos, and other assets using built-in tools. Use when the user asks to create or edit images, generate videos, or produce other media assets.
Releases JAcoworks Desktop (Tauri) — version bump, macOS/Windows build, COS upload, DB registration, git tag. Use when the user says 'release', 'publish', '发版', '发布版本', or mentions a version number like 'v1.6.1'.
Automates web pages through the bundled agent-browser CLI. Use when the user asks to open a page, click or fill elements, take screenshots, inspect DOM state, reuse Chrome login sessions, or perform browser-based workflows via bash.
创建和管理 Agent 技能包。 创建和管理 Agent 技能包。当用户要求创建技能、新建 skill、编写 SKILL.md 时使用。Triggers on: 创建技能, 新建skill, create skill, build skill.
Create and export 3D scenes using Blender 4.4 bpy scripts + Kenney GLB assets for Three.js. Use when building office environments, assembling furniture layouts, or exporting GLB for the observatory.
| name | openclaw-integration |
| description | OpenClaw container integration with JAcoworks gateway. Use when deploying, configuring, debugging, or extending OpenClaw containers, the WS protocol bridge, or container_type dispatch logic. |
JAcoworks 网关通过 OpenClawBridge 支持 OpenClaw 容器作为云端 Agent 后端，与自研 vm-agent 并存。
webchat → /ws/oc?ticket= → WSHandler
├─ container_type == "vm-agent" → ChannelPool → vm-agent 容器 (现有路径)
└─ container_type == "openclaw" → OpenClawBridge → OpenClaw 容器 (新路径)
关键文件:
gateway/internal/agent/openclaw_bridge.go — 透明 WS 代理 (双向帧转发 + HTTP 健康检查)gateway/internal/agent/ws_handler.go — /ws/oc 入口, 按 container_type 分派gateway/internal/store/containers.go — ContainerInfo.ContainerType 字段deploy/sql/010_container_type.sql — DB 迁移gateway/cmd/gateway/main.go — 接线 (NewOpenClawBridge + SetOpenClawBridge)webchat/src/lib/openclaw-client.ts — 前端原生 OpenClaw WS 客户端 (challenge-response + chat)webchat/src/lib/event-parser.ts — OpenClaw 事件解析 (agent/chat 事件 → UI 块)webchat/src/lib/ws-client.ts — WSClient 适配层 (统一 prompt/abort 接口)website/src/routes/chat.rs — 注入 __OPENCLAW_TOKEN__ (从 DB 查询)| 类型 | 方向 | 格式 |
|---|---|---|
req | client → server | {type:"req", id, method, params} |
res | server → client | {type:"res", id, ok, payload/error} |
event | server → client | {type:"event", event, payload, seq} |
{type:"event", event:"connect.challenge", payload:{nonce:"..."}}{
"type": "req", "id": "gw-connect-1", "method": "connect",
"params": {
"minProtocol": 3, "maxProtocol": 3,
"client": {"id": "gateway-client", "version": "1.0.0", "platform": "linux", "mode": "backend"},
"auth": {"token": "<container_token>"},
"role": "operator",
"scopes": ["operator.admin"],
"caps": ["tool-events"]
}
}
{type:"res", id:"gw-connect-1", ok:true, payload:{type:"hello-ok",...}}client.id 必须是预定义值之一:
webchat-ui, openclaw-control-ui, webchat, cli, gateway-client, openclaw-macos, openclaw-ios, openclaw-android, node-host, test, fingerprint, openclaw-probe
client.mode 必须是:
webchat, cli, ui, backend, node, probe, test
网关集成使用 gateway-client + backend。webchat client id 需要 CORS allowedOrigins 检查，gateway-client 不需要。
| 操作 | 方法 | 参数 |
|---|---|---|
| 发送消息 | chat.send | {sessionKey, message, idempotencyKey} |
| 中止生成 | chat.abort | {sessionKey, runId?} |
注意: send 方法 (非 chat.send) 用于 Channel 投递 (WhatsApp/Telegram), 需要 to 和 idempotencyKey。
| 事件 | 含义 | payload 关键字段 |
|---|---|---|
agent stream=text/assistant | 流式文本 (逐 token) | data.delta (增量) / data.text (累计) |
agent stream=thinking/reasoning | 思考过程 | data.phase (start/end), data.text |
agent stream=tool | 工具调用 | data.phase (start/update/result/error), data.name, data.args |
agent stream=lifecycle | 生命周期 | data.phase (start/end/error) |
chat state=final | 完成 | message.content[{type:"text",text}] |
chat state=error | 错误 | errorMessage |
chat state=delta | 累计快照 | message.content[...] — 前端应忽略, 用 agent stream 代替 |
tick, health | 内部 | 静默丢弃 |
重要: OpenClaw 同时发送 agent stream (逐 token delta) 和 chat delta (累计文本快照)。前端只能使用其中一路，否则文本会重复渲染。webchat 选择只用 agent stream 事件, chat delta 被忽略 (event-parser.ts)。
| webchat (下游) | OpenClaw (上游) |
|---|---|
prompt → | chat.send |
abort → | chat.abort |
← response | ← agent stream=text |
← done | ← chat state=final |
← error | ← chat state=error |
← session_event | ← agent stream=lifecycle(error) / 其他事件 |
# SSH: ssh local (root)
# 镜像: ghcr.io/openclaw/openclaw:latest
# 端口: 18789 (OpenClaw 默认)
# 容器用户: node (uid 1000), 非 root
# 数据目录 (必须 chown 1000:1000)
/opt/openclaw/data:/home/node/.openclaw
/opt/openclaw/workspace:/data/workspace
# 启动命令
docker run -d --name openclaw-test \
-p 18789:18789 \
-v /opt/openclaw/data:/home/node/.openclaw \
-v /opt/openclaw/workspace:/data/workspace \
ghcr.io/openclaw/openclaw:latest
{
"gateway": {
"bind": "lan",
"auth": { "mode": "token", "token": "<your-token>" },
"trustedProxies": ["10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16", "127.0.0.0/8"],
"controlUi": {
"allowedOrigins": ["http://localhost:18789", "http://127.0.0.1:18789"]
}
},
"models": {
"mode": "merge",
"providers": {
"proxy": {
"baseUrl": "http://67.230.182.59:8317/v1",
"apiKey": "<llm-proxy-key>",
"api": "openai-completions",
"models": [{"id": "gpt-5.4", "name": "GPT 5.4", "contextWindow": 128000, "maxTokens": 16384}]
}
}
},
"agents": {
"defaults": {
"model": { "primary": "proxy/gpt-5.4" },
"sandbox": { "mode": "off" }
}
},
"session": {
"dmScope": "per-channel-peer",
"reset": { "mode": "idle" }
}
}
必须配置:
trustedProxies — 白名单网关所在子网，否则 X-Forwarded-For 等头被忽略dangerouslyDisableDeviceAuth: true。网关通过 AutoPairer (openclaw 包) 自动轮询审批配对请求| 项目 | 正确值 | 错误值 | 说明 |
|---|---|---|---|
gateway.bind.mode | "lan" / "loopback" | "0.0.0.0" | 只接受模式名，不接受原始 IP |
trustedProxies | ["10.0.0.0/8",...] | 缺失 | 网关代理场景必须白名单 |
session.reset.mode | "daily" / "idle" | "manual" | 只有两个合法值 |
agents.defaults.sandbox | "off" | "non-main" | Docker 内必须关闭 (无 Docker-in-Docker) |
apiType (Anthropic 模型) | "anthropic-messages" | "anthropic" | 类型名包含 -messages 后缀 |
apiType (OpenAI/兼容) | "openai-completions" | — | GPT/Grok/GLM 等用此类型 |
| 容器用户 | node (uid 1000) | root | 卷必须 chown 1000:1000 |
| Origin header | http://<container_ip>:<port> | 浏览器 origin | 网关 WS bridge 必须重写 Origin 为容器地址 |
openclaw doctor 会自动 seed gateway.controlUi.allowedOrigins 并可能重写配置文件。首次启动后检查配置是否被修改。
-- 添加 container_type 列 (幂等)
ALTER TABLE containers
ADD COLUMN IF NOT EXISTS container_type text NOT NULL DEFAULT 'vm-agent';
INSERT INTO containers (user_id, container_name, container_ip, container_token, host_port, container_type, status)
VALUES (
'<user_id>',
'openclaw-test',
'10.0.0.2'::inet,
'<openclaw-gateway-token>',
18789,
'openclaw',
'running'
)
ON CONFLICT (user_id, container_type) DO UPDATE SET
container_name = EXCLUDED.container_name,
container_ip = EXCLUDED.container_ip,
container_token = EXCLUDED.container_token,
host_port = EXCLUDED.host_port,
status = EXCLUDED.status;
注意: unique 约束为 (user_id, container_type)，同一用户可同时拥有 vm-agent 和 openclaw 两个容器。container_ip 对 OpenClaw 容器必须填写实际可达地址 (如 WireGuard 10.0.0.2)，因为 UpstreamAddr 优先使用 DB 中的 container_ip。
010 ~ 014)trustedProxies (不再需要 dangerouslyDisableDeviceAuth)ssh opc@10.0.1.3 docker system dial-stdio)make deploy-gateway 或 rsync + 远程编译)cd webchat && npm run build → rsync website/static/chat/ 到 jingao)/ws/oc?ticket= → 验证握手 + AutoPairer 自动配对 + 对话 + 流式输出go test ./... 通过npm run build) 并 rsync website/static/chat/ 到 jingao，否则浏览器加载旧 JS 导致握手失败make deploy-gateway 使用 git reset --hard origin/main，未 push 的本地改动需用 rsync 手动同步源码再远程编译FastClaw — K8s 原生 OpenClaw 多租户管理平台 (Go)。其 WS 代理 (handler/proxy/proxy.go) 和握手客户端 (service/k8s/gateway.go) 是本集成的主要参考来源。关键借鉴:
dangerouslyDisableDeviceAuth (安全设备配对)trustedProxies 子网白名单