mirror of
https://github.com/hansjone/oclaw.git
synced 2026-10-12 10:30:52 +08:00
oliver
dbbe3add6a
同时收敛启动与运维脚本默认行为（含 wiki worker）、更新 Admin 可观测性与相关测试，降低首轮时延并提高运行稳定性。 Made-with: Cursor
74 lines
2.1 KiB
Markdown
74 lines
2.1 KiB
Markdown
# Lobster (plugin)
|
|
|
|
Adds the `lobster` agent tool as an **optional** plugin tool.
|
|
|
|
## What this is
|
|
|
|
- Lobster is a standalone workflow shell (typed JSON-first pipelines + approvals/resume).
|
|
- This plugin integrates Lobster with OpenClaw _without core changes_.
|
|
|
|
## Enable
|
|
|
|
Because this tool can trigger side effects (via workflows), it is registered with `optional: true`.
|
|
|
|
Enable it in an agent allowlist:
|
|
|
|
```json
|
|
{
|
|
"agents": {
|
|
"list": [
|
|
{
|
|
"id": "main",
|
|
"tools": {
|
|
"allow": [
|
|
"lobster" // plugin id (enables all tools from this plugin)
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
```
|
|
|
|
## Using `openclaw.invoke` (Lobster → OpenClaw tools)
|
|
|
|
Some Lobster pipelines may include a `openclaw.invoke` step to call back into OpenClaw tools/plugins (for example: `gog` for Google Workspace, `gh` for GitHub, `message.send`, etc.).
|
|
|
|
For this to work, the OpenClaw Gateway must expose the tool bridge endpoint and the target tool must be allowed by policy:
|
|
|
|
- OpenClaw provides an HTTP endpoint: `POST /tools/invoke`.
|
|
- The request is gated by **gateway auth** (e.g. `Authorization: Bearer …` when token auth is enabled).
|
|
- The invoked tool is gated by **tool policy** (global + per-agent + provider + group policy). If the tool is not allowed, OpenClaw returns `404 Tool not available`.
|
|
|
|
### Allowlisting recommended
|
|
|
|
To avoid letting workflows call arbitrary tools, set a tight allowlist on the agent that will be used by `openclaw.invoke`.
|
|
|
|
Example (allow only a small set of tools):
|
|
|
|
```jsonc
|
|
{
|
|
"agents": {
|
|
"list": [
|
|
{
|
|
"id": "main",
|
|
"tools": {
|
|
"allow": ["lobster", "web_fetch", "web_search", "gog", "gh"],
|
|
"deny": ["gateway"],
|
|
},
|
|
},
|
|
],
|
|
},
|
|
}
|
|
```
|
|
|
|
Notes:
|
|
|
|
- If `tools.allow` is omitted or empty, it behaves like "allow everything (except denied)". For a real allowlist, set a **non-empty** `allow`.
|
|
- Tool names depend on which plugins you have installed/enabled.
|
|
|
|
## Security
|
|
|
|
- Runs Lobster in process via the published `@clawdbot/lobster/core` runtime.
|
|
- Does not manage OAuth/tokens.
|
|
- Uses timeouts, stdout caps, and strict JSON envelope parsing.
|