From 32557dac84c4a67ee7befbc91cdfd8e477686189 Mon Sep 17 00:00:00 2001
From: Qingshan Chen <38182824+Iamlovingit@users.noreply.github.com>
Date: Tue, 14 Apr 2026 20:42:50 +0800
Subject: [PATCH] docs: refresh README and add multilingual guides
---
README.de.md | 266 +++++------
README.ja.md | 268 +++++------
README.ko.md | 270 +++++------
README.md | 250 +++++-----
README.zh-CN.md | 257 +++++-----
deployments/k3s/clawmanager.yaml | 782 ++++++++++++++++++++++++++++++
docs/admin-user-guide.md | 36 ++
docs/agent-control-plane.md | 43 ++
docs/deployment.md | 50 ++
docs/developer-guide.md | 30 ++
docs/resource-management.md | 30 ++
docs/security-skill-scanner.md | 30 ++
docs/use_guide_cn.md | 783 +++++++++++++++++++++++++++++++
docs/use_guide_de.md | 782 ++++++++++++++++++++++++++++++
docs/use_guide_en.md | 782 ++++++++++++++++++++++++++++++
docs/use_guide_ja.md | 781 ++++++++++++++++++++++++++++++
docs/use_guide_ko.md | 782 ++++++++++++++++++++++++++++++
17 files changed, 5508 insertions(+), 714 deletions(-)
create mode 100644 deployments/k3s/clawmanager.yaml
create mode 100644 docs/admin-user-guide.md
create mode 100644 docs/agent-control-plane.md
create mode 100644 docs/deployment.md
create mode 100644 docs/developer-guide.md
create mode 100644 docs/resource-management.md
create mode 100644 docs/security-skill-scanner.md
create mode 100644 docs/use_guide_cn.md
create mode 100644 docs/use_guide_de.md
create mode 100644 docs/use_guide_en.md
create mode 100644 docs/use_guide_ja.md
create mode 100644 docs/use_guide_ko.md
diff --git a/README.de.md b/README.de.md
index bba273d..b6993ea 100644
--- a/README.de.md
+++ b/README.de.md
@@ -5,7 +5,7 @@
- Eine Kubernetes-first-Kontrollplattform zur zentralen Verwaltung von OpenClaw- und Linux-Desktop-Runtimes fuer Teams und Cluster im grossen Massstab.
+ ClawManager ist eine Kubernetes-native Control Plane fuer die Verwaltung von AI-Agent-Instanzen mit kontrolliertem AI-Zugriff, Runtime-Orchestrierung und wiederverwendbaren Ressourcen ueber mehrere Agent-Runtimes hinweg.
@@ -18,203 +18,187 @@
-
-## News
+
+ Produktueberblick |
+ AI Gateway |
+ Agent Control Plane |
+ Ressourcenverwaltung |
+ Erste Schritte
+
+
+
+
+
+
-- [2026-03-26]: ๐๐ Die AI-Gateway-Dokumentation und Uebersicht wurden aktualisiert, inklusive Modell-Governance, Audit-Trace, Kostenrechnung und Risikokontrolle. Siehe [AI Gateway](#ai-gateway).
-- [2026-03-20]: ๐๐ ClawManager Release โ ClawManager ist jetzt eine Plattform zur Verwaltung virtueller Desktops und bietet Funktionen wie Batch-Bereitstellung, Webtop-Unterstรผtzung, Zugriff รผber ein Desktop-Portal, Laufzeit-Image-Konfiguration, Markdown-Backup und Migration von OpenClaw-Speicher/Einstellungen, Cluster-Ressourcenรผbersicht sowie mehrsprachige Dokumentation.
+ClawManager in 60 Sekunden
-
-## Was Es Ist
+
+ Ein schneller Blick auf Agent-Provisionierung, Skill-Verwaltung und -Scanning sowie AI-Gateway-Governance.
+
-ClawManager hilft Teams dabei, Desktop-Runtimes auf Kubernetes zentral zu deployen, zu betreiben und darauf zuzugreifen.
+## Neuigkeiten
-Es ist fuer Umgebungen gedacht, in denen:
+Wichtige aktuelle Produkt- und Dokumentations-Updates.
-- Desktop-Instanzen fuer mehrere Benutzer erstellt werden muessen
-- Quotas, Images und Lebenszyklen zentral verwaltet werden sollen
-- Desktop-Dienste innerhalb des Clusters bleiben sollen
-- sicherer Browser-Zugriff ohne direkte Pod-Freigabe gebraucht wird
+- [2026-04-08] Skill-Verwaltung und Skill-Scanning wurden der Plattform hinzugefuegt. Details siehe [Merged PR #52](https://github.com/Yuan-lab-LLM/ClawManager/pull/52).
+- [2026-03-26] Die AI-Gateway-Dokumentation wurde erweitert und deckt nun Modell-Governance, Audit und Trace, Kostenrechnung sowie Risikokontrolle genauer ab. Siehe [AI Gateway Guide](./docs/aigateway.md).
+- [2026-03-20] ClawManager hat sich zu einer breiteren Control Plane fuer AI-Agent-Workspaces entwickelt, mit staerkerer Runtime-Steuerung, wiederverwendbaren Ressourcen und Security-Scanning-Workflows.
-## Warum Nutzer Es Waehlen
+> Wenn ClawManager fuer dein Team nuetzlich ist, gib dem Projekt gerne einen Star, damit mehr Nutzer und Entwickler es entdecken.
-- Ein Admin-Panel fuer Benutzer, Quotas, Instanzen und Runtime-Images
-- OpenClaw-Unterstuetzung mit Import und Export von Speicher und Einstellungen
-- Sicherer Desktop-Zugriff ueber die Plattform statt direkter Service-Freigabe
-- AI Gateway fuer kontrollierten Modellzugriff, Audit-Trails, Kostenanalyse und Risikokontrolle
-- Kubernetes-naher Deployment- und Betriebsablauf
-- Geeignet sowohl fuer zentral gesteuerte Rollouts als auch fuer Self-Service-Erstellung
+
+
+
+
-## Schnellstart
+
+
+### Portal Access
-AI Gateway ist die Governance-Ebene fuer den Modellzugriff in ClawManager. Es bietet OpenClaw-Instanzen einen einheitlichen OpenAI-kompatiblen Einstiegspunkt und ergaenzt Upstream-Provider um Richtlinien, Audit und Kostenkontrolle.
+Das Portal bietet Nutzern einen klaren Einstiegspunkt in ihre Workspaces. Der Zugriff erfolgt browserbasiert, waehrend Runtime-Zustand und Plattformsicht erhalten bleiben, ohne dass Infrastrukturdetails direkt exponiert werden.
-- Modellverwaltung fuer regulaere und sichere Modelle sowie Provider-Anbindung, Aktivierung, Endpoint-Konfiguration und Preisrichtlinien
-- End-to-End-Audit- und Trace-Aufzeichnungen fuer Requests, Responses, Routing-Entscheidungen und Risiko-Treffer
-- Eingebaute Kostenrechnung mit Token-Erfassung und Nutzungsschaetzung
-- Risikokontrolle ueber konfigurierbare Regeln mit automatischen Aktionen wie `block` und `route_secure_model`
+
+
-Screenshots, die komplette Funktionsaufstellung und den Ablauf der Modellwahl und des Routings findest du in [docs/aigateway.md](./docs/aigateway.md).
+### AI Gateway
-## Produktablauf
+AI Gateway integriert Modell-Governance direkt in die Workspace-Erfahrung. Audit-Trails, Kostentransparenz und risikobasiertes Routing machen AI-Nutzung zu einem Teil der Plattform statt zu einer losen Einzelintegration.
-1. Ein Administrator definiert Benutzer, Quotas und Runtime-Image-Richtlinien.
-2. Ein Benutzer erstellt eine OpenClaw- oder Linux-Desktop-Instanz.
-3. ClawManager erstellt und verfolgt die Kubernetes-Ressourcen.
-4. Der Benutzer greift ueber die Plattform auf den Desktop zu.
-5. Administratoren ueberwachen Zustand und Kapazitaet ueber das Dashboard.
+
+
-## Architektur
+## So funktioniert es
-```text
-Browser
- -> ClawManager Frontend
- -> ClawManager Backend
- -> MySQL
- -> Kubernetes API
- -> Pod / PVC / Service
- -> OpenClaw / Webtop / Linux Desktop Runtime
-```
+1. Administratoren definieren Governance-Richtlinien und wiederverwendbare Ressourcen.
+2. Nutzer erstellen oder betreten verwaltete AI-Agent-Workspaces auf Kubernetes.
+3. Agents verbinden sich mit der Control Plane und melden Runtime-Zustaende.
+4. Channel, skill und bundle werden kompiliert und auf Instanzen angewendet.
+5. AI-Traffic fliesst ueber das AI Gateway und erhaelt Audit-, Risiko- und Kostenkontrollen.
-## Konfigurationshinweise
+## Entwicklerueberblick
-- Instanz-Services laufen im internen Kubernetes-Netzwerk
-- Desktop-Zugriff geht ueber den authentifizierten Backend-Proxy
-- Runtime-Images koennen in den Systemeinstellungen ueberschrieben werden
-- Das Backend sollte idealerweise innerhalb des Clusters deployt werden
-
-Wichtige Backend-Umgebungsvariablen:
+ClawManager ist eine Kubernetes-native Plattform mit React-Frontend, Go-Backend, MySQL fuer Zustandsdaten sowie Integrationen wie `skill-scanner` und Object Storage. Die Codebasis ist nach Produktsubsystemen organisiert, daher ist der schnellste Einstieg, mit dem passenden Guide zu beginnen und danach in den Code zu gehen.
-- `SERVER_ADDRESS`
-- `SERVER_MODE`
-- `DB_HOST`
-- `DB_PORT`
-- `DB_USER`
-- `DB_PASSWORD`
-- `DB_NAME`
-- `JWT_SECRET`
-
-### CSV-Importvorlage
+- Frontend fuer Admin- und Nutzeroberflaechen unter `frontend/`
+- Backend-Services, Handler, Repositorys und Migrationen unter `backend/`
+- Deployment-Assets unter `deployments/`
+- Produktdokumentation und Medien unter `docs/`
-```csv
-Username,Email,Role,Max Instances,Max CPU Cores,Max Memory (GB),Max Storage (GB),Max GPU Count (optional)
-```
-
-Hinweise:
-
-- `Email` ist optional
-- `Max GPU Count (optional)` ist optional
-- alle anderen Spalten sind erforderlich
+Siehe [Developer Guide (English)](./docs/developer-guide.md).
+
+## Dokumentation
+
+- [Benutzerhandbuch](./docs/use_guide_de.md)
+- [Deployment Guide (English)](./docs/deployment.md)
+- [Admin and User Guide (English)](./docs/admin-user-guide.md)
+- [Agent Control Plane Guide (English)](./docs/agent-control-plane.md)
+- [AI Gateway Guide (English)](./docs/aigateway.md)
+- [Security / Skill Scanner Guide (English)](./docs/security-skill-scanner.md)
+- [Resource Management Guide (English)](./docs/resource-management.md)
+- [Developer Guide (English)](./docs/developer-guide.md)
## Lizenz
-Dieses Projekt ist unter der MIT License veroeffentlicht.
+Dieses Projekt steht unter der MIT License.
## Open Source
Issues und Pull Requests sind willkommen.
+
+## Star History
+
+
+
+
+
diff --git a/README.ja.md b/README.ja.md
index a2adf92..97945f8 100644
--- a/README.ja.md
+++ b/README.ja.md
@@ -5,7 +5,7 @@
- ใใผใ ่ฆๆจกใใใฏใฉในใฟใผ่ฆๆจกใพใงใOpenClaw ใจ Linux ใในใฏใใใใฉใณใฟใคใ ใไธๅ
็ฎก็ใใใใใฎ Kubernetes-first ใณใณใใญใผใซใใฌใผใณใงใใ
+ ClawManager ใฏใAI ใจใผใธใงใณใใคใณในใฟใณใน็ฎก็ใฎใใใฎ Kubernetes ใใคใใฃใใชใณใณใใญใผใซใใฌใผใณใงใใใฌใใใณในไปใใฎ AI ใขใฏใปในใใฉใณใฟใคใ ใชใผใฑในใใฌใผใทใงใณใใใใฆ่คๆฐใฎ Agent Runtime ใซใพใใใๅๅฉ็จๅฏ่ฝใชใชใฝใผใน็ฎก็ใๆไพใใพใใ
@@ -18,203 +18,187 @@
-
-## News
+
+ ่ฃฝๅ็ดนไป |
+ AI Gateway |
+ Agent Control Plane |
+ ใชใฝใผใน็ฎก็ |
+ ใฏใใใซ
+
-- [2026-03-26]: ๐๐ AI Gateway ใฎใใญใฅใกใณใใจๆฆ่ฆใๆดๆฐใใใขใใซใฌใใใณในใ็ฃๆปใใฌใผในใใณในใ่จ็ฎใใชในใฏๅถๅพกใๆด็ใใพใใใ่ฉณใใใฏ [AI Gateway](#ai-gateway) ใๅ็
งใใฆใใ ใใใ
-- [2026-03-20]: ๐๐ ClawManager ใชใชใผใน โโ ClawManager ใฏ็พๅจใไปฎๆณใในใฏใใใ็ฎก็ใใฉใใใใฉใผใ ใจใใฆๆไพใใใฆใใใใใใใใใญใคใWebtop ใตใใผใใใในใฏใใใใใผใฟใซใขใฏใปในใใฉใณใฟใคใ ใคใกใผใธ่จญๅฎใOpenClaw ใฎใกใขใช๏ผ่จญๅฎใฎ Markdown ใใใฏใขใใใใใณ็งป่กใใฏใฉในใฟใชใฝใผในใฎๆฆ่ฆใๅค่จ่ชใใญใฅใกใณใใซๅฏพๅฟใใฆใใพใใ
+
+
+
+
-## ใใใฏไฝใ
+60 ็งใงใใใ ClawManager
-ClawManager ใฏใKubernetes ไธใงใในใฏใใใใฉใณใฟใคใ ใฎใใใญใคใ้็จใใขใฏใปในใไธๅ
ๅใใพใใ
+
+
-
-ๆฌกใฎใใใช็ฐๅขใซๅใใฆใใพใใ
+## ๆๆฐๆ
ๅ ฑ
-- ่คๆฐใฆใผใถใผๅใใซใในใฏใใใใคใณในใฟใณในใไฝๆใใใ
-- quotaใใคใกใผใธใใฉใคใใตใคใฏใซใ้ไธญ็ฎก็ใใใ
-- ใในใฏใใใใตใผใในใใฏใฉในใฟใผๅ
้จใซ้ใ่พผใใใ
-- Pod ใ็ดๆฅๅ
ฌ้ใใใๅฎๅ
จใชใใฉใฆใถใผใขใฏใปในใๆไพใใใ
+ๆ่ฟใฎ้่ฆใช่ฃฝๅใขใใใใผใใจใใญใฅใกใณใๆดๆฐใงใใ
-## ้ธใฐใใ็็ฑ
+- [2026-04-08] ใใฉใใใใฉใผใ ใซ Skill ็ฎก็ใจ Skill ในใญใฃใณใฎใฏใผใฏใใญใผใ่ฟฝๅ ใใพใใใ่ฉณ็ดฐใฏ [Merged PR #52](https://github.com/Yuan-lab-LLM/ClawManager/pull/52) ใๅ็
งใใฆใใ ใใใ
+- [2026-03-26] AI Gateway ใใญใฅใกใณใใๆดๆฐใใใขใใซใฌใใใณในใ็ฃๆปใจใใฌใผในใใณในใ่จ็ฎใใชในใฏๅถๅพกใฎ่ชฌๆใๅผทๅใใพใใใ่ฉณใใใฏ [AI Gateway Guide](./docs/aigateway.md) ใๅ็
งใใฆใใ ใใใ
+- [2026-03-20] ClawManager ใฏใAI ใจใผใธใงใณใใฏใผใฏในใใผในๅใใฎใใๅบใใณใณใใญใผใซใใฌใผใณใธใจ้ฒๅใใใฉใณใฟใคใ ๅถๅพกใๅๅฉ็จๅฏ่ฝใชใชใฝใผในใๅฎๅ
จในใญใฃใณใฎใฏใผใฏใใญใผใๅผทๅใใพใใใ
-- ใฆใผใถใผใquotaใใคใณในใฟใณในใใฉใณใฟใคใ ใคใกใผใธใใพใจใใฆ็ฎก็ใงใใๅไธใฎ็ฎก็็ป้ข
-- OpenClaw ใฎใกใขใชใ่จญๅฎใฎใคใณใใผใ/ใจใฏในใใผใใใตใใผใ
-- ใตใผใในใ็ดๆฅๅ
ฌ้ใใใใใฉใใใใฉใผใ ็ต็ฑใงๅฎๅ
จใซใในใฏใใใใธใขใฏใปใน
-- AI Gateway ใซใใๅถๅพกใใใใขใใซใขใฏใปในใ็ฃๆปใใฌใผในใใณในใๅๆใใชในใฏๅถๅพก
-- Kubernetes ใซ่ช็ถใซ้ฆดๆใใใใญใคใจ้็จใใญใผ
-- ็ฎก็่
ไธปๅฐใฎๅฑ้ใซใใปใซใใตใผใในๅใฎๅฉ็จใซใๅฏพๅฟ
+> ClawManager ใใใชใใฎใใผใ ใซๅฝน็ซใคใชใใใใฒ Star ใไปใใฆใใใๅคใใฎใฆใผใถใผใ้็บ่
ใซๅฑใใใๅฟๆดใใฆใใ ใใใ
-## ใฏใคใใฏในใฟใผใ
+
+
+
+
-### ๅๆๆกไปถ
+
+
-AI Gateway ใฏใClawManager ใซใใใใขใใซใขใฏใปในใฎใฌใใใณในใใฌใผใณใงใใOpenClaw ใคใณในใฟใณในใซๅไธใฎ OpenAI ไบๆใจใณใใชใผใใคใณใใๆไพใใไธๆต Provider ใฎไธใซใใชใทใผใ็ฃๆปใใณในใๅถๅพกใ่ฟฝๅ ใใพใใ
+### Portal Access
-- ้ๅธธใขใใซใจใปใญใฅใขใขใใซใฎ็ฎก็ใProvider ๆฅ็ถใๆๅนๅใใจใณใใใคใณใ่จญๅฎใไพกๆ ผใใชใทใผ
-- ใชใฏใจในใใใฌในใใณในใใซใผใใฃใณใฐๅคๆญใใชในใฏใใใใๅฏพ่ฑกใซใใใจใณใใใผใจใณใใฎ็ฃๆป/ใใฌใผใน่จ้ฒ
-- ใใผใฏใณ้่จใจๅฉ็จ่ฆ็ฉใใใๅซใ็ตใฟ่พผใฟใฎใณในใ่จ็ฎ
-- ่จญๅฎๅฏ่ฝใชใซใผใซใซๅบใฅใใชในใฏๅถๅพกใจใ`block` ใ `route_secure_model` ใชใฉใฎ่ชๅใขใฏใทใงใณ
+Portal ใฏใใฆใผใถใผใซไธ่ฒซใใใฏใผใฏในใใผในๅ
ฅๅฃใๆไพใใพใใใใฉใฆใถใใผในใงใขใฏใปในใใชใใใใณใณใใญใผใซใใฌใผใณใจๅๆใใใฉใณใฟใคใ ็ถๆ
ใ็ขบ่ชใงใใใคใณใใฉใฎ็ดฐ้จใ็ดๆฅๆ่ญใใๅฟ
่ฆใฏใใใพใใใ
-ในใฏใชใผใณใทใงใใใ่ฉณ็ดฐใชๆฉ่ฝ่ชฌๆใใขใใซ้ธๆใจใซใผใใฃใณใฐใฎๆตใใซใคใใฆใฏ [docs/aigateway.md](./docs/aigateway.md) ใๅ็
งใใฆใใ ใใใ
+
+
+
+### AI Gateway
-## ๅฉ็จใฎๆตใ
+AI Gateway ใฏใใขใใซๅฉ็จใฎใฌใใใณในใใฏใผใฏในใใผในไฝ้จใใฎใใฎใซ็ตฑๅใใพใใ็ฃๆปใญใฐใใณในใๅฏ่ฆๅใใชในใฏใซใผใใฃใณใฐใ้ใใฆใAI ๅฉ็จใๅ็บใฎ็ตฑๅใงใฏใชใใใใฉใใใใฉใผใ ๆฉ่ฝใจใใฆๆฑใใใใใซใใพใใ
-1. ็ฎก็่
ใใฆใผใถใผใquotaใใฉใณใฟใคใ ใคใกใผใธๆน้ใๅฎ็พฉใใพใใ
-2. ใฆใผใถใผใ OpenClaw ใพใใฏ Linux ใในใฏใใใใคใณในใฟใณในใไฝๆใใพใใ
-3. ClawManager ใ Kubernetes ใชใฝใผในใไฝๆใใ็ถๆ
ใ่ฟฝ่ทกใใพใใ
-4. ใฆใผใถใผใใใฉใใใใฉใผใ ็ต็ฑใงใในใฏใใใใซใขใฏใปในใใพใใ
-5. ็ฎก็่
ใใใใทใฅใใผใใใๅฅๅ
จๆงใจๅฎน้ใ็ฃ่ฆใใพใใ
+
+
-## ใขใผใญใใฏใใฃ
+## ๅไฝใฎๆตใ
-```text
-Browser
- -> ClawManager Frontend
- -> ClawManager Backend
- -> MySQL
- -> Kubernetes API
- -> Pod / PVC / Service
- -> OpenClaw / Webtop / Linux Desktop Runtime
-```
+1. ็ฎก็่
ใใฌใใใณในใใชใทใผใจๅๅฉ็จๅฏ่ฝใชใชใฝใผในใๅฎ็พฉใใพใใ
+2. ใฆใผใถใผใ Kubernetes ไธใง็ฎก็ๅฏพ่ฑกใฎ AI ใจใผใธใงใณใใฏใผใฏในใใผในใไฝๆใพใใฏๅฉ็จใใพใใ
+3. Agent ใใณใณใใญใผใซใใฌใผใณใธๆฅ็ถใใใฉใณใฟใคใ ็ถๆ
ใๅ ฑๅใใพใใ
+4. Channelใskillใbundle ใใณใณใใคใซใใใใคใณในใฟใณในใธ้ฉ็จใใใพใใ
+5. AI ใใฉใใฃใใฏใฏ AI Gateway ใ็ต็ฑใใ็ฃๆปใใชในใฏใใณในใๅถๅพกใไปไธใใใพใใ
-## ่จญๅฎใกใข
+## ้็บ่
ๅใๆฆ่ฆ
-- ใคใณในใฟใณในใตใผใในใฏ Kubernetes ใฎๅ
้จใใใใฏใผใฏไธใงๅไฝใใพใ
-- ใในใฏใใใใขใฏใปในใฏ่ช่จผๆธใฟใใใฏใจใณใใใญใญใทใ็ต็ฑใใพใ
-- ใฉใณใฟใคใ ใคใกใผใธใฏใทในใใ ่จญๅฎใใไธๆธใใงใใพใ
-- ใใใฏใจใณใใฏใฏใฉในใฟใผๅ
้จใซ้
็ฝฎใใใฎใ็ๆณใงใ
-
-ไธปใชใใใฏใจใณใ็ฐๅขๅคๆฐ:
+ClawManager ใฏใReact ใใญใณใใจใณใใGo ใใใฏใจใณใใ็ถๆ
็ฎก็็จ MySQLใใใใฆ `skill-scanner` ใใชใใธใงใฏใในใใฌใผใธ็ตฑๅใๅซใ Kubernetes ใใคใใฃใใชใใฉใใใใฉใผใ ใงใใใณใผใใใผในใฏ่ฃฝๅใตใใทในใใ ใใจใซๆด็ใใใฆใใใใใ่ฉฒๅฝใฌใคใใใๅ
ฅใใใใฎๅพใณใผใใธ้ฒใใฎใๆใๅน็็ใงใใ
-- `SERVER_ADDRESS`
-- `SERVER_MODE`
-- `DB_HOST`
-- `DB_PORT`
-- `DB_USER`
-- `DB_PASSWORD`
-- `DB_NAME`
-- `JWT_SECRET`
-
-### CSV ใคใณใใผใใใณใใฌใผใ
+- ใใญใณใใจใณใใฎ็ฎก็็ป้ขใจใฆใผใถใผ็ป้ขใฏ `frontend/`
+- ใใใฏใจใณใใฎใตใผใในใhandlerใrepositoryใmigration ใฏ `backend/`
+- ใใใญใค่ณ็ฃใฏ `deployments/`
+- ่ฃฝๅใใญใฅใกใณใใจ็ด ๆใฏ `docs/`
-```csv
-Username,Email,Role,Max Instances,Max CPU Cores,Max Memory (GB),Max Storage (GB),Max GPU Count (optional)
-```
-
-ใกใข:
-
-- `Email` ใฏไปปๆใงใ
-- `Max GPU Count (optional)` ใฏไปปๆใงใ
-- ใใไปฅๅคใฎๅใฏๅฟ
้ ใงใ
+[Developer Guide (English)](./docs/developer-guide.md) ใๅ็
งใใฆใใ ใใใ
+
+## ใใญใฅใกใณใ
+
+- [ใฆใผใถใผใฌใคใ](./docs/use_guide_ja.md)
+- [Deployment Guide (English)](./docs/deployment.md)
+- [Admin and User Guide (English)](./docs/admin-user-guide.md)
+- [Agent Control Plane Guide (English)](./docs/agent-control-plane.md)
+- [AI Gateway Guide (English)](./docs/aigateway.md)
+- [Security / Skill Scanner Guide (English)](./docs/security-skill-scanner.md)
+- [Resource Management Guide (English)](./docs/resource-management.md)
+- [Developer Guide (English)](./docs/developer-guide.md)
## ใฉใคใปใณใน
-ใใฎใใญใธใงใฏใใฏ MIT License ใฎไธใงๅ
ฌ้ใใใฆใใพใใ
+ใใฎใใญใธใงใฏใใฏ MIT License ใฎใใจใงๅ
ฌ้ใใใฆใใพใใ
## ใชใผใใณใฝใผใน
-issue ใจ pull request ใๆญ่ฟใใพใใ
+Issue ใจ Pull Request ใๆญ่ฟใใพใใ
+
+## Star History
+
+
+
+
+
diff --git a/README.ko.md b/README.ko.md
index d501e27..ce8512e 100644
--- a/README.ko.md
+++ b/README.ko.md
@@ -5,7 +5,7 @@
- ํ ๊ท๋ชจ๋ถํฐ ํด๋ฌ์คํฐ ๊ท๋ชจ๊น์ง OpenClaw์ Linux ๋ฐ์คํฌํฑ ๋ฐํ์์ ํตํฉ ๊ด๋ฆฌํ๊ธฐ ์ํ Kubernetes-first ์ ์ด ํ๋ฉด์
๋๋ค.
+ ClawManager๋ AI Agent ์ธ์คํด์ค ๊ด๋ฆฌ๋ฅผ ์ํ Kubernetes ๋ค์ดํฐ๋ธ ์ปจํธ๋กค ํ๋ ์ธ์ผ๋ก, ๊ฑฐ๋ฒ๋์ค๊ฐ ์ ์ฉ๋ AI ์ ๊ทผ, ๋ฐํ์ ์ค์ผ์คํธ๋ ์ด์
, ๊ทธ๋ฆฌ๊ณ ์ฌ๋ฌ Agent Runtime ์ ๋ฐ์ ๊ฑธ์น ์ฌ์ฌ์ฉ ๊ฐ๋ฅํ ๋ฆฌ์์ค ๊ด๋ฆฌ๋ฅผ ์ ๊ณตํฉ๋๋ค.
@@ -18,203 +18,187 @@
-
-## News
+
+ ์ ํ ์๊ฐ |
+ AI Gateway |
+ Agent Control Plane |
+ ๋ฆฌ์์ค ๊ด๋ฆฌ |
+ ์์ํ๊ธฐ
+
+
+
+
+
+
-- [2026-03-26]: ๐๐ AI Gateway ๋ฌธ์์ ๊ฐ์๋ฅผ ์
๋ฐ์ดํธํ์ต๋๋ค. ๋ชจ๋ธ ๊ฑฐ๋ฒ๋์ค, ๊ฐ์ฌ ์ถ์ , ๋น์ฉ ์ ์ฐ, ์ํ ์ ์ด๋ฅผ ์ ๋ฆฌํ์ต๋๋ค. ์์ธํ ๋ด์ฉ์ [AI Gateway](#ai-gateway)๋ฅผ ์ฐธ๊ณ ํ์ธ์.
-- [2026-03-20]: ๐๐ ClawManager ๋ฆด๋ฆฌ์ค โโ ClawManager๋ ํ์ฌ ๊ฐ์ ๋ฐ์คํฌํฑ ๊ด๋ฆฌ ํ๋ซํผ์ผ๋ก ์ ๊ณต๋๋ฉฐ, ์ผ๊ด ๋ฐฐํฌ, Webtop ์ง์, ๋ฐ์คํฌํฑ ํฌํธ ์ ๊ทผ, ๋ฐํ์ ์ด๋ฏธ์ง ์ค์ , OpenClaw ๋ฉ๋ชจ๋ฆฌ/ํ๊ฒฝ์ค์ Markdown ๋ฐฑ์
๋ฐ ๋ง์ด๊ทธ๋ ์ด์
, ํด๋ฌ์คํฐ ๋ฆฌ์์ค ๊ฐ์, ๋ค๊ตญ์ด ๋ฌธ์๋ฅผ ์ง์ํฉ๋๋ค.
+60์ด ์์ ๋ณด๋ ClawManager
-
-## ๋ฌด์์ธ๊ฐ
+
+ ๋น ๋ฅธ Agent ํ๋ก๋น์ ๋, Skill ๊ด๋ฆฌ์ ์ค์บ, AI Gateway ๊ฑฐ๋ฒ๋์ค๋ฅผ ์งง๊ฒ ํ์ธํ ์ ์์ต๋๋ค.
+
-ClawManager๋ Kubernetes ์์์ ๋ฐ์คํฌํฑ ๋ฐํ์์ ๋ฐฐํฌ, ์ด์, ์ ๊ทผ์ ํ๊ณณ์์ ๊ด๋ฆฌํ ์ ์๊ฒ ํด์ค๋๋ค.
+## ์ต์ ์
๋ฐ์ดํธ
-๋ค์๊ณผ ๊ฐ์ ํ๊ฒฝ์ ์ ํฉํฉ๋๋ค.
+์ต๊ทผ์ ์ค์ํ ์ ํ ๋ฐ ๋ฌธ์ ์
๋ฐ์ดํธ์
๋๋ค.
-- ์ฌ๋ฌ ์ฌ์ฉ์๋ฅผ ์ํ ๋ฐ์คํฌํฑ ์ธ์คํด์ค๋ฅผ ๋ง๋ค์ด์ผ ํ๋ ๊ฒฝ์ฐ
-- quota, ์ด๋ฏธ์ง, ๋ผ์ดํ์ฌ์ดํด์ ์ค์์์ ๊ด๋ฆฌํด์ผ ํ๋ ๊ฒฝ์ฐ
-- ๋ฐ์คํฌํฑ ์๋น์ค๋ฅผ ํด๋ฌ์คํฐ ๋ด๋ถ์ ์ ์งํ๊ณ ์ถ์ ๊ฒฝ์ฐ
-- Pod๋ฅผ ์ง์ ๋
ธ์ถํ์ง ์๊ณ ์์ ํ ๋ธ๋ผ์ฐ์ ์ ๊ทผ์ ์ ๊ณตํ๊ณ ์ถ์ ๊ฒฝ์ฐ
+- [2026-04-08] ํ๋ซํผ์ Skill ๊ด๋ฆฌ์ Skill ์ค์บ ์ํฌํ๋ก์ฐ๊ฐ ์ถ๊ฐ๋์์ต๋๋ค. ์์ธํ ๋ด์ฉ์ [Merged PR #52](https://github.com/Yuan-lab-LLM/ClawManager/pull/52)๋ฅผ ์ฐธ๊ณ ํ์ธ์.
+- [2026-03-26] AI Gateway ๋ฌธ์๋ฅผ ์
๋ฐ์ดํธํ์ฌ ๋ชจ๋ธ ๊ฑฐ๋ฒ๋์ค, ๊ฐ์ฌ์ ์ถ์ , ๋น์ฉ ๊ณ์ฐ, ๋ฆฌ์คํฌ ์ ์ด ์ค๋ช
์ ๊ฐํํ์ต๋๋ค. ์์ธํ ๋ด์ฉ์ [AI Gateway Guide](./docs/aigateway.md)๋ฅผ ์ฐธ๊ณ ํ์ธ์.
+- [2026-03-20] ClawManager๋ AI Agent ์ํฌ์คํ์ด์ค๋ฅผ ์ํ ๋ ๋์ ์ปจํธ๋กค ํ๋ ์ธ์ผ๋ก ๋ฐ์ ํ์ผ๋ฉฐ, ๋ฐํ์ ์ ์ด, ์ฌ์ฌ์ฉ ๊ฐ๋ฅํ ๋ฆฌ์์ค, ๋ณด์ ์ค์บ ์ํฌํ๋ก์ฐ๊ฐ ๊ฐํ๋์์ต๋๋ค.
-## ์ ํํ๋ ์ด์
+> ClawManager๊ฐ ์ฌ๋ฌ๋ถ์ ํ์ ๋์์ด ๋๋ค๋ฉด, ํ๋ก์ ํธ์ Star๋ฅผ ๋จ๊ฒจ ๋ ๋ง์ ์ฌ์ฉ์์ ๊ฐ๋ฐ์๊ฐ ๋ฐ๊ฒฌํ ์ ์๋๋ก ๋์์ฃผ์ธ์.
-- ์ฌ์ฉ์, quota, ์ธ์คํด์ค, ๋ฐํ์ ์ด๋ฏธ์ง๋ฅผ ํ๋์ ๊ด๋ฆฌ ํ๋ฉด์์ ์ด์
-- OpenClaw ๋ฉ๋ชจ๋ฆฌ์ ์ค์ ์ ๊ฐ์ ธ์ค๊ธฐ/๋ด๋ณด๋ด๊ธฐ ์ง์
-- ์๋น์ค๋ฅผ ์ง์ ๋
ธ์ถํ์ง ์๊ณ ํ๋ซํผ์ ํตํ ์์ ํ ๋ฐ์คํฌํฑ ์ ๊ทผ
-- AI Gateway๋ฅผ ํตํ ํต์ ๋ ๋ชจ๋ธ ์ ๊ทผ, ๊ฐ์ฌ ์ถ์ , ๋น์ฉ ๋ถ์, ์ํ ์ ์ด
-- Kubernetes์ ์์ฐ์ค๋ฝ๊ฒ ๋ง๋ ๋ฐฐํฌ ๋ฐ ์ด์ ํ๋ฆ
-- ๊ด๋ฆฌ์ ์ฃผ๋ ๋ฐฐํฌ์ ์
ํ์๋น์ค ์์ฑ ๋ชจ๋ ์ง์
+
+
+
+
-## ๋น ๋ฅธ ์์
+
+
+### Portal Access
-AI Gateway๋ ClawManager์์ ๋ชจ๋ธ ์ ๊ทผ์ ๋ค๋ฃจ๋ ๊ฑฐ๋ฒ๋์ค ํ๋ฉด์
๋๋ค. OpenClaw ์ธ์คํด์ค์ ๋จ์ผ OpenAI ํธํ ์ง์
์ ์ ์ ๊ณตํ๊ณ , ์์ Provider ์์ ์ ์ฑ
, ๊ฐ์ฌ, ๋น์ฉ ์ ์ด๋ฅผ ์ถ๊ฐํฉ๋๋ค.
+Portal์ ์ฌ์ฉ์์๊ฒ ์ผ๊ด๋ ์ํฌ์คํ์ด์ค ์ง์
์ ์ ์ ๊ณตํฉ๋๋ค. ๋ธ๋ผ์ฐ์ ๊ธฐ๋ฐ์ผ๋ก ์ ๊ทผํ๋ฉด์๋ ์ปจํธ๋กค ํ๋ ์ธ๊ณผ ๋๊ธฐํ๋ ๋ฐํ์ ์ํ๋ฅผ ํ์ธํ ์ ์์ด, ์ฌ์ฉ์๊ฐ ์ธํ๋ผ ์ธ๋ถ ์ฌํญ์ ์ง์ ๋ค๋ฃจ์ง ์์๋ ๋ฉ๋๋ค.
-- ์ผ๋ฐ ๋ชจ๋ธ๊ณผ ๋ณด์ ๋ชจ๋ธ ๊ด๋ฆฌ, Provider ์ฐ๊ฒฐ, ํ์ฑํ, ์๋ํฌ์ธํธ ์ค์ , ๊ฐ๊ฒฉ ์ ์ฑ
-- ์์ฒญ, ์๋ต, ๋ผ์ฐํ
๊ฒฐ์ , ์ํ ํํธ๋ฅผ ํฌํจํ ์๋ ํฌ ์๋ ๊ฐ์ฌ ๋ฐ ์ถ์ ๊ธฐ๋ก
-- ํ ํฐ ์ง๊ณ์ ์ฌ์ฉ๋ ์ถ์ ์ ํฌํจํ ๋ด์ฅ ๋น์ฉ ์ ์ฐ
-- ์ค์ ๊ฐ๋ฅํ ๊ท์น ๊ธฐ๋ฐ ์ํ ์ ์ด์ `block`, `route_secure_model` ๊ฐ์ ์๋ ๋์
+
+
-์คํฌ๋ฆฐ์ท, ์ ์ฒด ๊ธฐ๋ฅ ์ค๋ช
, ๋ชจ๋ธ ์ ํ ๋ฐ ๋ผ์ฐํ
ํ๋ฆ์ [docs/aigateway.md](./docs/aigateway.md)๋ฅผ ์ฐธ๊ณ ํ์ธ์.
+### AI Gateway
-## ์ฌ์ฉ ํ๋ฆ
+AI Gateway๋ ๋ชจ๋ธ ์ฌ์ฉ ๊ฑฐ๋ฒ๋์ค๋ฅผ ์ํฌ์คํ์ด์ค ๊ฒฝํ ์์ฒด์ ํตํฉํฉ๋๋ค. ๊ฐ์ฌ ๋ก๊ทธ, ๋น์ฉ ๊ฐ์์ฑ, ๋ฆฌ์คํฌ ๋ผ์ฐํ
์ ์ ๊ณตํ์ฌ AI ์ฌ์ฉ์ ๊ฐ๋ณ ํตํฉ์ด ์๋ ํ๋ซํผ ๊ธฐ๋ฅ์ผ๋ก ๋ค๋ฃฐ ์ ์๊ฒ ํฉ๋๋ค.
-1. ๊ด๋ฆฌ์๊ฐ ์ฌ์ฉ์, quota, ๋ฐํ์ ์ด๋ฏธ์ง ์ ์ฑ
์ ์ ์ํฉ๋๋ค.
-2. ์ฌ์ฉ์๊ฐ OpenClaw ๋๋ Linux ๋ฐ์คํฌํฑ ์ธ์คํด์ค๋ฅผ ์์ฑํฉ๋๋ค.
-3. ClawManager๊ฐ Kubernetes ๋ฆฌ์์ค๋ฅผ ์์ฑํ๊ณ ์ํ๋ฅผ ์ถ์ ํฉ๋๋ค.
-4. ์ฌ์ฉ์๊ฐ ํ๋ซํผ์ ํตํด ๋ฐ์คํฌํฑ์ ์ ๊ทผํฉ๋๋ค.
-5. ๊ด๋ฆฌ์๊ฐ ๋์๋ณด๋์์ ์ํ์ ์ฉ๋์ ๋ชจ๋ํฐ๋งํฉ๋๋ค.
+
+
-## ์ํคํ
์ฒ
+## ๋์ ๋ฐฉ์
-```text
-Browser
- -> ClawManager Frontend
- -> ClawManager Backend
- -> MySQL
- -> Kubernetes API
- -> Pod / PVC / Service
- -> OpenClaw / Webtop / Linux Desktop Runtime
-```
+1. ๊ด๋ฆฌ์๊ฐ ๊ฑฐ๋ฒ๋์ค ์ ์ฑ
๊ณผ ์ฌ์ฌ์ฉ ๊ฐ๋ฅํ ๋ฆฌ์์ค๋ฅผ ์ ์ํฉ๋๋ค.
+2. ์ฌ์ฉ์๊ฐ Kubernetes์์ ๊ด๋ฆฌ๋๋ AI Agent ์ํฌ์คํ์ด์ค๋ฅผ ์์ฑํ๊ฑฐ๋ ์ง์
ํฉ๋๋ค.
+3. Agent๊ฐ ์ปจํธ๋กค ํ๋ ์ธ์ ์ฐ๊ฒฐํด ๋ฐํ์ ์ํ๋ฅผ ๋ณด๊ณ ํฉ๋๋ค.
+4. Channel, skill, bundle์ด ์ปดํ์ผ๋์ด ์ธ์คํด์ค์ ์ ์ฉ๋ฉ๋๋ค.
+5. AI ํธ๋ํฝ์ AI Gateway๋ฅผ ํตํด ์ ๋ฌ๋๋ฉฐ, ๊ฐ์ฌ, ๋ฆฌ์คํฌ, ๋น์ฉ ์ ์ด๊ฐ ํจ๊ป ์ ์ฉ๋ฉ๋๋ค.
-## ์ค์ ๋ฉ๋ชจ
+## ๊ฐ๋ฐ์ ๊ฐ์
-- ์ธ์คํด์ค ์๋น์ค๋ Kubernetes ๋ด๋ถ ๋คํธ์ํฌ์ ์ ์ง๋ฉ๋๋ค
-- ๋ฐ์คํฌํฑ ์ ๊ทผ์ ์ธ์ฆ๋ ๋ฐฑ์๋ ํ๋ก์๋ฅผ ํตํด ์ ๋ฌ๋ฉ๋๋ค
-- ๋ฐํ์ ์ด๋ฏธ์ง๋ ์์คํ
์ค์ ์์ ๋ฎ์ด์ธ ์ ์์ต๋๋ค
-- ๋ฐฑ์๋๋ ๊ฐ๋ฅํ๋ฉด ํด๋ฌ์คํฐ ๋ด๋ถ์ ๋ฐฐ์นํ๋ ๊ฒ์ด ์ข์ต๋๋ค
-
-์ฃผ์ ๋ฐฑ์๋ ํ๊ฒฝ ๋ณ์:
+ClawManager๋ React ํ๋ฐํธ์๋, Go ๋ฐฑ์๋, ์ํ ์ ์ฅ์ฉ MySQL, ๊ทธ๋ฆฌ๊ณ `skill-scanner` ๋ฐ ์ค๋ธ์ ํธ ์คํ ๋ฆฌ์ง ํตํฉ์ ํฌํจํ Kubernetes ๋ค์ดํฐ๋ธ ํ๋ซํผ์
๋๋ค. ์ฝ๋๋ฒ ์ด์ค๋ ์ ํ ์๋ธ์์คํ
๋จ์๋ก ๊ตฌ์ฑ๋์ด ์์ผ๋ฏ๋ก, ๊ด๋ จ ๊ฐ์ด๋์์ ์์ํ ๋ค ์ฝ๋๋ก ๋ค์ด๊ฐ๋ ๋ฐฉ์์ด ๊ฐ์ฅ ํจ์จ์ ์
๋๋ค.
-- `SERVER_ADDRESS`
-- `SERVER_MODE`
-- `DB_HOST`
-- `DB_PORT`
-- `DB_USER`
-- `DB_PASSWORD`
-- `DB_NAME`
-- `JWT_SECRET`
-
-### CSV ๊ฐ์ ธ์ค๊ธฐ ํ
ํ๋ฆฟ
+- ํ๋ฐํธ์๋์ ๊ด๋ฆฌ์ ๋ฐ ์ฌ์ฉ์ ํ๋ฉด์ `frontend/`
+- ๋ฐฑ์๋ ์๋น์ค, handler, repository, migration์ `backend/`
+- ๋ฐฐํฌ ์์ฐ์ `deployments/`
+- ์ ํ ๋ฌธ์์ ์ด๋ฏธ์ง ์์ฐ์ `docs/`
-```csv
-Username,Email,Role,Max Instances,Max CPU Cores,Max Memory (GB),Max Storage (GB),Max GPU Count (optional)
-```
-
-๋ฉ๋ชจ:
-
-- `Email` ์ ์ ํ ์ฌํญ์
๋๋ค
-- `Max GPU Count (optional)` ์ ์ ํ ์ฌํญ์
๋๋ค
-- ๋๋จธ์ง ์ด์ ๋ชจ๋ ํ์์
๋๋ค
+[Developer Guide (English)](./docs/developer-guide.md)๋ฅผ ์ฐธ๊ณ ํ์ธ์.
+
+## ๋ฌธ์
+
+- [์ฌ์ฉ์ ๊ฐ์ด๋](./docs/use_guide_ko.md)
+- [Deployment Guide (English)](./docs/deployment.md)
+- [Admin and User Guide (English)](./docs/admin-user-guide.md)
+- [Agent Control Plane Guide (English)](./docs/agent-control-plane.md)
+- [AI Gateway Guide (English)](./docs/aigateway.md)
+- [Security / Skill Scanner Guide (English)](./docs/security-skill-scanner.md)
+- [Resource Management Guide (English)](./docs/resource-management.md)
+- [Developer Guide (English)](./docs/developer-guide.md)
## ๋ผ์ด์ ์ค
-์ด ํ๋ก์ ํธ๋ MIT License๋ก ๋ฐฐํฌ๋ฉ๋๋ค.
+์ด ํ๋ก์ ํธ๋ MIT License๋ก ๊ณต๊ฐ๋ฉ๋๋ค.
+
+## ์คํ์์ค
+
+Issue์ Pull Request๋ฅผ ํ์ํฉ๋๋ค.
-## ์คํ ์์ค
+## Star History
-issue์ pull request๋ฅผ ํ์ํฉ๋๋ค.
+
+
+
+
diff --git a/README.md b/README.md
index d4c5947..c367dfe 100644
--- a/README.md
+++ b/README.md
@@ -5,20 +5,20 @@
- A Kubernetes-first control plane for managing OpenClaw and Linux desktop runtimes at team and cluster scale.
+ A Kubernetes-native control plane for AI agent instance management, with governed AI access, runtime orchestration, and reusable resources across multiple agent runtimes.
Languages:
English |
- ไธญๆ |
- ๆฅๆฌ่ช |
- ํ๊ตญ์ด |
+ Chinese |
+ Japanese |
+ Korean |
Deutsch
-
- Explore the Product |
+ AI Gateway |
+ Agent Control Plane |
+ Resource Management |
+ Get Started
-## News
-
-- [2026-03-26]: ๐๐ AI Gateway documentation and overview were refreshed, including model governance, audit and trace, cost accounting, and risk control. See [AI Gateway](#ai-gateway).
-- [2026-03-20]: ๐๐ ClawManager Release โ ClawManager is now a virtual desktop management platform featuring batch deployment, Webtop support, desktop portal access, runtime image settings, OpenClaw memory/preferences Markdown backup and migration, cluster resource overview, and multilingual documentation.
-
-
+
-## What It Is
+See ClawManager in 60 Seconds
-ClawManager helps teams deploy, operate, and access desktop runtimes on Kubernetes from one place.
+
+
-It is built for environments where you need to:
+
+ A quick look at fast agent provisioning, skill management and scanning, and AI Gateway governance.
+
-- create desktop instances for multiple users
-- control quotas, runtime images, and lifecycle centrally
-- keep desktop services inside the cluster
-- give users secure browser access without exposing pods directly
+## What's New
-## Why Users Pick It
+Recent highlights from the latest product and documentation updates.
-- One admin panel for users, quotas, instances, and runtime images
-- OpenClaw support with import/export for memory and preferences
-- Secure desktop access through the platform instead of direct pod exposure
-- AI Gateway governance for controlled model access, audit trails, cost analysis, and risk controls
-- Kubernetes-native deployment and operations flow
-- Works for both admin-managed rollout and self-service instance creation
+- [2026-04-08] Added skill management and skill scanning workflows to the platform, via [Merged PR #52](https://github.com/Yuan-lab-LLM/ClawManager/pull/52).
+- [2026-03-26] AI Gateway documentation was refreshed with stronger coverage for model governance, audit and trace, cost accounting, and risk control. See the [AI Gateway Guide](./docs/aigateway.md).
+- [2026-03-20] ClawManager evolved into a broader control plane for AI agent workspaces, with stronger runtime control, reusable resources, and security scanning workflows.
+> If ClawManager is useful to your team, please star the project to help more users and contributors discover it.
-## Quick Start
+
+
+
+
-### Prerequisites
-- A working Kubernetes cluster
-- `kubectl get nodes` works
+## Product Tour
-### Deploy
+ClawManager brings AI agent instance operations to Kubernetes and layers three higher-level control planes on top of that runtime foundation. Teams use it to govern AI access, orchestrate runtime behavior through agents, and manage reusable channels and skills with scanning and bundle-based delivery.
-Apply the bundled manifest:
+It is designed for:
-```bash
-kubectl apply -f deployments/k8s/clawmanager.yaml
-kubectl get pods -A
-kubectl get svc -A
-```
+- platform teams running AI agent instances for multiple users
+- operators who need runtime visibility, command dispatch, and desired-state control
+- builders who want governed AI access and reusable resource injection instead of manual per-instance setup
-## Build From Source
+## Get Started
-If you want to run or package ClawManager from source instead of using the bundled Kubernetes manifest:
+ClawManager now has clearer entry points for both full Kubernetes deployments and lightweight cluster setups. If you want to evaluate the product quickly, start with the guide that matches your environment and then follow the first-use walkthrough.
-### Frontend
+- Standard Kubernetes deployment: [deployments/k8s/clawmanager.yaml](./deployments/k8s/clawmanager.yaml)
+- K3s or lightweight deployment: [deployments/k3s/clawmanager.yaml](./deployments/k3s/clawmanager.yaml)
+- Operations-oriented quick start and first login flow: [User Guide](./docs/use_guide_en.md)
+- Deployment notes and architecture-level context: [Deployment Guide](./docs/deployment.md)
-```bash
-cd frontend
-npm install
-npm run build
-```
+## Three Control Planes
-### Backend
+### AI Gateway
-```bash
-cd backend
-go mod tidy
-go build -o bin/clawreef cmd/server/main.go
-```
+AI Gateway is the governance plane for model access inside ClawManager. It gives managed agent runtimes a unified OpenAI-compatible entry point while adding policy and audit controls on top of upstream providers.
-### Docker Image
+- Unified gateway entry for model traffic
+- Secure model routing and policy-aware model selection
+- End-to-end audit and trace records
+- Built-in cost accounting and usage analysis
+- Risk control rules that can block or reroute requests
-Build the full application image from the repository root:
+See the [AI Gateway Guide](./docs/aigateway.md).
-```bash
-docker build -t clawmanager:latest .
-```
+### Agent Control Plane
-### Default Accounts
+Agent Control Plane is the runtime orchestration layer for managed AI agent instances. It turns each instance into a managed runtime that can register, report status, receive commands, and stay aligned with platform-side desired state.
-- Default admin account: `admin / admin123`
-- Default password for imported admin users: `admin123`
-- Default password for imported regular users: `user123`
+- Agent registration with secure bootstrap and session lifecycle
+- Heartbeat-driven runtime status and health reporting
+- Desired-state synchronization between the control plane and the instance
+- Runtime command dispatch for start, stop, config apply, health checks, and skill operations
+- Instance-level visibility into agent status, channels, skills, and command history
-### First Use
+See the [Agent Control Plane Guide](./docs/agent-control-plane.md).
-1. Log in as admin.
-2. Create or import users and assign quotas.
-3. Review or update runtime image cards in system settings.
-4. Log in as a user and create an instance.
-5. Access the desktop through Portal View or Desktop Access.
+### Resource Management
-## Main Capabilities
+Resource Management is the reusable asset layer for AI agent workspaces. It helps teams prepare channels and skills once, organize them into bundles, inject them into instances, and keep security review in the loop.
-- Instance lifecycle management: create, start, stop, restart, delete, inspect, and sync
-- Runtime types: `openclaw`, `webtop`, `ubuntu`, `debian`, `centos`, `custom`
-- Runtime image card management from the admin panel
-- User quota control for CPU, memory, storage, GPU, and instance count
-- Cluster resource overview for nodes, CPU, memory, and storage
-- Token-based desktop access with WebSocket forwarding
-- AI Gateway for model management, traceable audit logs, cost accounting, and risk control
-- CSV-based bulk user import
-- Multilingual interface
+- Channel management for workspace connectivity and integration templates
+- Skill management for reusable packaged capabilities
+- Skill Scanner workflows for risk review and scan operations
+- Bundle-based resource composition for repeatable workspace setup
+- Injection snapshots and runtime-level visibility into what was applied
-## AI Gateway
+See the [Resource Management Guide](./docs/resource-management.md) and the [Security / Skill Scanner Guide](./docs/security-skill-scanner.md).
-AI Gateway is the governance plane for model access inside ClawManager. It gives OpenClaw instances a single OpenAI-compatible entry point while adding policy, audit, and cost controls on top of upstream providers.
+## Product Gallery
-- Model management for regular and secure models, provider onboarding, activation, endpoint configuration, and pricing policy
-- End-to-end audit and trace records for requests, responses, routing decisions, and risk hits
-- Built-in cost accounting with token tracking and estimated usage analysis
-- Risk control with configurable rules and automated actions such as `block` and `route_secure_model`
+The product is designed to feel coherent across administration, workspace access, and AI governance. Instead of treating these as separate tools, ClawManager brings them into one control surface.
-### Supported Model Service Platforms
+### Admin Console
-ClawManager includes built-in vendor templates for:
+The admin console brings together users, quotas, runtime operations, security controls, and platform-level policies in one place. It is the operational center for teams running AI agent infrastructure at scale.
-- OpenAI
-- OpenRouter
-- DeepSeek
-- SiliconFlow
-- Moonshot AI
-- Zhipu AI
-- Alibaba DashScope
-- Volcengine Ark
-- xAI
-- Together AI
-- Fireworks AI
-- Perplexity
-- 01.AI
-- MiniMax
-- Local / Internal endpoints
+
+
-`Local / Internal` can also be used for self-hosted OpenAI-compatible gateways, Ollama, One API, and other private model endpoints.
+### Portal Access
-For screenshots, the full feature breakdown, and the model selection and routing flow, see [docs/aigateway.md](./docs/aigateway.md).
+The portal experience gives users a clean entry point into their workspaces, with browser-based access and runtime visibility that stays connected to the control plane instead of exposing infrastructure details directly.
-## Product Flow
+
+
-1. An admin defines users, quotas, and runtime image policies.
-2. A user creates an OpenClaw or Linux desktop instance.
-3. ClawManager creates and tracks the Kubernetes resources.
-4. The user accesses the desktop through the platform.
-5. Admins monitor health and capacity from the dashboard.
+### AI Gateway
-## Architecture
+AI Gateway extends the workspace experience with governed model access, audit trails, cost visibility, and risk-aware routing, making AI usage manageable as part of the platform rather than an isolated integration.
-```text
-Browser
- -> ClawManager Frontend
- -> ClawManager Backend
- -> MySQL
- -> Kubernetes API
- -> Pod / PVC / Service
- -> OpenClaw / Webtop / Linux Desktop Runtime
-```
+
+
-## Configuration Notes
+## How It Works
-- Instance services stay on Kubernetes internal networking
-- Desktop access goes through the authenticated backend proxy
-- Runtime images can be overridden from system settings
-- Backend deployment is best kept inside the cluster
+1. Admins define governance policies and reusable resources.
+2. Users create or enter managed AI agent workspaces on Kubernetes.
+3. Agents connect back to the control plane and report runtime state.
+4. Channels, skills, and bundles are compiled and applied to instances.
+5. AI traffic flows through AI Gateway with audit, risk, and cost controls.
-Common backend environment variables:
+## Developer Snapshot
-- `SERVER_ADDRESS`
-- `SERVER_MODE`
-- `DB_HOST`
-- `DB_PORT`
-- `DB_USER`
-- `DB_PASSWORD`
-- `DB_NAME`
-- `JWT_SECRET`
+ClawManager is built as a Kubernetes-native platform with a React frontend, a Go backend, MySQL for state, and supporting services such as skill-scanner and object storage integrations. The repository is organized around product subsystems rather than a single monolith page, so the best developer experience is to start from the relevant guide and then move into the code.
-### CSV Import Template
+- Frontend app and admin/user surfaces live under `frontend/`
+- Backend services, handlers, repositories, and migrations live under `backend/`
+- Deployment assets live under `deployments/`
+- Supporting product docs live under `docs/`
-```csv
-Username,Email,Role,Max Instances,Max CPU Cores,Max Memory (GB),Max Storage (GB),Max GPU Count (optional)
-```
-
-Notes:
+See the [Developer Guide](./docs/developer-guide.md).
-- `Email` is optional
-- `Max GPU Count (optional)` is optional
-- all other columns are required
+## Documentation
+- [User Guide](./docs/use_guide_en.md)
+- [Deployment Guide](./docs/deployment.md)
+- [Admin and User Guide](./docs/admin-user-guide.md)
+- [Agent Control Plane Guide](./docs/agent-control-plane.md)
+- [AI Gateway Guide](./docs/aigateway.md)
+- [Security / Skill Scanner Guide](./docs/security-skill-scanner.md)
+- [Resource Management Guide](./docs/resource-management.md)
+- [Developer Guide](./docs/developer-guide.md)
## License
@@ -224,7 +189,6 @@ This project is licensed under the MIT License.
Issues and pull requests are welcome.
-
## Star History
diff --git a/README.zh-CN.md b/README.zh-CN.md
index e4389b7..7373f67 100644
--- a/README.zh-CN.md
+++ b/README.zh-CN.md
@@ -5,7 +5,7 @@
- ไธไธช้ขๅๅข้ไธ้็พค่งๆจกๅบๆฏ็ Kubernetes-first ๆงๅถๅนณ้ข๏ผ็จไบ็ปไธ็ฎก็ OpenClaw ๅ Linux ๆก้ข่ฟ่กๆถใ
+ ไธไธช้ขๅ AI Agent ๅฎไพ็ฎก็็ Kubernetes ๅ็ๆงๅถๅนณ้ข๏ผๆไพๅๆฒป็็ AI ่ฎฟ้ฎใ่ฟ่กๆถ็ผๆ๏ผไปฅๅ้็จไบๅค็ง Agent Runtime ็ๅฏๅค็จ่ตๆบ็ฎก็่ฝๅใ
@@ -18,7 +18,7 @@
-
- ไบ่งฃไบงๅ |
+ AI Gateway |
+ Agent Control Plane |
+ ่ตๆบ็ฎก็ |
+ ๅฟซ้ๅผๅง
+
+
+
+
-## ๆฐ้ป
-
-- [2026-03-26]: ๐๐ AI Gateway ๆๆกฃไธๆป่งๅทฒๆดๆฐ๏ผๆถต็ๆจกๅๆฒป็ใๅฎก่ฎก่ฟฝ่ธชใๆๆฌๆ ธ็ฎๅ้ฃ้ฉๆงๅถใๅ่ง [AI Gateway](#ai-gateway)ใ
-- [2026-03-20]: ๐๐ ClawManager ๅๅธ โโ ClawManager ็ฐๅทฒๆไธบไธๆฌพ่ๆๆก้ข็ฎก็ๅนณๅฐ๏ผๆฏๆๆน้้จ็ฝฒใWebtop ๆฏๆใๆก้ข้จๆท่ฎฟ้ฎใ่ฟ่กๆถ้ๅ้
็ฝฎใOpenClaw ่ฎฐๅฟ/ๅๅฅฝ Markdown ๅคไปฝไธ่ฟ็งปใ้็พค่ตๆบๆป่งไปฅๅๅค่ฏญ่จๆๆกฃใ
+60 ็ง่ฎค่ฏ ClawManager
+
+
-
-## ๅฎๆฏไปไน
+## ๆๆฐๅจๆ
-ClawManager ๅธฎๅฉๅข้ๅจ Kubernetes ไธ็ปไธ้จ็ฝฒใ่ฟ็ปดๅนถ่ฎฟ้ฎๆก้ข่ฟ่กๆถใ
+่ฟ้ๅฑ็คบๆ่ฟ็้่ฆไบงๅไธๆๆกฃๆดๆฐใ
-ๅฎ้ๅ่ฟไบๅบๆฏ๏ผ
+- [2026-04-08] ๅนณๅฐๆฐๅขไบ Skill ็ฎก็ไธ Skill ๆซๆๅทฅไฝๆต๏ผ่ง [Merged PR #52](https://github.com/Yuan-lab-LLM/ClawManager/pull/52)ใ
+- [2026-03-26] AI Gateway ๆๆกฃๅทฒๆดๆฐ๏ผ่กฅๅ
ไบๆจกๅๆฒป็ใๅฎก่ฎก่ฟฝ่ธชใๆๆฌๆ ธ็ฎไธ้ฃ้ฉๆงๅถ่ฝๅ๏ผ่ง [AI Gateway Guide](./docs/aigateway.md)ใ
+- [2026-03-20] ClawManager ่ฟไธๆญฅๆผ่ฟไธบ้ขๅ AI Agent ๅทฅไฝ็ฉบ้ด็ๆงๅถๅนณ้ข๏ผๅผบๅไบ่ฟ่กๆถๆงๅถใๅฏๅค็จ่ตๆบไธๅฎๅ
จๆซๆๅทฅไฝๆตใ
-- ้่ฆไธบๅคไธช็จๆทๅๅปบๆก้ขๅฎไพ
-- ้่ฆ้ไธญ็ฎก็้
้ขใ้ๅๅ็ๅฝๅจๆ
-- ๅธๆๆก้ขๆๅกๅง็ปไฟ็ๅจ้็พคๅ
้จ
-- ๅธๆ้่ฟๅฎๅ
จ็ๆต่งๅจ่ฎฟ้ฎๆนๅผ๏ผ่ไธๆฏ็ดๆฅๆด้ฒ Pod
+> ๅฆๆ ClawManager ๅฏนไฝ ็ๅข้ๆๅธฎๅฉ๏ผๆฌข่ฟไธบ้กน็ฎ็นไธไธช Star๏ผๅธฎๅฉๆดๅค็จๆทๅๅผๅ่
ๅ็ฐๅฎใ
-## ไธบไปไน้ๆฉๅฎ
+
+
+
+
-- ไธไธช็ฎก็ๅๅฐ็ปไธ็ฎก็็จๆทใ้
้ขใๅฎไพๅ่ฟ่กๆถ้ๅ
-- ๆฏๆ OpenClaw๏ผๅนถๆไพ่ฎฐๅฟไธๅๅฅฝ่ฎพ็ฝฎ็ๅฏผๅ
ฅๅฏผๅบ
-- ้่ฟๅนณๅฐๆไพๅฎๅ
จๆก้ข่ฎฟ้ฎ๏ผ่ไธๆฏ็ดๆฅๆด้ฒๆๅก
-- AI Gateway ๆไพๅๆงๆจกๅ่ฎฟ้ฎใๅฎก่ฎก่ฟฝ่ธชใๆๆฌๅๆๅ้ฃ้ฉๆงๅถ
-- ๅคฉ็ถ้้
Kubernetes ็้จ็ฝฒไธ่ฟ็ปดๆนๅผ
-- ๅๆถๆฏๆ็ฎก็ๅ็ปไธๅๆพๅ็จๆท่ชๅฉๅๅปบ
+
+
-- ้ขๅๆฎ้ๆจกๅไธๅฎๅ
จๆจกๅ็ๆจกๅ็ฎก็๏ผไปฅๅ Provider ๆฅๅ
ฅใๅฏๅใ็ซฏ็น้
็ฝฎๅไปทๆ ผ็ญ็ฅ
-- ้ขๅ่ฏทๆฑใๅๅบใ่ทฏ็ฑๅณ็ญๅ้ฃ้ฉๅฝไธญ็ๅ
จ้พ่ทฏๅฎก่ฎกไธ่ฟฝ่ธช่ฎฐๅฝ
-- ๅ
็ฝฎ Token ็ป่ฎกไธไผฐ็ฎๅๆ็ๆๆฌๆ ธ็ฎ่ฝๅ
-- ๅบไบๅฏ้
็ฝฎ่งๅ็้ฃ้ฉๆงๅถ๏ผๅนถๆฏๆ `block` ไธ `route_secure_model` ็ญ่ชๅจๅจไฝ
+### Portal ่ฎฟ้ฎ
-### ๆฏๆ็ๆจกๅๆๅกๅนณๅฐ
+Portal ไธบ็จๆทๆไพ็ปไธ็ๅทฅไฝ็ฉบ้ดๅ
ฅๅฃใ็จๆทๅฏไปฅ้่ฟๆต่งๅจ่ฎฟ้ฎๅฎไพ๏ผๅนถๆฅ็ไธๆงๅถๅนณ้ขไฟๆไธ่ด็่ฟ่กๆถ็ถๆ๏ผ่ไธ้่ฆ็ดๆฅ้ขๅฏนๅบๅฑๅบ็ก่ฎพๆฝ็ป่ใ
-ClawManager ๅฝๅๅ
็ฝฎไบไปฅไธๆจกๅๆๅกๅนณๅฐๆจกๆฟ๏ผ
+
+
-- OpenAI
-- OpenRouter
-- DeepSeek
-- SiliconFlow
-- Moonshot AI
-- ๆบ่ฐฑ AI
-- ้ฟ้ไบ DashScope
-- ็ซๅฑฑๅผๆ Ark
-- Groq
-- Together AI
-- Fireworks AI
-- xAI
-- Perplexity
-- 01.AI
-- MiniMax
-- Local / Internal ๆฌๅฐๆๅ
็ฝ็ซฏ็น
+### AI Gateway
-ๅ
ถไธญ `Local / Internal` ๆจกๅผไนๅฏ็จไบๆฅๅ
ฅ่ชๅปบ OpenAI-compatible ็ฝๅ
ณใOllamaใOne API ไปฅๅๅ
ถไปๅ
็ฝๆจกๅๆๅกใ
+AI Gateway ๅฐๆจกๅ่ฎฟ้ฎๆฒป็็บณๅ
ฅๅทฅไฝ็ฉบ้ดไฝ้ชๆฌ่บซ๏ผๆไพๅฎก่ฎก่ฎฐๅฝใๆๆฌๅฏ่งๆงไธ้ฃ้ฉ่ทฏ็ฑ่ฝๅ๏ผ่ฎฉ AI ไฝฟ็จๆไธบๅนณๅฐ่ฝๅ็ไธ้จๅ๏ผ่ไธๆฏ้ถๆฃๆฅๅ
ฅใ
-ๅฆ้ๆฅ็ๆชๅพใๅฎๆดๅ่ฝๆ่งฃไปฅๅๆจกๅ้ๆฉไธ่ทฏ็ฑๆต็จ๏ผ่ฏทๅ้
[docs/aigateway.md](./docs/aigateway.md)ใ
+
+
-## ไบงๅๆต็จ
+## ๅทฅไฝๆนๅผ
-1. ็ฎก็ๅๅฎไน็จๆทใ้
้ขๅ่ฟ่กๆถ้ๅ็ญ็ฅใ
-2. ็จๆทๅๅปบ OpenClaw ๆ Linux ๆก้ขๅฎไพใ
-3. ClawManager ๅๅปบๅนถ่ท่ธช Kubernetes ่ตๆบใ
-4. ็จๆท้่ฟๅนณๅฐ่ฎฟ้ฎๆก้ขใ
-5. ็ฎก็ๅ้่ฟไปช่กจ็็ๆงๅฅๅบท็ถๆๅๅฎน้ใ
+1. ็ฎก็ๅๅ
ๅฎไนๆฒป็็ญ็ฅไธๅฏๅค็จ่ตๆบใ
+2. ็จๆทๅจ Kubernetes ไธๅๅปบๆ่ฟๅ
ฅๅ็ฎก AI Agent ๅทฅไฝ็ฉบ้ดใ
+3. Agent ๅ่ฟๆงๅถๅนณ้ขๅนถไธๆฅ่ฟ่กๆถ็ถๆใ
+4. Channelใskill ไธ bundle ่ขซ็ผ่ฏๅนถๅบ็จๅฐๅฎไพไธญใ
+5. AI ๆต้้่ฟ AI Gateway ่ฟๅ
ฅไธๆธธๆๅก๏ผๅนถ้ๅธฆๅฎก่ฎกใ้ฃ้ฉไธๆๆฌๆงๅถใ
-## ๆถๆ
+## ๅผๅ่
ๆฆ่ง
-```text
-Browser
- -> ClawManager Frontend
- -> ClawManager Backend
- -> MySQL
- -> Kubernetes API
- -> Pod / PVC / Service
- -> OpenClaw / Webtop / Linux Desktop Runtime
-```
+ClawManager ๆฏไธไธช Kubernetes ๅ็ๅนณๅฐ๏ผๅ
ๅซ React ๅ็ซฏใGo ๅ็ซฏใMySQL ็ถๆๅญๅจ๏ผไปฅๅ `skill-scanner` ไธๅฏน่ฑกๅญๅจ็ญๆฏๆ็ปไปถใไปฃ็ ๅบๆไบงๅๅญ็ณป็ป็ป็ป๏ผๅ ๆญคๆด้ๅไปๅฏนๅบ่ฝๅ็ๆๅๅๅ
ฅ๏ผๅ่ฟๅ
ฅไปฃ็ ๅฎ็ฐใ
-## ้
็ฝฎ่ฏดๆ
+- ๅ็ซฏ็ฎก็็้ขไธ็จๆท็้ขไฝไบ `frontend/`
+- ๅ็ซฏๆๅกใhandlerใrepository ไธ migration ไฝไบ `backend/`
+- ้จ็ฝฒ่ตไบงไฝไบ `deployments/`
+- ไบงๅๆๆกฃไธ็ด ๆไฝไบ `docs/`
-- ๅฎไพๆๅกไฟ็ๅจ Kubernetes ้็พคๅ
้จ็ฝ็ป
-- ๆก้ข่ฎฟ้ฎ้่ฟๅทฒ่ฎค่ฏ็ๅ็ซฏไปฃ็่ฝฌๅ
-- ่ฟ่กๆถ้ๅๅฏไปฅๅจ็ณป็ป่ฎพ็ฝฎไธญ่ฆ็
-- ๅ็ซฏๆๅฅฝ้จ็ฝฒๅจ้็พคๅ
้จ
-
-ๅธธ็จๅ็ซฏ็ฏๅขๅ้๏ผ
+ๅ่ง [Developer Guide๏ผ่ฑๆ๏ผ](./docs/developer-guide.md)ใ
-- `SERVER_ADDRESS`
-- `SERVER_MODE`
-- `DB_HOST`
-- `DB_PORT`
-- `DB_USER`
-- `DB_PASSWORD`
-- `DB_NAME`
-- `JWT_SECRET`
-
-### CSV ๅฏผๅ
ฅๆจกๆฟ
+## ๆๆกฃ
-```csv
-Username,Email,Role,Max Instances,Max CPU Cores,Max Memory (GB),Max Storage (GB),Max GPU Count (optional)
-```
-
-่ฏดๆ๏ผ
-
-- `Email` ไธบๅฏ้้กน
-- `Max GPU Count (optional)` ไธบๅฏ้้กน
-- ๅ
ถไปๅๅไธบๅฟ
ๅกซ้กน
+- [็จๆทๆๅ](./docs/use_guide_cn.md)
+- [Deployment Guide๏ผ่ฑๆ๏ผ](./docs/deployment.md)
+- [Admin and User Guide๏ผ่ฑๆ๏ผ](./docs/admin-user-guide.md)
+- [Agent Control Plane Guide๏ผ่ฑๆ๏ผ](./docs/agent-control-plane.md)
+- [AI Gateway Guide๏ผ่ฑๆ๏ผ](./docs/aigateway.md)
+- [Security / Skill Scanner Guide๏ผ่ฑๆ๏ผ](./docs/security-skill-scanner.md)
+- [Resource Management Guide๏ผ่ฑๆ๏ผ](./docs/resource-management.md)
+- [Developer Guide๏ผ่ฑๆ๏ผ](./docs/developer-guide.md)
## ่ฎธๅฏ่ฏ
-ๆฌ้กน็ฎๅบไบ MIT License ๅๅธใ
+ๆฌ้กน็ฎๅบไบ MIT License ๅผๆบใ
-## ๅผๆบ
+## ๅผๆบๅไฝ
-ๆฌข่ฟๆไบค issue ๅ pull requestใ
+ๆฌข่ฟๆไบค Issue ไธ Pull Requestใ
## Star History
diff --git a/deployments/k3s/clawmanager.yaml b/deployments/k3s/clawmanager.yaml
new file mode 100644
index 0000000..374a02b
--- /dev/null
+++ b/deployments/k3s/clawmanager.yaml
@@ -0,0 +1,782 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+ name: clawmanager-system
+---
+apiVersion: v1
+kind: Secret
+metadata:
+ name: clawmanager-secrets
+ namespace: clawmanager-system
+type: Opaque
+stringData:
+ mysql-root-password: root123
+ mysql-password: clawreef123
+ jwt-secret: change-me-in-production
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: clawmanager-mysql-init
+ namespace: clawmanager-system
+data:
+ 001_init_schema.sql: |
+ CREATE DATABASE IF NOT EXISTS clawmanager CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
+ USE clawmanager;
+
+ CREATE TABLE IF NOT EXISTS users (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ username VARCHAR(255) UNIQUE NOT NULL,
+ email VARCHAR(320) UNIQUE NOT NULL,
+ password_hash VARCHAR(255) NOT NULL,
+ role ENUM('admin', 'user') DEFAULT 'user',
+ is_active BOOLEAN DEFAULT TRUE,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ last_login TIMESTAMP,
+ INDEX idx_username (username),
+ INDEX idx_role (role)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS instances (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ user_id INT NOT NULL,
+ name VARCHAR(255) NOT NULL,
+ description TEXT,
+ type ENUM('openclaw', 'ubuntu', 'debian', 'centos', 'custom', 'webtop') DEFAULT 'ubuntu',
+ status ENUM('creating', 'running', 'stopped', 'error', 'deleting') DEFAULT 'creating',
+ cpu_cores INT NOT NULL,
+ memory_gb INT NOT NULL,
+ disk_gb INT NOT NULL,
+ gpu_enabled BOOLEAN DEFAULT FALSE,
+ gpu_type VARCHAR(100),
+ gpu_count INT DEFAULT 0,
+ os_type VARCHAR(50) NOT NULL,
+ os_version VARCHAR(50) NOT NULL,
+ image_registry VARCHAR(255),
+ image_tag VARCHAR(100),
+ storage_class VARCHAR(50) DEFAULT 'standard',
+ mount_path VARCHAR(255) DEFAULT '/data',
+ pod_name VARCHAR(255),
+ pod_namespace VARCHAR(255),
+ pod_ip VARCHAR(45),
+ access_url VARCHAR(500),
+ access_token VARCHAR(255),
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ started_at TIMESTAMP,
+ stopped_at TIMESTAMP,
+ FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+ INDEX idx_user_id (user_id),
+ INDEX idx_status (status),
+ INDEX idx_type (type)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS persistent_volumes (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ instance_id INT NOT NULL,
+ pvc_name VARCHAR(255) UNIQUE NOT NULL,
+ pvc_namespace VARCHAR(255) NOT NULL,
+ storage_size_gb INT NOT NULL,
+ storage_class VARCHAR(50),
+ mount_path VARCHAR(255),
+ status ENUM('pending', 'bound', 'released', 'failed') DEFAULT 'pending',
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ FOREIGN KEY (instance_id) REFERENCES instances(id) ON DELETE CASCADE,
+ INDEX idx_instance_id (instance_id),
+ UNIQUE KEY uk_pvc_name_namespace (pvc_name, pvc_namespace)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS backups (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ instance_id INT NOT NULL,
+ backup_name VARCHAR(255) NOT NULL,
+ backup_size_gb INT,
+ backup_path VARCHAR(500),
+ status ENUM('creating', 'completed', 'failed', 'deleted') DEFAULT 'creating',
+ backup_type ENUM('manual', 'scheduled') DEFAULT 'manual',
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ completed_at TIMESTAMP,
+ expires_at TIMESTAMP,
+ FOREIGN KEY (instance_id) REFERENCES instances(id) ON DELETE CASCADE,
+ INDEX idx_instance_id (instance_id),
+ INDEX idx_created_at (created_at)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS backup_schedules (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ instance_id INT NOT NULL,
+ schedule_name VARCHAR(255),
+ cron_expression VARCHAR(100) NOT NULL,
+ retention_days INT DEFAULT 30,
+ is_active BOOLEAN DEFAULT TRUE,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ FOREIGN KEY (instance_id) REFERENCES instances(id) ON DELETE CASCADE,
+ INDEX idx_instance_id (instance_id)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS user_quotas (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ user_id INT NOT NULL UNIQUE,
+ max_instances INT DEFAULT 10,
+ max_cpu_cores INT DEFAULT 40,
+ max_memory_gb INT DEFAULT 100,
+ max_storage_gb INT DEFAULT 500,
+ max_gpu_count INT DEFAULT 2,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+ INDEX idx_user_id (user_id)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS instance_usage (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ instance_id INT NOT NULL,
+ cpu_usage_percent DECIMAL(5,2),
+ memory_usage_gb DECIMAL(10,2),
+ disk_usage_gb DECIMAL(10,2),
+ gpu_usage_percent DECIMAL(5,2),
+ uptime_seconds INT,
+ recorded_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ FOREIGN KEY (instance_id) REFERENCES instances(id) ON DELETE CASCADE,
+ INDEX idx_instance_recorded (instance_id, recorded_at)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS audit_logs (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ user_id INT,
+ action VARCHAR(100) NOT NULL,
+ resource_type VARCHAR(50) NOT NULL,
+ resource_id INT,
+ details JSON,
+ ip_address VARCHAR(45),
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE SET NULL,
+ INDEX idx_user_id (user_id),
+ INDEX idx_action (action),
+ INDEX idx_created_at (created_at)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ INSERT INTO users (username, email, password_hash, role, is_active)
+ SELECT 'admin', 'admin@clawmanager.local', '$2a$10$pbenze514mwv3pvQySQBVOsF5J4DBXL2kVo1hLa8JFhQu5x3AKvBi', 'admin', TRUE
+ WHERE NOT EXISTS (SELECT 1 FROM users WHERE username = 'admin');
+
+ INSERT INTO user_quotas (user_id, max_instances, max_cpu_cores, max_memory_gb, max_storage_gb, max_gpu_count)
+ SELECT id, 100, 200, 1000, 5000, 10 FROM users
+ WHERE username = 'admin'
+ AND NOT EXISTS (SELECT 1 FROM user_quotas WHERE user_id = users.id);
+ 002_add_webtop_instance_type.sql: |
+ USE clawmanager;
+ ALTER TABLE instances
+ MODIFY COLUMN type ENUM('openclaw', 'ubuntu', 'debian', 'centos', 'custom', 'webtop') DEFAULT 'ubuntu';
+ 003_add_system_image_settings.sql: |
+ USE clawmanager;
+ CREATE TABLE IF NOT EXISTS system_image_settings (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ instance_type VARCHAR(50) NOT NULL UNIQUE,
+ display_name VARCHAR(255) NOT NULL,
+ image VARCHAR(500) NOT NULL,
+ is_enabled BOOLEAN NOT NULL DEFAULT TRUE,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ INDEX idx_instance_type (instance_type)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+ 004_fix_seeded_admin_password.sql: |
+ USE clawmanager;
+ UPDATE users
+ SET password_hash = '$2a$10$pbenze514mwv3pvQySQBVOsF5J4DBXL2kVo1hLa8JFhQu5x3AKvBi'
+ WHERE username = 'admin'
+ AND password_hash = '$2a$10$N9qo8uLOickgx2ZMRZoMy.MqrzL9wGC3qD3Q.ZHqQH6t3q7l1L5uG';
+ 005_update_openclaw_default_image.sql: |
+ USE clawmanager;
+ UPDATE system_image_settings
+ SET image = 'ghcr.io/yuan-lab-llm/clawmanager-openclaw-image/openclaw:latest'
+ WHERE instance_type = 'openclaw'
+ AND image = 'ericpearlee/openclaw:v2026.3.24';
+ 006_add_openclaw_config_center.sql: |
+ USE clawmanager;
+ SET @openclaw_snapshot_column_exists = (
+ SELECT COUNT(*)
+ FROM information_schema.COLUMNS
+ WHERE TABLE_SCHEMA = DATABASE()
+ AND TABLE_NAME = 'instances'
+ AND COLUMN_NAME = 'openclaw_config_snapshot_id'
+ );
+ SET @openclaw_snapshot_column_sql = IF(
+ @openclaw_snapshot_column_exists = 0,
+ 'ALTER TABLE instances ADD COLUMN openclaw_config_snapshot_id INT NULL AFTER access_token',
+ 'SELECT 1'
+ );
+ PREPARE openclaw_snapshot_column_stmt FROM @openclaw_snapshot_column_sql;
+ EXECUTE openclaw_snapshot_column_stmt;
+ DEALLOCATE PREPARE openclaw_snapshot_column_stmt;
+
+ CREATE TABLE IF NOT EXISTS openclaw_config_resources (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ user_id INT NOT NULL,
+ resource_type VARCHAR(50) NOT NULL,
+ resource_key VARCHAR(100) NOT NULL,
+ name VARCHAR(255) NOT NULL,
+ description TEXT NULL,
+ enabled BOOLEAN NOT NULL DEFAULT TRUE,
+ version INT NOT NULL DEFAULT 1,
+ tags_json LONGTEXT NOT NULL,
+ content_json LONGTEXT NOT NULL,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+ UNIQUE KEY uk_openclaw_resource_key (user_id, resource_type, resource_key),
+ INDEX idx_openclaw_resource_user_type (user_id, resource_type),
+ INDEX idx_openclaw_resource_user_enabled (user_id, enabled)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS openclaw_config_bundles (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ user_id INT NOT NULL,
+ name VARCHAR(255) NOT NULL,
+ description TEXT NULL,
+ enabled BOOLEAN NOT NULL DEFAULT TRUE,
+ version INT NOT NULL DEFAULT 1,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+ INDEX idx_openclaw_bundle_user (user_id),
+ INDEX idx_openclaw_bundle_user_enabled (user_id, enabled)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS openclaw_config_bundle_items (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ bundle_id INT NOT NULL,
+ resource_id INT NOT NULL,
+ sort_order INT NOT NULL DEFAULT 0,
+ required BOOLEAN NOT NULL DEFAULT TRUE,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ FOREIGN KEY (bundle_id) REFERENCES openclaw_config_bundles(id) ON DELETE CASCADE,
+ FOREIGN KEY (resource_id) REFERENCES openclaw_config_resources(id) ON DELETE CASCADE,
+ UNIQUE KEY uk_openclaw_bundle_resource (bundle_id, resource_id),
+ INDEX idx_openclaw_bundle_item_bundle (bundle_id, sort_order)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS openclaw_injection_snapshots (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ instance_id INT NULL,
+ user_id INT NOT NULL,
+ mode VARCHAR(20) NOT NULL,
+ bundle_id INT NULL,
+ selected_resource_ids_json LONGTEXT NOT NULL,
+ resolved_resources_json LONGTEXT NOT NULL,
+ rendered_manifest_json LONGTEXT NOT NULL,
+ rendered_env_json LONGTEXT NOT NULL,
+ secret_name VARCHAR(255) NULL,
+ status VARCHAR(30) NOT NULL DEFAULT 'pending',
+ error_message TEXT NULL,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ activated_at TIMESTAMP NULL,
+ INDEX idx_openclaw_snapshot_user_created (user_id, created_at),
+ INDEX idx_openclaw_snapshot_instance (instance_id),
+ INDEX idx_openclaw_snapshot_bundle (bundle_id)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+ 007_add_instance_agent_control_plane.sql: |
+ USE clawmanager;
+ SET @instance_agent_bootstrap_token_column_exists = (
+ SELECT COUNT(*)
+ FROM information_schema.COLUMNS
+ WHERE TABLE_SCHEMA = DATABASE()
+ AND TABLE_NAME = 'instances'
+ AND COLUMN_NAME = 'agent_bootstrap_token'
+ );
+ SET @instance_agent_bootstrap_token_column_sql = IF(
+ @instance_agent_bootstrap_token_column_exists = 0,
+ 'ALTER TABLE instances ADD COLUMN agent_bootstrap_token VARCHAR(255) NULL AFTER access_token',
+ 'SELECT 1'
+ );
+ PREPARE instance_agent_bootstrap_token_column_stmt FROM @instance_agent_bootstrap_token_column_sql;
+ EXECUTE instance_agent_bootstrap_token_column_stmt;
+ DEALLOCATE PREPARE instance_agent_bootstrap_token_column_stmt;
+
+ CREATE TABLE IF NOT EXISTS instance_agents (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ instance_id INT NOT NULL,
+ agent_id VARCHAR(255) NOT NULL,
+ agent_version VARCHAR(50) NOT NULL,
+ protocol_version VARCHAR(50) NOT NULL,
+ status VARCHAR(30) NOT NULL DEFAULT 'online',
+ capabilities_json LONGTEXT NOT NULL,
+ host_info_json LONGTEXT NULL,
+ session_token VARCHAR(255) NULL,
+ session_expires_at TIMESTAMP NULL,
+ last_heartbeat_at TIMESTAMP NULL,
+ last_reported_at TIMESTAMP NULL,
+ last_seen_ip VARCHAR(45) NULL,
+ registered_at TIMESTAMP NULL,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ FOREIGN KEY (instance_id) REFERENCES instances(id) ON DELETE CASCADE,
+ UNIQUE KEY uk_instance_agents_instance (instance_id),
+ UNIQUE KEY uk_instance_agents_session_token (session_token),
+ INDEX idx_instance_agents_agent_id (agent_id),
+ INDEX idx_instance_agents_status (status),
+ INDEX idx_instance_agents_last_heartbeat (last_heartbeat_at)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS instance_runtime_status (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ instance_id INT NOT NULL,
+ infra_status VARCHAR(30) NOT NULL DEFAULT 'creating',
+ agent_status VARCHAR(30) NOT NULL DEFAULT 'offline',
+ openclaw_status VARCHAR(30) NOT NULL DEFAULT 'unknown',
+ openclaw_pid INT NULL,
+ openclaw_version VARCHAR(100) NULL,
+ current_config_revision_id INT NULL,
+ desired_config_revision_id INT NULL,
+ summary_json LONGTEXT NULL,
+ system_info_json LONGTEXT NULL,
+ health_json LONGTEXT NULL,
+ last_reported_at TIMESTAMP NULL,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ FOREIGN KEY (instance_id) REFERENCES instances(id) ON DELETE CASCADE,
+ UNIQUE KEY uk_instance_runtime_status_instance (instance_id),
+ INDEX idx_instance_runtime_status_agent_status (agent_status),
+ INDEX idx_instance_runtime_status_openclaw_status (openclaw_status)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS instance_desired_state (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ instance_id INT NOT NULL,
+ desired_power_state VARCHAR(30) NOT NULL DEFAULT 'running',
+ desired_config_revision_id INT NULL,
+ desired_runtime_action VARCHAR(50) NULL,
+ updated_by INT NULL,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ FOREIGN KEY (instance_id) REFERENCES instances(id) ON DELETE CASCADE,
+ FOREIGN KEY (updated_by) REFERENCES users(id) ON DELETE SET NULL,
+ UNIQUE KEY uk_instance_desired_state_instance (instance_id)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS instance_commands (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ instance_id INT NOT NULL,
+ agent_id VARCHAR(255) NULL,
+ command_type VARCHAR(50) NOT NULL,
+ payload_json LONGTEXT NULL,
+ status VARCHAR(30) NOT NULL DEFAULT 'pending',
+ idempotency_key VARCHAR(255) NOT NULL,
+ issued_by INT NULL,
+ issued_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ dispatched_at TIMESTAMP NULL,
+ started_at TIMESTAMP NULL,
+ finished_at TIMESTAMP NULL,
+ timeout_seconds INT NOT NULL DEFAULT 300,
+ result_json LONGTEXT NULL,
+ error_message TEXT NULL,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ FOREIGN KEY (instance_id) REFERENCES instances(id) ON DELETE CASCADE,
+ FOREIGN KEY (issued_by) REFERENCES users(id) ON DELETE SET NULL,
+ UNIQUE KEY uk_instance_commands_idempotency (instance_id, idempotency_key),
+ INDEX idx_instance_commands_instance_status (instance_id, status),
+ INDEX idx_instance_commands_agent_status (agent_id, status),
+ INDEX idx_instance_commands_issued_at (issued_at)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS instance_config_revisions (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ instance_id INT NOT NULL,
+ source_snapshot_id INT NULL,
+ source_bundle_id INT NULL,
+ revision_no INT NOT NULL,
+ content_json LONGTEXT NOT NULL,
+ checksum VARCHAR(255) NOT NULL,
+ status VARCHAR(30) NOT NULL DEFAULT 'published',
+ published_by INT NULL,
+ published_at TIMESTAMP NULL,
+ activated_at TIMESTAMP NULL,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ FOREIGN KEY (instance_id) REFERENCES instances(id) ON DELETE CASCADE,
+ FOREIGN KEY (published_by) REFERENCES users(id) ON DELETE SET NULL,
+ UNIQUE KEY uk_instance_config_revision_unique (instance_id, revision_no),
+ INDEX idx_instance_config_revision_instance (instance_id, revision_no),
+ INDEX idx_instance_config_revision_status (status)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+ 008_add_skill_management.sql: |
+ USE clawmanager;
+ CREATE TABLE IF NOT EXISTS skill_blobs (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ content_hash VARCHAR(128) NOT NULL,
+ archive_hash VARCHAR(128) NOT NULL,
+ object_key VARCHAR(512) NOT NULL,
+ file_name VARCHAR(255) NOT NULL,
+ media_type VARCHAR(100) NOT NULL DEFAULT 'application/gzip',
+ size_bytes BIGINT NOT NULL DEFAULT 0,
+ scan_status VARCHAR(30) NOT NULL DEFAULT 'pending',
+ risk_level VARCHAR(30) NOT NULL DEFAULT 'unknown',
+ last_scanned_at TIMESTAMP NULL,
+ last_scan_result_id INT NULL,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ UNIQUE KEY uk_skill_blobs_content_hash (content_hash),
+ INDEX idx_skill_blobs_scan_status (scan_status),
+ INDEX idx_skill_blobs_risk_level (risk_level)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS skills (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ user_id INT NOT NULL,
+ skill_key VARCHAR(120) NOT NULL,
+ name VARCHAR(255) NOT NULL,
+ description TEXT NULL,
+ current_version_id INT NULL,
+ source_type VARCHAR(30) NOT NULL DEFAULT 'uploaded',
+ status VARCHAR(30) NOT NULL DEFAULT 'active',
+ risk_level VARCHAR(30) NOT NULL DEFAULT 'unknown',
+ last_scanned_at TIMESTAMP NULL,
+ last_scan_result_id INT NULL,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+ UNIQUE KEY uk_skills_user_key (user_id, skill_key),
+ INDEX idx_skills_user_status (user_id, status),
+ INDEX idx_skills_risk_level (risk_level)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS skill_versions (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ skill_id INT NOT NULL,
+ blob_id INT NOT NULL,
+ version_no INT NOT NULL,
+ manifest_json LONGTEXT NULL,
+ source_type VARCHAR(30) NOT NULL DEFAULT 'uploaded',
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ FOREIGN KEY (skill_id) REFERENCES skills(id) ON DELETE CASCADE,
+ FOREIGN KEY (blob_id) REFERENCES skill_blobs(id) ON DELETE RESTRICT,
+ UNIQUE KEY uk_skill_versions_skill_version (skill_id, version_no),
+ UNIQUE KEY uk_skill_versions_skill_blob (skill_id, blob_id),
+ INDEX idx_skill_versions_skill_id (skill_id, version_no)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS instance_skills (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ instance_id INT NOT NULL,
+ skill_id INT NOT NULL,
+ skill_version_id INT NULL,
+ source_type VARCHAR(40) NOT NULL DEFAULT 'discovered_in_instance',
+ install_path VARCHAR(1024) NULL,
+ observed_hash VARCHAR(128) NULL,
+ status VARCHAR(30) NOT NULL DEFAULT 'active',
+ last_seen_at TIMESTAMP NULL,
+ removed_at TIMESTAMP NULL,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ FOREIGN KEY (instance_id) REFERENCES instances(id) ON DELETE CASCADE,
+ FOREIGN KEY (skill_id) REFERENCES skills(id) ON DELETE CASCADE,
+ FOREIGN KEY (skill_version_id) REFERENCES skill_versions(id) ON DELETE SET NULL,
+ UNIQUE KEY uk_instance_skills_instance_skill (instance_id, skill_id),
+ INDEX idx_instance_skills_instance (instance_id, status),
+ INDEX idx_instance_skills_skill (skill_id, status)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+ CREATE TABLE IF NOT EXISTS skill_scan_results (
+ id INT AUTO_INCREMENT PRIMARY KEY,
+ blob_id INT NOT NULL,
+ engine VARCHAR(60) NOT NULL,
+ risk_level VARCHAR(30) NOT NULL DEFAULT 'unknown',
+ status VARCHAR(30) NOT NULL DEFAULT 'completed',
+ summary TEXT NULL,
+ findings_json LONGTEXT NULL,
+ scanned_at TIMESTAMP NULL,
+ created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+ updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+ FOREIGN KEY (blob_id) REFERENCES skill_blobs(id) ON DELETE CASCADE,
+ INDEX idx_skill_scan_results_blob (blob_id, scanned_at),
+ INDEX idx_skill_scan_results_risk (risk_level, scanned_at)
+ ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+ name: mysql-data
+ namespace: clawmanager-system
+spec:
+ accessModes:
+ - ReadWriteOnce
+ resources:
+ requests:
+ storage: 5Gi
+ storageClassName: local-path
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: mysql
+ namespace: clawmanager-system
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: mysql
+ template:
+ metadata:
+ labels:
+ app: mysql
+ spec:
+ containers:
+ - name: mysql
+ image: mysql:8.4.8
+ ports:
+ - containerPort: 3306
+ env:
+ - name: MYSQL_ROOT_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: clawmanager-secrets
+ key: mysql-root-password
+ - name: MYSQL_DATABASE
+ value: clawmanager
+ - name: MYSQL_USER
+ value: clawmanager
+ - name: MYSQL_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: clawmanager-secrets
+ key: mysql-password
+ volumeMounts:
+ - name: mysql-data
+ mountPath: /var/lib/mysql
+ - name: mysql-init
+ mountPath: /docker-entrypoint-initdb.d
+ readinessProbe:
+ exec:
+ command: ["sh", "-c", "mysqladmin ping -h 127.0.0.1 -uroot -p$MYSQL_ROOT_PASSWORD"]
+ initialDelaySeconds: 20
+ periodSeconds: 10
+ volumes:
+ - name: mysql-data
+ persistentVolumeClaim:
+ claimName: mysql-data
+ - name: mysql-init
+ configMap:
+ name: clawmanager-mysql-init
+---
+apiVersion: v1
+kind: Service
+metadata:
+ name: mysql
+ namespace: clawmanager-system
+spec:
+ selector:
+ app: mysql
+ ports:
+ - name: mysql
+ port: 3306
+ targetPort: 3306
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: clawmanager-app
+ namespace: clawmanager-system
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: clawmanager-app-cluster-admin
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: cluster-admin
+subjects:
+ - kind: ServiceAccount
+ name: clawmanager-app
+ namespace: clawmanager-system
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: clawmanager-app
+ namespace: clawmanager-system
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: clawmanager-app
+ template:
+ metadata:
+ labels:
+ app: clawmanager-app
+ spec:
+ serviceAccountName: clawmanager-app
+ containers:
+ - name: clawmanager-app
+ image: ghcr.io/yuan-lab-llm/clawmanager:latest
+ imagePullPolicy: IfNotPresent
+ ports:
+ - name: http
+ containerPort: 8443
+ env:
+ - name: SERVER_ADDRESS
+ value: ":9001"
+ - name: SERVER_MODE
+ value: "release"
+ - name: DB_HOST
+ value: "mysql"
+ - name: DB_PORT
+ value: "3306"
+ - name: DB_USER
+ value: "clawmanager"
+ - name: DB_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: clawmanager-secrets
+ key: mysql-password
+ - name: DB_NAME
+ value: "clawmanager"
+ - name: JWT_SECRET
+ valueFrom:
+ secretKeyRef:
+ name: clawmanager-secrets
+ key: jwt-secret
+ - name: K8S_MODE
+ value: "incluster"
+ - name: K8S_NAMESPACE
+ value: "clawmanager"
+ - name: K8S_STORAGE_CLASS
+ value: "local-path"
+ - name: SKILL_SCANNER_ENABLED
+ value: "true"
+ - name: SKILL_SCANNER_BASE_URL
+ value: "http://skill-scanner.clawmanager-system.svc.cluster.local:8000"
+ - name: SKILL_SCANNER_TIMEOUT_SECONDS
+ value: "120"
+ - name: SKILL_SCANNER_NAMESPACE
+ value: "clawmanager-system"
+ - name: SKILL_SCANNER_DEPLOYMENT
+ value: "skill-scanner"
+ - name: OBJECT_STORAGE_LOCAL_FALLBACK
+ value: "/data/object-storage"
+ volumeMounts:
+ - name: object-storage
+ mountPath: /data/object-storage
+ readinessProbe:
+ httpGet:
+ path: /healthz
+ port: 8443
+ scheme: HTTPS
+ initialDelaySeconds: 10
+ periodSeconds: 5
+ timeoutSeconds: 3
+ livenessProbe:
+ httpGet:
+ path: /healthz
+ port: 8443
+ scheme: HTTPS
+ initialDelaySeconds: 30
+ periodSeconds: 20
+ timeoutSeconds: 5
+ volumes:
+ - name: object-storage
+ emptyDir: {}
+---
+apiVersion: v1
+kind: Service
+metadata:
+ name: clawmanager-frontend
+ namespace: clawmanager-system
+spec:
+ type: NodePort
+ selector:
+ app: clawmanager-app
+ ports:
+ - name: https
+ port: 443
+ targetPort: 8443
+ nodePort: 30443
+---
+apiVersion: v1
+kind: Service
+metadata:
+ name: clawmanager-gateway
+ namespace: clawmanager-system
+spec:
+ type: ClusterIP
+ selector:
+ app: clawmanager-app
+ ports:
+ - name: api
+ port: 8443
+ targetPort: 8443
+---
+apiVersion: v1
+kind: Service
+metadata:
+ name: clawmanager-egress-proxy
+ namespace: clawmanager-system
+spec:
+ type: ClusterIP
+ selector:
+ app: clawmanager-app
+ ports:
+ - name: proxy
+ port: 3128
+ targetPort: 8443
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: skill-scanner
+ namespace: clawmanager-system
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: skill-scanner
+ template:
+ metadata:
+ labels:
+ app: skill-scanner
+ spec:
+ containers:
+ - name: skill-scanner
+ image: ghcr.io/yuan-lab-llm/skill-scanner:latest
+ imagePullPolicy: IfNotPresent
+ command:
+ - /opt/skill-scanner-venv/bin/skill-scanner-api
+ - --host
+ - 0.0.0.0
+ - --port
+ - "8000"
+ env:
+ - name: SKILL_SCANNER_LLM_API_KEY
+ value: ""
+ - name: SKILL_SCANNER_LLM_MODEL
+ value: ""
+ - name: SKILL_SCANNER_LLM_BASE_URL
+ value: ""
+ - name: SKILL_SCANNER_META_LLM_API_KEY
+ value: ""
+ - name: SKILL_SCANNER_META_LLM_MODEL
+ value: ""
+ - name: SKILL_SCANNER_META_LLM_BASE_URL
+ value: ""
+ ports:
+ - name: http
+ containerPort: 8000
+---
+apiVersion: v1
+kind: Service
+metadata:
+ name: skill-scanner
+ namespace: clawmanager-system
+spec:
+ selector:
+ app: skill-scanner
+ ports:
+ - name: http
+ port: 8000
+ targetPort: http
diff --git a/docs/admin-user-guide.md b/docs/admin-user-guide.md
new file mode 100644
index 0000000..e986a4a
--- /dev/null
+++ b/docs/admin-user-guide.md
@@ -0,0 +1,36 @@
+# Admin and User Guide
+
+This guide maps the main product surfaces for administrators and end users. It is the best starting point when you want to understand how ClawManager is experienced in day-to-day use rather than how it is deployed.
+
+## Admin Experience
+
+Administrators use ClawManager to:
+
+- manage users, quotas, and platform-wide policies
+- review instances and cluster-level operations
+- govern AI Gateway models, audit trails, cost analysis, and risk rules
+- manage Security Center and `skill-scanner` operations
+- prepare reusable resources that users can apply to workspaces
+
+## User Experience
+
+End users use ClawManager to:
+
+- create or access OpenClaw workspaces
+- open workspaces through the portal experience
+- inspect runtime status, agent signals, and recent command activity
+- attach or remove skills from an instance when permitted
+- consume platform-governed AI access through AI Gateway
+
+## Product Areas
+
+- [AI Gateway Guide](./aigateway.md)
+- [Agent Control Plane Guide](./agent-control-plane.md)
+- [Resource Management Guide](./resource-management.md)
+- [Security / Skill Scanner Guide](./security-skill-scanner.md)
+
+## Suggested Walkthrough
+
+1. Start with the AI Gateway overview if your team cares most about model governance.
+2. Review Agent Control Plane if your focus is runtime visibility and operations.
+3. Review Resource Management and Security Center if you want reusable channels, skills, and scan-backed workflows.
diff --git a/docs/agent-control-plane.md b/docs/agent-control-plane.md
new file mode 100644
index 0000000..8442580
--- /dev/null
+++ b/docs/agent-control-plane.md
@@ -0,0 +1,43 @@
+# Agent Control Plane Guide
+
+Agent Control Plane is the runtime orchestration layer for OpenClaw instances in ClawManager. It allows the platform to understand live runtime state, distribute commands, and keep each managed workspace aligned with the desired state defined by the control plane.
+
+## Core Responsibilities
+
+- agent bootstrap and registration for OpenClaw instances
+- authenticated session lifecycle between the runtime agent and the platform
+- heartbeat-driven runtime and health reporting
+- desired power state and desired config revision tracking
+- command dispatch and completion tracking for runtime operations
+
+## Runtime Signals
+
+The control plane keeps a runtime view that includes:
+
+- agent identity, version, and last heartbeat
+- runtime status and OpenClaw status
+- current and desired config revision
+- reported summary data such as agent, channel, and skill counts
+- recent command history and execution outcomes
+
+## Typical Commands
+
+Examples of platform-driven runtime actions include:
+
+- start, stop, and restart operations
+- config revision apply and reload
+- health checks and system info collection
+- skill install, update, removal, quarantine, and inventory refresh
+
+## Where It Shows Up in the Product
+
+- instance detail views for agent status and runtime summaries
+- runtime command history and execution feedback
+- workflows that apply config revisions or skill-related changes to a workspace
+
+## Related Guides
+
+- [Admin and User Guide](./admin-user-guide.md)
+- [Resource Management Guide](./resource-management.md)
+- [Security / Skill Scanner Guide](./security-skill-scanner.md)
+- [Developer Guide](./developer-guide.md)
diff --git a/docs/deployment.md b/docs/deployment.md
new file mode 100644
index 0000000..634c48a
--- /dev/null
+++ b/docs/deployment.md
@@ -0,0 +1,50 @@
+# Deployment Guide
+
+ClawManager is packaged as a Kubernetes-first platform. This guide is the operational entry point for deploying the control plane, locating the relevant manifests in the repository, and understanding which services are expected to come up in a working environment.
+
+## Deployment Paths
+
+Choose the deployment path that matches your environment:
+
+- Standard Kubernetes: [`deployments/k8s/clawmanager.yaml`](../deployments/k8s/clawmanager.yaml)
+- K3s or lightweight clusters: [`deployments/k3s/clawmanager.yaml`](../deployments/k3s/clawmanager.yaml)
+- End-to-end first-use walkthrough: [User Guide](./use_guide_en.md)
+
+## What Gets Deployed
+
+- ClawManager frontend and backend
+- MySQL for application state
+- MinIO for object storage-backed features
+- `skill-scanner` for skill analysis workflows
+- Kubernetes Services used for portal, gateway, and supporting traffic paths
+
+## Repository Entry Points
+
+- Kubernetes manifest: [`deployments/k8s/clawmanager.yaml`](../deployments/k8s/clawmanager.yaml)
+- K3s manifest: [`deployments/k3s/clawmanager.yaml`](../deployments/k3s/clawmanager.yaml)
+- Container startup script: [`deployments/container/start.sh`](../deployments/container/start.sh)
+- Nginx config: [`deployments/nginx/nginx.conf`](../deployments/nginx/nginx.conf)
+
+## Deployment Workflow
+
+1. Choose the deployment path: standard Kubernetes or K3s/lightweight.
+2. Prepare the cluster, storage strategy, and image source strategy for that environment.
+3. Review the bundled manifest and adjust secrets, images, storage classes, and ingress exposure for your environment.
+4. Deploy the platform components into the cluster.
+5. Wait for the core services to become ready.
+6. Validate frontend access, AI Gateway management pages, Security Center connectivity, and runtime creation flows.
+
+## Operational Notes
+
+- ClawManager is designed around in-cluster services and platform-mediated access rather than direct pod exposure.
+- Resource Management features depend on object storage and `skill-scanner` being available.
+- Production environments should review images, credentials, TLS, persistence, and networking policies before rollout.
+
+## Related Guides
+
+- [Admin and User Guide](./admin-user-guide.md)
+- [Agent Control Plane Guide](./agent-control-plane.md)
+- [AI Gateway Guide](./aigateway.md)
+- [Security / Skill Scanner Guide](./security-skill-scanner.md)
+- [Resource Management Guide](./resource-management.md)
+- [Developer Guide](./developer-guide.md)
diff --git a/docs/developer-guide.md b/docs/developer-guide.md
new file mode 100644
index 0000000..f31b569
--- /dev/null
+++ b/docs/developer-guide.md
@@ -0,0 +1,30 @@
+# Developer Guide
+
+This guide is the codebase orientation page for contributors. ClawManager spans frontend, backend, deployment assets, and supporting product documentation, so the fastest way to get productive is to start from the subsystem you want to change.
+
+## Repository Map
+
+- `frontend/`: React application, admin surfaces, portal views, and product UI
+- `backend/`: Go services, handlers, repositories, migrations, and platform logic
+- `deployments/`: Kubernetes manifests, container bootstrap, and nginx config
+- `docs/`: product-facing guides and screenshots
+
+## Suggested Entry Points
+
+- AI governance work: [`docs/aigateway.md`](./aigateway.md)
+- runtime orchestration work: [Agent Control Plane Guide](./agent-control-plane.md)
+- reusable resource workflows: [Resource Management Guide](./resource-management.md)
+- security scanning work: [Security / Skill Scanner Guide](./security-skill-scanner.md)
+
+## Common Areas of Change
+
+- frontend pages and navigation for product surfaces such as AI Gateway, Security Center, and Config Center
+- backend services for agents, commands, resources, and scanning
+- migrations and repository logic when new control-plane state is introduced
+- deployment manifests when platform components or images change
+
+## Related Guides
+
+- [Deployment Guide](./deployment.md)
+- [Admin and User Guide](./admin-user-guide.md)
+- [AI Gateway Guide](./aigateway.md)
diff --git a/docs/resource-management.md b/docs/resource-management.md
new file mode 100644
index 0000000..dc5d83a
--- /dev/null
+++ b/docs/resource-management.md
@@ -0,0 +1,30 @@
+# Resource Management Guide
+
+Resource Management is the reusable asset layer for OpenClaw workspaces in ClawManager. It is centered on channels, skills, bundles, and the snapshots used to compile those assets into instance-ready configuration.
+
+## Main Resource Types
+
+- `Channels` for workspace connectivity and integration templates
+- `Skills` for reusable packaged capabilities
+- `Bundles` for composing repeatable resource sets
+- injection snapshots for tracking the compiled result applied to an instance
+
+## Core Workflows
+
+1. Create or import channels and skills in the OpenClaw Config Center.
+2. Organize selected resources into reusable bundles.
+3. Review scan posture for skills through Security Center.
+4. Apply resources or bundles to OpenClaw workspaces.
+5. Inspect runtime state and instance-level resource results after injection.
+
+## How It Connects to the Platform
+
+- Resource Management defines what should be delivered to a workspace.
+- Agent Control Plane applies and tracks those changes at runtime.
+- Security Center and `skill-scanner` help review the risk posture of reusable skills before broad rollout.
+
+## Related Guides
+
+- [Security / Skill Scanner Guide](./security-skill-scanner.md)
+- [Agent Control Plane Guide](./agent-control-plane.md)
+- [Admin and User Guide](./admin-user-guide.md)
diff --git a/docs/security-skill-scanner.md b/docs/security-skill-scanner.md
new file mode 100644
index 0000000..7f89131
--- /dev/null
+++ b/docs/security-skill-scanner.md
@@ -0,0 +1,30 @@
+# Security / Skill Scanner Guide
+
+Security Center is the review and scanning surface for skill assets in ClawManager. It works with `skill-scanner` to help teams understand asset coverage, risk posture, and scanning status before skills are reused across workspaces.
+
+## What It Covers
+
+- skill asset inventory across the platform
+- scan status, coverage, and recent scan jobs
+- risk-level distribution for discovered and uploaded skills
+- scanner configuration, including external analysis integrations where configured
+
+## Main Workflows
+
+1. Review the asset inventory and identify high-risk or unscanned skills.
+2. Start incremental or full scans from Security Center.
+3. Inspect recent scan jobs and detailed outcomes.
+4. Tune scanner configuration and analysis integrations.
+5. Feed scanning results back into skill approval and workspace rollout decisions.
+
+## Why It Matters
+
+- keeps reusable skills visible and reviewable
+- adds a security checkpoint to the resource supply chain
+- supports scale by replacing ad hoc per-instance trust decisions with centralized scanning workflows
+
+## Related Guides
+
+- [Resource Management Guide](./resource-management.md)
+- [Agent Control Plane Guide](./agent-control-plane.md)
+- [AI Gateway Guide](./aigateway.md)
diff --git a/docs/use_guide_cn.md b/docs/use_guide_cn.md
new file mode 100644
index 0000000..1ced5bc
--- /dev/null
+++ b/docs/use_guide_cn.md
@@ -0,0 +1,783 @@
+[<- ่ฟๅ README ้ฆ้กต](../README.zh-CN.md)
+
+# ClawManager ้จ็ฝฒไธๅฟซ้ๅฏๅจๆๅ
+
+## ็ฎๅฝ
+- [ไธใ็ฏๅขไธ็ฎๆ ](#sec-01)
+- [ไบใ้จ็ฝฒๆนๅผๆป่ง](#sec-02)
+- [ไธใๆนๆก A๏ผไฝฟ็จ k3s ้จ็ฝฒ](#sec-03)
+- [ๅใๆนๆก B๏ผไฝฟ็จๆ ๅ Kubernetes ้จ็ฝฒ](#sec-04)
+- [ไบใๅฝๅ
็ฝ็ปไธ็้ๅๆๅๅปบ่ฎฎ๏ผๅฏ้๏ผ](#sec-05)
+- [ๅ
ญใ้จ็ฝฒ ClawManager](#sec-06)
+- [ไธใๅฏๅจ Web ้กต้ข](#sec-08)
+- [ๅ
ซใๅฟซ้ๅฏๅจๆๅ๏ผ็ปๅฝๅๅๅงๅๅนถๅๅปบ OpenClaw ๅฎไพ๏ผ](#sec-09)
+- [ไนใๆงๅถๅฐไธ AI ็ฝๅ
ณๅ
ถไปๅ่ฝ่ฏดๆ](#sec-12)
+- [ๅใๅทฅไฝๅฐๆจกๅ่ฏดๆ](#sec-13)
+- [ๅไธใ้ฎ้ขไธๅฏน็ญ้ๆฅ](#sec-14)
+- [ๅไบใๅปบ่ฎฎ็ๆ็ปๆฃๆฅ้กบๅบ๏ผๅฏๆๆญค่ชๆฅ๏ผ](#sec-15)
+
+
+## ๅไบใๅปบ่ฎฎ็ๆ็ปๆฃๆฅ้กบๅบ๏ผๅฏๆๆญค่ชๆฅ๏ผ
+1. `kubectl get nodes`
+2. `kubectl get storageclass`
+3. `kubectl get pods -n clawmanager-system`
+4. `kubectl get pvc -n clawmanager-system`
+5. `kubectl get svc -n clawmanager-system`
+6. ๆต่งๅจ่ฎฟ้ฎ `https://:30443`
+7. ็ปๅฝๅๅฐๅนถๅฎๆ **ๅฎๅ
จๆจกๅ้
็ฝฎ**
+8. ๅจๅทฅไฝๅฐไธญๅๅปบ **OpenClaw Desktop** ๅฎไพ
diff --git a/docs/use_guide_de.md b/docs/use_guide_de.md
new file mode 100644
index 0000000..d68e43d
--- /dev/null
+++ b/docs/use_guide_de.md
@@ -0,0 +1,782 @@
+[<- Zurueck zur README-Startseite](../README.de.md)
+
+# ClawManager Bereitstellungs- und Schnellstartanleitung
+
+## Inhaltsverzeichnis
+- [I. Umgebung und Ziel](#sec-01)
+- [II. รberblick รผber die Bereitstellungsarten](#sec-02)
+- [III. Variante A: Bereitstellung mit k3s](#sec-03)
+- [IV. Variante B: Bereitstellung mit Standard-Kubernetes](#sec-04)
+- [V. Empfehlungen zum Ziehen von Images in Netzwerken auf dem chinesischen Festland (optional)](#sec-05)
+- [VI. ClawManager bereitstellen](#sec-06)
+- [VII. Weboberflรคche starten](#sec-08)
+- [VIII. Schnellstartanleitung (nach dem Login initialisieren und eine OpenClaw-Instanz erstellen)](#sec-09)
+- [IX. Konsole und weitere Funktionen des AI Gateway](#sec-12)
+- [X. Beschreibung des Workspace-Moduls](#sec-13)
+- [XI. Schnelle Referenz fรผr Probleme und Gegenmaรnahmen](#sec-14)
+- [XII. Empfohlene abschlieรende Prรผfreihenfolge (zur Selbstprรผfung)](#sec-15)
+
+:30443
+```
+
+
+### 7.2 Hinweis zum ersten HTTPS-Zugriff
+Da in der Regel ein selbstsigniertes Zertifikat verwendet wird, zeigt der Browser mรถglicherweise โUnsicherโ oder eine Zertifikatswarnung an. Klicken Sie auf:
+
+```text
+Erweitert โ Trotzdem fortfahren
+```
+
+um die Seite zu รถffnen.
+
+---
+
+:30443`.
+2. Melden Sie sich mit dem Standard-Administratorkonto an:
+ - **Benutzername**: `admin`
+ - **Passwort**: `admin123`
+3. Nach der ersten Anmeldung wird empfohlen, das Standardpasswort nach Bedarf zu รคndern.
+
+
+### 8.2 Sicherheitsmodell konfigurieren (AI Gateway)
+
+
+Nach dem Login mรผssen Sie zunรคchst ein verfรผgbares **Sicherheitsmodell** konfigurieren, das von der Plattform und von nachfolgenden Instanzen gemeinsam genutzt wird.
+
+1. Klicken Sie im linken Menรผ auf **AI Gateway** โ **Modelle**.
+2. Fรผgen Sie ein neues Modell hinzu oder bearbeiten Sie ein bestehendes Modell und tragen Sie die folgenden Informationen entsprechend dem tatsรคchlich angebundenen Modelldienst ein:
+
+ * **Anzeigename**: Geben Sie einen leicht erkennbaren Namen ein.
+ * **Anbietervorlage**: Wรคhlen Sie die passende Vorlage entsprechend dem Typ Ihres Modelldienstes; wenn Sie eine benutzerdefinierte oder kompatible Schnittstelle verwenden, kรถnnen Sie **Local / Internal** auswรคhlen.
+ * **Protokoll**: Wรคhlen Sie das Protokoll entsprechend der Schnittstelle, z. B. **OpenAI Compatible** oder ein anderes tatsรคchlich verwendetes Protokoll.
+ * **Base URL**: Tragen Sie die vom Modelldienst bereitgestellte Schnittstellenadresse ein.
+ * **API Key**: Tragen Sie den gรผltigen Schlรผssel des entsprechenden Modelldienstes ein.
+ * **Provider Model**: Tragen Sie den tatsรคchlichen Namen des aufzurufenden Modells ein.
+ * **Wรคhrung**: Tragen Sie die Angabe entsprechend Ihrer tatsรคchlichen Situation ein; wenn keine Kostendarstellung benรถtigt wird, kรถnnen Sie den Standardwert beibehalten.
+ * **Eingabepreis / Ausgabepreis**: Wenn keine Kostenstatistik benรถtigt wird, kรถnnen Sie zunรคchst `0` eintragen.
+3. Aktivieren Sie vor dem Absenden unbedingt:
+
+ * **Sicherheitsmodell**
+ * **Aktiviert**
+4. Klicken Sie auf **Speichern**.
+
+> Hinweis: Die Bilder auf der Seite dienen nur dazu, die Positionen der Eingabefelder und das Beispiel-Format zu zeigen. Die tatsรคchlichen Inhalte sollten sich nach der Konfiguration des von Ihnen verwendeten Modelldienstes richten.
+
+
+### 8.3 OpenClaw-Instanz erstellen
+Nach Abschluss der Modellkonfiguration erstellen Sie eine **OpenClaw Desktop**-Instanz.
+
+1. Klicken Sie unten links auf **ADMIN** und wechseln Sie in den **Workspace**.
+2. Klicken Sie auf **Instanz erstellen**.
+
+
+#### Schritt 1: Grundinformationen
+- Geben Sie den **Instanznamen** ein (mindestens 3 Zeichen).
+- Die Beschreibung ist optional und kann leer bleiben.
+- Klicken Sie auf **Weiter**.
+
+
+#### Schritt 2: Typ auswรคhlen
+- Wรคhlen Sie **OpenClaw Desktop** aus.
+- Klicken Sie auf **Weiter**.
+
+
+
+#### Schritt 3: Konfiguration
+- Sie kรถnnen direkt die Spezifikation **Small** auswรคhlen:
+ - `2 CPU`
+ - `4 GB RAM`
+ - `20 GB Disk`
+- Sie kรถnnen die Einstellungen auch im darunterliegenden benutzerdefinierten Konfigurationsbereich nach Bedarf anpassen.
+- Im Bereich fรผr OpenClaw-Ressourceneinbindung kรถnnen Sie je nach Bedarf auswรคhlen:
+ - **Manuelle Ressourcen**
+ - **Ressourcenpaket**
+ - **Archivimport**
+- Bei der ersten Verwendung kรถnnen Sie die Standardwerte beibehalten oder **Manuelle Ressourcen** auswรคhlen.
+- Klicken Sie abschlieรend auf **Erstellen**.
+
+### 8.4 Hinweis zur ersten Erstellung
+- Wenn Sie zum ersten Mal eine **OpenClaw**-Instanz erstellen, mรผssen die erforderlichen Images heruntergeladen und die Umgebung initialisiert werden, daher dauert es deutlich lรคnger.
+- Bei langsamen Netzwerken oder beim ersten Image-Pull kann der Instanzstatus lange als **Erstellen** angezeigt werden. Bitte warten Sie geduldig.
+- Wenn der Start auch nach lรคngerer Zeit nicht erfolgreich ist, gehen Sie zurรผck zu den Kubernetes-/Docker-Logs und prรผfen Sie Image-, PVC-, Gateway-Modell- und andere Probleme.
+
+---
+
+
+## XII. Empfohlene abschlieรende Prรผfreihenfolge (zur Selbstprรผfung)
+1. `kubectl get nodes`
+2. `kubectl get storageclass`
+3. `kubectl get pods -n clawmanager-system`
+4. `kubectl get pvc -n clawmanager-system`
+5. `kubectl get svc -n clawmanager-system`
+6. Im Browser `https://:30443` รถffnen
+7. Im Backend anmelden und die **Konfiguration des Sicherheitsmodells** abschlieรen
+8. Im Workspace eine **OpenClaw Desktop**-Instanz erstellen
diff --git a/docs/use_guide_en.md b/docs/use_guide_en.md
new file mode 100644
index 0000000..1994bb2
--- /dev/null
+++ b/docs/use_guide_en.md
@@ -0,0 +1,782 @@
+[<- Back to README](../README.md)
+
+# ClawManager Deployment and Quick Start Guide
+
+## Table of Contents
+- [I. Environment and Goals](#sec-01)
+- [II. Deployment Options Overview](#sec-02)
+- [III. Option A: Deploy with k3s](#sec-03)
+- [IV. Option B: Deploy with Standard Kubernetes](#sec-04)
+- [V. Recommendations for Image Pulling on Mainland China Networks (Optional)](#sec-05)
+- [VI. Deploy ClawManager](#sec-06)
+- [VII. Launch the Web Page](#sec-08)
+- [VIII. Quick Start Guide (Initialize and Create an OpenClaw Instance After Login)](#sec-09)
+- [IX. Console and Other AI Gateway Features](#sec-12)
+- [X. Workspace Module Guide](#sec-13)
+- [XI. Quick Troubleshooting Reference](#sec-14)
+- [XII. Recommended Final Check Sequence (Use as a Self-Check)](#sec-15)
+
+:30443
+```
+
+
+### 7.2 First HTTPS access note
+Since it usually uses a self-signed certificate, the browser may show an โunsafeโ or certificate warning. Click:
+
+```text
+Advanced โ Continue to visit
+```
+
+to enter the page.
+
+---
+
+:30443`.
+2. Log in with the default administrator account:
+ - **Username**: `admin`
+ - **Password**: `admin123`
+3. After first login, it is recommended to change the default password as needed.
+
+
+### 8.2 Configure the secure model (AI Gateway)
+
+
+After logging in, you need to configure an available **secure model** first so that it can be used uniformly by the platform and subsequent instances.
+
+1. Click the left-side menu: **AI Gateway** โ **Models**.
+2. Add a new model or edit an existing one, and fill in the following information according to the actual model service you connect:
+
+ * **Display Name**: Enter a name that is easy to identify.
+ * **Vendor Template**: Choose the corresponding template based on your model service type; if you use a custom or compatible interface, you can select **Local / Internal**.
+ * **Protocol**: Select the protocol according to the interface, such as **OpenAI Compatible** or another actual protocol.
+ * **Base URL**: Enter the endpoint address provided by the model service.
+ * **API Key**: Enter the valid key for the corresponding model service.
+ * **Provider Model**: Enter the actual model name to call.
+ * **Currency**: Fill it in according to your situation; if no billing display is needed, you can keep the default.
+ * **Input Price / Output Price**: If billing statistics are not needed, you can first fill in `0`.
+3. Be sure to check the following before submission:
+
+ * **Secure Model**
+ * **Enabled**
+4. Click **Save**.
+
+> Note: The images on the page are only used to show the field positions and example format. The actual content should be based on the model service configuration you use.
+
+
+### 8.3 Create an OpenClaw instance
+After the model configuration is completed, create an **OpenClaw Desktop** instance.
+
+1. Click **ADMIN** in the lower-left corner and switch to the **Workspace**.
+2. Click **Create Instance**.
+
+
+#### Step 1: Basic Information
+- Fill in the **Instance Name** (at least 3 characters).
+- The description is optional and may be left blank.
+- Click **Next**.
+
+
+#### Step 2: Select Type
+- Select **OpenClaw Desktop**.
+- Click **Next**.
+
+
+
+#### Step 3: Configuration
+- You can directly choose the **Small** specification:
+ - `2 CPU`
+ - `4 GB RAM`
+ - `20 GB Disk`
+- You can also modify the settings as needed in the custom configuration section below.
+- For the OpenClaw resource injection section, you can choose as needed:
+ - **Manual Resources**
+ - **Resource Bundle**
+ - **Archive Import**
+- For first-time use, you can keep the default or select **Manual Resources**.
+- Finally, click **Create**.
+
+### 8.4 First creation note
+- When creating an **OpenClaw** instance for the first time, the required images must be downloaded and the environment must be initialized, so it will take noticeably longer.
+- On slow networks or during the first image pull, the instance status may remain at **Creating** for a long time. Please wait patiently.
+- If it still does not start successfully after a long time, go back to the Kubernetes / Docker logs to troubleshoot image, PVC, gateway model, and other issues.
+
+---
+
+
+## XII. Recommended Final Check Sequence (Use as a Self-Check)
+1. `kubectl get nodes`
+2. `kubectl get storageclass`
+3. `kubectl get pods -n clawmanager-system`
+4. `kubectl get pvc -n clawmanager-system`
+5. `kubectl get svc -n clawmanager-system`
+6. Open `https://:30443` in a browser
+7. Log in to the backend and complete **secure model configuration**
+8. Create an **OpenClaw Desktop** instance in the Workspace
diff --git a/docs/use_guide_ja.md b/docs/use_guide_ja.md
new file mode 100644
index 0000000..302d34f
--- /dev/null
+++ b/docs/use_guide_ja.md
@@ -0,0 +1,781 @@
+[<- README ใใใใธๆปใ](../README.ja.md)
+
+# ClawManager ใใใญใคใจใฏใคใใฏในใฟใผใใฌใคใ
+
+## ็ฎๆฌก
+- [ไธใ็ฐๅขใจ็ฎๆจ](#sec-01)
+- [ไบใใใใญใคๆนๅผใฎๆฆ่ฆ](#sec-02)
+- [ไธใๆนๅผ A๏ผk3s ใไฝฟ็จใใใใใญใค](#sec-03)
+- [ๅใๆนๅผ B๏ผๆจๆบ Kubernetes ใไฝฟ็จใใใใใญใค](#sec-04)
+- [ไบใไธญๅฝๅฝๅ
ใใใใฏใผใฏใงใฎใคใกใผใธๅๅพใซ้ขใใๆจๅฅจไบ้
๏ผไปปๆ๏ผ](#sec-05)
+- [ๅ
ญใClawManager ใฎใใใญใค](#sec-06)
+- [ไธใWeb ใใผใธใฎ่ตทๅ](#sec-08)
+- [ๅ
ซใใฏใคใใฏในใฟใผใใฌใคใ๏ผใญใฐใคใณๅพใซๅๆๅใใฆ OpenClaw ใคใณในใฟใณในใไฝๆ๏ผ](#sec-09)
+- [ไนใใณใณใฝใผใซใจ AI Gateway ใฎใใฎไปใฎๆฉ่ฝ่ชฌๆ](#sec-12)
+- [ๅใใฏใผใฏในใใผในใขใธใฅใผใซใฎ่ชฌๆ](#sec-13)
+- [ๅไธใๅ้กใจๅฏพๅฆใฎใฏใคใใฏใชใใกใฌใณใน](#sec-14)
+- [ๅไบใๆจๅฅจใใใๆ็ต็ขบ่ชๆ้ ๏ผใปใซใใใงใใฏ็จ๏ผ](#sec-15)
+
+
+## ๅไบใๆจๅฅจใใใๆ็ต็ขบ่ชๆ้ ๏ผใปใซใใใงใใฏ็จ๏ผ
+1. `kubectl get nodes`
+2. `kubectl get storageclass`
+3. `kubectl get pods -n clawmanager-system`
+4. `kubectl get pvc -n clawmanager-system`
+5. `kubectl get svc -n clawmanager-system`
+6. ใใฉใฆใถใง `https://:30443` ใ้ใ
+7. ใใใฏใจใณใใซใญใฐใคใณใใฆ **ใปใญใฅใขใขใใซ่จญๅฎ** ใๅฎไบใใ
+8. ใฏใผใฏในใใผในใง **OpenClaw Desktop** ใคใณในใฟใณในใไฝๆใใ
diff --git a/docs/use_guide_ko.md b/docs/use_guide_ko.md
new file mode 100644
index 0000000..8eb1066
--- /dev/null
+++ b/docs/use_guide_ko.md
@@ -0,0 +1,782 @@
+[<- README ํ์ผ๋ก ๋์๊ฐ๊ธฐ](../README.ko.md)
+
+# ClawManager ๋ฐฐํฌ ๋ฐ ๋น ๋ฅธ ์์ ๊ฐ์ด๋
+
+## ๋ชฉ์ฐจ
+- [1. ํ๊ฒฝ๊ณผ ๋ชฉํ](#sec-01)
+- [2. ๋ฐฐํฌ ๋ฐฉ์ ๊ฐ์](#sec-02)
+- [3. ๋ฐฉ์ A: k3s๋ฅผ ์ฌ์ฉํ ๋ฐฐํฌ](#sec-03)
+- [4. ๋ฐฉ์ B: ํ์ค Kubernetes๋ฅผ ์ฌ์ฉํ ๋ฐฐํฌ](#sec-04)
+- [5. ์ค๊ตญ ๋ด ๋คํธ์ํฌ์์์ ์ด๋ฏธ์ง ํ๋ง ๊ถ์ฅ ์ฌํญ(์ ํ ์ฌํญ)](#sec-05)
+- [6. ClawManager ๋ฐฐํฌ](#sec-06)
+- [7. ์น ํ์ด์ง ์์](#sec-08)
+- [8. ๋น ๋ฅธ ์์ ๊ฐ์ด๋(๋ก๊ทธ์ธ ํ ์ด๊ธฐํ ๋ฐ OpenClaw ์ธ์คํด์ค ์์ฑ)](#sec-09)
+- [9. ์ฝ์ ๋ฐ AI Gateway ๊ธฐํ ๊ธฐ๋ฅ ์ค๋ช
](#sec-12)
+- [10. ์ํฌ์คํ์ด์ค ๋ชจ๋ ์ค๋ช
](#sec-13)
+- [11. ๋ฌธ์ ์ ๋์ ๋น ๋ฅธ ์ฐธ์กฐ](#sec-14)
+- [12. ๊ถ์ฅ ์ต์ข
์ ๊ฒ ์์(์๊ฐ ์ ๊ฒ์ฉ)](#sec-15)
+
+
+## 12. ๊ถ์ฅ ์ต์ข
์ ๊ฒ ์์(์๊ฐ ์ ๊ฒ์ฉ)
+1. `kubectl get nodes`
+2. `kubectl get storageclass`
+3. `kubectl get pods -n clawmanager-system`
+4. `kubectl get pvc -n clawmanager-system`
+5. `kubectl get svc -n clawmanager-system`
+6. ๋ธ๋ผ์ฐ์ ์์ `https://:30443` ์ด๊ธฐ
+7. ๋ฐฑ์๋์ ๋ก๊ทธ์ธํ์ฌ **๋ณด์ ๋ชจ๋ธ ๊ตฌ์ฑ** ์๋ฃ
+8. ์ํฌ์คํ์ด์ค์์ **OpenClaw Desktop** ์ธ์คํด์ค ์์ฑ
+ 
- 
- 
+
+
+
+ Explore the Product |
+ AI Gateway |
+ Agent Control Plane |
+ Resource Management |
+ Get Started