@swarmclawai/swarmclaw 0.2.0

package/next.config.ts

@@ -0,0 +1,33 @@
+import type { NextConfig } from "next";
+import { execSync } from "child_process";
+
+function getGitSha(): string {
+  try {
+    return execSync('git rev-parse --short HEAD', { encoding: 'utf-8' }).trim()
+  } catch {
+    return 'unknown'
+  }
+}
+
+const nextConfig: NextConfig = {
+  output: 'standalone',
+  env: {
+    NEXT_PUBLIC_GIT_SHA: getGitSha(),
+  },
+  // Allow external network access
+  serverExternalPackages: [
+    'highlight.js', 'better-sqlite3',
+    'discord.js', '@discordjs/ws', '@discordjs/rest',
+    'grammy',
+    '@slack/bolt', '@slack/web-api', '@slack/socket-mode',
+    '@whiskeysockets/baileys',
+    'qrcode',
+  ],
+  allowedDevOrigins: [
+    'localhost',
+    '127.0.0.1',
+    '0.0.0.0',
+  ],
+};
+
+export default nextConfig;

package/package.json

@@ -0,0 +1,112 @@
+{
+  "name": "@swarmclawai/swarmclaw",
+  "version": "0.2.0",
+  "description": "Self-hosted AI agent orchestration dashboard — manage LLM providers, orchestrate agent swarms, schedule tasks, and bridge agents to chat platforms.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/swarmclawai/swarmclaw.git"
+  },
+  "keywords": [
+    "ai",
+    "agents",
+    "llm",
+    "orchestration",
+    "swarm",
+    "dashboard",
+    "self-hosted",
+    "chatbot"
+  ],
+  "engines": {
+    "node": ">=22.6.0"
+  },
+  "bin": {
+    "swarmclaw": "./bin/swarmclaw.js"
+  },
+  "files": [
+    "bin/",
+    "src/",
+    "public/",
+    "next.config.ts",
+    "tsconfig.json",
+    "postcss.config.mjs",
+    "package.json"
+  ],
+  "scripts": {
+    "setup:easy": "node ./scripts/easy-setup.mjs",
+    "quickstart": "node ./scripts/easy-setup.mjs --start",
+    "quickstart:prod": "node ./scripts/easy-setup.mjs --prod",
+    "update:easy": "node ./scripts/easy-update.mjs",
+    "dev": "next dev --hostname 0.0.0.0 -p 3456",
+    "dev:webpack": "next dev --webpack --hostname 0.0.0.0 -p 3456",
+    "dev:clean": "rm -rf .next && next dev --hostname 0.0.0.0 -p 3456",
+    "build": "next build",
+    "build:ci": "NEXT_DISABLE_ESLINT=1 next build",
+    "start": "next start",
+    "start:standalone": "node .next/standalone/server.js",
+    "lint": "eslint",
+    "lint:fix": "eslint --fix",
+    "lint:baseline": "node ./scripts/lint-baseline.mjs check",
+    "lint:baseline:update": "node ./scripts/lint-baseline.mjs update",
+    "cli": "node ./bin/swarmclaw.js",
+    "test:cli": "node --test src/cli/index.test.js",
+    "test:openclaw": "tsx --test src/lib/server/connectors/openclaw.test.ts src/lib/openclaw-endpoint.test.ts src/lib/server/gateway/protocol.test.ts src/lib/server/tool-capability-policy.test.ts"
+  },
+  "dependencies": {
+    "@huggingface/transformers": "^3.8.1",
+    "@langchain/anthropic": "^1.3.18",
+    "@langchain/core": "^1.1.26",
+    "@langchain/langgraph": "^1.1.5",
+    "@langchain/openai": "^1.2.8",
+    "@playwright/mcp": "^0.0.68",
+    "@slack/bolt": "^4.6.0",
+    "@whiskeysockets/baileys": "^7.0.0-rc.9",
+    "better-sqlite3": "^12.6.2",
+    "cheerio": "^1.2.0",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "commander": "^13.1.0",
+    "cron-parser": "^5.5.0",
+    "cronstrue": "^3.12.0",
+    "discord.js": "^14.25.1",
+    "grammy": "^1.40.0",
+    "highlight.js": "^11.11.1",
+    "lucide-react": "^0.574.0",
+    "next": "16.1.6",
+    "next-themes": "^0.4.6",
+    "openclaw": "^2026.2.26",
+    "qrcode": "^1.5.4",
+    "radix-ui": "^1.4.3",
+    "react": "19.2.3",
+    "react-dom": "19.2.3",
+    "react-markdown": "^10.1.0",
+    "rehype-highlight": "^7.0.2",
+    "remark-gfm": "^4.0.1",
+    "sonner": "^2.0.7",
+    "tailwind-merge": "^3.4.1",
+    "ws": "^8.19.0",
+    "zod": "^4.3.6",
+    "zustand": "^5.0.11"
+  },
+  "devDependencies": {
+    "@tailwindcss/postcss": "^4",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^20",
+    "@types/qrcode": "^1.5.6",
+    "@types/react": "^19",
+    "@types/react-dom": "^19",
+    "@types/ws": "^8.18.1",
+    "eslint": "^9",
+    "eslint-config-next": "16.1.6",
+    "shadcn": "^3.8.5",
+    "tailwindcss": "^4",
+    "tsx": "^4.20.6",
+    "tw-animate-css": "^1.4.0",
+    "typescript": "^5"
+  },
+  "optionalDependencies": {
+    "botbuilder": "^4.23.3",
+    "googleapis": "^171.4.0",
+    "matrix-bot-sdk": "^0.8.0"
+  }
+}

package/postcss.config.mjs

@@ -0,0 +1,7 @@
+const config = {
+  plugins: {
+    "@tailwindcss/postcss": {},
+  },
+};
+
+export default config;

package/public/branding/swarmclaw-org-avatar.svg

@@ -0,0 +1,58 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1024 1024" role="img" aria-labelledby="title desc">
+  <title id="title">SwarmClaw Lobster Avatar</title>
+  <desc id="desc">SwarmClaw org avatar using an OpenClaw-inspired lobster mark with swarm accents.</desc>
+
+  <defs>
+    <linearGradient id="bg" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0%" stop-color="#050B18"/>
+      <stop offset="100%" stop-color="#111827"/>
+    </linearGradient>
+    <radialGradient id="glow" cx="50%" cy="38%" r="62%">
+      <stop offset="0%" stop-color="#22d3ee" stop-opacity="0.22"/>
+      <stop offset="100%" stop-color="#22d3ee" stop-opacity="0"/>
+    </radialGradient>
+    <linearGradient id="lobster-gradient" x1="0%" y1="0%" x2="100%" y2="100%">
+      <stop offset="0%" stop-color="#ff6a5f"/>
+      <stop offset="100%" stop-color="#a41318"/>
+    </linearGradient>
+    <filter id="soft-shadow" x="-20%" y="-20%" width="140%" height="140%">
+      <feDropShadow dx="0" dy="16" stdDeviation="18" flood-color="#020617" flood-opacity="0.55"/>
+    </filter>
+  </defs>
+
+  <rect x="40" y="40" width="944" height="944" rx="216" fill="url(#bg)"/>
+  <rect x="40" y="40" width="944" height="944" rx="216" fill="url(#glow)"/>
+  <rect x="56" y="56" width="912" height="912" rx="200" fill="none" stroke="#334155" stroke-width="6"/>
+
+  <!-- swarm accents -->
+  <g stroke="#22d3ee" stroke-opacity="0.8" stroke-width="10" fill="none" stroke-linecap="round">
+    <path d="M182 286 C232 236, 314 224, 378 252"/>
+    <path d="M842 286 C792 236, 710 224, 646 252"/>
+    <path d="M202 760 C270 814, 350 826, 420 806"/>
+    <path d="M822 760 C754 814, 674 826, 604 806"/>
+  </g>
+  <g fill="#67e8f9">
+    <circle cx="172" cy="282" r="14"/>
+    <circle cx="852" cy="282" r="14"/>
+    <circle cx="198" cy="760" r="12"/>
+    <circle cx="826" cy="760" r="12"/>
+  </g>
+
+  <!-- OpenClaw-inspired lobster mark -->
+  <g transform="translate(152 156) scale(6)" filter="url(#soft-shadow)">
+    <!-- Body -->
+    <path d="M60 10 C30 10 15 35 15 55 C15 75 30 95 45 100 L45 110 L55 110 L55 100 C55 100 60 102 65 100 L65 110 L75 110 L75 100 C90 95 105 75 105 55 C105 35 90 10 60 10Z" fill="url(#lobster-gradient)"/>
+    <!-- Left Claw -->
+    <path d="M20 45 C5 40 0 50 5 60 C10 70 20 65 25 55 C28 48 25 45 20 45Z" fill="url(#lobster-gradient)"/>
+    <!-- Right Claw -->
+    <path d="M100 45 C115 40 120 50 115 60 C110 70 100 65 95 55 C92 48 95 45 100 45Z" fill="url(#lobster-gradient)"/>
+    <!-- Antenna -->
+    <path d="M45 15 Q35 5 30 8" stroke="#ff8b84" stroke-width="3" stroke-linecap="round"/>
+    <path d="M75 15 Q85 5 90 8" stroke="#ff8b84" stroke-width="3" stroke-linecap="round"/>
+    <!-- Eyes -->
+    <circle cx="45" cy="35" r="6" fill="#030712"/>
+    <circle cx="75" cy="35" r="6" fill="#030712"/>
+    <circle cx="46" cy="34" r="2.5" fill="#22d3ee"/>
+    <circle cx="76" cy="34" r="2.5" fill="#22d3ee"/>
+  </g>
+</svg>

package/public/file.svg

@@ -0,0 +1 @@
+<svg fill="none" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"><path d="M14.5 13.5V5.41a1 1 0 0 0-.3-.7L9.8.29A1 1 0 0 0 9.08 0H1.5v13.5A2.5 2.5 0 0 0 4 16h8a2.5 2.5 0 0 0 2.5-2.5m-1.5 0v-7H8v-5H3v12a1 1 0 0 0 1 1h8a1 1 0 0 0 1-1M9.5 5V2.12L12.38 5zM5.13 5h-.62v1.25h2.12V5zm-.62 3h7.12v1.25H4.5zm.62 3h-.62v1.25h7.12V11z" clip-rule="evenodd" fill="#666" fill-rule="evenodd"/></svg>

package/public/globe.svg

@@ -0,0 +1 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><g clip-path="url(#a)"><path fill-rule="evenodd" clip-rule="evenodd" d="M10.27 14.1a6.5 6.5 0 0 0 3.67-3.45q-1.24.21-2.7.34-.31 1.83-.97 3.1M8 16A8 8 0 1 0 8 0a8 8 0 0 0 0 16m.48-1.52a7 7 0 0 1-.96 0H7.5a4 4 0 0 1-.84-1.32q-.38-.89-.63-2.08a40 40 0 0 0 3.92 0q-.25 1.2-.63 2.08a4 4 0 0 1-.84 1.31zm2.94-4.76q1.66-.15 2.95-.43a7 7 0 0 0 0-2.58q-1.3-.27-2.95-.43a18 18 0 0 1 0 3.44m-1.27-3.54a17 17 0 0 1 0 3.64 39 39 0 0 1-4.3 0 17 17 0 0 1 0-3.64 39 39 0 0 1 4.3 0m1.1-1.17q1.45.13 2.69.34a6.5 6.5 0 0 0-3.67-3.44q.65 1.26.98 3.1M8.48 1.5l.01.02q.41.37.84 1.31.38.89.63 2.08a40 40 0 0 0-3.92 0q.25-1.2.63-2.08a4 4 0 0 1 .85-1.32 7 7 0 0 1 .96 0m-2.75.4a6.5 6.5 0 0 0-3.67 3.44 29 29 0 0 1 2.7-.34q.31-1.83.97-3.1M4.58 6.28q-1.66.16-2.95.43a7 7 0 0 0 0 2.58q1.3.27 2.95.43a18 18 0 0 1 0-3.44m.17 4.71q-1.45-.12-2.69-.34a6.5 6.5 0 0 0 3.67 3.44q-.65-1.27-.98-3.1" fill="#666"/></g><defs><clipPath id="a"><path fill="#fff" d="M0 0h16v16H0z"/></clipPath></defs></svg>

package/public/next.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 394 80"><path fill="#000" d="M262 0h68.5v12.7h-27.2v66.6h-13.6V12.7H262V0ZM149 0v12.7H94v20.4h44.3v12.6H94v21h55v12.6H80.5V0h68.7zm34.3 0h-17.8l63.8 79.4h17.9l-32-39.7 32-39.6h-17.9l-23 28.6-23-28.6zm18.3 56.7-9-11-27.1 33.7h17.8l18.3-22.7z"/><path fill="#000" d="M81 79.3 17 0H0v79.3h13.6V17l50.2 62.3H81Zm252.6-.4c-1 0-1.8-.4-2.5-1s-1.1-1.6-1.1-2.6.3-1.8 1-2.5 1.6-1 2.6-1 1.8.3 2.5 1a3.4 3.4 0 0 1 .6 4.3 3.7 3.7 0 0 1-3 1.8zm23.2-33.5h6v23.3c0 2.1-.4 4-1.3 5.5a9.1 9.1 0 0 1-3.8 3.5c-1.6.8-3.5 1.3-5.7 1.3-2 0-3.7-.4-5.3-1s-2.8-1.8-3.7-3.2c-.9-1.3-1.4-3-1.4-5h6c.1.8.3 1.6.7 2.2s1 1.2 1.6 1.5c.7.4 1.5.5 2.4.5 1 0 1.8-.2 2.4-.6a4 4 0 0 0 1.6-1.8c.3-.8.5-1.8.5-3V45.5zm30.9 9.1a4.4 4.4 0 0 0-2-3.3 7.5 7.5 0 0 0-4.3-1.1c-1.3 0-2.4.2-3.3.5-.9.4-1.6 1-2 1.6a3.5 3.5 0 0 0-.3 4c.3.5.7.9 1.3 1.2l1.8 1 2 .5 3.2.8c1.3.3 2.5.7 3.7 1.2a13 13 0 0 1 3.2 1.8 8.1 8.1 0 0 1 3 6.5c0 2-.5 3.7-1.5 5.1a10 10 0 0 1-4.4 3.5c-1.8.8-4.1 1.2-6.8 1.2-2.6 0-4.9-.4-6.8-1.2-2-.8-3.4-2-4.5-3.5a10 10 0 0 1-1.7-5.6h6a5 5 0 0 0 3.5 4.6c1 .4 2.2.6 3.4.6 1.3 0 2.5-.2 3.5-.6 1-.4 1.8-1 2.4-1.7a4 4 0 0 0 .8-2.4c0-.9-.2-1.6-.7-2.2a11 11 0 0 0-2.1-1.4l-3.2-1-3.8-1c-2.8-.7-5-1.7-6.6-3.2a7.2 7.2 0 0 1-2.4-5.7 8 8 0 0 1 1.7-5 10 10 0 0 1 4.3-3.5c2-.8 4-1.2 6.4-1.2 2.3 0 4.4.4 6.2 1.2 1.8.8 3.2 2 4.3 3.4 1 1.4 1.5 3 1.5 5h-5.8z"/></svg>

package/public/vercel.svg

@@ -0,0 +1 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1155 1000"><path d="m577.3 0 577.4 1000H0z" fill="#fff"/></svg>

package/public/window.svg

@@ -0,0 +1 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><path fill-rule="evenodd" clip-rule="evenodd" d="M1.5 2.5h13v10a1 1 0 0 1-1 1h-11a1 1 0 0 1-1-1zM0 1h16v11.5a2.5 2.5 0 0 1-2.5 2.5h-11A2.5 2.5 0 0 1 0 12.5zm3.75 4.5a.75.75 0 1 0 0-1.5.75.75 0 0 0 0 1.5M7 4.75a.75.75 0 1 1-1.5 0 .75.75 0 0 1 1.5 0m1.75.75a.75.75 0 1 0 0-1.5.75.75 0 0 0 0 1.5" fill="#666"/></svg>

package/src/app/api/agents/[id]/route.ts

@@ -0,0 +1,30 @@
+import { NextResponse } from 'next/server'
+import { loadAgents, saveAgents, deleteAgent } from '@/lib/server/storage'
+import { normalizeProviderEndpoint } from '@/lib/openclaw-endpoint'
+
+export async function PUT(req: Request, { params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params
+  const body = await req.json()
+  const agents = loadAgents()
+  if (!agents[id]) return new NextResponse(null, { status: 404 })
+
+  Object.assign(agents[id], body, { updatedAt: Date.now() })
+  if (body.apiEndpoint !== undefined) {
+    agents[id].apiEndpoint = normalizeProviderEndpoint(
+      body.provider || agents[id].provider,
+      body.apiEndpoint,
+    )
+  }
+  delete (agents[id] as Record<string, unknown>).id // prevent id overwrite
+  agents[id].id = id
+  saveAgents(agents)
+  return NextResponse.json(agents[id])
+}
+
+export async function DELETE(_req: Request, { params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params
+  const agents = loadAgents()
+  if (!agents[id]) return new NextResponse(null, { status: 404 })
+  deleteAgent(id)
+  return NextResponse.json('ok')
+}

package/src/app/api/agents/[id]/thread/route.ts

@@ -0,0 +1,66 @@
+import { NextResponse } from 'next/server'
+import crypto from 'crypto'
+import { loadAgents, saveAgents, loadSessions, saveSessions } from '@/lib/server/storage'
+
+export async function POST(req: Request, { params }: { params: Promise<{ id: string }> }) {
+  const { id: agentId } = await params
+  const agents = loadAgents()
+  const agent = agents[agentId]
+  if (!agent) {
+    return NextResponse.json({ error: 'Agent not found' }, { status: 404 })
+  }
+
+  const body = await req.json().catch(() => ({}))
+  const user = body.user || 'default'
+  const sessions = loadSessions()
+
+  // If agent already has a thread session that exists, return it
+  if (agent.threadSessionId && sessions[agent.threadSessionId]) {
+    return NextResponse.json(sessions[agent.threadSessionId])
+  }
+
+  // Check if an existing session is already linked to this agent as a thread
+  const existing = Object.values(sessions).find(
+    (s: Record<string, unknown>) => s.name === `agent-thread:${agentId}` && s.user === user
+  )
+  if (existing) {
+    agent.threadSessionId = (existing as Record<string, unknown>).id as string
+    agent.updatedAt = Date.now()
+    saveAgents(agents)
+    return NextResponse.json(existing)
+  }
+
+  // Create a new thread session
+  const sessionId = `agent-thread-${agentId}-${crypto.randomBytes(4).toString('hex')}`
+  const now = Date.now()
+  const session = {
+    id: sessionId,
+    name: `agent-thread:${agentId}`,
+    cwd: process.cwd(),
+    user: user,
+    provider: agent.provider,
+    model: agent.model,
+    credentialId: agent.credentialId || null,
+    fallbackCredentialIds: agent.fallbackCredentialIds || [],
+    apiEndpoint: agent.apiEndpoint || null,
+    claudeSessionId: null,
+    messages: [],
+    createdAt: now,
+    lastActiveAt: now,
+    active: false,
+    sessionType: 'human' as const,
+    agentId,
+    tools: agent.tools || [],
+    heartbeatEnabled: agent.heartbeatEnabled || false,
+    heartbeatIntervalSec: agent.heartbeatIntervalSec || null,
+  }
+
+  sessions[sessionId] = session as Record<string, unknown>
+  saveSessions(sessions)
+
+  agent.threadSessionId = sessionId
+  agent.updatedAt = Date.now()
+  saveAgents(agents)
+
+  return NextResponse.json(session)
+}

package/src/app/api/agents/generate/route.ts

@@ -0,0 +1,42 @@
+import { NextResponse } from 'next/server'
+import { z } from 'zod'
+import { buildLLM } from '@/lib/server/build-llm'
+
+const agentSchema = z.object({
+  name: z.string().describe('Short name for the agent'),
+  description: z.string().describe('One sentence describing what it does'),
+  systemPrompt: z.string().describe('Full system prompt — thorough and specific, at least 3-4 paragraphs'),
+  isOrchestrator: z.boolean().describe('True only if it needs to coordinate multiple sub-agents'),
+})
+
+const GENERATE_PROMPT = `You are a agent generator. The user will describe an AI agent they want to create. Generate a complete agent definition.
+
+Set isOrchestrator to true ONLY if the user describes something that needs to coordinate multiple sub-agents.
+Make the systemPrompt detailed and actionable — at least 3-4 paragraphs. Include specific instructions about how the agent should behave, what it should focus on, and how it should format its responses.`
+
+export async function POST(req: Request) {
+  const { prompt } = await req.json()
+  if (!prompt?.trim()) {
+    return NextResponse.json({ error: 'prompt is required' }, { status: 400 })
+  }
+
+  try {
+    const { llm, provider } = await buildLLM()
+    const structured = provider === 'anthropic'
+      ? llm.withStructuredOutput(agentSchema)
+      : (llm as any).withStructuredOutput(agentSchema, {
+          name: 'agent_definition',
+          method: 'functionCalling',
+        })
+    const result = await structured.invoke([
+      { role: 'system' as const, content: GENERATE_PROMPT },
+      { role: 'user' as const, content: prompt },
+    ], { signal: AbortSignal.timeout(60_000) })
+
+    return NextResponse.json(result)
+  } catch (err: unknown) {
+    const message = err instanceof Error ? err.message : 'Generation failed'
+    console.error('[agent-generate] Error:', message)
+    return NextResponse.json({ error: message }, { status: 500 })
+  }
+}

package/src/app/api/agents/route.ts

@@ -0,0 +1,33 @@
+import { NextResponse } from 'next/server'
+import crypto from 'crypto'
+import { loadAgents, saveAgents } from '@/lib/server/storage'
+import { normalizeProviderEndpoint } from '@/lib/openclaw-endpoint'
+
+export async function GET() {
+  return NextResponse.json(loadAgents())
+}
+
+export async function POST(req: Request) {
+  const body = await req.json()
+  const id = crypto.randomBytes(4).toString('hex')
+  const now = Date.now()
+  const agents = loadAgents()
+  agents[id] = {
+    id,
+    name: body.name || 'Unnamed Agent',
+    description: body.description || '',
+    systemPrompt: body.systemPrompt || '',
+    provider: body.provider || 'claude-cli',
+    model: body.model || '',
+    credentialId: body.credentialId || null,
+    apiEndpoint: normalizeProviderEndpoint(body.provider || 'claude-cli', body.apiEndpoint || null),
+    isOrchestrator: body.isOrchestrator || false,
+    subAgentIds: body.subAgentIds || [],
+    tools: body.tools || [],
+    capabilities: body.capabilities || [],
+    createdAt: now,
+    updatedAt: now,
+  }
+  saveAgents(agents)
+  return NextResponse.json(agents[id])
+}

package/src/app/api/auth/route.ts

@@ -0,0 +1,25 @@
+import { NextResponse } from 'next/server'
+import { validateAccessKey, getAccessKey, isFirstTimeSetup, markSetupComplete } from '@/lib/server/storage'
+import { ensureDaemonStarted } from '@/lib/server/daemon-state'
+
+/** GET /api/auth — check if this is a first-time setup (returns key for initial display) */
+export async function GET() {
+  if (isFirstTimeSetup()) {
+    return NextResponse.json({ firstTime: true, key: getAccessKey() })
+  }
+  return NextResponse.json({ firstTime: false })
+}
+
+/** POST /api/auth — validate an access key */
+export async function POST(req: Request) {
+  const { key } = await req.json()
+  if (!key || !validateAccessKey(key)) {
+    return NextResponse.json({ error: 'Invalid access key' }, { status: 401 })
+  }
+  // If this was first-time setup, mark it as claimed
+  if (isFirstTimeSetup()) {
+    markSetupComplete()
+  }
+  ensureDaemonStarted('api/auth:post')
+  return NextResponse.json({ ok: true })
+}

package/src/app/api/claude-skills/route.ts

@@ -0,0 +1,42 @@
+import { NextResponse } from 'next/server'
+import fs from 'fs'
+import path from 'path'
+import os from 'os'
+
+/** GET /api/claude-skills — discover skills from ~/.claude/skills/ */
+export async function GET() {
+  const skillsDir = path.join(os.homedir(), '.claude', 'skills')
+  const skills: { id: string; name: string; description: string }[] = []
+
+  if (!fs.existsSync(skillsDir)) {
+    return NextResponse.json(skills)
+  }
+
+  const entries = fs.readdirSync(skillsDir, { withFileTypes: true })
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue
+    const skillMd = path.join(skillsDir, entry.name, 'SKILL.md')
+    if (!fs.existsSync(skillMd)) continue
+
+    try {
+      const content = fs.readFileSync(skillMd, 'utf8')
+      // Parse YAML frontmatter between --- markers
+      const match = content.match(/^---\n([\s\S]*?)\n---/)
+      if (!match) continue
+
+      const frontmatter = match[1]
+      const nameMatch = frontmatter.match(/^name:\s*(.+)$/m)
+      const descMatch = frontmatter.match(/^description:\s*(.+)$/m)
+
+      skills.push({
+        id: entry.name,
+        name: nameMatch?.[1]?.trim() || entry.name,
+        description: descMatch?.[1]?.trim() || '',
+      })
+    } catch {
+      // Skip malformed skill files
+    }
+  }
+
+  return NextResponse.json(skills)
+}

package/src/app/api/clawhub/install/route.ts

@@ -0,0 +1,39 @@
+import { NextResponse } from 'next/server'
+import crypto from 'crypto'
+import { loadSkills, saveSkills } from '@/lib/server/storage'
+import { fetchSkillContent } from '@/lib/server/clawhub-client'
+
+export async function POST(req: Request) {
+  const body = await req.json()
+  const { name, description, url, author, tags } = body
+  let { content } = body
+
+  if (!content) {
+    try {
+      content = await fetchSkillContent(url)
+    } catch (err: any) {
+      return NextResponse.json(
+        { error: err.message || 'Failed to fetch skill content' },
+        { status: 502 }
+      )
+    }
+  }
+
+  const skills = loadSkills()
+  const id = crypto.randomBytes(4).toString('hex')
+  skills[id] = {
+    id,
+    name,
+    filename: `skill-${id}.md`,
+    content,
+    description: description || '',
+    sourceFormat: 'openclaw',
+    sourceUrl: url,
+    author: author || '',
+    tags: tags || [],
+    createdAt: Date.now(),
+    updatedAt: Date.now(),
+  }
+  saveSkills(skills)
+  return NextResponse.json(skills[id])
+}

package/src/app/api/clawhub/search/route.ts

@@ -0,0 +1,11 @@
+import { NextResponse } from 'next/server'
+import { searchClawHub } from '@/lib/server/clawhub-client'
+
+export async function GET(req: Request) {
+  const { searchParams } = new URL(req.url)
+  const q = searchParams.get('q') || ''
+  const page = parseInt(searchParams.get('page') || '1', 10)
+  const limit = parseInt(searchParams.get('limit') || '20', 10)
+  const results = await searchClawHub(q, page, limit)
+  return NextResponse.json(results)
+}

package/src/app/api/connectors/[id]/route.ts

@@ -0,0 +1,79 @@
+import { NextResponse } from 'next/server'
+import { loadConnectors, saveConnectors } from '@/lib/server/storage'
+
+export async function GET(_req: Request, { params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params
+  const connectors = loadConnectors()
+  const connector = connectors[id]
+  if (!connector) return NextResponse.json({ error: 'Not found' }, { status: 404 })
+
+  // Merge runtime status and QR code
+  try {
+    const { getConnectorStatus, getConnectorQR, isConnectorAuthenticated, hasConnectorCredentials } = await import('@/lib/server/connectors/manager')
+    connector.status = getConnectorStatus(id)
+    const qr = getConnectorQR(id)
+    if (qr) connector.qrDataUrl = qr
+    connector.authenticated = isConnectorAuthenticated(id)
+    connector.hasCredentials = hasConnectorCredentials(id)
+  } catch { /* ignore */ }
+
+  return NextResponse.json(connector)
+}
+
+export async function PUT(req: Request, { params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params
+  const body = await req.json()
+  const connectors = loadConnectors()
+  const connector = connectors[id]
+  if (!connector) return NextResponse.json({ error: 'Not found' }, { status: 404 })
+
+  // Handle start/stop/repair actions — these modify connector state internally,
+  // so re-read from storage after to avoid overwriting with stale data
+  if (body.action === 'start' || body.action === 'stop' || body.action === 'repair') {
+    try {
+      const manager = await import('@/lib/server/connectors/manager')
+      if (body.action === 'start') {
+        await manager.startConnector(id)
+      } else if (body.action === 'stop') {
+        await manager.stopConnector(id)
+      } else {
+        await manager.repairConnector(id)
+      }
+    } catch (err: any) {
+      // Re-read to get the error state saved by startConnector
+      const fresh = loadConnectors()
+      return NextResponse.json(fresh[id] || { error: err.message }, { status: 500 })
+    }
+    // Re-read the connector after manager modified it
+    const fresh = loadConnectors()
+    return NextResponse.json(fresh[id])
+  }
+
+  // Regular update
+  if (body.name !== undefined) connector.name = body.name
+  if (body.agentId !== undefined) connector.agentId = body.agentId
+  if (body.credentialId !== undefined) connector.credentialId = body.credentialId
+  if (body.config !== undefined) connector.config = body.config
+  if (body.isEnabled !== undefined) connector.isEnabled = body.isEnabled
+  connector.updatedAt = Date.now()
+
+  connectors[id] = connector
+  saveConnectors(connectors)
+  return NextResponse.json(connector)
+}
+
+export async function DELETE(_req: Request, { params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params
+  const connectors = loadConnectors()
+  if (!connectors[id]) return NextResponse.json({ error: 'Not found' }, { status: 404 })
+
+  // Stop if running
+  try {
+    const { stopConnector } = await import('@/lib/server/connectors/manager')
+    await stopConnector(id)
+  } catch { /* ignore */ }
+
+  delete connectors[id]
+  saveConnectors(connectors)
+  return NextResponse.json({ ok: true })
+}