All-in-one Manager Agent container. Includes:
- Higress AI Gateway (port 8080 gateway, 8001 console): LLM proxy, MCP Server hosting, consumer auth
- Tuwunel Matrix Server (port 6167): Agent IM communication
- MinIO (port 9000 API, 9001 console): Centralized HTTP file system
- Element Web (via Nginx on port 8088, proxied through Higress): Browser-based IM client
- Manager Agent (OpenClaw or CoPaw): Coordinates Workers, manages credentials, assigns tasks
- mc mirror: Bidirectional file sync between MinIO and local filesystem
Manager Agent supports two runtime modes via HICLAW_MANAGER_RUNTIME:
openclaw(default): Node.js gateway modecopaw: Python workspace mode
Both runtimes share the same skills and workspace structure.
# Via Makefile (recommended)
make build-manager
# Or directly
docker build -t hiclaw/manager-agent:latest .Use the installation script instead of running directly:
../install/hiclaw-install.sh managermanager/
├── Dockerfile # Multi-stage build
├── supervisord.conf # Process orchestration (priority-ordered)
├── scripts/
│ ├── init/ # Container startup scripts (supervisord)
│ │ ├── start-*.sh # Component startup scripts
│ │ └── setup-higress.sh # Higress route/consumer/MCP init
│ └── lib/ # Shared libraries
│ ├── base.sh # Shared utilities (waitForService, generateKey, log)
│ └── container-api.sh # Docker/Podman REST API helpers
├── agent/ # Manager agent definition (synced to MinIO)
│ ├── AGENTS.md # Agent instructions
│ ├── SOUL.md # Manager personality and rules
│ ├── HEARTBEAT.md # Periodic check routine
│ └── skills/ # Each skill is self-contained
│ ├── worker-management/
│ │ ├── SKILL.md
│ │ ├── scripts/ # create-worker.sh, generate-worker-config.sh
│ │ └── references/ # worker-openclaw.json.tmpl
│ ├── mcp-server-management/
│ │ ├── SKILL.md
│ │ └── references/ # mcp-github.yaml
│ └── matrix-server-management/
│ └── SKILL.md
├── configs/
│ └── manager-openclaw.json.tmpl # Manager OpenClaw config template
└── tests/
└── smoke-test.sh # Post-startup health check
| Variable | Required | Default | Description |
|---|---|---|---|
HICLAW_MANAGER_RUNTIME |
No | openclaw |
Manager runtime: openclaw or copaw |
HICLAW_ADMIN_USER |
Yes | - | Human admin Matrix username |
HICLAW_ADMIN_PASSWORD |
Yes | - | Human admin password |
HICLAW_MANAGER_PASSWORD |
Yes | - | Manager Agent Matrix password |
HICLAW_REGISTRATION_TOKEN |
Yes | - | Tuwunel registration token |
HICLAW_MATRIX_DOMAIN |
No | matrix-local.hiclaw.io:8080 |
Matrix server domain |
HICLAW_MATRIX_CLIENT_DOMAIN |
No | matrix-client-local.hiclaw.io |
Element Web domain |
HICLAW_AI_GATEWAY_DOMAIN |
No | aigw-local.hiclaw.io |
AI Gateway domain (for LLM and MCP) |
HICLAW_FS_DOMAIN |
No | fs-local.hiclaw.io |
HTTP file system domain |
HICLAW_LLM_PROVIDER |
Yes | - | LLM provider name |
HICLAW_DEFAULT_MODEL |
Yes | - | Default LLM model ID |
HICLAW_LLM_API_KEY |
Yes | - | LLM API key |
HICLAW_MINIO_USER |
Yes | - | MinIO root user |
HICLAW_MINIO_PASSWORD |
Yes | - | MinIO root password |
HICLAW_MANAGER_GATEWAY_KEY |
Yes | - | Manager's Higress consumer key |
HICLAW_GITHUB_TOKEN |
No | - | GitHub PAT for MCP Server |
HICLAW_NACOS_REGISTRY_URI |
No | nacos://market.hiclaw.io:80/public |
Default Nacos registry URI for Worker template search/import, format nacos://host[:port]/namespace |
HICLAW_NACOS_USERNAME |
No | - | Default Nacos username for template search and nacos:// package imports when URI omits user:pass@ |
HICLAW_NACOS_PASSWORD |
No | - | Default Nacos password for template search and nacos:// package imports when URI omits user:pass@ |