$ show Yuan-lab-LLM/ClawManager
ClawManager is a full-stack, Kubernetes-native control plane for managing AI agent runtimes (OpenClaw, Hermes, OpenCode, DeepSeek Harness, Workbuddy). It provides instance lifecycle management, secure AI gateway proxying with governance and cost tracking, skill management (import, versioning, hub), team collaboration with leader-mediated orchestration, and a comprehensive security protection platform (SecPlane) covering runtime behavior, egress policy, intrusion detection, and compliance reporting. The backend is built in Go with Gin, uses MySQL for persistence, Redis for real-time events, and the Kubernetes client-go library for orchestration. The frontend is a React 19 SPA with TypeScript, Vite, Tailwind CSS, and i18n support for five languages. The repository also includes Playwright-based E2E tests, Docker Compose local development stacks, and a Hermes desktop web component with its own build pipeline. While the codebase demonstrates solid architecture (repository pattern, service layer, middleware), some areas show drift (many SQL migrations, hardcoded dev secrets, incomplete feature flags) and the sheer number of runtime types and configurations introduces complexity.
The LLM identified 3 files worth highlighting for reuse:
Implements an egress allowlist/denylist policy engine with support for private CIDR exceptions. The SafeDialer wraps net.Dialer to enforce policies before connecting. The package is self-contained (only depends on standard library and a config struct) and can be extracted as a reusable network policy library for any Go service that needs to restrict outbound connections.
Handles LDAP authentication with configurable bind credentials, user/group search, TLS settings, and role mapping for authorization. It includes a diagnostic status endpoint. The design is parameterized via a config struct and can be reused in any Go application requiring LDAP integration for user authentication and group-based role assignment.
A React custom hook that encapsulates fetching security rules, alerts, and dispatching configuration for the SecPlane runtime security scenario pages. It provides loading state, error handling, and refresh capabilities. The pattern is reusable for any admin UI that needs to manage and apply backend configuration with a similar CRUD + dispatch workflow.