NextUI.AI.Harnesses.OpenClaw

OpenClaw gateway harness for the NextUI AI orchestration system (design V7): connects to a local (or explicitly allowed remote) OpenClaw gateway over its WebSocket protocol v4 and maps OpenClaw agent runs onto the stable NextUI agent event contract (13 event kinds).

• OpenClawGatewayClient — single-connection protocol v4 client (System.Net.WebSockets): connect.challenge → connect (role operator, minimal scopes operator.read / operator.write / operator.approvals) → hello-ok handshake with capability discovery (features.methods / features.events, policy tick interval), req/res correlation with a 30 s default timeout, event dispatch in arrival order, idempotencyKey injection for side-effecting methods (agent, send, ...), and a tick-silence watchdog (2× the server-advertised tick interval). On disconnect the client faults and notifies; reconnection policy (backoff, journal stitching) is owned by the harness layer, which builds a fresh client.

Security (V14): the operator token equals whole-machine operator power. The token is held in memory only for the duration of the connect frame, never logged, never embedded in exception messages or event payloads, and this package persists nothing. Non-loopback endpoints require a token at construction time; remote endpoints additionally require explicit opt-in at the settings layer.

The package depends only on NextUI.AI.Abstractions plus the BCL (System.Net.WebSockets, System.Text.Json, System.Threading.Channels). The wire contract is pinned against the OpenClaw sources under packages/gateway-protocol/src/ (TypeBox schemas); see the schema excerpts in OpenClawGatewayClient.cs and the compatibility contract in docs/agents/harness-contracts/ in the NextUI repository.