mirror of
https://github.com/hanzoai/bot.git
synced 2026-08-07 00:15:58 +00:00
The legacy "openclaw-control-ui" Lit app at ui/ is replaced by
@hanzo/bot-admin (~/work/hanzo/gui/apps/admin-bot), built externally
in the gui workspace and synced into dist/control-ui/ via
scripts/sync-admin-ui.sh. Identical static-serve handler — the bot
already configures gateway.controlUi.basePath, just defaults to
/_/bot now to match the canonical hanzo-binary mount.
Changes:
- scripts/sync-admin-ui.sh — rsyncs the built admin-bot bundle into
dist/control-ui/. Mirrors tasks/scripts/sync-admin-ui.sh exactly.
- src/gateway/iam-identity.ts (+ test) — pure-trust extractor for
X-Org-Id / X-User-Id / X-User-Email headers set by hanzoai/gateway
upstream after JWT validation. attachIamIdentity() runs once per
HTTP request from server-http.ts handleRequest. The bot does NOT
validate the JWT itself — that's the gateway's job.
- src/infra/control-ui-assets.ts — sentinel for repo root flipped
from ui/vite.config.ts to scripts/sync-admin-ui.sh; existing
resolveControlUiRootSync continues to look for dist/control-ui/
unchanged. Test updated.
- src/data/moonshot-kimi-k2.ts — moved from the deleted ui/ tree
(only consumer is scripts/sync-moonshot-docs.ts).
- scripts/ui.js — replaced with a 50-line shim:
pnpm ui:build → calls scripts/sync-admin-ui.sh
pnpm ui:dev → prints the gui-workspace dev pointer
pnpm ui:install → no-op (admin-bot inherits gui workspace deps)
- Dockerfile — drops the COPY of ui/package.json (ui/ is gone) and
the RUN pnpm ui:build step (the synced dist/control-ui/ is now
pulled via the existing COPY . . step).
- vitest.config.ts — drops the four ui/src/ui/ test paths and the
ui/** coverage exclude.
- src/config/schema.{help,hints}.ts — basePath placeholder /openclaw
replaced with the canonical /_/bot mount.
Identity flow (Node-runtime exception per HANZO_BINARY.md):
hanzoai/gateway (JWT validate, strip+set X-* headers)
→ bot.handleRequest()
→ attachIamIdentity(req)
→ downstream handlers via getIamIdentity(req)
Tests: 43 passing across iam-identity (8), control-ui-routing (6),
control-ui.http (18), control-ui-csp (2), control-ui-assets (9).
Repo size: -105,289 / +328 lines.