SpringBoot整合OpenClaw技能系统的实战指南

[前端业务系统]
↓ HTTP
[SpringBoot 技能中台] ←→ [MySQL/Redis]
↓ MCP Protocol
[OpenClaw Gateway] ←→ [各类 Skills：GitHub/浏览器/文件系统]

git clone https://github.com/openclaw/openclaw.git
cd openclaw
docker-compose up -d

# 进容器里装插件
docker compose exec openclaw-gateway node dist/index.js plugins install mcp-adapter

    
        org.springframework.boot
        spring-boot-starter-webflux
        org.springframework.boot
        spring-boot-starter-data-jpa
        mysql
        mysql-connector-java

openclaw:
  mcp:
    base-url: http://localhost:8080  # MCP 适配器地址
    timeout: 30000                   # AI 执行可能慢，给 30 秒

@Configuration
public class OpenClawConfig {
    @Bean
    public WebClient openClawWebClient(@Value("${openclaw.mcp.base-url}") String baseUrl) {
        return WebClient.builder()
                .baseUrl(baseUrl)
                .codecs(configurer -> configurer.defaultCodecs().maxInMemorySize(2 * 1024 * 1024)) // 防止 AI 返回超长内容爆内存
                .build();
    }
}

@Service
@Slf4j
public class OpenClawSkillService {
    @Autowired
    private WebClient webClient;
    @Autowired
    private SkillAuditRepository auditRepository; // 审计日志_repo
    /**
     * 拉取 OpenClaw 当前所有可用技能
     * 相当于给 AI 做"资产盘点"
     */
    public List discoverSkills() {
        return webClient.post()
                .uri("/mcp/tools/list")
                .header("Content-Type", "application/json")
                .bodyValue(Map.of("jsonrpc", "2.0", "id", 1, "method", "tools/list"))
                .retrieve()
                .bodyToMono(JsonNode.class)
                .map(response -> {
                    List skills = new ArrayList<>();
                    JsonNode tools = response.get("result").get("tools");
                    tools.forEach(tool -> {
                        skills.add(new SkillInfo(
                            tool.get("name").asText(),
                            tool.get("description").asText()
                        ));
                    });
                    return skills;
                })
                .block(); // 启动时同步加载，后面可以改成缓存
    }
    /**
     * 调用具体技能，带审计日志
     * @param skillName 技能名，比如 "github-pr-create"
     * @param parameters 参数，比如 {"repo": "myproject", "title": "fix bug"}
     * @param operator 操作人，从 Spring Security 上下文中取
     */
    public SkillResult invokeSkill(String skillName, Map parameters, String operator) {
        // 1. 先记日志：谁想调什么
        SkillAudit audit = new SkillAudit();
        audit.setOperator(operator);
        audit.setSkillName(skillName);
        audit.setRequestParams(parameters.toString());
        audit.setInvokeTime(LocalDateTime.now());
        try {
            // 2. 调 OpenClaw
            JsonNode response = webClient.post()
                    .uri("/mcp/tools/call")
                    .bodyValue(Map.of(
                        "jsonrpc", "2.0",
                        "id", System.currentTimeMillis(),
                        "method", "tools/call",
                        "params", Map.of(
                            "name", skillName,
                            "arguments", parameters
                        )
                    ))
                    .retrieve()
                    .bodyToMono(JsonNode.class)
                    .timeout(Duration.ofSeconds(30))
                    .block();
            // 3. 处理结果
            String result = response.get("result").get("content").get(0).get("text").asText();
            audit.setStatus("SUCCESS");
            audit.setResponse(result.substring(0, Math.min(result.length(), 1000))); // 太长的截断存
            return new SkillResult(true, result, null);
        } catch (Exception e) {
            log.error("技能调用失败: {}", skillName, e);
            audit.setStatus("FAILED");
            audit.setErrorMsg(e.getMessage());
            return new SkillResult(false, null, e.getMessage());
        } finally {
            auditRepository.save(audit); // 落库，留痕
        }
    }
}

@Entity
public class SkillPermission {
    @Id
    private Long id;
    private String role;      // ADMIN/DEVELOPER/GUEST
    private String skillName; // 支持通配符，比如 "github-*"
    private boolean allowed;  // true 允许，false 拒绝
}

@Aspect
@Component
public class SkillSecurityAspect {
    
    @Autowired
    private SkillPermissionRepository permissionRepo;
    
    @Before("execution(* com.example.openclaw.service.OpenClawSkillService.invokeSkill(..)) && args(skillName,..,operator)")
    public void checkPermission(String skillName, String operator) {
        // 查用户角色（简化示例，实际从 JWT 或 Session 取）
        String role = getRoleByOperator(operator);
        
        List permissions = permissionRepo.findByRoleAndSkillNameLike(role, skillName);
        
        boolean allowed = permissions.stream().anyMatch(SkillPermission::isAllowed);
        if (!allowed) {
            throw new AccessDeniedException("您无权调用技能: " + skillName);
        }
    }
}

@Service
public class SkillOrchestrationService {
    
    @Autowired
    private OpenClawSkillService skillService;
    
    /**
     * 执行工作流
     * @param workflow 定义好的步骤列表
     * @param context  上下文，用于步骤间传参
     */
    public void executeWorkflow(List workflow, Map context, String operator) {
        for (WorkflowStep step : workflow) {
            // 1. 参数模板渲染（比如把上一步的返回值塞进去）
            Map params = renderTemplate(step.getParamsTemplate(), context);
            
            // 2. 调技能
            SkillResult result = skillService.invokeSkill(step.getSkillName(), params, operator);
            
            if (!result.isSuccess()) {
                throw new WorkflowException("步骤 " + step.getName() + " 失败: " + result.getError());
            }
            
            // 3. 结果写回上下文，下一步能用
            context.put(step.getOutputKey(), result.getData());
        }
    }
    
    private Map renderTemplate(Map template, Map context) {
        Map rendered = new HashMap<>();
        template.forEach((k, v) -> {
            // 简单替换，比如 "{{github.commits}}" 换成 context 里的真实数据
            if (v.startsWith("{{") && v.endsWith("}}")) {
                String key = v.substring(2, v.length() - 2);
                rendered.put(k, context.get(key));
            } else {
                rendered.put(k, v);
            }
        });
        return rendered;
    }
}

// 定义一个"晨会报告"工作流
List morningReport = Arrays.asList(
    new WorkflowStep("github-commits-yesterday", Map.of("repo", "myapp"), "commits"),
    new WorkflowStep("chart-generate", Map.of("data", "{{commits}}", "type", "bar"), "chart"),
    new WorkflowStep("email-send", Map.of("attachment", "{{chart}}", "to", "team@company.com"), null)
);

orchestrationService.executeWorkflow(morningReport, new HashMap<>(), "admin");

@RestController
@RequestMapping("/api/admin/audit")
public class AuditController {
    
    @GetMapping("/stats")
    public Map getStats(
            @RequestParam @DateTimeFormat(iso = DateTimeFormat.ISO.DATE) LocalDate start,
            @RequestParam @DateTimeFormat(iso = DateTimeFormat.ISO.DATE) LocalDate end) {
        
        // 统计每天调用量、成功率、Top10 热门技能
        return Map.of(
            "totalCalls", auditRepository.countByDateRange(start, end),
            "successRate", auditRepository.calcSuccessRate(start, end),
            "topSkills", auditRepository.findTopSkills(start, end, PageRequest.of(0, 10))
        );
    }
}

@Component
public class OpenClawHealthChecker {
    
    @Autowired
    private WebClient webClient;
    
    @Scheduled(fixedRate = 60000) // 每分钟
    public void check() {
        try {
            webClient.get()
                    .uri("/health") // OpenClaw 自带健康端点
                    .retrieve()
                    .toBodilessEntity()
                    .timeout(Duration.ofSeconds(5))
                    .block();
            // 上报 Prometheus 指标，标记为 UP
        } catch (Exception e) {
            // 标记为 DOWN，触发告警
            alertService.send("OpenClaw Gateway 失联，请检查 Docker 容器状态");
        }
    }
}