writeError writes a JSON error response.

writeJSON writes a JSON response.

Get returns a copy of the instance with the given name, or nil if not found.

dockerExecAs runs a command inside a container as the specified user.

loadStore loads the state from disk. Called per-request to stay in sync with CLI.

Status returns the container's status string and its StartedAt time (zero if not running).

SaveAssets persists the asset store to disk.

SetStatus updates the status of the named instance.

dashboardLogPath returns the path to the dashboard log file.

IsHermes reports whether this instance uses the Hermes runtime.

Snapshot returns a copy of all instances.

dockerExecOutputAs runs a command as the specified user and returns its stdout.

pidFromFile reads the PID from the standard PID file.

writeSSE writes a single Server-Sent Event, handling multi-line data correctly.

GetChannel returns a channel asset by ID, or nil.

GetCharacter returns a character asset by ID, or nil.

Publish sends an event to all subscribers (non-blocking).

buildRoster returns the list of teammates for the given instance, excluding itself. Only instances with a character asset are included in the roster.

LoadSnapshots loads the snapshot store from disk.

ReleaseChannelByInstance clears UsedBy for all channels assigned to the given instance.

decodeJWTAccountID extracts the ChatGPT account ID from a JWT access token. Returns empty string on failure (non-fatal).

waitForGateway polls the gateway health endpoint until it responds or timeout.

AddCharacter adds a character asset.

FindAvailable returns the first available TCP port >= start that is not in used.

LoadAssets loads the asset store from disk.

NewServiceManager returns systemd if available, otherwise falls back to PID-based.

RenderSoulMarkdown produces the SOUL.md content from the given parameters. Exported as a pure function for testability.

SaveSnapshots persists the snapshot store to disk.

SetConfig stores the asset IDs used to configure the named instance.

Start starts the daemon via the platform service manager.

ValidateChannelToken validates a channel's messaging credentials.

generatePKCE creates a PKCE code verifier and its S256 challenge.

refreshTeammateRosters rewrites SOUL.md for all other running instances that have a character, so their roster reflects the latest fleet state. Errors

resolveTargets returns copies of the instances matching name, or all instances if name == "all".

GetByName returns a snapshot by name, or nil.

GetModel returns a model asset by ID, or nil.

ImageTag returns the Docker image tag corresponding to this CLI version. Only exact release tags (e.g. "v0.1.0") map to release images. Local git desc

InjectSoul renders the character fields into a SOUL.md file and writes it into the container. The OpenClaw gateway watches this file for changes, so n

IsInstalled reports whether the service definition exists.

IsRunning reports whether the daemon is currently running.

PullImage pulls an image from a remote registry.

ValidateChannelCredentials checks whether the required credentials for a channel are present before attempting live validation or configuration.

mockStoreForRoster creates an isolated Store with only the given instances. Uses a temp HOME dir so state.Load() returns an empty store.

parseState splits the OAuth state into nonce and dashboard origin.

safeDirName converts a display name to a filesystem-safe directory name by replacing spaces with hyphens.

AddChannel adds a channel asset.

AddModel adds a model asset.

Configure runs openclaw CLI commands inside the container to set up the instance.

Delete removes a snapshot directory from disk.

EnsureNetwork creates the "clawfleet-net" container network if it does not already exist.

ExecAs runs a command inside a container as the specified user (public wrapper).

Install creates the service definition (systemd unit / launchd plist).

IsNotFound returns true if the error indicates the container does not exist.

List returns a copy of all snapshot metadata.

Load copies all files from a snapshot directory into an instance data directory.

NamingPrefix returns the instance name prefix for the given runtime type. New instances are named "openclaw-N" or "hermes-N" based on runtime.

ParseMemoryBytes converts a human-readable string like "4g", "512m" to bytes.

Save copies an instance's data directory into a named snapshot. It skips channels/ and sessions/ directories and strips the "channels" key from opencl

Status returns daemon status info.