[ImgBot] Optimize images

.cnb/env.d.ts

@@ -0,0 +1,17 @@
+declare namespace NodeJS {
+    interface ProcessEnv {
+        CNB_API_ENDPOINT?: string;
+        CNB_WEB_ENDPOINT?: string;
+        CNB_TOKEN?: string;
+        CNB_REPO_SLUG?: string;
+        CNB_ISSUE_IID?: string;
+        CNB_PULL_REQUEST_IID?: string;
+        CNB_COMMENT_BODY?: string;
+        CNB_NPC_NAME?: string;
+        CNB_NPC_PROMPT?: string;
+        CNB_NPC_SLUG?: string;
+        CNB_USER_TYPE?: string;
+        CNB_USER_NAME?: string;
+        CNB_USER_NICKNAME?: string;
+    }
+}

.github/workflows/sync-cnb.yml

@@ -0,0 +1,21 @@
+# .github/workflows/sync-cnb.yml
+
+name: Sync to CNB
+on: [push]
+
+jobs:
+    sync:
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v4
+              with:
+                  fetch-depth: 0
+
+            - name: Sync to CNB Repository
+              uses: docker://tencentcom/git-sync
+              env:
+                  PLUGIN_TARGET_URL: "https://cnb.cool/soucod-github/soucod/openclaw.git"
+                  PLUGIN_AUTH_TYPE: "https"
+                  PLUGIN_USERNAME: "cnb"
+                  PLUGIN_PASSWORD: ${{ secrets.GIT_PASSWORD }}
+                  PLUGIN_FORCE: "true"

.openclaw/openclaw.json

@@ -0,0 +1,80 @@
+{
+  "models": {
+    "mode": "merge",
+    "providers": {
+      "cnb": {
+        "baseUrl": "${CNB_API_ENDPOINT}/${CNB_REPO_SLUG}/-/ai/",
+        "apiKey": "${CNB_TOKEN}",
+        "api": "openai-completions",
+        "models": [
+          {
+            "id": "auto",
+            "name": "CNB-Models",
+            "reasoning": true,
+            "input": [
+              "text"
+            ]
+          }
+        ]
+      }
+    }
+  },
+  "agents": {
+    "defaults": {
+      "model": {
+        "primary": "cnb/auto"
+      },
+      "workspace": "/workspace/clawd",
+      "compaction": {
+        "mode": "safeguard"
+      },
+      "maxConcurrent": 4,
+      "subagents": {
+        "maxConcurrent": 8
+      }
+    }
+  },
+  "tools": {
+    "web": {
+      "search": {
+        "enabled": false
+      },
+      "fetch": {
+        "enabled": true
+      }
+    },
+    "agentToAgent": {
+      "enabled": true
+    },
+    "elevated": {
+      "enabled": true
+    },
+    "exec": {
+      "applyPatch": {
+        "enabled": true
+      }
+    }
+  },
+  "gateway": {
+    "mode": "local",
+    "auth": {
+      "mode": "token",
+      "token": "${CNB_TOKEN}"
+    },
+    "port": 18789,
+    "bind": "lan",
+    "tailscale": {
+      "mode": "off",
+      "resetOnExit": false
+    },
+    "controlUi": {
+      "enabled": true,
+      "allowInsecureAuth": true
+    }
+  },
+  "skills": {
+    "install": {
+      "nodeManager": "npm"
+    }
+  }
+}

.specstory/.gitignore

@@ -0,0 +1,2 @@
+# SpecStory project identity file
+/.project.json

Dockerfile

@@ -59,6 +59,12 @@ ARG OPENCLAW_DOCKER_BUILD_SKIP_DTS
 # Copy pinned Bun binary from the official image instead of fetching via curl.
 COPY --from=bun-binary /usr/local/bin/bun /usr/local/bin/bun
 
+# Install nginx for reverse proxy (required by cnb.cool cloud environment)
+RUN apt-get update && \
+    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends nginx && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/* /var/cache/apt/archives/*
+
 RUN corepack enable
 
 WORKDIR /app

NPC.yml

@@ -0,0 +1,10 @@
+.npc: &npc
+  - docker:
+      image: node:24
+    stages:
+      - name: run openclaw
+        image: docker.cnb.cool/soucod-github/soucod/openclaw:latest
+
+$:
+  issue.comment@npc: *npc
+  pull_request.comment@npc: *npc