Omni Wire

AI代理集群的基础设施层。

88 MCP工具·A2A协议·OmniMesh VPN·nftables防火墙·CDP浏览器·cookie同步·2FA TOTP·双向同步·CyberBase持久化

______________________________________________________________________

快速开始

npm install -g omniwire

添加到您的AI代理（Claude Code、Cursor、OpenCode等）：

{
  "mcpServers": {
    "omniwire": { "command": "omniwire", "args": ["--stdio"] }
  }
}

______________________________________________________________________

为什么选择OmniWire？

______________________________________________________________________

用例

DevOps和基础设施

# Deploy to all nodes in one call
omniwire_deploy(src="node-a:/app/v2.tar.gz", dst="/opt/app/")

# Rolling service restart
omniwire_batch([
  {node: "node1", command: "systemctl restart app"},
  {node: "node2", command: "systemctl restart app"}
], parallel=false)

# Monitor disk across fleet
omniwire_disk_usage()

安全和渗透测试

# Anonymous nmap through Mullvad VPN
omniwire_exec(
  node="node-a",
  command="nmap -sV -T4 target.com",
  via_vpn="mullvad:se",
  background=true
)

# Rotate exit IP between scans
omniwire_vpn(action="rotate", node="node-a")

# Run nuclei through VPN namespace
omniwire_exec(command="nuclei -u target.com",
  via_vpn="mullvad", store_as="nuclei_results")

多智能体协调

# Agent A dispatches work
omniwire_task_queue(action="enqueue",
  queue="recon", task="subfinder -d target.com")

# Agent B picks it up
omniwire_task_queue(action="dequeue", queue="recon")

# Share findings on blackboard
omniwire_blackboard(action="post",
  topic="subdomains", data="api.target.com")

# A2A messaging between agents
omniwire_a2a_message(action="send",
  channel="results", message="scan complete")

后台和异步工作流

# Long build in background
omniwire_exec(
  command="docker build -t app .",
  node="node-a", background=true
)
# Returns: "BACKGROUND bg-abc123"

# Check progress
omniwire_bg(action="poll", task_id="bg-abc123")
# Returns: "RUNNING (45.2s)"

# Get result when done
omniwire_bg(action="result", task_id="bg-abc123")

# Pipeline: build → test → deploy
omniwire_pipeline(steps=[
  {node: "node-a", command: "make build"},
  {node: "node-a", command: "make test"},
  {command: "deploy.sh", store_as: "version"}
])

文件操作

# Transfer large dataset between nodes
omniwire_transfer_file(
  src="node-a:/data/model.bin",
  dst="hostinger:/ml/model.bin"
)
# Auto-selects: aria2c (16-conn parallel)

# Sync config to all nodes
omniwire_deploy(
  src_node="node-a",
  src_path="/etc/nginx/nginx.conf",
  dst_path="/etc/nginx/nginx.conf"
)

VPN和匿名操作

# Full Mullvad setup for a node
omniwire_vpn(action="connect", server="se",
  node="node-a")
omniwire_vpn(action="quantum", config="on")
omniwire_vpn(action="daita", config="on")
omniwire_vpn(action="multihop", config="se:us")
omniwire_vpn(action="dns", config="adblock")
omniwire_vpn(action="killswitch", config="on")

# Verify anonymous IP
omniwire_vpn(action="ip", node="node-a")

# Node-wide VPN (mesh stays connected)
omniwire_vpn(action="full-on", server="de")

______________________________________________________________________

建筑

graph TB
    subgraph clients["AI Agents"]
        CC["Claude Code"]
        OC["OpenCode / OpenClaw"]
        CU["Cursor / Any MCP Client"]
        A2["Other Agents (A2A)"]
    end

    subgraph omniwire["OmniWire MCP Server"]
        direction TB
        MCP["MCP Protocol Layer
stdio | SSE | REST"]

        subgraph tools["88 Tools"]
            direction LR
            EXEC["Execution
exec  run  batch
broadcast  pipeline  bg"]
            AGENT["Agentic
store  watch  task
a2a  events  locks"]
            FILES["Files & Deploy
read  write  transfer
deploy  find"]
            SYS["System & DevOps
docker  services
cron  env  git  syslog"]
            SYNC["CyberSync
sync  diff  search
secrets  knowledge"]
        end

        subgraph engine["Core Engine"]
            direction LR
            POOL["SSH2 Pool
persistent  compressed
circuit breaker"]
            XFER["Transfer Engine
SFTP  netcat+LZ4
aria2c 16-conn"]
            CSYNC["Sync Engine
PostgreSQL  XChaCha20
parallel reconcile"]
        end
    end

    subgraph mesh["Infrastructure Mesh"]
        direction LR
        N1["Node A
storage"]
        N2["Node B
compute"]
        N3["Node C
GPU"]
        N4["Node D
local"]
    end

    DB[("PostgreSQL
CyberBase")]

    CC & OC & CU & A2 -->|MCP| MCP
    MCP --> tools
    tools --> engine
    POOL -->|"SSH2 multi-path"| N1 & N2 & N3
    POOL -->|"local exec"| N4
    CSYNC --> DB

    style omniwire fill:#0D1117,stroke:#59C2FF,stroke-width:2px,color:#C6D0E1
    style clients fill:#161B22,stroke:#91B362,stroke-width:1px,color:#C6D0E1
    style mesh fill:#161B22,stroke:#E6B450,stroke-width:1px,color:#C6D0E1
    style tools fill:#0D1117,stroke:#59C2FF,stroke-width:1px,color:#C6D0E1
    style engine fill:#0D1117,stroke:#CC93E6,stroke-width:1px,color:#C6D0E1
    style MCP fill:#162B44,stroke:#59C2FF,color:#59C2FF
    style DB fill:#162B44,stroke:#CC93E6,color:#CC93E6

______________________________________________________________________

代理设置说明

开爪

OmniWire可作为 ClawHub技能:

# Install via ClawHub CLI
clawhub install omniwire

# Or manual: copy integrations/openclaw/SKILL.md to your OpenClaw skills directory
cp integrations/openclaw/SKILL.md ~/.openclaw/skills/omniwire.md

CyberSync会自动将OpenClaw代理、技能、内存和工作空间导入CyberBase PostgreSQL。

回形针

将OmniWire注册为零成本基础设施代理：

{
  "agents": [{
    "name": "omniwire",
    "type": "local-cli",
    "command": "omniwire --stdio",
    "skills": ["mesh-exec", "file-transfer", "service-control", "docker", "vpn", "scraping", "firewall"],
    "budget": { "monthly_usd": 0 }
  }]
}

看 integrations/paperclip/ 了解完整的适配器和技能定义。

克劳德代码

{
  "mcpServers": {
    "omniwire": {
      "command": "omniwire",
      "args": ["--stdio"]
    }
  }
}

OpenCode/Oh我的OpenAgent

{
  "mcp": {
    "omniwire": {
      "type": "local",
      "command": ["omniwire", "--stdio"]
    }
  }
}

Codex/Gemini

CyberSync会自动将OmniWire配置同步到Codex和Gemini环境。

______________________________________________________________________

关键能力

执行

omniwire_exec       single command + retry + assert
omniwire_run        multi-line script (compact UI)
omniwire_batch      N commands, 1 tool call, chaining
omniwire_broadcast  parallel across all nodes
omniwire_pipeline   multi-step DAG with data flow
omniwire_bg         poll/list background tasks

多代理（A2A）

omniwire_store        session key-value store
omniwire_a2a_message  agent-to-agent queues
omniwire_event        pub/sub event bus
omniwire_semaphore    distributed locking
omniwire_agent_task   async background dispatch
omniwire_workflow     reusable named DAGs

自适应文件传输

  1 GB    aria2c       16-parallel, max speed

连接弹性

Connected --> Health Ping (30s, parallel)
    |
Failure --> Multi-path Failover
    |         WireGuard -> Tailscale -> Public IP
    |
    +--> Retry (300ms -> 600ms -> ... -> 10s)
    |
3 fails --> Circuit OPEN (15s) -> Auto-recover

后台调度

# Any tool supports background: true
exec(background=true)   -> "bg-abc123"
bg(action="poll", id=..) -> "RUNNING (3.2s)"
bg(action="result", id=..) -> full output
bg(action="list")       -> all tasks + status

代理链

exec(store_as="ip")       store result
exec(command="ping {{ip}}") interpolate
batch(abort_on_fail=true)   fail-fast
exec(format="json")         structured output
exec(retry=3, assert="ok")  resilient
watch(assert="ready")       poll until

______________________________________________________________________

全部88个工具

每个工具 支持 background: true --立即返回任务ID。投票与 omniwire_bg.

Execution (6)

Agentic / A2A (12)

Files & Transfer (6)

Monitoring (3)

System & DevOps (12)

Network, VPN & Security (9)

Infrastructure (9)

OmniMesh & Events (6)

Agent Toolkit (7)

CyberSync (9)

______________________________________________________________________

演出

Optimization details

• 密码：AES-128-GCM（AES-NI硬件加速）
• 密钥交换：curve25519-sha256（现代最快的KEX）
• 保持连接：2秒间隔，2次重试=4秒死亡检测
• 端口查找器: shuf （纯bash）替换 python3 -c socket （-30毫秒）
• 压缩：LZ4-1用于传输（比gzip快10倍）
• 缓冲：数组推送+连接（O（n）vs O（n^2）字符串concat）
• 状态：单人 /proc read替换多个管道命令
• 健康ping: : 内置（无哈希查找，无分叉）
• 倒像：先尝试SFTP， cat 仅在失败时回退
• 断路器：15秒恢复，10秒重新连接盖子

______________________________________________________________________

安全

• 所有远程执行均通过 ssh2.Client.exec() --从来没有 child_process.exec()
• 仅基于密钥的身份验证，不存储密码，SSH密钥缓存
• 多路径故障转移：WireGuard->Tailscale->公共IP
• 默认情况下，秘密轴承工具输出被编辑(omniwire_env 列出键，而不是值）
• 首选1Password或其他受管理的保管库来保存生产机密；file/env后端是本地开发的回退
• 2MB输出保护防止内存耗尽
• 4KB自动截断可防止上下文窗口膨胀
• 断路器隔离故障节点
• CORS受限于REST API上的本地主机

______________________________________________________________________

运输方式

omniwire --stdio                          # MCP mode (default)
omniwire --sse-port=3200 --rest-port=3201 # HTTP mode
omniwire --stdio --no-sync               # MCP without CyberSync
omniwire    # or: ow                      # Interactive REPL

______________________________________________________________________

配置网格

创建 ~/.omniwire/mesh.json:

{
  "nodes": [
    { "id": "server1", "host": "10.0.0.1", "user": "root", "identityFile": "id_ed25519", "role": "storage" },
    { "id": "server2", "host": "10.0.0.2", "user": "root", "identityFile": "id_ed25519", "role": "compute" }
  ]
}

______________________________________________________________________

代理安装/设置

用于在OmniWire网格中添加新节点——准备什么，如何将其连接，以及如何将其与Claude Code连接。

先决条件

安装OmniWire

npm install -g omniwire
omniwire --version   # verify

添加新节点

1.在新节点上生成WireGuard密钥对：

wg genkey | tee /etc/wireguard/node_private.key | wg pubkey > /etc/wireguard/node_pub.key
cat /etc/wireguard/node_pub.key

2.为其分配网格IP （下一个可用 10.0.0.0/24):

3.在OmniMesh中注册节点 （从网格中已有的任何节点运行）：

omniwire_omnimesh(action="add-peer",
  id="newnode",
  public_key="
",
  allowed_ips="10.0.0.N/32",
  endpoint="
:51820"
)

4.将更新的对等列表推送到所有节点：

omniwire_omnimesh(action="sync-peers")

5.在新节点上打开界面：

wg-quick up wg0
ping 10.0.0.1   # verify hub reachability

在新节点上配置OmniWire

将节点添加到 ~/.omniwire/mesh.json （如果缺席则创建）：

{
  "nodes": [
    { "id": "node-a",   "host": "10.0.0.1", "user": "root", "identityFile": "~/.ssh/id_omniwire", "role": "storage" },
    { "id": "hostinger", "host": "10.0.0.2", "user": "root", "identityFile": "~/.ssh/id_omniwire", "role": "compute" },
    { "id": "windows",   "host": "10.0.0.3", "user": "Admin", "identityFile": "~/.ssh/id_omniwire", "role": "local" },
    { "id": "thinkpad",  "host": "10.0.0.4", "user": "user",  "identityFile": "~/.ssh/id_omniwire", "role": "local" }
  ]
}

验证连接：

omniwire_mesh_status    # should show all nodes green
omniwire_doctor         # checks SSH, disk, mem, WireGuard, CyberBase

通过MCP连接克劳德代码

添加 ~/.claude/claude_desktop_config.json （或IDE的MCP配置）：

{
  "mcpServers": {
    "omniwire": { "command": "omniwire", "args": ["--stdio"] }
  }
}

重新启动克劳德代码。在新会话中验证：

omniwire_mesh_status()   # 88 tools should be available

环境变量

在节点上持久设置。值写入 /etc/environment，但工具响应仅确认是否设置了值，从不回显秘密：

omniwire_env(action="set", key="OP_SERVICE_ACCOUNT_TOKEN", value="", node="node-a")
omniwire_env(action="get", key="OP_SERVICE_ACCOUNT_TOKEN", node="node-a")  # OP_SERVICE_ACCOUNT_TOKEN=

CyberSync自动分发

CyberSync通过PostgreSQL自动将配置、机密和内存推送到所有节点。

# Check what's tracked
omniwire_coc(action="cybersync-status")

# Force push current config to all nodes
omniwire_coc(action="force-sync")

# Diff local state vs database
cybersync_diff()

在第一次运行时，CyberSync从CyberBase中提取节点配置、2FA种子和Claude内存——机器之间没有手动复制粘贴。

______________________________________________________________________

更新日志

v3.0.0 -- 81 Tools, CyberBase Persistence, Full Platform

19种新工具：代理、dns、备份、容器、证书、用户、计划、警报、日志聚合、基准测试、代码段、别名、跟踪、医生、指标、审计、插件、Cookie、cdp。

CyberBase自动持久化：存储、审计、黑板、Cookie都同步到PostgreSQL。pgvector语义搜索。所有DB调用均出现5s statement_timeout。

建筑：优先级命令队列、智能输出截断、预测节点选择、延迟历史、连接池统计。

安全：命令denylist（阻止rm-rf/、分叉炸弹、磁盘擦除）。具有CyberBase持久性的审核日志。

A2A：类型化消息模式（JSON验证）、失败任务的死信队列、发布/订阅事件过滤器。

DX：GitHub操作CI、bash/zsh/fish shell补全、--json标志、cookie同步到1Password。

v2.7.0 -- Firewall Engine

omniwire_firewall：基于nftables的防火墙引擎，具有17个操作。预设（服务器、偏执、最小、最重要）、速率限制、按国家划分的地理阻止、端口敲击序列、IP禁令/取消禁令、白名单/黑名单、规则管理、审计日志、保存/恢复。

零网格冲击：wg0、wg1、tailscale0和所有网格CIDR（10.0.0.0/24、10.20.0.0/24、100.64.0.0/10）在任何硬化规则之前始终被列入白名单。nftables在内核空间中运行——零延迟开销。

v2.6.0 -- VPN Integration, Mesh-Safe Anonymous Scanning

omniwire_vpn 工具：Mullvad、OpenVPN、WireGuard、Tailscale。拆分隧道（按命令）+全节点模式。网格连接（wg0、wg1、Tailscale）始终通过路由排除和网络命名空间隔离来保持。

via_vpn 关于exec：使用Linux网络命名空间通过VPN路由任何命令。只有命令的流量通过VPN——SSH/WireGuard网格保持在真实界面上。

模式: connect （分体式隧道）， full-on （节点宽度，网格除外）， rotate （新的出口IP）， status, list, ip.

v2.5.1 -- Universal Background Dispatch

background: true 通过服务器级包装器自动注入所有88个工具。返回任务ID，使用轮询 omniwire_bg新 omniwire_bg 列表/投票/结果工具。

v2.5.0 -- Performance Overhaul, A2A Protocol Expansion

演出：AES-128-GCM密码，曲线25519-sha256 KEX，2s保活，LZ4传输（快10倍）， shuf 端口查找器（-30ms），SFTP首次读取，阵列缓冲区连接， /proc 单次读取状态， : 内置健康ping，300ms重新连接启动，15s断路器。

4个新的A2A工具 （49->53）：代理注册（能力发现）、黑板（群体协作）、任务队列（分布式工作）、能力（节点路由）。

v2.4.0 -- Agentic Loop, A2A, Multi-Agent Orchestration

9个新的代理工具（40->49）：存储、管道、监视、健康检查、代理任务、a2a_message、信号量、事件、工作流。代理升级： format:"json", retry, assert, store_as, {{key}} 插值。

v2.3.0 -- Compact Output, Speed, New Tools

输出检修（自动截断、智能时间、表格多节点）。6个新的DevOps工具（cron、env、网络、剪贴板、git、syslog）。

v2.2.1 -- v2.1.0

安全修复、多路径SSH故障转移、CyberBase集成、VaultBridge黑曜石镜像。

______________________________________________________________________

omniwire/
  src/
    mcp/           MCP server (88 tools, 3 transports)
    nodes/         SSH2 pool, transfer engine, PTY, tunnels
    sync/          CyberSync + CyberBase (PostgreSQL, Obsidian, encryption)
    protocol/      Mesh config, types, path parsing
    commands/      Interactive REPL
    ui/            Terminal formatting

要求： Node.js>=20•SSH密钥访问节点•PostgreSQL（仅限CyberSync）•建议使用WireGuard

______________________________________________________________________

更新日志

______________________________________________________________________