Confirm the target runtime first

After the Workspace reaches status=active, run oasn-sa-dev workspace connect --workspace-id <workspace_id> using an existing local key. Only when the result reports ssh_binding_status=bound and ssh_verified=true should you copy its ssh_command exactly, enter the current Workspace, and run:

node --version
npm --version
python3 --version
python3 -m pip --version
git --version

Record the actual output in this development run's notes. Do not infer exact patch versions from this handbook, installation logs, or another Workspace.

Recommended directory structure

/oasn/
├── AGENTS.md                              # Business rules for the main Agent
├── SOUL.md                                # Optional: voice and boundaries
├── IDENTITY.md                            # Optional: identity description
├── USER.md                                # Optional: user-context conventions
├── TOOLS.md                               # Optional: Tool usage instructions
├── skills/<skill-name>/SKILL.md           # Optional: business Skill
├── .openclaw/extensions/<plugin-id>/      # Optional: Workspace Plugin
├── service/                               # Optional: business service or source
└── Other business source and static assets

Implement in this order

1. Start with one clearly defined task

   In AGENTS.md, define applicable inputs, required information, output format, failure semantics, and safety boundaries. Make the smallest text-only task work before adding files, Tools, Plugins, or services.

2. Make sure the capability belongs to the main Agent

   Formal invocations always enter through main. The main Agent may call other Agents or subagents, but do not configure the complete business capability only on another Agent.

3. Place extensions in standard locations

   Put business Skills under /oasn/skills/<skill-name>/ and Workspace Plugins under /oasn/.openclaw/extensions/<plugin-id>/. Do not create unused directories merely to match the example structure.

4. Validate dependencies in the target environment

   A dependency declaration, installation log, or existing file is not proof that a dependency works. Actually test the import/module, system command, Plugin runtime, any required service reload, and one real business request.

5. Validate main through WebChat

   Use only the WebChat URL associated with the current active Workspace, and cover normal, attachment, and boundary requests. See “Testing and Acceptance” for the detailed gates.

Formal input contract

An ordinary Skill or Plugin normally handles the messages and attachment paths received by main directly; it does not need to parse the complete JSON itself. Only when the business logic truly requires the structured raw input should it read:

/oasn/in/invocation.json

/oasn/in is platform input for a formal invocation. The Program must not write to it or use it as persistent state. The actual invocation.json also contains platform and runtime fields and may carry short-lived sensitive material; never copy the entire file into logs, the final reply, or a screenshot. Development WebChat does not guarantee creation of the same formal-invocation JSON, so seeing a local file in WebChat is not evidence that the formal input contract has passed. See Structured Input and WebUI JSON for a sanitized sample, parsing code, and formal acceptance steps.

Output contract

• Text: main must return a non-empty final response.
• Files: create a real file and return it in the final response as an attachment or downloadable Markdown link. Merely returning a path such as /oasn/... is not acceptable.
• WebUI: the website form has no WebUI port field. With CLI 0.7.3, inspect ports with oasn-sa-dev version webui-ports get --version-id <agent_version_id>, declare them with oasn-sa-dev version webui-ports set --version-id <agent_version_id> --ports 7860,8765, and use refresh when the active mapping must be refreshed. The service must listen on a declared port and return the corresponding oasn-webui block; see “Input, Output, and WebUI” for its structured JSON contract.
• Sensitive information: never output .env, keys, Cookies, sessions, logs, caches, or browser data.

Definition of done

The Program is complete only when all of the following are true:

• All business files are under /oasn, with no dependency on a local file that was not uploaded.
• main completes representative tasks and gives clear, actionable guidance when required input is missing.
• Every dependency, Tool, Plugin, or MCP in use has been genuinely validated on the remote runtime surface.
• Attachments come only from explicit input in the current invocation, and users can actually open or download the output artifacts.
• No Secret, temporary state, or platform-managed file is included in version content.