自主AI代理管道
双层代理架构——Gemini编排器+Claude代码大脑/执行器/主管
版本2.0——2026年2月
______________________________________________________________________
源自:GTG-1002攻击模式研究(Anthropic,2025年11月)+泰坦计划 法律辩护多代理执行+2026企业人工智能工程最佳实践。
______________________________________________________________________
这是什么
用于自主多代理AI工作流的生产级编排框架。 Gemini 3.1 Pro路由您的请求并驱动重试循环。克劳德代码做了所有的 思考、编码和GUI监督。反循环保护措施保证了有限的成本。
核心问题: 任何复杂到需要深入研究、并行工作流和迭代的任务 细化将通过上下文限制、幻觉级联或 战略冲突。
解决方案: 一个两级系统,Gemini是交通警察,Claude Code是劳动力-- 大脑、执行者和监督者——配备工业级反循环保护措施,大脑 通过MCP上下文缓存进行损害预防以及通过OpenClaw进行移动/远程访问。
______________________________________________________________________
快速开始
先决条件
- Node.js >= 22
- 克劳德代码 CLI(
claude在PATH中)——大脑/执行器 - Gemini API密钥 --用于编排、验证和缓存
安装
cd ai-agent-pipeline
npm install
cp .env.example .env
# Edit .env and set GEMINI_API_KEY运行测试
npm test # Run all 93 tests
npm run build # Compile TypeScript → dist/
npm run dev -- status # Run CLI in dev modeCLI命令
# Full pipeline — research → decompose → dispatch
npx tsx src/cli.ts run "Build a Discord bot in Python"
# Individual phases
npx tsx src/cli.ts research "authentication patterns for Node.js"
npx tsx src/cli.ts decompose research-output.md
npx tsx src/cli.ts dispatch prompts/batch1_tasks.json
npx tsx src/cli.ts dispatch prompts/batch1_tasks.json --dry-run
# Validation
npx tsx src/cli.ts validate prompts/batch1_tasks.json
# Dead-letter queue management
npx tsx src/cli.ts dead-letter list
npx tsx src/cli.ts dead-letter inspect
npx tsx src/cli.ts dead-letter retry
# Audit trail
npx tsx src/cli.ts audit list
npx tsx src/cli.ts audit verify
# Status
npx tsx src/cli.ts status
# Webhook server (for N8n callbacks and HITL approvals)
npx tsx src/cli.ts serve --port 3847OpenClaw集成
如果您安装了OpenClaw,请通过手机发送:
# Install pipeline as an OpenClaw skill
npx tsx src/cli.ts serve # Start the gateway
# Then from Telegram/Discord/Happy Coder:
# "Run pipeline: Build a Discord bot in Python"
# OpenClaw routes to Gemini → Claude Code → results back to your phone______________________________________________________________________
建筑
YOU (Phone / Discord / CLI)
│
▼
OPENCLAW GATEWAY (always running)
│
▼
GEMINI 3.1 PRO (traffic cop — routes, doesn't think)
│
├── Classifies task type (code / GUI / research / simple)
├── Selects prompt mode (EXECUTE / ARCHITECT / SUPERVISE)
├── Formats prompt from templates
│
▼
CLAUDE CODE (brain + executor + supervisor)
│
├── EXECUTE: Write code, edit files, run commands
├── ARCHITECT: Read-only analysis after 3 failures
├── SUPERVISE: Vision + mouse + keyboard for GUI tasks
│
▼
FLASH-LITE VERIFIER → PASS / RETRY / ESCALATE
│
▼
ANTI-LOOP SAFEGUARDS
├── TTL: Max 10 hops → dead-letter queue
├── Hysteresis: 3 failures → ARCHITECT, 2 successes → EXECUTE
└── Backflow: SHA-256 state hash → detect A-B-A cycles三种提示模式
| 模式 | 时间 | 工具 | 目的 |
|---|---|---|---|
| 执行 | 第一次尝试 | Bash、读取、写入、编辑、Glob、Grep | 编写代码、运行命令 |
| 建筑师 | 3次失败后 | 只读 | 根本原因分析,新计划 |
| 监督 | GUI任务 | 计算机使用+Bash+读+写 | 安装应用程序,单击向导 |
完成循环
Task → Classify → Format Prompt → Execute (Claude) → Verify (Flash-Lite)
│
PASS ← ─ ─ ┤
RETRY → anti-loop → retry
ESCALATE → dead-letter______________________________________________________________________
项目结构
ai-agent-pipeline/
├── src/ # TypeScript runtime (42 files)
│ ├── cli.ts # CLI entry point (8 commands)
│ ├── commands/ # CLI command implementations
│ ├── orchestrator/ # Gemini completion loop engine
│ │ ├── index.ts # GeminiOrchestrator class
│ │ ├── loop-driver.ts # THE completion loop
│ │ ├── classifier.ts # Task type → mode/tier routing
│ │ └── prompt-formatter.ts # Template filling + security injection
│ ├── executor/ # Claude Code session management
│ │ ├── index.ts # ClaudeCodeExecutor class
│ │ ├── session.ts # Process spawning + output parsing
│ │ └── modes.ts # EXECUTE/ARCHITECT/SUPERVISE config
│ ├── verifier/ # Flash-Lite post-execution verification
│ ├── anti-loop/ # TTL, hysteresis, backflow, dead-letter
│ ├── gateway/ # Webhook server + OpenClaw bridge
│ ├── router/ # Task → tier routing
│ ├── decomposer/ # Research → task blueprints
│ ├── security/ # RBAC, HITL gates, Discord HITL
│ ├── audit/ # HMAC-signed tamper-evident logging
│ ├── mcp-servers/ # Brain context MCP server
│ ├── schema/ # AJV JSON Schema validation
│ ├── config/ # YAML config loading
│ ├── utils/ # Logger, hash, template, retry
│ └── types/ # TypeScript interfaces
├── schemas/ # JSON Schema contracts
├── templates/ # Prompt templates (7 modes)
├── config/ # YAML configuration
├── workflows/ # N8n workflow exports
├── docs/ # Phase documentation (13 files)
├── security/ # Threat model, RBAC, HITL gates
├── reports/ # Agent execution reports
└── prompts/ # Task blueprint batches______________________________________________________________________
反循环保护措施
每个任务都在一个 任务信封 跟踪执行状态:
{
"ttl_max": 10,
"hops": 0,
"mode": "EXECUTE",
"consecutive_failures": 0,
"consecutive_successes": 0,
"escalated": false,
"state_hashes": []
}三条定律:
- 生存时间 --最多10跳。超过TTL的任务将进入死信队列并发出通知。
- 滞后 --3次失败→ 上报给建筑师。2成功→ 降级。无闪烁。
- 回流 --SHA-256哈希目标文件。如果状态与前一跳匹配→ 检测到A-B-A循环→ 此 路 不通。
______________________________________________________________________
安全
- 基于角色的访问控制 --每个节点的读/写/执行权限
- HITL盖茨 --git推送、部署、删除、凭证输入的人工审批
- 不和谐HITL --Rich嵌入了批准/拒绝按钮,超时默认值
- 快速注射防御 --每个提示后都附有安全通知
- 审计跟踪 --HMAC-SHA256签名条目,通过
pipeline audit verify - MCP图像固定 --MCP服务器映像的SHA-256摘要验证
______________________________________________________________________
测试
npm test # All 93 tests
npx vitest run src/anti-loop/__tests__/ # Anti-loop unit tests (13)
npx vitest run src/security/__tests__/ # Security + HITL tests (22)
npx vitest run src/schema/__tests__/ # Schema validation (4)
npx vitest run src/utils/__tests__/ # Retry/backoff tests (5)
npx vitest run src/__tests__/integration.test.ts # Integration tests (34)
npx vitest run src/__tests__/e2e.test.ts # E2E CLI tests (15)______________________________________________________________________
成本模型
| 组件 | 类型 | 月成本 |
|---|---|---|
| 克劳德码(最大5倍) | 固定 | 100美元 |
| Gemini 3.1 Pro | 可变 | 50-60美元 |
| Gemini Flash Lite | 可变 | 1-3美元 |
| 总计(中等) | — | $150-165 |
通过三层模型路由,比所有Opus方法便宜85-94%。
______________________________________________________________________
配置
关键文件:
.env-API密钥(需要GEMINI_API_KEY)config/openclaw-config.yaml--网关、编排器、验证器、反循环设置config/mcp-servers.yaml--MCP服务器注册表config/required-caches.yaml--Gemini缓存定义security/rbac-config.md--每个节点权限security/hitl-gates.md--人工审批门定义
______________________________________________________________________
许可证
MIT——自由使用、适应、扩展。赞赏归因。
