Architecture
Lobu runs as a gateway + worker architecture.
Request Flow
Section titled “Request Flow”- User sends a message from Slack, Telegram, WhatsApp, or API.
- Gateway receives it, resolves agent settings, and routes a job.
- A worker executes the prompt using OpenClaw runtime.
- Worker uses tools/MCP through gateway-controlled paths.
- Gateway streams output back to the platform thread.
Runtime Boundaries
Section titled “Runtime Boundaries”- Gateway: orchestration, OAuth, secrets, domain policy, routing.
- Worker: model execution, tools, workspace state.
- Redis: queue/state backing for job flow.
Security-Critical Path
Section titled “Security-Critical Path”- Workers do not directly own global provider secrets.
- Outbound access is controlled via gateway proxy and domain policy.
- Integrations and MCP credentials are handled by the gateway.