feat(orchestrator): unified Worker lifecycle service replacing docker-proxy

.github/workflows/build-rc.yml

@@ -78,7 +78,7 @@ jobs:
 
       - name: Build and push multi-arch images
         run: |
-          make push-manager push-manager-aliyun push-worker push-copaw-worker push-docker-proxy \
+          make push-manager push-manager-aliyun push-worker push-copaw-worker push-orchestrator \
             VERSION=${{ inputs.version }} \
             OPENCLAW_BASE_VERSION=${{ inputs.version }} \
             REGISTRY=${{ env.REGISTRY }} \
@@ -93,7 +93,7 @@ jobs:
           MANAGER_ALIYUN_IMAGE: ${{ env.REGISTRY }}/${{ env.REPO }}/hiclaw-manager-aliyun
           WORKER_IMAGE: ${{ env.REGISTRY }}/${{ env.REPO }}/hiclaw-worker
           COPAW_WORKER_IMAGE: ${{ env.REGISTRY }}/${{ env.REPO }}/hiclaw-copaw-worker
-          DOCKER_PROXY_IMAGE: ${{ env.REGISTRY }}/${{ env.REPO }}/hiclaw-docker-proxy
+          ORCHESTRATOR_IMAGE: ${{ env.REGISTRY }}/${{ env.REPO }}/hiclaw-orchestrator
         run: |
           STABLE_TAG="${{ steps.meta.outputs.base_stable_tag }}"
           echo "### RC Build Summary" >> $GITHUB_STEP_SUMMARY
@@ -103,7 +103,7 @@ jobs:
           echo "- Manager Aliyun: \`${MANAGER_ALIYUN_IMAGE}:${{ inputs.version }}\`" >> $GITHUB_STEP_SUMMARY
           echo "- Worker: \`${WORKER_IMAGE}:${{ inputs.version }}\`" >> $GITHUB_STEP_SUMMARY
           echo "- CoPaw Worker: \`${COPAW_WORKER_IMAGE}:${{ inputs.version }}\`" >> $GITHUB_STEP_SUMMARY
-          echo "- Docker Proxy: \`${DOCKER_PROXY_IMAGE}:${{ inputs.version }}\`" >> $GITHUB_STEP_SUMMARY
+          echo "- Orchestrator: \`${ORCHESTRATOR_IMAGE}:${{ inputs.version }}\`" >> $GITHUB_STEP_SUMMARY
           echo "- Base (RC): \`${BASE_IMAGE}:${{ inputs.version }}\`" >> $GITHUB_STEP_SUMMARY
           echo "- Base (stable): \`${BASE_IMAGE}:${STABLE_TAG}\`" >> $GITHUB_STEP_SUMMARY
           echo "- Platforms: \`linux/amd64, linux/arm64\`" >> $GITHUB_STEP_SUMMARY

.github/workflows/build.yml

@@ -63,7 +63,7 @@ jobs:
       # also pushes :latest in the same buildx call, so no separate step needed.
       - name: Build and push multi-arch images
         run: |
-          make push-manager push-manager-aliyun push-manager-copaw push-worker push-copaw-worker push-docker-proxy \
+          make push-manager push-manager-aliyun push-manager-copaw push-worker push-copaw-worker push-orchestrator \
             VERSION=${{ steps.meta.outputs.version }} \
             REGISTRY=${{ env.REGISTRY }} \
             REPO=${{ env.REPO }} \
@@ -78,14 +78,14 @@ jobs:
           MANAGER_COPAW_IMAGE: ${{ env.REGISTRY }}/${{ env.REPO }}/hiclaw-manager-copaw
           WORKER_IMAGE: ${{ env.REGISTRY }}/${{ env.REPO }}/hiclaw-worker
           COPAW_WORKER_IMAGE: ${{ env.REGISTRY }}/${{ env.REPO }}/hiclaw-copaw-worker
-          DOCKER_PROXY_IMAGE: ${{ env.REGISTRY }}/${{ env.REPO }}/hiclaw-docker-proxy
+          ORCHESTRATOR_IMAGE: ${{ env.REGISTRY }}/${{ env.REPO }}/hiclaw-orchestrator
         run: |
           echo "### Build Summary" >> $GITHUB_STEP_SUMMARY
           echo "- Manager: \`${MANAGER_IMAGE}:${{ steps.meta.outputs.version }}\`" >> $GITHUB_STEP_SUMMARY
           echo "- Manager Aliyun: \`${MANAGER_ALIYUN_IMAGE}:${{ steps.meta.outputs.version }}\`" >> $GITHUB_STEP_SUMMARY
           echo "- Manager CoPaw: \`${MANAGER_COPAW_IMAGE}:${{ steps.meta.outputs.version }}\`" >> $GITHUB_STEP_SUMMARY
           echo "- Worker: \`${WORKER_IMAGE}:${{ steps.meta.outputs.version }}\`" >> $GITHUB_STEP_SUMMARY
           echo "- CoPaw Worker: \`${COPAW_WORKER_IMAGE}:${{ steps.meta.outputs.version }}\`" >> $GITHUB_STEP_SUMMARY
-          echo "- Docker Proxy: \`${DOCKER_PROXY_IMAGE}:${{ steps.meta.outputs.version }}\`" >> $GITHUB_STEP_SUMMARY
+          echo "- Orchestrator: \`${ORCHESTRATOR_IMAGE}:${{ steps.meta.outputs.version }}\`" >> $GITHUB_STEP_SUMMARY
           echo "- Base: \`${OPENCLAW_BASE_IMAGE}:latest\` (pre-built, not rebuilt here)" >> $GITHUB_STEP_SUMMARY
           echo "- Platforms: \`linux/amd64, linux/arm64\`" >> $GITHUB_STEP_SUMMARY

.github/workflows/release.yml

@@ -91,8 +91,8 @@ jobs:
           # Worker
           docker pull ${REGISTRY}/${REPO}/hiclaw-worker:${VERSION}
 
-          # Docker Proxy
-          docker pull ${REGISTRY}/${REPO}/hiclaw-docker-proxy:${VERSION}
+          # Orchestrator
+          docker pull ${REGISTRY}/${REPO}/hiclaw-orchestrator:${VERSION}
           \`\`\`
 
           ---

.github/workflows/test-integration.yml

@@ -6,7 +6,7 @@ on:
       - main
     paths:
       - 'manager/**'
-      - 'docker-proxy/**'
+      - 'orchestrator/**'
       - 'hiclaw-controller/**'
       - 'tests/**'
       - '.github/workflows/test-integration.yml'
@@ -17,7 +17,7 @@ on:
       - 'v*'
     paths:
       - 'manager/**'
-      - 'docker-proxy/**'
+      - 'orchestrator/**'
       - 'hiclaw-controller/**'
       - 'tests/**'
   workflow_dispatch:
@@ -48,7 +48,7 @@ env:
   MANAGER_COPAW_IMAGE: hiclaw/manager-copaw:ci-test
   WORKER_IMAGE: hiclaw/worker-agent:ci-test
   COPAW_WORKER_IMAGE: hiclaw/copaw-worker:ci-test
-  DOCKER_PROXY_IMAGE: hiclaw/docker-proxy:ci-test
+  ORCHESTRATOR_IMAGE: hiclaw/orchestrator:ci-test
   # Tests that do not require a GitHub token
   NON_GITHUB_TESTS: "01 02 03 04 05 06 14 15 17 18 19 20 100"
 
@@ -87,11 +87,11 @@ jobs:
       - name: Build images
         run: |
           RUNTIME="${{ inputs.worker_runtime || 'openclaw' }}"
-          BUILD_TARGETS="build-manager build-docker-proxy"
+          BUILD_TARGETS="build-manager build-orchestrator"
           if [ "$RUNTIME" = "copaw" ]; then
-            BUILD_TARGETS="build-manager-copaw build-copaw-worker build-docker-proxy"
+            BUILD_TARGETS="build-manager-copaw build-copaw-worker build-orchestrator"
           else
-            BUILD_TARGETS="build-manager build-worker build-docker-proxy"
+            BUILD_TARGETS="build-manager build-worker build-orchestrator"
           fi
           make ${BUILD_TARGETS} VERSION=ci-test HIGRESS_REGISTRY=higress-registry.us-west-1.cr.aliyuncs.com \
             DOCKER_BUILD_ARGS="--build-arg APT_MIRROR= --build-arg PIP_INDEX_URL=https://pypi.org/simple/"
@@ -125,7 +125,7 @@ jobs:
           HICLAW_INSTALL_MANAGER_IMAGE="$MANAGER_IMG" \
           HICLAW_INSTALL_MANAGER_COPAW_IMAGE="${{ env.MANAGER_COPAW_IMAGE }}" \
           HICLAW_INSTALL_WORKER_IMAGE="$WORKER_IMG" \
-          HICLAW_INSTALL_DOCKER_PROXY_IMAGE=${{ env.DOCKER_PROXY_IMAGE }} \
+          HICLAW_INSTALL_ORCHESTRATOR_IMAGE=${{ env.ORCHESTRATOR_IMAGE }} \
           bash ./install/hiclaw-install.sh manager
 
       - name: Wait for Manager to be ready
@@ -403,10 +403,10 @@ jobs:
           REGISTRY=higress-registry.cn-hangzhou.cr.aliyuncs.com/higress
           docker pull ${REGISTRY}/hiclaw-manager:${VERSION}
           docker pull ${REGISTRY}/hiclaw-worker:${VERSION}
-          docker pull ${REGISTRY}/hiclaw-docker-proxy:${VERSION}
+          docker pull ${REGISTRY}/hiclaw-orchestrator:${VERSION}
           docker tag ${REGISTRY}/hiclaw-manager:${VERSION} hiclaw/manager-agent:${VERSION}
           docker tag ${REGISTRY}/hiclaw-worker:${VERSION} hiclaw/worker-agent:${VERSION}
-          docker tag ${REGISTRY}/hiclaw-docker-proxy:${VERSION} hiclaw/docker-proxy:${VERSION}
+          docker tag ${REGISTRY}/hiclaw-orchestrator:${VERSION} hiclaw/orchestrator:${VERSION}
 
       - name: Install HiClaw
         env:
@@ -420,7 +420,7 @@ jobs:
           HICLAW_LLM_PROVIDER=qwen \
           HICLAW_INSTALL_MANAGER_IMAGE=hiclaw/manager-agent:${VERSION} \
           HICLAW_INSTALL_WORKER_IMAGE=hiclaw/worker-agent:${VERSION} \
-          HICLAW_INSTALL_DOCKER_PROXY_IMAGE=hiclaw/docker-proxy:${VERSION} \
+          HICLAW_INSTALL_ORCHESTRATOR_IMAGE=hiclaw/orchestrator:${VERSION} \
           bash ./install/hiclaw-install.sh manager
 
       - name: Wait for Manager to be ready

.gitignore

@@ -39,3 +39,6 @@ manager/copaw-agent/
 node_modules/
 package.json
 pnpm-lock.yaml
+
+# Claude Code
+CLAUDE.md

Makefile

@@ -29,7 +29,7 @@ MANAGER_ALIYUN_IMAGE ?= $(REGISTRY)/$(REPO)/hiclaw-manager-aliyun
 MANAGER_COPAW_IMAGE  ?= $(REGISTRY)/$(REPO)/hiclaw-manager-copaw
 WORKER_IMAGE         ?= $(REGISTRY)/$(REPO)/hiclaw-worker
 COPAW_WORKER_IMAGE   ?= $(REGISTRY)/$(REPO)/hiclaw-copaw-worker
-DOCKER_PROXY_IMAGE   ?= $(REGISTRY)/$(REPO)/hiclaw-docker-proxy
+ORCHESTRATOR_IMAGE   ?= $(REGISTRY)/$(REPO)/hiclaw-orchestrator
 OPENCLAW_BASE_IMAGE  ?= $(REGISTRY)/$(REPO)/openclaw-base
 CONTROLLER_IMAGE     ?= $(REGISTRY)/$(REPO)/hiclaw-controller
 
@@ -38,7 +38,7 @@ MANAGER_ALIYUN_TAG ?= $(MANAGER_ALIYUN_IMAGE):$(VERSION)
 MANAGER_COPAW_TAG  ?= $(MANAGER_COPAW_IMAGE):$(VERSION)
 WORKER_TAG         ?= $(WORKER_IMAGE):$(VERSION)
 COPAW_WORKER_TAG   ?= $(COPAW_WORKER_IMAGE):$(VERSION)
-DOCKER_PROXY_TAG   ?= $(DOCKER_PROXY_IMAGE):$(VERSION)
+ORCHESTRATOR_TAG   ?= $(ORCHESTRATOR_IMAGE):$(VERSION)
 OPENCLAW_BASE_TAG  ?= $(OPENCLAW_BASE_IMAGE):$(VERSION)
 CONTROLLER_TAG     ?= $(CONTROLLER_IMAGE):$(VERSION)
 
@@ -48,7 +48,7 @@ LOCAL_MANAGER_ALIYUN = hiclaw/manager-aliyun:$(VERSION)
 LOCAL_MANAGER_COPAW  = hiclaw/manager-copaw:$(VERSION)
 LOCAL_WORKER         = hiclaw/worker-agent:$(VERSION)
 LOCAL_COPAW_WORKER   = hiclaw/copaw-worker:$(VERSION)
-LOCAL_DOCKER_PROXY   = hiclaw/docker-proxy:$(VERSION)
+LOCAL_ORCHESTRATOR   = hiclaw/orchestrator:$(VERSION)
 LOCAL_OPENCLAW_BASE  = hiclaw/openclaw-base:$(VERSION)
 LOCAL_CONTROLLER     = hiclaw/hiclaw-controller:$(VERSION)
 
@@ -101,8 +101,8 @@ LINES          ?= 50
 
 # ---------- Phony targets ----------
 
-.PHONY: all build build-openclaw-base build-hiclaw-controller build-manager build-manager-aliyun build-manager-copaw build-worker build-copaw-worker build-docker-proxy \
-        tag push push-openclaw-base push-hiclaw-controller push-manager push-manager-aliyun push-manager-copaw push-worker push-copaw-worker push-docker-proxy \
+.PHONY: all build build-openclaw-base build-hiclaw-controller build-manager build-manager-aliyun build-manager-copaw build-worker build-copaw-worker build-orchestrator \
+        tag push push-openclaw-base push-hiclaw-controller push-manager push-manager-aliyun push-manager-copaw push-worker push-copaw-worker push-orchestrator \
         push-native push-native-manager push-native-manager-copaw push-native-worker push-native-copaw-worker \
         buildx-setup \
         test test-quick test-installed \
@@ -117,7 +117,7 @@ all: build
 
 # ---------- Build ----------
 
-build: build-manager build-manager-aliyun build-manager-copaw build-worker build-copaw-worker build-docker-proxy ## Build all images (base image pulled from registry, not rebuilt locally)
+build: build-manager build-manager-aliyun build-manager-copaw build-worker build-copaw-worker build-orchestrator ## Build all images (base image pulled from registry, not rebuilt locally)
 
 build-openclaw-base: ## Build OpenClaw base image
 	@echo "==> Building OpenClaw base image: $(LOCAL_OPENCLAW_BASE) (registry: $(HIGRESS_REGISTRY))"
@@ -172,11 +172,13 @@ build-copaw-worker: ## Build CoPaw Worker image
 		-t $(LOCAL_COPAW_WORKER) \
 		./copaw/
 
-build-docker-proxy: ## Build Docker API proxy image
-	@echo "==> Building Docker Proxy image: $(LOCAL_DOCKER_PROXY)"
+build-orchestrator: ## Build Orchestrator image
+	@echo "==> Building Orchestrator image: $(LOCAL_ORCHESTRATOR)"
 	docker build $(PLATFORM_FLAG) $(REGISTRY_ARG) $(DOCKER_BUILD_ARGS) \
-		-t $(LOCAL_DOCKER_PROXY) \
-		./docker-proxy/
+		-t $(LOCAL_ORCHESTRATOR) \
+		./orchestrator/
+
+build-docker-proxy: build-orchestrator ## Backward-compatible alias
 
 # ---------- Tag ----------
 
@@ -185,13 +187,13 @@ tag: build ## Tag images for registry push
 	docker tag $(LOCAL_MANAGER_ALIYUN) $(MANAGER_ALIYUN_TAG)
 	docker tag $(LOCAL_WORKER) $(WORKER_TAG)
 	docker tag $(LOCAL_COPAW_WORKER) $(COPAW_WORKER_TAG)
-	docker tag $(LOCAL_DOCKER_PROXY) $(DOCKER_PROXY_TAG)
+	docker tag $(LOCAL_ORCHESTRATOR) $(ORCHESTRATOR_TAG)
 ifeq ($(PUSH_LATEST),yes)
 	docker tag $(LOCAL_MANAGER) $(MANAGER_IMAGE):latest
 	docker tag $(LOCAL_MANAGER_ALIYUN) $(MANAGER_ALIYUN_IMAGE):latest
 	docker tag $(LOCAL_WORKER) $(WORKER_IMAGE):latest
 	docker tag $(LOCAL_COPAW_WORKER) $(COPAW_WORKER_IMAGE):latest
-	docker tag $(LOCAL_DOCKER_PROXY) $(DOCKER_PROXY_IMAGE):latest
+	docker tag $(LOCAL_ORCHESTRATOR) $(ORCHESTRATOR_IMAGE):latest
 	@echo "==> Images tagged as $(VERSION) and latest"
 else
 	@echo "==> Images tagged as $(VERSION) (latest not pushed for pre-release)"
@@ -219,7 +221,7 @@ else
 	fi
 endif
 
-push: push-manager push-manager-aliyun push-manager-copaw push-worker push-copaw-worker push-docker-proxy ## Build + push multi-arch images (amd64 + arm64); base image built separately via build-base.yml
+push: push-manager push-manager-aliyun push-manager-copaw push-worker push-copaw-worker push-orchestrator ## Build + push multi-arch images (amd64 + arm64); base image built separately via build-base.yml
 
 push-openclaw-base: buildx-setup ## Build + push multi-arch OpenClaw base image
 	@echo "==> Building + pushing multi-arch OpenClaw base: $(OPENCLAW_BASE_TAG) [$(MULTIARCH_PLATFORMS)]"
@@ -401,29 +403,29 @@ else
 		./copaw/
 endif
 
-push-docker-proxy: buildx-setup ## Build + push multi-arch Docker Proxy image
-	@echo "==> Building + pushing multi-arch Docker Proxy: $(DOCKER_PROXY_TAG) [$(MULTIARCH_PLATFORMS)]"
+push-orchestrator: buildx-setup ## Build + push multi-arch Orchestrator image
+	@echo "==> Building + pushing multi-arch Orchestrator: $(ORCHESTRATOR_TAG) [$(MULTIARCH_PLATFORMS)]"
 ifeq ($(IS_PODMAN),1)
-	-podman manifest rm $(DOCKER_PROXY_TAG) 2>/dev/null
+	-podman manifest rm $(ORCHESTRATOR_TAG) 2>/dev/null
 	$(foreach plat,$(subst $(comma), ,$(MULTIARCH_PLATFORMS)), \
-		echo "  -> Building Docker Proxy for $(plat)..." && \
+		echo "  -> Building Orchestrator for $(plat)..." && \
 		podman build --platform $(plat) \
 			$(DOCKER_BUILD_ARGS) \
-			--manifest $(DOCKER_PROXY_TAG) \
-			./docker-proxy/ && ) true
-	podman manifest push --all $(DOCKER_PROXY_TAG) docker://$(DOCKER_PROXY_TAG)
+			--manifest $(ORCHESTRATOR_TAG) \
+			./orchestrator/ && ) true
+	podman manifest push --all $(ORCHESTRATOR_TAG) docker://$(ORCHESTRATOR_TAG)
 	$(if $(PUSH_LATEST), \
-		podman manifest push --all $(DOCKER_PROXY_TAG) docker://$(DOCKER_PROXY_IMAGE):latest && \
+		podman manifest push --all $(ORCHESTRATOR_TAG) docker://$(ORCHESTRATOR_IMAGE):latest && \
 		echo "  -> Also pushed :latest tag")
 else
 	docker buildx build \
 		--builder $(BUILDX_BUILDER) \
 		--platform $(MULTIARCH_PLATFORMS) \
 		$(DOCKER_BUILD_ARGS) \
-		-t $(DOCKER_PROXY_TAG) \
-		$(if $(PUSH_LATEST),-t $(DOCKER_PROXY_IMAGE):latest) \
+		-t $(ORCHESTRATOR_TAG) \
+		$(if $(PUSH_LATEST),-t $(ORCHESTRATOR_IMAGE):latest) \
 		--push \
-		./docker-proxy/
+		./orchestrator/
 endif
 
 # ---------- Push native-arch only (dev use) ----------
@@ -519,7 +521,7 @@ endif
 		HICLAW_INSTALL_MANAGER_IMAGE=$(LOCAL_MANAGER) \
 		HICLAW_INSTALL_WORKER_IMAGE=$(LOCAL_WORKER) \
 		HICLAW_INSTALL_COPAW_WORKER_IMAGE=$(LOCAL_COPAW_WORKER) \
-		HICLAW_INSTALL_DOCKER_PROXY_IMAGE=$(LOCAL_DOCKER_PROXY) \
+		HICLAW_INSTALL_ORCHESTRATOR_IMAGE=$(LOCAL_ORCHESTRATOR) \
 		bash ./install/hiclaw-install.sh manager
 
 install-interactive: ## Install Manager interactively (prompts for config)
@@ -536,6 +538,7 @@ endif
 uninstall: ## Stop and remove Manager + all Worker containers
 	@echo "==> Uninstalling HiClaw..."
 	-docker stop hiclaw-manager 2>/dev/null && docker rm hiclaw-manager 2>/dev/null || true
+	-docker stop hiclaw-orchestrator 2>/dev/null && docker rm hiclaw-orchestrator 2>/dev/null || true
 	@for c in $$(docker ps -a --filter "name=hiclaw-worker-" --format '{{.Names}}' 2>/dev/null); do \
 		echo "  Removing Worker: $$c"; \
 		docker rm -f "$$c" 2>/dev/null || true; \

copaw/scripts/copaw-worker-entrypoint.sh

@@ -7,7 +7,7 @@
 #   - HICLAW_CONSOLE_PORT set   → standard mode (copaw-worker, PyPI CoPaw venv)
 #   - HICLAW_CONSOLE_PORT unset → lite mode (lite-copaw-worker, lite CoPaw venv)
 #
-# Environment variables (set by container_create_worker in container-api.sh):
+# Environment variables (set by orchestrator during worker creation):
 #   HICLAW_WORKER_NAME   - Worker name (required)
 #   HICLAW_FS_ENDPOINT   - MinIO endpoint (required in local mode)
 #   HICLAW_FS_ACCESS_KEY - MinIO access key (required in local mode)
@@ -63,6 +63,50 @@ mkdir -p "${WORKER_SKILLS_DIR}"
 mkdir -p "${HOME}/.agents"
 ln -sfn "${WORKER_SKILLS_DIR}" "${HOME}/.agents/skills"
 
+# Background readiness reporter — report ready to orchestrator when CoPaw bridge completes
+_start_readiness_reporter() {
+    [ -z "${HICLAW_ORCHESTRATOR_URL:-}" ] && return 0
+
+    # Build auth header if API key is available (cloud mode)
+    local auth_header=""
+    [ -n "${HICLAW_WORKER_API_KEY:-}" ] && auth_header="Authorization: Bearer ${HICLAW_WORKER_API_KEY}"
+
+    (
+        # Phase 1: Wait for initial readiness (with timeout)
+        TIMEOUT=120; ELAPSED=0
+        CONFIG_FILE="${INSTALL_DIR}/${WORKER_NAME}/.copaw/config.json"
+        while [ "${ELAPSED}" -lt "${TIMEOUT}" ]; do
+            if [ -f "${CONFIG_FILE}" ] && grep -q '"channels"' "${CONFIG_FILE}" 2>/dev/null; then
+                for _attempt in 1 2 3; do
+                    if curl -sf -X POST "${HICLAW_ORCHESTRATOR_URL}/workers/${WORKER_NAME}/ready" \
+                        ${auth_header:+-H "${auth_header}"} 2>/dev/null; then
+                        log "Reported ready to orchestrator"
+                        break 2
+                    fi
+                    sleep 2
+                done
+                log "WARNING: POST to orchestrator failed, will retry health check loop"
+            fi
+            sleep 5; ELAPSED=$((ELAPSED + 5))
+        done
+
+        if [ "${ELAPSED}" -ge "${TIMEOUT}" ]; then
+            log "WARNING: readiness reporter timed out after ${TIMEOUT}s"
+            exit 1
+        fi
+
+        # Phase 2: Periodic heartbeat (every 60s) — self-heals after orchestrator restart
+        while true; do
+            sleep 60
+            if [ -f "${CONFIG_FILE}" ] && grep -q '"channels"' "${CONFIG_FILE}" 2>/dev/null; then
+                curl -sf -X POST "${HICLAW_ORCHESTRATOR_URL}/workers/${WORKER_NAME}/ready" \
+                    ${auth_header:+-H "${auth_header}"} 2>/dev/null || true
+            fi
+        done
+    ) &
+    log "Background readiness reporter started (PID: $!)"
+}
+
 if [ -n "${CONSOLE_PORT}" ]; then
     # ---------- Standard mode: copaw-worker (PyPI CoPaw venv, with console) ----------
     VENV="/opt/venv/standard"
@@ -72,6 +116,8 @@ if [ -n "${CONSOLE_PORT}" ]; then
     log "  Console port: ${CONSOLE_PORT}"
     log "  CoPaw: standard (${VENV})"
 
+    _start_readiness_reporter
+
     exec "${VENV}/bin/copaw-worker" \
         --name "${WORKER_NAME}" \
         --fs "${FS_ENDPOINT}" \
@@ -88,6 +134,8 @@ else
     log "  Install dir: ${INSTALL_DIR}"
     log "  CoPaw: lite (${VENV})"
 
+    _start_readiness_reporter
+
     exec "${VENV}/bin/copaw-worker" \
         --name "${WORKER_NAME}" \
         --fs "${FS_ENDPOINT}" \

copaw/src/copaw_worker/sync.py

@@ -125,10 +125,7 @@ def __init__(
         self.local_dir.mkdir(parents=True, exist_ok=True)
         self._prefix = f"agents/{worker_name}"
         self._alias_set = False
-        self._cloud_mode = bool(
-            os.environ.get("ALIBABA_CLOUD_OIDC_TOKEN_FILE")
-            and Path(os.environ.get("ALIBABA_CLOUD_OIDC_TOKEN_FILE", "")).is_file()
-        )
+        self._cloud_mode = os.environ.get("HICLAW_RUNTIME") == "aliyun"
 
     # ------------------------------------------------------------------
     # mc alias management