OpenClaw + AppleScript: управление Mac-приложениями（2026）

Most OpenClaw setups stop at chat: the agent answers in a thread but never touches Keynote, Finder, or System Settings. That is not an OpenClaw limitation—it is missing macOS automation plumbing. Apple gives you two durable bridges: AppleScript (via osascript) and Automator (saved workflows you trigger from the shell). Wire either into an OpenClaw skill and your agent gains a physical body on the desktop: open apps, export PDFs, nudge volume, or run multi-step GUI macros—under your permission prompts.

This is a Type A bridge tutorial: architecture, a six-step runbook, troubleshooting for TCC (“sandbox”) errors, and FAQ. Pair with hour-zero OpenClaw install, doctor when gateways fail, webhook + CI patterns, and skills batching. Apple references: Automate actions in Shortcuts on Mac and the AppleScript Language Guide.

Disclosure: KvmZone rents remote Mac mini hosts for macOS workloads. This tutorial works on any Mac you control; SSH rental is optional when you need an always-on gateway.

Почему текстовые агенты недоиспользуют Mac

16GB Mac mini hosts (local or rented) are enough for one GUI automation lane plus OpenClaw gateway—avoid running three heavy Keynote exports in parallel; unified memory pressure looks like “OpenClaw crashed” (see swap playbook).

Архитектура: SKILL.md → shell-мост → macOS

Chat/webhook → OpenClaw gateway → skill (allowed tools: shell) → openclaw-mac-bridge.sh → osascript | automator → native app

Files to pin

Example SKILL.md front matter

---
name: mac-desktop-bridge
description: Run whitelisted macOS desktop actions via openclaw-mac-bridge.sh
allowed_tools: [shell]
---

When the user asks to control Mac apps (Keynote, volume, brightness), call:
  openclaw-mac-bridge.sh <action> [args]
Never run raw osascript outside the bridge.

Runbook из 6 шагов: Keynote + громкость

Step 1 — Confirm gateway user and shell

whoami
echo $SHELL
openclaw doctor

Pass: same user you will grant in System Settings → Privacy & Security → Automation.

Step 2 — Create the bridge script

~/bin/openclaw-mac-bridge.sh:

#!/bin/bash
set -euo pipefail
LOG=~/.openclaw/logs/mac-bridge.log
ACTION="${1:-}"; shift || true
mkdir -p "$(dirname "$LOG")"
log() { echo "$(date -Iseconds) $*" >> "$LOG"; }
case "$ACTION" in
  volume)
    VAL="${1:-50}"
    osascript -e "set volume output volume $VAL"
    log "volume $VAL ok"
    ;;
  keynote-export)
    osascript "$HOME/Scripts/openclaw/keynote-export-pdf.applescript" "$@"
    log "keynote-export $* exit $?"
    ;;
  automator)
    WF="${1:?workflow path}"
    /usr/bin/automator "$WF"
    log "automator $WF exit $?"
    ;;
  *)
    echo "unknown action: $ACTION" >&2; exit 2
    ;;
esac

chmod 700 ~/bin/openclaw-mac-bridge.sh

Step 3 — Add Keynote export AppleScript

~/Scripts/openclaw/keynote-export-pdf.applescript:

on run argv
  set outPath to item 1 of argv
  tell application "Keynote"
    activate
    export front document as PDF to POSIX file outPath
  end tell
end run

osascript ~/Scripts/openclaw/keynote-export-pdf.applescript "$HOME/Desktop/openclaw-test.pdf"

Pass: PDF appears; Keynote may prompt once for Automation—click OK.

Step 4 — Register the OpenClaw skill

Copy SKILL.md into ~/.openclaw/workspace/skills/mac-desktop-bridge/. Reload skills:

openclaw gateway restart
# or your build's equivalent skill reload command

Invoke in chat: “Set volume to 30 and export Keynote PDF to Desktop/openclaw-test.pdf.” Pass: check ~/.openclaw/logs/mac-bridge.log.

Step 5 — Optional Automator workflow

1. Open Automator → New Quick Action or Application.
2. Add actions (e.g., Render PDF Pages, Set Computer Volume).
3. Save as ~/Library/Workflows/Applications/OpenClaw-Volume50.workflow.

openclaw-mac-bridge.sh automator "$HOME/Library/Workflows/Applications/OpenClaw-Volume50.workflow"

Step 6 — Wire webhook or group command (production)

Map a fixed phrase to bridge actions—never free-form shell from untrusted senders:

# Example: only allow exact command tokens from your bot ACL
case "$TEXT" in
  "/mac volume 40") openclaw-mac-bridge.sh volume 40 ;;
  "/mac keynote-pdf") openclaw-mac-bridge.sh keynote-export "$HOME/Desktop/brief.pdf" ;;
esac

Configure rate limits before exposing desktop control to group chats.

Устранение неполадок

Error pattern: Not authorized to send Apple events to Keynote (-1743)

Symptoms: osascript fails; bridge logs exit 1.

Fix:

1. System Settings → Privacy & Security → Automation — enable Terminal (or node / your gateway binary) → Keynote.
2. Re-run under the same user as launchd:

sudo -u "$(whoami)" osascript -e 'tell application "Keynote" to count documents'

If using a rented Mac, complete grants over SSH then verify with a one-shot script—avoid sharing the host with untrusted tenants.

Error pattern: bridge works interactively, silent fail under gateway

Symptoms: openclaw doctor green in SSH; webhook runs but no desktop effect.

launchctl print gui/$(id -u)/com.openclaw.gateway 2>/dev/null | head -30
sudo -u _openclaw ~/bin/openclaw-mac-bridge.sh volume 20   # adjust user label

Duplicate Automation grants for the daemon executable, not only Terminal. See doctor crash guide.

FAQ

Читать также

• Siri AI: отдельное приложение, Gemini, iCloud — разбор после keynote
• WWDC 2026: Siri на Gemini и iOS 27 — брифинг перед keynote vs хост API Gemini
• OpenClaw hour-zero install contract
• openclaw doctor crash & gateway guide
• Webhooks + CI on remote Mac
• Indie micro-app / skills batching
• Rate limits and budget alerts
• Remote Mac SSH security workflow
• M4 16GB swap pressure playbook