🎁 Get the FREE AI Skills Starter Guide — Subscribe →
BytesAgainBytesAgain
BytesAgain › Skills › WebChat Voice Proxy
🦀 ClawHub

WebChat Voice Proxy

by @neldar

⚠️ DEPRECATED — This skill has been split into two separate skills for better modularity: **webchat-https-proxy** (HTTPS/WSS reverse proxy) and **webchat-voi...

Versionv0.2.3
Downloads1,490
#clawhub
TERMINAL
clawhub install webchat-voice-proxy

📖 About This Skill

name: webchat-voice-proxy deprecated: true description: > ⚠️ DEPRECATED — This skill has been split into two separate skills for better modularity: webchat-https-proxy (HTTPS/WSS reverse proxy) and webchat-voice-gui (mic button, VU meter, i18n). Install those instead. Use webchat-voice-full-stack for one-step deployment of all components. Keywords: voice input, microphone, WebChat, Control UI, speech to text, STT, local transcription, MediaRecorder, HTTPS proxy, voice button, mic button, push-to-talk, PTT, keyboard shortcut, i18n, localization. requires: config_paths: - ~/.openclaw/openclaw.json (appends allowedOrigins entry) modified_paths: - /openclaw/dist/control-ui/index.html (injects script tag) - /openclaw/dist/control-ui/assets/voice-input.js (copies asset) - ~/.config/systemd/user/openclaw-voice-https.service (creates unit) - ~/.openclaw/hooks/voice-input-inject/ (creates startup hook) - ~/.openclaw/workspace/voice-input/ (copies runtime files) - ~/.openclaw/workspace/voice-input/certs/ (generates self-signed TLS cert) env: - VOICE_HTTPS_PORT (optional, default: 8443) - VOICE_HOST (optional, default: 127.0.0.1 — set to a LAN IP to expose externally) - VOICE_ALLOWED_ORIGIN (optional, default: https://:) - VOICE_LANG (optional, default: auto — prompts interactively if not set) persistence: - "User systemd service: openclaw-voice-https.service (HTTPS/WSS proxy)" - "Gateway startup hook: voice-input-inject (re-injects JS after updates)" privileges: user-level only, no root/sudo required dependencies: - python3 with aiohttp >= 3.9.0 (pip) - faster-whisper transcription service on port 18790 - openssl (for self-signed cert generation)

WebChat Voice Proxy

Set up a reboot-safe voice stack for OpenClaw WebChat (including the current polished mic/stop/hourglass UI states):

  • HTTPS Control UI on port 8443
  • /transcribe proxy to local faster-whisper service
  • WebSocket passthrough to gateway (ws://127.0.0.1:18789)
  • Voice button script injection into Control UI
  • Real-time VU meter: button shadow/scale reacts to voice level
  • Push-to-Talk: hold mic button to record, release to send (default mode)
  • Toggle mode: click to start, click to stop (switch via double-click on mic button)
  • Keyboard shortcuts: Ctrl+Space Push-to-Talk, Ctrl+Shift+M start/stop continuous recording
  • Localized UI: auto-detects browser language (English, German, Chinese built-in), customizable

    • Prerequisites (required)

    This skill requires a local faster-whisper HTTP service. Expected default:

  • URL: http://127.0.0.1:18790/transcribe
  • systemd user service: openclaw-transcribe.service

    • Verify before deployment: 

    systemctl --user is-active openclaw-transcribe.service
curl -s -o /dev/null -w '%{http_code}\n' http://127.0.0.1:18790/transcribe -X POST -H 'Content-Type: application/octet-stream' --data-binary 'x'

    If this dependency is missing, set up faster-whisper first (model load + HTTP endpoint), then run this skill.

    Related skills:

  • faster-whisper-local-service (backend prerequisite)
  • webchat-voice-full-stack (meta-installer that deploys both backend + proxy)

    • Workflow

    1. Ensure transcription service exists and is running (openclaw-transcribe.service). 2. Deploy voice-input.js to Control UI assets and inject script tag into index.html. 3. Configure gateway allowed origin for external HTTPS UI. 4. Run HTTPS+WSS proxy as persistent user systemd service (openclaw-voice-https.service). 5. Verify pairing/token/origin errors and resolve in order.

    Security Notes

  • Localhost by default: The HTTPS proxy binds to 127.0.0.1 only. It is not reachable from other devices on your network unless you explicitly set VOICE_HOST to a LAN IP.
  • LAN exposure: Setting VOICE_HOST= exposes the proxy (and by extension the gateway WebSocket and transcription endpoint) to all devices on that network. Only do this on trusted networks.
  • Persistence: This skill installs a user systemd service (openclaw-voice-https.service) that starts automatically on boot, and a gateway hook that re-injects the UI script after updates. Use uninstall.sh to fully revert.
  • Self-signed TLS: The auto-generated certificate is not trusted by browsers. You will see a certificate warning on first access.

    • Deploy

    Run (localhost only — default, most secure): 

    bash scripts/deploy.sh

    Or expose on LAN (required to access from other devices): 

    VOICE_HOST=10.0.0.42 VOICE_HTTPS_PORT=8443 VOICE_LANG=de bash scripts/deploy.sh

    When run interactively without VOICE_LANG, the script will ask you to choose a UI language (auto, en, de, zh). Set VOICE_LANG=auto to skip the prompt.

    This script is idempotent.

    Quick verify

    Run: 

    bash scripts/status.sh

    Expected:

  • both services active
  • injection present
  • https:200

    • Common fixes

  • 404 /chat?... → SPA fallback missing in HTTPS proxy.
  • origin not allowed → ensure deploy used correct VOICE_HOST and added matching HTTPS origin to gateway.controlUi.allowedOrigins.
  • token missing → open URL with ?token=... once.
  • pairing required → approve pending device via openclaw devices approve --token .
  • Mic breaks after reboot → cert paths must be persistent (not /tmp).
  • No transcription result → check local faster-whisper endpoint first.

    • See references/troubleshooting.md for exact commands.

    What this skill modifies

    Before installing, be aware of all system changes deploy.sh makes:

    | What | Path | Action | |---|---|---| | Control UI HTML | /openclaw/dist/control-ui/index.html | Adds