sophhub 0.4.26 → 0.4.27

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sophhub",
-  "version": "0.4.26",
+  "version": "0.4.27",
   "description": "SophHub CLI - Manage and download AI Agent skills and agents",
   "type": "module",
   "bin": {

package/skills/config-manager/skill.json

@@ -0,0 +1,16 @@
+{
+  "name": "config-manager",
+  "version": "1.0.0",
+  "types": ["store"],
+  "displayName": "配置管理",
+  "description": "管理 Sophclaw Agent 的 skill 和 tool 运行时开关。当用户要求启用/禁用某个 skill、开启/关闭某个 tool、查看当前 agent 的 skill 或 tool 配置、调整 agent 能力边界时使用。通过安全脚本修改 openclaw.json，自动备份并校验。",
+  "changelog": [
+    {
+      "version": "1.0.0",
+      "date": "2026-05-21",
+      "changes": ["初次提交：list_config、toggle_skill、toggle_tool 三大功能"]
+    }
+  ],
+  "createdAt": "2026-05-21",
+  "updatedAt": "2026-05-21"
+}

package/skills/config-manager/src/SKILL.md

@@ -0,0 +1,56 @@
+---
+name: config-manager
+description: 管理 Sophclaw Agent 的 skill 和 tool 运行时开关。当用户要求启用/禁用某个 skill、开启/关闭某个 tool、查看当前 agent 的 skill 或 tool 配置、调整 agent 能力边界时使用。所有修改通过安全脚本执行，自动备份并校验。不要绕过本 skill 直接编辑 openclaw.json。
+---
+
+# Config Manager
+
+安全地管理 Sophclaw Agent 的 `skills` 和 `tools.deny` 配置。所有修改必须通过本 skill 的脚本执行，严禁直接编辑 `openclaw.json`。
+
+## 用法
+
+### 1. 先查看当前状态
+
+任何修改前，必须先列出当前配置：
+
+```bash
+uv run {baseDir}/scripts/list_config.py --agent-id "{agent_id}"
+```
+
+### 2. 执行变更
+
+确认操作后执行。不确定时可加 `--dry-run` 仅预览不写入。
+
+**开关 skill**：
+
+```bash
+uv run {baseDir}/scripts/toggle_skill.py --agent-id "{agent_id}" --skill-name "{name}" --action enable|disable [--dry-run]
+```
+
+**开关 tool**（enable = 从 deny 列表移除，disable = 加入 deny 列表）：
+
+```bash
+uv run {baseDir}/scripts/toggle_tool.py --agent-id "{agent_id}" --tool-name "{name}" --action enable|disable [--dry-run]
+```
+
+### 3. 反馈结果
+
+解析脚本输出的 JSON：
+
+| 字段 | 含义 |
+|------|------|
+| `changed: true` | 变更已执行 |
+| `changed: false` | 已是目标状态，无需变更 |
+| `dry_run: true` | 预览模式，需去掉 --dry-run 再次执行 |
+| `backup` | 备份文件路径 |
+| `error` | 错误信息 |
+
+变更成功时告知用户备份位置，失败时说明原因和建议。
+
+## 注意事项
+
+- 严禁直接编辑 `openclaw.json`，所有修改必须通过本 skill 脚本执行
+- 默认只操作当前对话的 agent，除非用户明确指定其他 agent_id 并确认
+- 一次只操作一个 skill 或 tool
+- 不修改 `skills` 和 `tools.deny` 以外的字段（model、workspace、identity 等）
+- 用户未确认时不执行写入操作

package/skills/config-manager/src/pyproject.toml

@@ -0,0 +1,6 @@
+[project]
+name = "config-manager"
+version = "1.0.0"
+description = "Sophclaw Agent 配置管理：skill 与 tool 运行时开关"
+requires-python = ">=3.10"
+dependencies = []

package/skills/config-manager/src/scripts/common.py

@@ -0,0 +1,118 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+import json
+import os
+from datetime import datetime, timezone
+from pathlib import Path
+from shutil import copy2
+from typing import Any
+
+
+def default_openclaw_config_path() -> Path:
+    raw = os.environ.get("OPENCLAW_CONFIG_PATH", "~/.openclaw/openclaw.json")
+    return Path(os.path.expanduser(raw)).resolve()
+
+
+def openclaw_root(config_path: Path) -> Path:
+    return config_path.expanduser().resolve().parent
+
+
+def load_json(path: Path) -> dict[str, Any]:
+    with path.open("r", encoding="utf-8") as f:
+        return json.load(f)
+
+
+def dump_json(path: Path, data: dict[str, Any]) -> None:
+    path.parent.mkdir(parents=True, exist_ok=True)
+    with path.open("w", encoding="utf-8") as f:
+        json.dump(data, f, indent=2, ensure_ascii=False)
+        f.write("\n")
+
+
+def load_openclaw_config(config_path: Path | None = None) -> dict[str, Any]:
+    path = config_path or default_openclaw_config_path()
+    if not path.is_file():
+        raise FileNotFoundError(f"找不到 openclaw.json: {path}\n请确认 OpenClaw 已正确安装，或设置 OPENCLAW_CONFIG_PATH 环境变量指向正确的配置文件路径。")
+    return load_json(path)
+
+
+def list_agent_ids(config: dict[str, Any]) -> list[str]:
+    agents = config.get("agents", {}).get("list", [])
+    if not isinstance(agents, list):
+        return []
+    return [a["id"] for a in agents if isinstance(a, dict) and a.get("id")]
+
+
+def find_agent_entry(config: dict[str, Any], agent_id: str) -> dict[str, Any] | None:
+    agents = config.get("agents", {}).get("list", [])
+    for agent in agents:
+        if isinstance(agent, dict) and agent.get("id") == agent_id:
+            return agent
+    return None
+
+
+def ensure_agent_entry(config: dict[str, Any], agent_id: str) -> dict[str, Any]:
+    entry = find_agent_entry(config, agent_id)
+    if entry is None:
+        installed = list_agent_ids(config)
+        if installed:
+            hint = f"当前已安装的 agent: {', '.join(installed)}"
+        else:
+            hint = "当前 openclaw.json 中尚未安装任何 agent（agents.list 为空或不存在）。请先通过 agent-install 安装 agent。"
+        raise ValueError(f"Agent '{agent_id}' 不存在。{hint}")
+    return entry
+
+
+def backup_config(config_path: Path, backup_root: Path | None = None) -> Path:
+    if backup_root is None:
+        backup_root = openclaw_root(config_path) / "backups"
+    backup_root.mkdir(parents=True, exist_ok=True)
+    timestamp = datetime.now().strftime("%Y%m%d-%H%M%S")
+    backup_path = backup_root / f"openclaw-{timestamp}.json"
+    copy2(config_path, backup_path)
+    _cleanup_old_backups(backup_root, keep=10)
+    return backup_path
+
+
+def _cleanup_old_backups(backup_root: Path, keep: int) -> None:
+    backups = sorted(
+        [p for p in backup_root.iterdir() if p.is_file() and p.name.startswith("openclaw-")],
+        key=lambda p: p.stat().st_mtime,
+    )
+    if len(backups) > keep:
+        for p in backups[: len(backups) - keep]:
+            p.unlink()
+
+
+def validate_json(data: dict[str, Any]) -> bool:
+    try:
+        json.loads(json.dumps(data, ensure_ascii=False))
+        return True
+    except (json.JSONDecodeError, TypeError):
+        return False
+
+
+def make_result(
+    action: str,
+    agent_id: str,
+    field: str,
+    before: Any,
+    after: Any,
+    changed: bool,
+    backup_path: str | None = None,
+    dry_run: bool = False,
+    message: str = "",
+) -> dict[str, Any]:
+    return {
+        "action": action,
+        "agent_id": agent_id,
+        "field": field,
+        "before": before,
+        "after": after,
+        "changed": changed,
+        "dry_run": dry_run,
+        "backup": backup_path,
+        "message": message,
+        "timestamp": datetime.now(timezone.utc).isoformat(),
+    }

package/skills/config-manager/src/scripts/list_config.py

@@ -0,0 +1,63 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+import argparse
+import json
+import sys
+from pathlib import Path
+
+from common import dump_json, find_agent_entry, load_openclaw_config, ensure_agent_entry
+
+
+def list_config(agent_id: str, config_path: Path | None = None) -> dict:
+    config = load_openclaw_config(config_path)
+    entry = ensure_agent_entry(config, agent_id)
+
+    skills = entry.get("skills", [])
+    if not isinstance(skills, list):
+        skills = []
+
+    tools = entry.get("tools", {})
+    if not isinstance(tools, dict):
+        tools = {}
+    tools_deny = tools.get("deny", [])
+    if not isinstance(tools_deny, list):
+        tools_deny = []
+
+    return {
+        "agent_id": agent_id,
+        "skills": skills,
+        "tools_deny": tools_deny,
+        "model": entry.get("model"),
+        "workspace": entry.get("workspace"),
+        "identity": entry.get("identity"),
+    }
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser(description="列出 Agent 当前的 skills 和 tools 状态")
+    parser.add_argument("--agent-id", required=True, help="Agent ID")
+    parser.add_argument(
+        "--config",
+        help="openclaw.json 路径（默认 ~/.openclaw/openclaw.json）",
+    )
+    args = parser.parse_args()
+
+    try:
+        config_path = Path(args.config).expanduser().resolve() if args.config else None
+        result = list_config(args.agent_id, config_path)
+        json.dump(result, sys.stdout, indent=2, ensure_ascii=False)
+        sys.stdout.write("\n")
+        return 0
+    except (FileNotFoundError, ValueError) as e:
+        error = {
+            "error": str(e),
+            "agent_id": args.agent_id,
+        }
+        json.dump(error, sys.stdout, indent=2, ensure_ascii=False)
+        sys.stdout.write("\n")
+        return 1
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

package/skills/config-manager/src/scripts/toggle_skill.py

@@ -0,0 +1,125 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+import argparse
+import json
+import sys
+from pathlib import Path
+
+from common import (
+    backup_config,
+    dump_json,
+    load_openclaw_config,
+    ensure_agent_entry,
+    make_result,
+    validate_json,
+)
+
+
+def toggle_skill(
+    agent_id: str,
+    skill_name: str,
+    action: str,
+    config_path: Path | None = None,
+    dry_run: bool = False,
+) -> dict:
+    resolved_path = config_path or Path("~/.openclaw/openclaw.json").expanduser().resolve()
+    config = load_openclaw_config(resolved_path)
+    entry = ensure_agent_entry(config, agent_id)
+    skills: list[str] = list(entry.get("skills", []) or [])
+
+    if action == "enable":
+        if skill_name in skills:
+            return make_result(
+                "enable_skill",
+                agent_id,
+                "skills",
+                before=skills,
+                after=skills,
+                changed=False,
+                message=f"skill '{skill_name}' 已经处于启用状态，无需操作",
+            )
+        new_skills = skills + [skill_name]
+        result = make_result(
+            "enable_skill",
+            agent_id,
+            "skills",
+            before=skills,
+            after=new_skills,
+            changed=True,
+            dry_run=dry_run,
+            message=f"将启用 skill: {skill_name}",
+        )
+    elif action == "disable":
+        if skill_name not in skills:
+            return make_result(
+                "disable_skill",
+                agent_id,
+                "skills",
+                before=skills,
+                after=skills,
+                changed=False,
+                message=f"skill '{skill_name}' 已经处于禁用状态，无需操作",
+            )
+        new_skills = [s for s in skills if s != skill_name]
+        result = make_result(
+            "disable_skill",
+            agent_id,
+            "skills",
+            before=skills,
+            after=new_skills,
+            changed=True,
+            dry_run=dry_run,
+            message=f"将禁用 skill: {skill_name}",
+        )
+    else:
+        raise ValueError(f"无效的 action: {action}，请使用 enable 或 disable")
+
+    if dry_run or not result["changed"]:
+        return result
+
+    entry["skills"] = new_skills
+    if not validate_json(config):
+        entry["skills"] = skills
+        raise ValueError("配置 JSON 校验失败，变更已回滚，openclaw.json 未被修改")
+
+    backup_path = backup_config(resolved_path)
+    dump_json(resolved_path, config)
+    result["backup"] = str(backup_path)
+    return result
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser(description="启用或禁用 Agent 的某个 skill")
+    parser.add_argument("--agent-id", required=True, help="Agent ID")
+    parser.add_argument("--skill-name", required=True, help="skill 名称")
+    parser.add_argument(
+        "--action", required=True, choices=["enable", "disable"], help="enable=启用, disable=禁用"
+    )
+    parser.add_argument("--dry-run", action="store_true", help="仅预览变更，不实际写入")
+    parser.add_argument(
+        "--config",
+        help="openclaw.json 路径（默认 ~/.openclaw/openclaw.json）",
+    )
+    args = parser.parse_args()
+
+    try:
+        config_path = Path(args.config).expanduser().resolve() if args.config else None
+        result = toggle_skill(args.agent_id, args.skill_name, args.action, config_path, args.dry_run)
+        json.dump(result, sys.stdout, indent=2, ensure_ascii=False)
+        sys.stdout.write("\n")
+        return 0
+    except (FileNotFoundError, ValueError) as e:
+        error = {
+            "error": str(e),
+            "agent_id": args.agent_id,
+            "skill_name": args.skill_name,
+            "action": args.action,
+        }
+        json.dump(error, sys.stdout, indent=2, ensure_ascii=False)
+        sys.stdout.write("\n")
+        return 1
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

package/skills/config-manager/src/scripts/toggle_tool.py

@@ -0,0 +1,129 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+import argparse
+import json
+import sys
+from pathlib import Path
+
+from common import (
+    backup_config,
+    dump_json,
+    load_openclaw_config,
+    ensure_agent_entry,
+    make_result,
+    validate_json,
+)
+
+
+def toggle_tool(
+    agent_id: str,
+    tool_name: str,
+    action: str,
+    config_path: Path | None = None,
+    dry_run: bool = False,
+) -> dict:
+    resolved_path = config_path or Path("~/.openclaw/openclaw.json").expanduser().resolve()
+    config = load_openclaw_config(resolved_path)
+    entry = ensure_agent_entry(config, agent_id)
+
+    entry.setdefault("tools", {})
+    if not isinstance(entry["tools"], dict):
+        entry["tools"] = {}
+    tools_deny: list[str] = list(entry["tools"].get("deny", []) or [])
+
+    if action == "enable":
+        if tool_name not in tools_deny:
+            return make_result(
+                "enable_tool",
+                agent_id,
+                "tools.deny",
+                before=tools_deny,
+                after=tools_deny,
+                changed=False,
+                message=f"tool '{tool_name}' 已经处于启用状态（不在 deny 列表中），无需操作",
+            )
+        new_deny = [t for t in tools_deny if t != tool_name]
+        result = make_result(
+            "enable_tool",
+            agent_id,
+            "tools.deny",
+            before=tools_deny,
+            after=new_deny,
+            changed=True,
+            dry_run=dry_run,
+            message=f"将启用 tool: {tool_name}（从 deny 列表移除）",
+        )
+    elif action == "disable":
+        if tool_name in tools_deny:
+            return make_result(
+                "disable_tool",
+                agent_id,
+                "tools.deny",
+                before=tools_deny,
+                after=tools_deny,
+                changed=False,
+                message=f"tool '{tool_name}' 已经处于禁用状态（已在 deny 列表中），无需操作",
+            )
+        new_deny = tools_deny + [tool_name]
+        result = make_result(
+            "disable_tool",
+            agent_id,
+            "tools.deny",
+            before=tools_deny,
+            after=new_deny,
+            changed=True,
+            dry_run=dry_run,
+            message=f"将禁用 tool: {tool_name}（加入 deny 列表）",
+        )
+    else:
+        raise ValueError(f"无效的 action: {action}，请使用 enable 或 disable")
+
+    if dry_run or not result["changed"]:
+        return result
+
+    entry["tools"]["deny"] = new_deny
+    if not validate_json(config):
+        entry["tools"]["deny"] = tools_deny
+        raise ValueError("配置 JSON 校验失败，变更已回滚，openclaw.json 未被修改")
+
+    backup_path = backup_config(resolved_path)
+    dump_json(resolved_path, config)
+    result["backup"] = str(backup_path)
+    return result
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser(description="启用或禁用 Agent 的某个 tool")
+    parser.add_argument("--agent-id", required=True, help="Agent ID")
+    parser.add_argument("--tool-name", required=True, help="tool 名称")
+    parser.add_argument(
+        "--action", required=True, choices=["enable", "disable"], help="enable=启用（移出 deny）, disable=禁用（加入 deny）"
+    )
+    parser.add_argument("--dry-run", action="store_true", help="仅预览变更，不实际写入")
+    parser.add_argument(
+        "--config",
+        help="openclaw.json 路径（默认 ~/.openclaw/openclaw.json）",
+    )
+    args = parser.parse_args()
+
+    try:
+        config_path = Path(args.config).expanduser().resolve() if args.config else None
+        result = toggle_tool(args.agent_id, args.tool_name, args.action, config_path, args.dry_run)
+        json.dump(result, sys.stdout, indent=2, ensure_ascii=False)
+        sys.stdout.write("\n")
+        return 0
+    except (FileNotFoundError, ValueError) as e:
+        error = {
+            "error": str(e),
+            "agent_id": args.agent_id,
+            "tool_name": args.tool_name,
+            "action": args.action,
+        }
+        json.dump(error, sys.stdout, indent=2, ensure_ascii=False)
+        sys.stdout.write("\n")
+        return 1
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())