mirror of
https://gitcode.com/JianFeeeee/HomeAgent.git
synced 2026-11-01 23:07:30 +00:00
security(新模块 internal/kernelmod/security)
- 凭据闸门:出向拦截成 @{别名}、入向清洗、执行前回填(internal/security/{gate,runtime}.go)
- 工具黑白名单 + 沙箱(读写根、网络、.. 逃逸):internal/security/policy.go
- 敏感词过滤 + 提示词注入预警(Finding 不带原文):internal/security/content.go
- 按主体授权(hard-private 对非内部主体永久拒绝):internal/security/principal.go
- 插件命名限式(可选档位,插件声明/内核执行,只能收窄):internal/security/profile.go
- 启动装配从 cmd/homed 迁入模块;启动顺序判据改盯真实装配点
device(新模块)
- 正式内核模块,Provides FacDevice,KernelState.Device
- 内置工具路由表下沉到 internal/toolroute(避免 core↔kernelboot 环),
device 保留对外入口;agent 未挂载时退化本地 switch
- Agent 侧只留 api.ToolHost/DeviceSurface 适配层
SDK
- InjectOptions.SecurityProfile:插件按 inputch 声明本轮安全档位(可选)
- InjectOptions.TurnHint:插件注入**本轮事实**,内核以独立 system 消息注入,
不混进用户正文(人设负责怎么说话,TurnHint 只放这一轮成立的事实)
- FacilitySecurity / FacilityDevice
提示词
- 内核自带 prompt/skill/工具返回全面英文化(中文提示会让模型行为漂移)
- 机制解释下沉到 4 个内置 skill(memory/output/tool-order/plugins),
skill 描述压到 80 runes 内(原来 94–108 全被索引截断)
- 默认人格模板英文化;[Voice] 段删除,规则并入 persona 块(单一段落)
- 历史记忆工具改名 coldcontext_query/commit,图记忆语义改称 stable memory
修复
- tracker: exec mount → unix.Mount(降权运行 + AmbientCapabilities 下才能挂)、
区分 EPERM 与不支持;启动日志说明后果与恢复方式
- healthcheck_kernel 输出瘦身:status.Tools 只给摘要(原 98,989 tokens/151% 预算)
- plugin_list 描述讲清 auto_start(按需)与 alive(此刻是否在跑),
明确不能由 alive=false 推断能力不存在
- pluginmgr/webui 去掉写死的 /home/newqqagent 回退路径(env → pluginDir 反推 → 报错)
- lua: 盘上适配器与内置版本不一致且无基线时响亮告警(deepseek 流式丢失
tool_calls 导致'模型不调工具'的真因)
测试:go build ./... 通过;go test ./... 60 包全绿
309 lines
8.6 KiB
Go
309 lines
8.6 KiB
Go
// Package skillmgr 实现原生 SKILL 插件管理器。
|
||
//
|
||
// 职责边界:
|
||
// - 本插件是 native skill(SKILL.md / skill.json 指令文档型插件)的唯一归属者,
|
||
// 负责其全生命周期:加载、卸载、启停、生成(模板)、导出(.skm 包)、安装。
|
||
// - clawhubadapter(OpenClaw 兼容层)扫描 skills 目录时发现纯 SKILL 条目后
|
||
// 发布 skill_detected 事件移交本插件注册;sidecar/OC plugin 不归本插件管。
|
||
//
|
||
// skill 的运行模型:SKILL.md 是给 LLM 的指令文档,agent 通过 skill_info 读取全文后
|
||
// 用 cmd_run 等工具按文档执行;skill 不注册可调用 handler 工具。
|
||
package skillmgr
|
||
|
||
import (
|
||
"encoding/json"
|
||
"fmt"
|
||
"log"
|
||
"os"
|
||
"path/filepath"
|
||
"sort"
|
||
"strings"
|
||
"sync"
|
||
|
||
"github.com/JianFeeeee/HologramAgent/internal/events"
|
||
"github.com/JianFeeeee/HologramAgent/internal/plugin"
|
||
"github.com/JianFeeeee/HologramAgent/internal/sdk"
|
||
)
|
||
|
||
const (
|
||
// SkillFileName 标准 skill 主文件名
|
||
SkillFileName = "SKILL.md"
|
||
// MetaFileName 可选元数据文件(覆盖 SKILL.md frontmatter 字段)
|
||
MetaFileName = "skill.json"
|
||
// PackExt 导出包扩展名
|
||
PackExt = ".skm"
|
||
// detectEvent 兼容层移交事件类型
|
||
detectEvent = events.EventSkillDetected
|
||
)
|
||
|
||
func init() {
|
||
plugin.RegisterPluginMeta("skillmgr", "技能管理器", "Skill Manager")
|
||
plugin.RegisterFactory("skillmgr", func(name string, cfg map[string]interface{}) (sdk.Plugin, error) {
|
||
dir := ""
|
||
if dataDir, ok := cfg["data_dir"].(string); ok && dataDir != "" {
|
||
dir = filepath.Join(dataDir, "skills")
|
||
}
|
||
return New(name, dir), nil
|
||
})
|
||
}
|
||
|
||
// SkillEntry 一个已加载的 native skill 及其实时状态。
|
||
type SkillEntry struct {
|
||
sk *plugin.SKILLPlugin
|
||
path string
|
||
enabled bool
|
||
}
|
||
|
||
type Plugin struct {
|
||
name string
|
||
skillsDir string
|
||
|
||
mu sync.RWMutex
|
||
skills map[string]*SkillEntry // name -> entry
|
||
sdk *sdk.PluginSDK
|
||
|
||
unsub func() // skill_detected 订阅注销
|
||
}
|
||
|
||
func New(name, skillsDir string) *Plugin {
|
||
return &Plugin{
|
||
name: name,
|
||
skillsDir: skillsDir,
|
||
skills: map[string]*SkillEntry{},
|
||
}
|
||
}
|
||
|
||
func (p *Plugin) Name() string { return p.name }
|
||
|
||
func (p *Plugin) Start(s *sdk.PluginSDK) error {
|
||
p.sdk = s
|
||
|
||
// 默认目录:内核 data_dir 下 skills 目录(与配置 core.daemon.data_dir 对齐)
|
||
if p.skillsDir == "" {
|
||
if v, _ := s.Settings().GetCore("daemon.data_dir"); v != nil {
|
||
if dir, ok := v.(string); ok && dir != "" {
|
||
p.skillsDir = filepath.Join(dir, "skills")
|
||
}
|
||
}
|
||
}
|
||
// 内核自带 skill 先落盘(不覆盖用户版本),再由下面的扫描统一加载。
|
||
// 机制类内容住在 skill 里,系统提示词只引用、不复述(见 builtin.go 注释)。
|
||
materializeBuiltinSkills(p.skillsDir)
|
||
|
||
if err := os.MkdirAll(p.skillsDir, 0755); err != nil {
|
||
return fmt.Errorf("mkdir skills dir: %w", err)
|
||
}
|
||
|
||
// 订阅兼容层移交事件(clawhubadapter 发现纯 SKILL 后发布)
|
||
p.unsub = s.Subscribe(detectEvent, func(evt *events.Event) {
|
||
path, _ := evt.Payload["path"].(string)
|
||
if path == "" {
|
||
return
|
||
}
|
||
if _, err := p.loadOne(path); err != nil {
|
||
log.Printf("[skillmgr] detected skill %s: %v", path, err)
|
||
return
|
||
}
|
||
log.Printf("[skillmgr] registered via %s event: %s", detectEvent, filepath.Base(path))
|
||
})
|
||
|
||
// 启动全扫:兜底接管所有已存在的纯 SKILL 目录/单文件
|
||
// (时序上 skillmgr(c<s) 先于 clawhubadapter 启动,此处先扫到的条目
|
||
// 后续事件重复到达时 loadOne 幂等跳过)
|
||
n := p.scanExisting()
|
||
p.registerTools()
|
||
log.Printf("[skillmgr] started, dir=%s, loaded %d native skills", p.skillsDir, n)
|
||
return nil
|
||
}
|
||
|
||
func (p *Plugin) Stop() error {
|
||
if p.unsub != nil {
|
||
p.unsub()
|
||
p.unsub = nil
|
||
}
|
||
return nil
|
||
}
|
||
|
||
// scanExisting 扫描 skills 目录加载全部纯 SKILL 条目。返回加载数量。
|
||
func (p *Plugin) scanExisting() int {
|
||
entries, err := os.ReadDir(p.skillsDir)
|
||
if err != nil {
|
||
return 0
|
||
}
|
||
count := 0
|
||
for _, e := range entries {
|
||
if strings.HasPrefix(e.Name(), ".") || e.Name() == "node_modules" {
|
||
continue
|
||
}
|
||
path := filepath.Join(p.skillsDir, e.Name())
|
||
if !isNativeSkillPath(path) {
|
||
continue
|
||
}
|
||
if _, err := p.loadOne(path); err != nil {
|
||
log.Printf("[skillmgr] scan skip %s: %v", e.Name(), err)
|
||
continue
|
||
}
|
||
count++
|
||
}
|
||
return count
|
||
}
|
||
|
||
// isNativeSkillPath 判断路径是否为纯 SKILL 类型(非 sidecar 非 OC plugin)。
|
||
// sidecar: main.js/main.py;OC plugin: openclaw.plugin.json 或带 openclaw 扩展的 package.json。
|
||
func isNativeSkillPath(path string) bool {
|
||
info, err := os.Stat(path)
|
||
if err != nil {
|
||
return false
|
||
}
|
||
if !info.IsDir() {
|
||
return strings.HasSuffix(strings.ToLower(path), ".md")
|
||
}
|
||
// 目录内含 sidecar / OC plugin 标志文件的归兼容层管
|
||
for _, flag := range []string{"main.js", "main.py", "openclaw.plugin.json"} {
|
||
if fileExists(filepath.Join(path, flag)) {
|
||
return false
|
||
}
|
||
}
|
||
if hasOCExtensions(filepath.Join(path, "package.json")) {
|
||
return false
|
||
}
|
||
// 纯 skill:有 SKILL.md 或 skill.json 即认
|
||
return fileExists(filepath.Join(path, SkillFileName)) ||
|
||
fileExists(filepath.Join(path, MetaFileName))
|
||
}
|
||
|
||
// hasOCExtensions 检查 package.json 是否带 openclaw 扩展声明(与 clawhubadapter 同语义)。
|
||
func hasOCExtensions(pkgPath string) bool {
|
||
data, err := os.ReadFile(pkgPath)
|
||
if err != nil {
|
||
return false
|
||
}
|
||
var pkg struct {
|
||
Openclaw json.RawMessage `json:"openclaw"`
|
||
}
|
||
return json.Unmarshal(data, &pkg) == nil && len(pkg.Openclaw) > 0
|
||
}
|
||
|
||
func fileExists(path string) bool {
|
||
info, err := os.Stat(path)
|
||
return err == nil && !info.IsDir()
|
||
}
|
||
|
||
// loadOne 从路径加载单个 skill 并入表(幂等:已存在且未变更则跳过)。
|
||
func (p *Plugin) loadOne(path string) (*SkillEntry, error) {
|
||
sk, err := plugin.LoadSKILL(path)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
name := sk.Name()
|
||
if name == "" || name == "." {
|
||
return nil, fmt.Errorf("skill at %s has empty name", path)
|
||
}
|
||
|
||
p.mu.Lock()
|
||
defer p.mu.Unlock()
|
||
if old, ok := p.skills[name]; ok {
|
||
// 幂等:同路径同内容不重复加载
|
||
if old.path == path {
|
||
return old, nil
|
||
}
|
||
// 重名不同路径:拒绝并提示
|
||
p.mu.Unlock()
|
||
return nil, fmt.Errorf("skill name conflict: %q already loaded from %s", name, old.path)
|
||
}
|
||
entry := &SkillEntry{sk: sk, path: path, enabled: true}
|
||
p.skills[name] = entry
|
||
return entry, nil
|
||
}
|
||
|
||
// removeOne 从表中移除 skill(不动磁盘)。
|
||
func (p *Plugin) removeOne(name string) bool {
|
||
p.mu.Lock()
|
||
defer p.mu.Unlock()
|
||
if _, ok := p.skills[name]; !ok {
|
||
return false
|
||
}
|
||
delete(p.skills, name)
|
||
return true
|
||
}
|
||
|
||
// snapshot 返回排序后的 skill 名列表。
|
||
func (p *Plugin) snapshot() []*SkillEntry {
|
||
p.mu.RLock()
|
||
defer p.mu.RUnlock()
|
||
names := make([]string, 0, len(p.skills))
|
||
for n := range p.skills {
|
||
names = append(names, n)
|
||
}
|
||
sort.Strings(names)
|
||
out := make([]*SkillEntry, 0, len(names))
|
||
for _, n := range names {
|
||
out = append(out, p.skills[n])
|
||
}
|
||
return out
|
||
}
|
||
|
||
func (p *Plugin) get(name string) (*SkillEntry, bool) {
|
||
p.mu.RLock()
|
||
defer p.mu.RUnlock()
|
||
e, ok := p.skills[name]
|
||
return e, ok
|
||
}
|
||
|
||
// SkillIndex 实现 agentCore.SkillIndexProvider:返回已启用技能的精炼索引。
|
||
// 每次 LLM 调用都会执行,必须轻量(只读锁 + 字符串拼接,无 IO)。
|
||
func (p *Plugin) SkillIndex() string {
|
||
entries := p.snapshot()
|
||
var b strings.Builder
|
||
for _, e := range entries {
|
||
if !e.enabled {
|
||
continue
|
||
}
|
||
desc := e.sk.Description()
|
||
if desc == "" || desc == "---" {
|
||
desc = "(no description)"
|
||
}
|
||
desc = p.truncateDesc(desc)
|
||
fmt.Fprintf(&b, "%s v%s - %s\n", e.sk.Name(), e.sk.Version(), desc)
|
||
}
|
||
return strings.TrimRight(b.String(), "\n")
|
||
}
|
||
|
||
// truncateDesc truncates a skill description to 80 runes and appends an ellipsis.
|
||
func truncateDesc(desc string) string {
|
||
const maxRunes = 80
|
||
r := []rune(desc)
|
||
if len(r) <= maxRunes {
|
||
return desc
|
||
}
|
||
return string(r[:maxRunes]) + "..."
|
||
}
|
||
|
||
// SkillDescriptions returns the full one-line descriptions of enabled skills.
|
||
// 供 agent 在有限的提示词空间里准确匹配技能;完整机制与操作步骤仍由 skill_info 按需读取。
|
||
// 描述应包括:适用问题/时机 + 该机制的关键区别,避免仅用含糊的目录名。
|
||
func (p *Plugin) SkillDescriptions() string {
|
||
entries := p.snapshot()
|
||
var b strings.Builder
|
||
for _, e := range entries {
|
||
if !e.enabled {
|
||
continue
|
||
}
|
||
desc := strings.TrimSpace(e.sk.Description())
|
||
if desc == "" || desc == "---" {
|
||
continue
|
||
}
|
||
fmt.Fprintf(&b, "%s: %s\n", e.sk.Name(), desc)
|
||
}
|
||
return strings.TrimRight(b.String(), "\n")
|
||
}
|
||
|
||
func (p *Plugin) truncateDesc(desc string) string {
|
||
const maxRunes = 80
|
||
r := []rune(desc)
|
||
if len(r) <= maxRunes {
|
||
return desc
|
||
}
|
||
return string(r[:maxRunes]) + "..."
|
||
}
|