agent_config/agents/

openclaw.rs

//! OpenClaw integration.
//!
//! Implemented surfaces:
//!
//! 1. **Prompt rules**: project-local fenced blocks in `AGENTS.md`.
//! 2. **Skills**: AgentSkills-compatible folders at `~/.openclaw/skills`
//!    (Global) or `<root>/.agents/skills` (Local).
//! 3. **MCP servers**: global OpenClaw JSON5 config at
//!    `~/.openclaw/openclaw.json`, under `mcp.servers.<name>`.
//!
//! Native OpenClaw plugin and hook-pack installation remains intentionally
//! deferred because upstream documents that as a CLI/plugin lifecycle rather
//! than a stable file-backed hook contract.

use std::collections::BTreeMap;
use std::path::{Path, PathBuf};

use serde_json::{Map, Value};

use crate::agents::planning as agent_planning;
use crate::error::AgentConfigError;
use crate::integration::{
    InstallReport, InstructionSurface, Integration, McpSurface, SkillSurface, UninstallReport,
};
use crate::paths;
use crate::plan::{InstallPlan, UninstallPlan};
use crate::scope::{Scope, ScopeKind};
use crate::spec::{HookSpec, InstructionSpec, McpSpec, McpTransport, SkillSpec};
use crate::status::StatusReport;
use crate::util::{
    file_lock, fs_atomic, instructions_dir, mcp_json_map, md_block, ownership, safe_fs, skills_dir,
};

/// OpenClaw file-backed installer.
#[derive(Debug, Clone, Copy, Default)]
pub struct OpenClawAgent {
    _private: (),
}

impl OpenClawAgent {
    /// Construct an instance. Stateless.
    pub const fn new() -> Self {
        Self { _private: () }
    }

    fn require_local(scope: &Scope) -> Result<&Path, AgentConfigError> {
        match scope {
            Scope::Local(p) => Ok(p),
            Scope::Global => Err(AgentConfigError::UnsupportedScope {
                id: "openclaw",
                scope: ScopeKind::Global,
            }),
        }
    }

    fn prompt_path(scope: &Scope) -> Result<PathBuf, AgentConfigError> {
        Ok(Self::require_local(scope)?.join("AGENTS.md"))
    }

    fn openclaw_home_from_home(home: &Path) -> PathBuf {
        home.join(".openclaw")
    }

    fn mcp_config_path_from_home(home: &Path) -> PathBuf {
        Self::openclaw_home_from_home(home).join("openclaw.json")
    }

    fn mcp_path(scope: &Scope) -> Result<PathBuf, AgentConfigError> {
        match scope {
            Scope::Global => Ok(Self::mcp_config_path_from_home(&paths::home_dir()?)),
            Scope::Local(_) => Err(AgentConfigError::UnsupportedScope {
                id: "openclaw",
                scope: ScopeKind::Local,
            }),
        }
    }

    fn skills_root_from_home(home: &Path) -> PathBuf {
        Self::openclaw_home_from_home(home).join("skills")
    }

    fn skills_root(scope: &Scope) -> Result<PathBuf, AgentConfigError> {
        Ok(match scope {
            Scope::Global => Self::skills_root_from_home(&paths::home_dir()?),
            Scope::Local(p) => p.join(".agents").join("skills"),
        })
    }

    /// Directory holding the instruction ownership ledger. Local-only;
    /// reuses the existing `<root>/.agents/` skills directory so the
    /// sidecar lives next to other agent-config artifacts.
    fn instruction_config_dir(scope: &Scope) -> Result<PathBuf, AgentConfigError> {
        Ok(Self::require_local(scope)?.join(".agents"))
    }

    fn install_mcp_config(
        config_path: &Path,
        spec: &McpSpec,
    ) -> Result<InstallReport, AgentConfigError> {
        let ledger = ownership::mcp_ledger_for(config_path);
        mcp_json_map::install(
            config_path,
            &ledger,
            spec,
            &["mcp", "servers"],
            openclaw_mcp_value,
            mcp_json_map::ConfigFormat::Json5,
        )
    }

    fn uninstall_mcp_config(
        config_path: &Path,
        name: &str,
        owner_tag: &str,
    ) -> Result<UninstallReport, AgentConfigError> {
        let ledger = ownership::mcp_ledger_for(config_path);
        mcp_json_map::uninstall(
            config_path,
            &ledger,
            name,
            owner_tag,
            "mcp server",
            &["mcp", "servers"],
            mcp_json_map::ConfigFormat::Json5,
        )
    }
}

impl Integration for OpenClawAgent {
    fn id(&self) -> &'static str {
        "openclaw"
    }

    fn display_name(&self) -> &'static str {
        "OpenClaw"
    }

    fn supported_scopes(&self) -> &'static [ScopeKind] {
        &[ScopeKind::Local]
    }

    fn status(&self, scope: &Scope, tag: &str) -> Result<StatusReport, AgentConfigError> {
        HookSpec::validate_tag(tag)?;
        let path = Self::prompt_path(scope)?;
        StatusReport::for_markdown_block_hook(tag, path)
    }

    fn plan_install(
        &self,
        scope: &Scope,
        spec: &HookSpec,
    ) -> Result<InstallPlan, AgentConfigError> {
        agent_planning::markdown_install(
            Integration::id(self),
            scope,
            spec,
            Self::prompt_path(scope),
            true,
        )
    }

    fn plan_uninstall(&self, scope: &Scope, tag: &str) -> Result<UninstallPlan, AgentConfigError> {
        agent_planning::markdown_uninstall(
            Integration::id(self),
            scope,
            tag,
            Self::prompt_path(scope),
        )
    }

    fn install(&self, scope: &Scope, spec: &HookSpec) -> Result<InstallReport, AgentConfigError> {
        HookSpec::validate_tag(&spec.tag)?;
        let rules = spec
            .rules
            .as_ref()
            .ok_or(AgentConfigError::MissingSpecField {
                id: "openclaw",
                field: "rules",
            })?;
        let path = Self::prompt_path(scope)?;
        let mut report = InstallReport::default();
        scope.ensure_contained(&path)?;
        file_lock::with_lock(&path, || {
            let host = fs_atomic::read_to_string_or_empty(&path)?;
            let new_host = md_block::upsert(&host, &spec.tag, &rules.content);
            let outcome = safe_fs::write(scope, &path, new_host.as_bytes(), true)?;
            if outcome.no_change {
                report.already_installed = true;
            } else if outcome.existed {
                report.patched.push(outcome.path.clone());
            } else {
                report.created.push(outcome.path.clone());
            }
            if let Some(b) = outcome.backup {
                report.backed_up.push(b);
            }
            Ok::<(), AgentConfigError>(())
        })?;
        Ok(report)
    }

    fn uninstall(&self, scope: &Scope, tag: &str) -> Result<UninstallReport, AgentConfigError> {
        HookSpec::validate_tag(tag)?;
        let path = Self::prompt_path(scope)?;
        let mut report = UninstallReport::default();
        scope.ensure_contained(&path)?;
        file_lock::with_lock(&path, || {
            let host = fs_atomic::read_to_string_or_empty(&path)?;
            let (stripped, removed) = md_block::remove(&host, tag);

            if !removed {
                report.not_installed = true;
                return Ok(());
            }

            if stripped.trim().is_empty() {
                if safe_fs::restore_backup_if_matches(scope, &path, stripped.as_bytes())? {
                    report.restored.push(path.clone());
                } else {
                    safe_fs::remove_file(scope, &path)?;
                    report.removed.push(path.clone());
                }
            } else {
                safe_fs::write(scope, &path, stripped.as_bytes(), false)?;
                report.patched.push(path.clone());
            }
            Ok::<(), AgentConfigError>(())
        })?;
        Ok(report)
    }
}

impl McpSurface for OpenClawAgent {
    fn id(&self) -> &'static str {
        "openclaw"
    }

    fn supported_mcp_scopes(&self) -> &'static [ScopeKind] {
        &[ScopeKind::Global]
    }

    fn mcp_status(
        &self,
        scope: &Scope,
        name: &str,
        expected_owner: &str,
    ) -> Result<StatusReport, AgentConfigError> {
        McpSpec::validate_name(name)?;
        let cfg = Self::mcp_path(scope)?;
        let ledger = ownership::mcp_ledger_for(&cfg);
        let presence = mcp_json_map::config_presence(
            &cfg,
            &["mcp", "servers"],
            name,
            mcp_json_map::ConfigFormat::Json5,
        )?;
        let recorded = ownership::owner_of(&ledger, name)?;
        Ok(StatusReport::for_mcp(
            name,
            cfg,
            ledger,
            presence,
            expected_owner,
            recorded,
        ))
    }

    fn plan_install_mcp(
        &self,
        scope: &Scope,
        spec: &McpSpec,
    ) -> Result<InstallPlan, AgentConfigError> {
        agent_planning::mcp_json_map_install(
            McpSurface::id(self),
            scope,
            spec,
            Self::mcp_path(scope),
            &["mcp", "servers"],
            openclaw_mcp_value,
            mcp_json_map::ConfigFormat::Json5,
        )
    }

    fn plan_uninstall_mcp(
        &self,
        scope: &Scope,
        name: &str,
        owner_tag: &str,
    ) -> Result<UninstallPlan, AgentConfigError> {
        agent_planning::mcp_json_map_uninstall(
            McpSurface::id(self),
            scope,
            name,
            owner_tag,
            Self::mcp_path(scope),
            &["mcp", "servers"],
            mcp_json_map::ConfigFormat::Json5,
        )
    }

    fn is_mcp_installed(&self, scope: &Scope, name: &str) -> Result<bool, AgentConfigError> {
        McpSpec::validate_name(name)?;
        let cfg = Self::mcp_path(scope)?;
        let ledger = ownership::mcp_ledger_for(&cfg);
        mcp_json_map::is_installed(&ledger, name)
    }

    fn install_mcp(
        &self,
        scope: &Scope,
        spec: &McpSpec,
    ) -> Result<InstallReport, AgentConfigError> {
        spec.validate()?;
        let cfg = Self::mcp_path(scope)?;
        spec.validate_local_secret_policy(scope)?;
        scope.ensure_contained(&cfg)?;
        Self::install_mcp_config(&cfg, spec)
    }

    fn uninstall_mcp(
        &self,
        scope: &Scope,
        name: &str,
        owner_tag: &str,
    ) -> Result<UninstallReport, AgentConfigError> {
        McpSpec::validate_name(name)?;
        HookSpec::validate_tag(owner_tag)?;
        let cfg = Self::mcp_path(scope)?;
        scope.ensure_contained(&cfg)?;
        Self::uninstall_mcp_config(&cfg, name, owner_tag)
    }
}

impl SkillSurface for OpenClawAgent {
    fn id(&self) -> &'static str {
        "openclaw"
    }

    fn supported_skill_scopes(&self) -> &'static [ScopeKind] {
        &[ScopeKind::Global, ScopeKind::Local]
    }

    fn skill_status(
        &self,
        scope: &Scope,
        name: &str,
        expected_owner: &str,
    ) -> Result<StatusReport, AgentConfigError> {
        SkillSpec::validate_name(name)?;
        let root = Self::skills_root(scope)?;
        let (dir, manifest, ledger) = skills_dir::paths_for_status(&root, name);
        let recorded = ownership::owner_of(&ledger, name)?;
        Ok(StatusReport::for_skill(
            name,
            dir,
            manifest,
            ledger,
            expected_owner,
            recorded,
        ))
    }

    fn plan_install_skill(
        &self,
        scope: &Scope,
        spec: &SkillSpec,
    ) -> Result<InstallPlan, AgentConfigError> {
        agent_planning::skill_install(
            SkillSurface::id(self),
            scope,
            spec,
            Self::skills_root(scope),
        )
    }

    fn plan_uninstall_skill(
        &self,
        scope: &Scope,
        name: &str,
        owner_tag: &str,
    ) -> Result<UninstallPlan, AgentConfigError> {
        agent_planning::skill_uninstall(
            SkillSurface::id(self),
            scope,
            name,
            owner_tag,
            Self::skills_root(scope),
        )
    }

    fn is_skill_installed(&self, scope: &Scope, name: &str) -> Result<bool, AgentConfigError> {
        let root = Self::skills_root(scope)?;
        skills_dir::is_installed(&root, name)
    }

    fn install_skill(
        &self,
        scope: &Scope,
        spec: &SkillSpec,
    ) -> Result<InstallReport, AgentConfigError> {
        let root = Self::skills_root(scope)?;
        scope.ensure_contained(&root)?;
        skills_dir::install(&root, spec)
    }

    fn uninstall_skill(
        &self,
        scope: &Scope,
        name: &str,
        owner_tag: &str,
    ) -> Result<UninstallReport, AgentConfigError> {
        let root = Self::skills_root(scope)?;
        scope.ensure_contained(&root)?;
        skills_dir::uninstall(&root, name, owner_tag)
    }
}

impl OpenClawAgent {
    fn inline_layout(
        &self,
        scope: &Scope,
    ) -> Result<instructions_dir::InlineLayout, AgentConfigError> {
        Ok(instructions_dir::InlineLayout {
            config_dir: Self::instruction_config_dir(scope)?,
            host_file: Self::prompt_path(scope)?,
        })
    }
}

impl InstructionSurface for OpenClawAgent {
    fn id(&self) -> &'static str {
        "openclaw"
    }

    fn supported_instruction_scopes(&self) -> &'static [ScopeKind] {
        &[ScopeKind::Local]
    }

    fn instruction_status(
        &self,
        scope: &Scope,
        name: &str,
        expected_owner: &str,
    ) -> Result<StatusReport, AgentConfigError> {
        instructions_dir::inline_status(self.inline_layout(scope)?, name, expected_owner)
    }

    fn plan_install_instruction(
        &self,
        scope: &Scope,
        spec: &InstructionSpec,
    ) -> Result<InstallPlan, AgentConfigError> {
        instructions_dir::inline_plan_install(
            InstructionSurface::id(self),
            scope,
            self.inline_layout(scope),
            spec,
        )
    }

    fn plan_uninstall_instruction(
        &self,
        scope: &Scope,
        name: &str,
        owner_tag: &str,
    ) -> Result<UninstallPlan, AgentConfigError> {
        instructions_dir::inline_plan_uninstall(
            InstructionSurface::id(self),
            scope,
            self.inline_layout(scope),
            name,
            owner_tag,
        )
    }

    fn install_instruction(
        &self,
        scope: &Scope,
        spec: &InstructionSpec,
    ) -> Result<InstallReport, AgentConfigError> {
        instructions_dir::inline_install(scope, self.inline_layout(scope)?, spec)
    }

    fn uninstall_instruction(
        &self,
        scope: &Scope,
        name: &str,
        owner_tag: &str,
    ) -> Result<UninstallReport, AgentConfigError> {
        instructions_dir::inline_uninstall(scope, self.inline_layout(scope)?, name, owner_tag)
    }
}

fn openclaw_mcp_value(spec: &McpSpec) -> Value {
    let mut obj = Map::new();
    match &spec.transport {
        McpTransport::Stdio { command, args, env } => {
            obj.insert("command".into(), Value::String(command.clone()));
            obj.insert(
                "args".into(),
                Value::Array(args.iter().cloned().map(Value::String).collect()),
            );
            if !env.is_empty() {
                obj.insert("env".into(), string_map_value(env));
            }
        }
        McpTransport::Http { url, headers } => {
            obj.insert("url".into(), Value::String(url.clone()));
            obj.insert("transport".into(), Value::String("streamable-http".into()));
            if !headers.is_empty() {
                obj.insert("headers".into(), string_map_value(headers));
            }
        }
        McpTransport::Sse { url, headers } => {
            obj.insert("url".into(), Value::String(url.clone()));
            obj.insert("transport".into(), Value::String("sse".into()));
            if !headers.is_empty() {
                obj.insert("headers".into(), string_map_value(headers));
            }
        }
    }
    Value::Object(obj)
}

fn string_map_value(map: &BTreeMap<String, String>) -> Value {
    let mut obj = Map::new();
    for (k, v) in map {
        obj.insert(k.clone(), Value::String(v.clone()));
    }
    Value::Object(obj)
}

#[cfg(test)]
mod tests {
    use super::*;
    use serde_json::json;
    use tempfile::tempdir;

    fn rules_spec(tag: &str, rules: &str) -> HookSpec {
        HookSpec::builder(tag)
            .command_program("noop", [] as [&str; 0])
            .rules(rules)
            .build()
    }

    fn skill(name: &str, owner: &str) -> SkillSpec {
        SkillSpec::builder(name)
            .owner(owner)
            .description("A test OpenClaw skill.")
            .body("## Goal\nDo the thing.\n")
            .build()
    }

    fn mcp_spec(name: &str, owner: &str) -> McpSpec {
        McpSpec::builder(name)
            .owner(owner)
            .stdio("npx", ["-y", "@example/server"])
            .env("FOO", "bar")
            .build()
    }

    #[test]
    fn install_rules_writes_agents_md_block() {
        let dir = tempdir().unwrap();
        let agent = OpenClawAgent::new();
        let scope = Scope::Local(dir.path().to_path_buf());

        agent
            .install(&scope, &rules_spec("alpha", "Use the test rules."))
            .unwrap();

        let body = std::fs::read_to_string(dir.path().join("AGENTS.md")).unwrap();
        assert!(body.contains("BEGIN AGENT-CONFIG:alpha"));
        assert!(body.contains("Use the test rules."));
        assert!(agent.is_installed(&scope, "alpha").unwrap());
    }

    #[test]
    fn rules_install_is_idempotent() {
        let dir = tempdir().unwrap();
        let agent = OpenClawAgent::new();
        let scope = Scope::Local(dir.path().to_path_buf());
        let spec = rules_spec("alpha", "rules");

        agent.install(&scope, &spec).unwrap();
        let second = agent.install(&scope, &spec).unwrap();
        assert!(second.already_installed);
    }

    #[test]
    fn uninstall_rules_round_trip() {
        let dir = tempdir().unwrap();
        let agent = OpenClawAgent::new();
        let scope = Scope::Local(dir.path().to_path_buf());

        agent
            .install(&scope, &rules_spec("alpha", "rules"))
            .unwrap();
        let report = agent.uninstall(&scope, "alpha").unwrap();
        assert!(!report.removed.is_empty());
        assert!(!dir.path().join("AGENTS.md").exists());
    }

    #[test]
    fn install_skill_writes_local_agents_skills() {
        let dir = tempdir().unwrap();
        let agent = OpenClawAgent::new();
        let scope = Scope::Local(dir.path().to_path_buf());

        agent
            .install_skill(&scope, &skill("alpha-skill", "myapp"))
            .unwrap();

        assert!(dir
            .path()
            .join(".agents/skills/alpha-skill/SKILL.md")
            .exists());
    }

    #[test]
    fn global_skill_root_uses_openclaw_skills() {
        let home = PathBuf::from("/tmp/home");
        assert_eq!(
            OpenClawAgent::skills_root_from_home(&home),
            PathBuf::from("/tmp/home/.openclaw/skills")
        );
    }

    #[test]
    fn skill_owner_mismatch_is_refused() {
        let dir = tempdir().unwrap();
        let agent = OpenClawAgent::new();
        let scope = Scope::Local(dir.path().to_path_buf());

        agent
            .install_skill(&scope, &skill("alpha-skill", "app-a"))
            .unwrap();
        let err = agent
            .install_skill(&scope, &skill("alpha-skill", "app-b"))
            .unwrap_err();
        assert!(matches!(err, AgentConfigError::NotOwnedByCaller { .. }));
    }

    #[test]
    fn install_mcp_reads_json5_and_preserves_user_entries() {
        let dir = tempdir().unwrap();
        let cfg = dir.path().join("openclaw.json");
        std::fs::write(
            &cfg,
            r#"{
  // existing OpenClaw config
  mcp: {
    servers: {
      user: { url: 'https://example.com/mcp' },
    },
  },
  plugins: { enabled: true },
}
"#,
        )
        .unwrap();

        OpenClawAgent::install_mcp_config(&cfg, &mcp_spec("github", "myapp")).unwrap();

        let parsed: Value = serde_json::from_slice(&std::fs::read(&cfg).unwrap()).unwrap();
        assert_eq!(parsed["plugins"]["enabled"], json!(true));
        assert_eq!(
            parsed["mcp"]["servers"]["user"]["url"],
            json!("https://example.com/mcp")
        );
        assert_eq!(parsed["mcp"]["servers"]["github"]["command"], json!("npx"));
        assert_eq!(
            parsed["mcp"]["servers"]["github"]["env"]["FOO"],
            json!("bar")
        );
    }

    #[test]
    fn install_mcp_is_idempotent() {
        let dir = tempdir().unwrap();
        let cfg = dir.path().join("openclaw.json");
        let spec = mcp_spec("github", "myapp");

        OpenClawAgent::install_mcp_config(&cfg, &spec).unwrap();
        let second = OpenClawAgent::install_mcp_config(&cfg, &spec).unwrap();
        assert!(second.already_installed);
    }

    #[test]
    fn uninstall_mcp_round_trip() {
        let dir = tempdir().unwrap();
        let cfg = dir.path().join("openclaw.json");

        OpenClawAgent::install_mcp_config(&cfg, &mcp_spec("github", "myapp")).unwrap();
        let report = OpenClawAgent::uninstall_mcp_config(&cfg, "github", "myapp").unwrap();
        assert!(!report.removed.is_empty());
        assert!(!cfg.exists());
    }

    #[test]
    fn uninstall_mcp_owner_mismatch_is_refused() {
        let dir = tempdir().unwrap();
        let cfg = dir.path().join("openclaw.json");

        OpenClawAgent::install_mcp_config(&cfg, &mcp_spec("github", "app-a")).unwrap();
        let err = OpenClawAgent::uninstall_mcp_config(&cfg, "github", "app-b").unwrap_err();
        assert!(matches!(err, AgentConfigError::NotOwnedByCaller { .. }));
    }

    #[test]
    fn local_mcp_scope_is_rejected() {
        let dir = tempdir().unwrap();
        let agent = OpenClawAgent::new();
        let scope = Scope::Local(dir.path().to_path_buf());
        let err = agent
            .install_mcp(&scope, &mcp_spec("github", "myapp"))
            .unwrap_err();
        assert!(matches!(
            err,
            AgentConfigError::UnsupportedScope {
                scope: ScopeKind::Local,
                ..
            }
        ));
    }

    #[test]
    fn remote_mcp_mapping_uses_openclaw_transport_names() {
        let http = McpSpec::builder("docs")
            .owner("myapp")
            .http("https://example.com/mcp")
            .build();
        let sse = McpSpec::builder("events")
            .owner("myapp")
            .sse("https://example.com/sse")
            .build();

        assert_eq!(
            openclaw_mcp_value(&http)["transport"],
            json!("streamable-http")
        );
        assert_eq!(openclaw_mcp_value(&sse)["transport"], json!("sse"));
    }
}