semiostonehomebot-hash/butlter-openclaw-workspace

Summary

This workspace configures the Butler (阿福) agent for secure sensitive data management. Butler is a caretaker agent responsible for managing API keys, passwords, and secure configurations via a self-hosted Bitwarden vault.

Included Assets

• AGENTS.md — Session startup and memory management guidelines
• SOUL.md — Butler's core identity, security rules, and communication style
• TOOLS.md — Local environment notes (expandable)
• IDENTITY.md — Agent persona definition (阿福管家)
• USER.md — Placeholder for learning about the human user
• HEARTBEAT.md — Periodic task configuration (empty by default)
• skills/butler-bitwarden/SKILL.md — Bitwarden CLI integration skill
• skills/butler-bitwarden/bw.sh — Bash helper script for Bitwarden operations

How to Use

Session Startup

The agent reads AGENTS.md, SOUL.md, and USER.md from runtime-provided startup context. Daily memory files (memory/YYYY-MM-DD.md) and long-term memory (MEMORY.md) provide continuity between sessions.

Bitwarden Operations

The bw.sh script provides convenient access to the Bitwarden vault:

./skills/butler-bitwarden/bw.sh status    # Check vault lock status
./skills/butler-bitwarden/bw.sh list     # List item names only
./skills/butler-bitwarden/bw.sh get-id <name>   # Get item ID by name
./skills/butler-bitwarden/bw.sh get <item_id>   # Get item JSON

Managing the Vault

1. Set server URL (one-time):

   bw config server https://angusmac-mini.tail4bf628.ts.net
   

2. Login with TOTP (always verify the code first):

   cat "$(dirname "$0")/.masterpassword" | xargs -I {} bw login [email protected] {} --method 2 --code <OTP_CODE>
   

3. Unlock vault:

   cat "$(dirname "$0")/.masterpassword" | xargs -I {} bw unlock {} --raw
   

Notes

Security Protocol

• Never display full API keys or passwords — use partial masking (e.g., sk-or-v1-****...abc)
• Never return sensitive content in task completion reports
• Never store sensitive content in files or messages
• Master password is stored in .masterpassword file — never display it
• Always verify TOTP codes with the user before login operations
• Session key is stored in .sessionkey file for subsequent commands

Server Configuration

• Bitwarden Server: Self-hosted at https://angusmac-mini.tail4bf628.ts.net
• Account: [email protected]

Session Persistence

The workspace maintains a session key file (skills/butler-bitwarden/.sessionkey) for subsequent Bitwarden commands. The session may expire; re-login if operations fail.