openclaw/scripts/config-lock.sh

47 lines
1.0 KiB
Bash
Executable File

#!/bin/bash
# =============================================================================
# Config Lock: Makes clawdbot.json immutable to prevent any writes
# Usage: config-lock.sh [lock|unlock|status]
# =============================================================================
# Source unified environment
source "$(dirname "$0")/env.sh"
lock_config() {
chflags uchg "$CONFIG"
log "🔒 Config LOCKED - write access disabled."
}
unlock_config() {
chflags nouchg "$CONFIG"
log "🔓 Config UNLOCKED - write access enabled."
}
check_status() {
if config_is_locked; then
echo "🔒 Config is LOCKED (immutable)"
return 0
else
echo "🔓 Config is UNLOCKED (writable)"
return 1
fi
}
case "${1:-status}" in
lock)
lock_config
;;
unlock)
unlock_config
;;
status)
check_status
;;
*)
echo "Usage: $0 [lock|unlock|status]"
echo " lock - Make config immutable (no writes allowed)"
echo " unlock - Allow writes (for manual edits)"
echo " status - Show current lock status"
;;
esac