菜单
Diagnose and fix 1Password CLI hangs or repeated TCC prompts in macOS LaunchAgent and other unattended contexts by converting the complete process tree to a protected cache-only credential contract.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | 1password-cli-launchd-hang |
| description | Diagnose and fix 1Password CLI hangs or repeated TCC prompts in macOS LaunchAgent and other unattended contexts by converting the complete process tree to a protected cache-only credential contract. |
op works in an attended terminal but hangs or opens repeated permission
prompts under launchd.op after its own cache expires.Remove every op invocation from the LaunchAgent process tree. Do not probe it
with a timeout, start its daemon, or rely on the desktop app being closed.
~/.openclaw/.secrets-cache.0600 file.op calls.Example service wrapper:
#!/usr/bin/env bash
set -euo pipefail
CACHE="${OPENCLAW_SECRETS_CACHE:-$HOME/.openclaw/.secrets-cache}"
[[ -f "$CACHE" && ! -L "$CACHE" ]] || exit 1
set -a
source "$CACHE"
set +a
[[ -n "${REQUIRED_KEY:-}" ]] || exit 1
exec service-command
Never print or cat the cache while diagnosing it.
Refresh the cache only from a user-controlled terminal:
openclaw-refresh-secrets --interactive
The tracked helper reads exact field references from an owner-only local seed.
It calls op read only in this explicit maintenance flow, requires all fields,
shell-quotes values, fsyncs a protected temporary file, and atomically replaces
the last-good cache. Neither field references nor credential values belong in
tracked source or diagnostic output.
op and 1Password
environment fallbacks.0600; do not display its content.op daemon, GUI prompt, or TCC event appears.The presence or absence of the desktop app is not part of the service contract; an unattended service remains cache-only in every case.
Read upcoming OpenTable reservations or handle attended ad-hoc OpenTable availability and exact-approval booking. Use for OpenTable account reads, attended restaurant searches, or a user-confirmed one-off reservation; route canonical recurring date-night, double-date, and quarterly-group jobs to the restaurant-book skill instead.
Stage tightly scoped background reservation monitoring for OpenTable or Resy after explicit bounded preauthorization. Resy may auto-book after approval; OpenTable remains notification-only until this runtime adapter integrates the deployed live reservations reader. Not for one-shot search, attended booking, or cancellation.
Search Resy, inspect availability, and handle attended ad-hoc Resy booking. Route canonical recurring date-night, double-date, and quarterly-dinner jobs to restaurant-book, and use restaurant-snipe only for bounded cancellation monitoring. Never use this skill for unattended cancellation.
Safely plan or execute a canonical standing-authorized restaurant cron scope across both Resy and OpenTable. Use only for the tracked date-night, double-date, and quarterly-dinner jobs; use the provider skills for attended ad-hoc work and restaurant-snipe for bounded monitoring.
Safely use exact 1Password fields during attended interactive work and maintain the protected OpenClaw secrets cache. Use for passwords, API keys, credentials, payment data, cache refreshes, or diagnosing credential access. Never use `op` from a LaunchAgent or any child process it starts.
Search, browse, and purchase products on Amazon using saved account details and explicit approval. Use when asked to buy something, find a product on Amazon, check prices, compare products, track orders, or manage the Amazon cart. Stop for attended payment entry when saved checkout details are unavailable.