@xyagent/cli 0.0.1

package/src-ext/runtime/hermes/sessionStore.mjs

@@ -0,0 +1,78 @@
+// Hermes 会话历史持久化。最简 JSON 文件 store —— 跟 Python 版的语义一致：
+//   - 每个 sessionId 一份 conversation history（{role, content}[]）
+//   - 持久化到 ~/.agentlink/hermes/sessions/<sessionId>.json
+//   - 提供 append / read / clear / list 四个原语
+//
+// 没有 token 计数 —— 上层 OpenAI-compatible API 自带 usage 字段，bridge 只需
+// 转发即可。
+
+import { promises as fsp } from "node:fs";
+import path from "node:path";
+import os from "node:os";
+
+const ROOT = path.join(os.homedir(), ".agentlink", "hermes", "sessions");
+const MAX_HISTORY_TURNS = 80; // hard ceiling — bridge is not a context manager
+
+export async function ensureRoot() {
+  await fsp.mkdir(ROOT, { recursive: true });
+}
+
+function pathOf(sessionId) {
+  // 防 path traversal — 限定 alnum + - + _
+  const safe = String(sessionId || "").replace(/[^a-zA-Z0-9._\-]/g, "_");
+  return path.join(ROOT, `${safe}.json`);
+}
+
+/** Returns array of {role, content} (oldest first). Missing → []. */
+export async function readHistory(sessionId) {
+  try {
+    const buf = await fsp.readFile(pathOf(sessionId), "utf8");
+    const data = JSON.parse(buf);
+    if (Array.isArray(data?.messages)) return data.messages;
+    return [];
+  } catch (err) {
+    if (err && /** @type {any} */ (err).code === "ENOENT") return [];
+    throw err;
+  }
+}
+
+/** Append one user/assistant turn. Truncates to MAX_HISTORY_TURNS pairs. */
+export async function appendTurn(sessionId, userText, assistantText) {
+  const cur = await readHistory(sessionId);
+  const next = cur.slice();
+  if (userText && userText.trim()) {
+    next.push({ role: "user", content: userText });
+  }
+  if (assistantText && assistantText.trim()) {
+    next.push({ role: "assistant", content: assistantText });
+  }
+  // Trim oldest pairs first to keep within MAX_HISTORY_TURNS *messages*.
+  const trimmed = next.slice(Math.max(0, next.length - MAX_HISTORY_TURNS * 2));
+  await ensureRoot();
+  await fsp.writeFile(
+    pathOf(sessionId),
+    JSON.stringify({ messages: trimmed }, null, 2),
+    "utf8",
+  );
+}
+
+export async function clearHistory(sessionId) {
+  try {
+    await fsp.unlink(pathOf(sessionId));
+  } catch (err) {
+    if (err && /** @type {any} */ (err).code !== "ENOENT") throw err;
+  }
+}
+
+/** Returns array of session ids (basename without .json). */
+export async function listSessions() {
+  try {
+    const entries = await fsp.readdir(ROOT);
+    return entries
+      .filter((n) => n.endsWith(".json"))
+      .map((n) => n.slice(0, -".json".length));
+  } catch (err) {
+    if (err && /** @type {any} */ (err).code === "ENOENT") return [];
+    throw err;
+  }
+}

package/src-ext/runtime/hermes/todoTranslator.mjs

@@ -0,0 +1,90 @@
+/**
+ * todoTranslator.mjs — Hermes runtime todo → todo_list block translator
+ *
+ * 按 translator-spec.md 和 npm-cli-todo-translator-hermes spec 实现：
+ *   - 识别 kind==="tool_call_started" && name==="todo"
+ *   - 支持 merge=true 增量合并（内部维护 lastItems 状态）
+ *   - 转写为 content_block.started + content_block.completed
+ *   - tool_call_completed(name=todo) 静默丢弃
+ *   - 其他 chunk 原样透传
+ */
+
+import {
+  buildBlockStarted,
+  buildBlockCompleted,
+  newBlockId,
+} from "../../../src-shared/envelope_builder.mjs";
+import { buildTodoItems, normalizeStatus } from "../_shared/todoTranslatorUtils.mjs";
+
+/**
+ * 创建 Hermes todo translator 实例。
+ *
+ * @param {string} runId  当前 run 的 run_id，用于构造 envelope
+ * @returns {{ intercept(chunk: object): object[] }}
+ */
+export function createHermesTodoTranslator(runId) {
+  // 内部维护 lastItems 状态（用于 merge=true 增量合并）
+  let lastItems = [];
+
+  return {
+    /**
+     * @param {object} chunk  Responses API 路径的 chunk 对象
+     * @returns {object[]}    0~2 个 envelope 或原始 chunk
+     */
+    intercept(chunk) {
+      if (!chunk || typeof chunk !== "object") return [chunk];
+
+      // 识别 todo tool_call_started
+      if (chunk.kind === "tool_call_started" && chunk.name === "todo") {
+        let parsed = {};
+        if (chunk.arguments) {
+          try { parsed = JSON.parse(String(chunk.arguments)); } catch { /* 保持空对象 */ }
+        }
+
+        const rawTodos = Array.isArray(parsed.todos) ? parsed.todos : [];
+        const merge = parsed.merge === true;
+
+        // 构造本次 rawItems（id 原值保留，status 4 态含 cancelled）
+        const rawItems = rawTodos.map((item, idx) => {
+          const id = typeof item?.id === "string" && item.id ? item.id : `td_${idx}`;
+          return { ...item, id };
+        });
+        const currentItems = buildTodoItems(rawItems);
+
+        if (merge) {
+          // merge=true：upsert 到 lastItems
+          const merged = [...lastItems];
+          for (const newItem of currentItems) {
+            const existingIdx = merged.findIndex((x) => x.id === newItem.id);
+            if (existingIdx >= 0) {
+              merged[existingIdx] = { ...merged[existingIdx], ...newItem };
+            } else {
+              merged.push(newItem);
+            }
+          }
+          // 重新赋 order（按最终数组位置）
+          lastItems = merged.map((item, idx) => ({ ...item, order: idx }));
+        } else {
+          // merge=false（默认）：全量替换
+          lastItems = currentItems;
+        }
+
+        const blockId = newBlockId();
+        const block = { id: blockId, type: "todo_list", items: lastItems };
+
+        return [
+          buildBlockStarted(runId, block),
+          buildBlockCompleted(runId, { ...block }),
+        ];
+      }
+
+      // 静默丢弃 todo tool_call_completed
+      if (chunk.kind === "tool_call_completed" && chunk.name === "todo") {
+        return [];
+      }
+
+      // 其他 chunk 原样透传
+      return [chunk];
+    },
+  };
+}

package/src-ext/runtime/hermes/workspaceRpc.mjs

@@ -0,0 +1,124 @@
+/**
+ * workspaceRpc.mjs — hermes bridge workspace RPC handler
+ *
+ * 处理以下 RPC：
+ *   - identity.soul.set : 写 <hermesHome>/SOUL.md（用户在 App "AI 身份 sheet"
+ *     提交新名字 / type / style 后，relay fan-out 到这里把 SOUL.md 写入磁盘）。
+ *   - memory.files.get  : 读 <hermesHome>/SOUL.md（App 提交完身份后调
+ *     `refreshLinkedOpenClawIdentity` 拉最新内容刷标题缓存）。
+ *
+ * 设计约束：
+ *   - 路径硬编码为 SOUL.md，name=SOUL.md 之外的请求都按 missing 返回
+ *     （hermes 没有 IDENTITY.md / memories/ 子目录的概念），防止误扩 RPC 白名单
+ *   - 写入失败返回 { ok: false, error } 而非抛异常，让 handleRequest 统一上报
+ *
+ * @module workspaceRpc
+ */
+
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+
+/**
+ * @typedef {{ ok: true } | { ok: false, error: string }} RpcResult
+ */
+
+/**
+ * createHermesWorkspaceRpc 工厂函数。
+ *
+ * @param {object} opts
+ * @param {string} [opts.hermesHome]  hermes 根目录。默认 process.env.HERMES_HOME ?? ~/.hermes
+ * @param {{ info, warn, error }} opts.log  logger
+ * @returns {{ dispatch(method: string, params: object): Promise<RpcResult> }}
+ */
+export function createHermesWorkspaceRpc({ hermesHome, log } = {}) {
+  const home = hermesHome ?? process.env.HERMES_HOME ?? path.join(os.homedir(), ".hermes");
+  const SOUL_FILE = "SOUL.md";
+  const soulPath = path.join(home, SOUL_FILE);
+
+  /**
+   * @param {string} method
+   * @param {object} params
+   * @returns {Promise<RpcResult>}
+   */
+  async function dispatch(method, params = {}) {
+    if (method === "identity.soul.set") {
+      return writeSoulMd(params);
+    }
+    if (method === "memory.files.get") {
+      return readSoulMd(params);
+    }
+
+    log.warn("workspaceRpc.unsupported", `unsupported rpc method: ${method}`, { method });
+    return { ok: false, error: `unsupported rpc method: ${method}` };
+  }
+
+  /**
+   * 写入 <hermesHome>/SOUL.md。
+   * params.name 字段被忽略（路径硬编码）。
+   */
+  async function writeSoulMd(params) {
+    const content = String(params?.content ?? "");
+    try {
+      await fs.mkdir(home, { recursive: true });
+      await fs.writeFile(soulPath, content, "utf-8");
+      log.info("workspaceRpc.soul.written", "SOUL.md written", { path: soulPath, bytes: content.length });
+      return { ok: true };
+    } catch (err) {
+      const msg = err?.message ?? String(err);
+      log.error("workspaceRpc.soul.write.failed", "SOUL.md write failed", { path: soulPath, error: msg });
+      return { ok: false, error: msg };
+    }
+  }
+
+  /**
+   * 读 <hermesHome>/SOUL.md。
+   * 返回 OpenClawWorkspaceApi 期望的 { ok:true, file: {name,path,missing,size,updatedAtMs,content} } 形态。
+   * 文件不存在不报错——返回 missing:true，让 App 端走"未填写身份"分支。
+   *
+   * params.name 必须是 "SOUL.md"（大小写无关）。其它 name（IDENTITY.md / memories/...）
+   * 在 hermes 这里都不存在，统一按 missing 返回 —— 比 unsupported 友好,避免 App
+   * 误以为 RPC 完全坏掉。
+   */
+  async function readSoulMd(params) {
+    const requested = String(params?.name ?? "").trim();
+    if (requested.toUpperCase() !== SOUL_FILE.toUpperCase()) {
+      log.info(
+        "workspaceRpc.memory.skip",
+        "hermes only owns SOUL.md, other names report missing",
+        { requested },
+      );
+      return {
+        ok: true,
+        file: { name: requested || SOUL_FILE, path: "", missing: true, size: 0, updatedAtMs: 0, content: "" },
+      };
+    }
+    try {
+      const stat = await fs.stat(soulPath).catch(() => null);
+      if (!stat) {
+        return {
+          ok: true,
+          file: { name: SOUL_FILE, path: soulPath, missing: true, size: 0, updatedAtMs: 0, content: "" },
+        };
+      }
+      const content = await fs.readFile(soulPath, "utf-8");
+      return {
+        ok: true,
+        file: {
+          name: SOUL_FILE,
+          path: soulPath,
+          missing: false,
+          size: stat.size,
+          updatedAtMs: Math.floor(stat.mtimeMs),
+          content,
+        },
+      };
+    } catch (err) {
+      const msg = err?.message ?? String(err);
+      log.error("workspaceRpc.soul.read.failed", "SOUL.md read failed", { path: soulPath, error: msg });
+      return { ok: false, error: msg };
+    }
+  }
+
+  return { dispatch };
+}

package/src-ext/runtime/openclaw/buildOpenclawDaemonInput.mjs

@@ -0,0 +1,143 @@
+/**
+ * buildOpenclawDaemonInput.mjs — openclaw daemon `/v1/responses` input 构造器
+ *
+ * openclaw daemon 使用自定义 multimodal schema（非 OpenAI Responses 官方标准）：
+ *   - 纯文本时：input 为字符串（向后兼容，不改变现有路径）
+ *   - 多模态时：input 为 [{type:"message", role:"user", content:[...]}]
+ *
+ * content item 类型：
+ *   - {type:"input_text",  text}
+ *   - {type:"input_image", source:{type:"base64", media_type, data:<纯base64>}}
+ *   - {type:"input_file",  source:{type:"base64", media_type:"application/pdf", filename, data:<纯base64>}}
+ *
+ * base64 编码要求：纯 base64 字符串，无 data: URI 前缀。
+ *
+ * Phase 3 (multimodal-attachment-llm-dispatch): modelCaps 从 readPrimaryModelCaps() 动态注入。
+ * caps_mismatch 时构造结构化错误回响，不调用 daemon，直接 throw 供上层构造 run.failed。
+ *
+ * Phase 5: 迁移到 relayObjectToBlock 共享模块。
+ * 通过 relayObjectToBlock 处理 relay_object blocks（含 attachment_kind 字段），
+ * sign-get + fetch + base64 全套由 relayObjectToBlock 内嵌处理，
+ * 支持 agent_app Phase 5 改造后的 agentlink-cos://<cosObjectKey> URL 格式。
+ *
+ * spec ref: openspec/changes/multimodal-attachment-llm-dispatch
+ *           specs/cli-multimodal-dispatch/spec.md
+ *           specs/openclaw-model-caps/spec.md
+ *
+ * @param {string} textInput — dispatch payload 的 input 字段（字符串）
+ * @param {Array} blocks — 经过 preprocessAttachmentsToText 处理后的 blocks 数组
+ * @param {{
+ *   fetchAndBase64Encode?: Function,
+ *   modelCaps?: string[],
+ *   _readPrimaryModelCaps?: () => Promise<string[]>,
+ * }} opts — 依赖注入（测试 mock 用）
+ * @returns {Promise<string | Array>}
+ *   - 纯文本路径（无 relay_object blocks）：返回字符串 textInput
+ *   - 多模态路径：返回 [{type:"message", role:"user", content:[...]}]
+ *   - caps_mismatch 时：throw { code: "caps_mismatch", message, model, missing_modality }
+ */
+import { fetchAndBase64Encode as _defaultFetchB64 } from "../_shared/fetchAndBase64Encode.mjs";
+import { relayObjectToBlock } from "../_shared/relayObjectToBlock.mjs";
+import { readPrimaryModelCaps as _defaultReadCaps } from "./openclawConfig.mjs";
+
+export async function buildOpenclawDaemonInput(textInput, blocks, {
+  fetchAndBase64Encode: _fetchB64,
+  modelCaps: _injectedCaps,
+  _readPrimaryModelCaps,
+} = {}) {
+  const doFetchB64 = _fetchB64 ?? _defaultFetchB64;
+
+  // Task 3.3: modelCaps 从 readPrimaryModelCaps 动态取，支持测试注入
+  const readCaps = _readPrimaryModelCaps ?? _defaultReadCaps;
+  const modelCaps = _injectedCaps ?? await readCaps();
+
+  // relay_object blocks：type=image 或 type=attachment，source.kind=url，有 url
+  // 同时支持带 attachment_kind（新格式）和不带（旧格式，relayObjectToBlock 内部推断）
+  const relayBlocks = (blocks ?? []).filter(
+    (b) =>
+      (b?.type === "image" || b?.type === "attachment") &&
+      b?.source?.kind === "url" &&
+      b?.source?.url,
+  );
+
+  // 若无 relay_object blocks → 返回 textInput 字符串（向后兼容，保持纯文本路径不变）
+  if (relayBlocks.length === 0) {
+    return textInput;
+  }
+
+  // 构造 content array
+  const content = [];
+
+  // 1. textInput 非空时先加 input_text。
+  //    openclaw daemon /v1/responses 接到只有 input_image / input_file 的
+  //    user message 会回 400 "Missing user message in `input`."（responses
+  //    API spec 要求 user message 至少带一段 input_text）。App 端用户发图
+  //    时常常 text 为空 → 这里兜底注入一个最小化的 input_text，让 daemon
+  //    把 image / pdf 当成 user 输入正常处理。
+  const effectiveText = textInput && textInput.length > 0
+    ? textInput
+    : "（用户发送了附件，请基于附件回复）";
+  content.push({ type: "input_text", text: effectiveText });
+
+  // 2. 遍历 relay_object blocks，通过 relayObjectToBlock 处理。
+  //    Task 3.3: modelCaps 从 readPrimaryModelCaps 动态取（上方已解析）。
+  //    relayObjectToBlock 内嵌处理：sign-get + fetch + base64，
+  //    支持 agentlink-cos://<cosObjectKey> URL 格式。
+  for (const block of relayBlocks) {
+    const result = await relayObjectToBlock(block, {
+      runtimeHint: "openclaw",
+      modelCaps,
+      fetchAndBase64Encode: doFetchB64,
+    });
+
+    if (result.error) {
+      // Task 4.1: caps_mismatch → throw 结构化错误，由上层构造 run.failed（不静默降级）
+      if (result.error.code === "caps_mismatch") {
+        const err = new Error(result.error.message);
+        err.code = "caps_mismatch";
+        err.capsMismatch = result.error;
+        throw err;
+      }
+      // fetch_failed / size_exceeded / unsupported_kind → 占位 input_text，不让整个调用挂掉
+      const name = block?.name ?? block?.source?.media_type ?? "file";
+      const label = block?.type === "image" ? "image" : `file: ${name}`;
+      content.push({
+        type: "input_text",
+        text: `[${label}] (encoding failed: ${result.error.message})`,
+      });
+      continue;
+    }
+
+    // 映射 relayObjectToBlock 结果到 openclaw daemon content block 格式
+    // openclaw 使用 input_image / input_file / input_text（与 relayObjectToBlock 输出一致）
+    switch (result.type) {
+      case "input_image":
+        content.push({
+          type: "input_image",
+          source: result.source,
+        });
+        break;
+      case "input_file":
+        content.push({
+          type: "input_file",
+          source: result.source,
+        });
+        break;
+      case "input_text":
+        // text 文件内容 / binary 描述 / document text extraction fallback
+        content.push({ type: "input_text", text: result.text });
+        break;
+      case "url_ref":
+        // picoclaw only — openclaw/claude runtimes never return url_ref from relayObjectToBlock;
+        // if this branch is somehow hit, drop to a safe description with NO URL in LLM context
+        // (铁律 #1: signed URL must not appear in LLM input). (CR-003)
+        content.push({ type: "input_text", text: `[image] (preview unavailable for this runtime)` });
+        break;
+      default:
+        break;
+    }
+  }
+
+  // 封装为 messages array
+  return [{ type: "message", role: "user", content }];
+}

package/src-ext/runtime/openclaw/mcpConfigAdapter.mjs

@@ -0,0 +1,91 @@
+// mcpConfigAdapter.mjs — OpenClaw 的 MCP server 配置注入器(stub)。
+//
+// OpenClaw 2026.3.13 没有 `mcp` 子命令(实测 `openclaw mcp list` →
+// "unknown command 'mcp'")。OpenClaw 通过 **plugin 系统**(`openclaw plugins
+// install/list/info/...`)扩展功能,agentlink 已经在 `npm_cli/src-ext/openclaw-plugin/`
+// 里注册了 `agentlink-hooks` plugin。
+//
+// **这里的 register/deregister 是 no-op stub**——真正的 tool injection
+// 在 `openclaw-plugin/index.cjs` 里调 `api.tools.register(...)`(见 section 2d
+// 实现)。本 adapter 存在的目的只是让 `agentlink mcp list/status` 子命令的
+// 输出能跟 4 个 runtime 对齐 shape。
+//
+// status() 通过 `openclaw plugins list` 子进程探测 plugin 是否真在 enabled。
+
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { existsSync, statSync } from "node:fs";
+import path from "node:path";
+import os from "node:os";
+const execFileP = promisify(execFile);
+
+export const fileExtension = "json";  // 没文件可备份, 但 fileExtension 字段是必须的
+
+const PLUGIN_ID = "agentlink-hooks";
+
+/** 检查 OpenClaw 是否在本机装过(看 ~/.openclaw/ 目录,**不**执行 openclaw 二进制)。
+ *  执行 `openclaw --version` 会触发它的 plugin 加载 / 首次 init,$HOME 重定向
+ *  到测试 tmp_path 时这一步可能挂(实测) —— 改成 fs 探测,瞬时返回。 */
+function isOpenclawInstalled() {
+  try {
+    const st = statSync(path.join(os.homedir(), ".openclaw"));
+    return st.isDirectory();
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * read() 给 fanout core 用来生成 backup,但 OpenClaw 不需要备份(plugin 安装
+ * 状态由 OpenClaw 自己管)。返回 null,fanout core 会跳过备份。
+ */
+export async function read() {
+  return null;
+}
+
+/**
+ * 注册 stub。返回 mode:"plugin_managed" 告诉 caller "tool 由 plugin 接管,
+ * 这里不动配置文件"。**不**执行 openclaw 二进制(可能慢/挂)。
+ */
+export async function register({ log } = {}) {
+  const installed = isOpenclawInstalled();
+  log?.info?.("mcp.fanout.openclaw.stub", "openclaw uses plugin tool injection", {
+    installed,
+  });
+  return {
+    ok: true,
+    changed: false,
+    mode: "plugin_managed",
+    installed,
+  };
+}
+
+export async function deregister({ log } = {}) {
+  log?.info?.("mcp.fanout.openclaw.stub", "no MCP config to remove (plugin-managed)");
+  return {
+    ok: true,
+    changed: false,
+    mode: "plugin_managed",
+  };
+}
+
+/**
+ * status() 通过 ~/.openclaw/ 目录是否存在判 OpenClaw 是否装。**不**执行
+ * openclaw 二进制(避免 5s timeout 或卡死;openclaw plugin 加载是重操作)。
+ * plugin 是否真注册需要 OpenClaw daemon 通过 `openclaw plugins list` 看,
+ * 这里只能报"plugin_managed"占位,真实状态由 plugin 自己往 OpenClaw 日志写。
+ */
+export async function status() {
+  if (!isOpenclawInstalled()) {
+    return { installed: false, registered: false, reason: "openclaw_not_installed" };
+  }
+  return {
+    installed: true,
+    // plugin 管理 — adapter 看不到 plugin 是否真注册了 agentlink tools,只能假
+    // 设 plugin 在跑就 registered。用户可通过 `openclaw plugins list` 手动确认。
+    registered: true,
+    mode: "plugin_managed",
+    pluginId: PLUGIN_ID,
+    pluginToolInjectionStatus: "unknown_from_adapter",
+  };
+}

package/src-ext/runtime/openclaw/openclawConfig.mjs

@@ -0,0 +1,145 @@
+/**
+ * openclawConfig.mjs — Task 3.1
+ *
+ * 读取 ~/.openclaw/openclaw.json，解析 primary model 的 compat.modalities。
+ *
+ * 公共 API：
+ *   readPrimaryModelCaps({ _readFile? }) → Promise<string[]>
+ *
+ * 路径查找逻辑：
+ *   1. agents.defaults.model.primary → 格式为 "<providerName>/<modelId>"
+ *   2. 在 models.providers[providerName].models[] 里找 id === modelId
+ *   3. 返回 compat.modalities（缺失时返回 ["text"]）
+ *
+ * 失败安全策略（任何异常均返回 ["text"]，不 throw）：
+ *   - 文件不存在 → console.warn + 返回 ["text"]
+ *   - JSON 解析失败 → console.warn + 返回 ["text"]
+ *   - primary model 路径找不到 → console.warn + 返回 ["text"]
+ *   - compat.modalities 缺失 → 返回 ["text"]（最保守，silently）
+ *
+ * spec ref: openspec/changes/multimodal-attachment-llm-dispatch
+ *           specs/openclaw-model-caps/spec.md D6
+ */
+
+import { readFile as _nodeReadFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+
+const DEFAULT_CAPS = Object.freeze(["text"]);
+
+/**
+ * openclaw.json のデフォルトパスを返す。
+ */
+function defaultConfigPath() {
+  return join(homedir(), ".openclaw", "openclaw.json");
+}
+
+/**
+ * primary model の modalities を読み取る。
+ *
+ * @param {{ _readFile?: (path: string) => Promise<string> }} [opts]
+ *   - _readFile: テスト用依存注入（デフォルト: node:fs/promises readFile）
+ * @returns {Promise<string[]>}
+ */
+export async function readPrimaryModelCaps({ _readFile } = {}) {
+  const readFile = _readFile ?? ((p) => _nodeReadFile(p, "utf-8"));
+  const configPath = defaultConfigPath();
+
+  let raw;
+  try {
+    raw = await readFile(configPath);
+  } catch (err) {
+    console.warn(
+      `[openclawConfig] openclaw.json not found or unreadable (${err?.code ?? err?.message ?? err}), ` +
+      `defaulting to caps=["text"]`
+    );
+    return [...DEFAULT_CAPS];
+  }
+
+  let cfg;
+  try {
+    cfg = JSON.parse(raw);
+  } catch (err) {
+    console.warn(
+      `[openclawConfig] openclaw.json JSON parse failed (${err?.message ?? err}), ` +
+      `defaulting to caps=["text"]`
+    );
+    return [...DEFAULT_CAPS];
+  }
+
+  // agents.defaults.model.primary → "<providerName>/<modelId>"
+  const primaryRef = cfg?.agents?.defaults?.model?.primary;
+  if (!primaryRef || typeof primaryRef !== "string") {
+    console.warn(
+      `[openclawConfig] agents.defaults.model.primary missing or not a string, ` +
+      `defaulting to caps=["text"]`
+    );
+    return [...DEFAULT_CAPS];
+  }
+
+  // "<providerName>/<modelId>" を分割
+  const slashIdx = primaryRef.indexOf("/");
+  if (slashIdx === -1) {
+    console.warn(
+      `[openclawConfig] primary model ref "${primaryRef}" has no provider prefix (expected "provider/modelId"), ` +
+      `defaulting to caps=["text"]`
+    );
+    return [...DEFAULT_CAPS];
+  }
+  const providerName = primaryRef.slice(0, slashIdx);
+  const modelId = primaryRef.slice(slashIdx + 1);
+
+  // providers[providerName].models[] を検索
+  const providers = cfg?.models?.providers;
+  if (!providers || typeof providers !== "object") {
+    console.warn(
+      `[openclawConfig] models.providers not found in openclaw.json, ` +
+      `defaulting to caps=["text"]`
+    );
+    return [...DEFAULT_CAPS];
+  }
+
+  const provider = providers[providerName];
+  if (!provider) {
+    console.warn(
+      `[openclawConfig] provider "${providerName}" not found in models.providers, ` +
+      `defaulting to caps=["text"]`
+    );
+    return [...DEFAULT_CAPS];
+  }
+
+  const models = provider?.models;
+  if (!Array.isArray(models)) {
+    console.warn(
+      `[openclawConfig] provider "${providerName}" has no models array, ` +
+      `defaulting to caps=["text"]`
+    );
+    return [...DEFAULT_CAPS];
+  }
+
+  const entry = models.find((m) => m?.id === modelId);
+  if (!entry) {
+    console.warn(
+      `[openclawConfig] model id "${modelId}" not found under provider "${providerName}", ` +
+      `defaulting to caps=["text"]`
+    );
+    return [...DEFAULT_CAPS];
+  }
+
+  // 兼容两种 schema:
+  //   * 早期 / CLI 约定:`compat.modalities: ["text","image",...]`
+  //   * openclaw daemon 官方 schema(2026.3+):`input: ["text","image",...]`
+  //     —— openclaw config 校验器只认 `input`,`compat.modalities` 会被报
+  //     "Unrecognized key" 直接拒掉整份 config。两边字段不统一是个已知问题,
+  //     reader 这里同时支持两个键,有任一就用,优先 compat.modalities(向前兼容)。
+  //   缺失时 silently 返回 ["text"](最保守)。
+  const fromCompat = entry?.compat?.modalities;
+  const fromInput = entry?.input;
+  const modalities = Array.isArray(fromCompat) && fromCompat.length > 0
+    ? fromCompat
+    : (Array.isArray(fromInput) && fromInput.length > 0 ? fromInput : null);
+  if (!modalities) {
+    return [...DEFAULT_CAPS];
+  }
+  return [...modalities];
+}