jishushell 0.4.17 → 0.4.24

package/public/assets/{vendor-react-B1-3Yrt-.js → vendor-react-Bk1hRGiY.js}

@@ -56,4 +56,4 @@ Error generating stack: `+u.message+`
  * LICENSE.md file in the root directory of this source tree.
  *
  * @license MIT
- */function Zu(){return Zu=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},Zu.apply(this,arguments)}function bp(e,t){if(e==null)return{};var n={},r=Object.keys(e),l,u;for(u=0;u<r.length;u++)l=r[u],!(t.indexOf(l)>=0)&&(n[l]=e[l]);return n}function eh(e){return!!(e.metaKey||e.altKey||e.ctrlKey||e.shiftKey)}function th(e,t){return e.button===0&&(!t||t==="_self")&&!eh(e)}function Ju(e){return e===void 0&&(e=""),new URLSearchParams(typeof e=="string"||Array.isArray(e)||e instanceof URLSearchParams?e:Object.keys(e).reduce((t,n)=>{let r=e[n];return t.concat(Array.isArray(r)?r.map(l=>[n,l]):[[n,r]])},[]))}function nh(e,t){let n=Ju(e);return t&&t.forEach((r,l)=>{n.has(l)||t.getAll(l).forEach(u=>{n.append(l,u)})}),n}const rh=["onClick","relative","reloadDocument","replace","state","target","to","preventScrollReset","viewTransition"],lh="6";try{window.__reactRouterVersion=lh}catch{}const uh="startTransition",ha=tf[uh];function ph(e){let{basename:t,children:n,future:r,window:l}=e,u=E.useRef();u.current==null&&(u.current=op({window:l,v5Compat:!0}));let i=u.current,[o,a]=E.useState({action:i.action,location:i.location}),{v7_startTransition:s}=r||{},h=E.useCallback(p=>{s&&ha?ha(()=>a(p)):a(p)},[a,s]);return E.useLayoutEffect(()=>i.listen(h),[i,h]),E.useEffect(()=>Zp(r),[r]),E.createElement(qp,{basename:t,children:n,location:o.location,navigationType:o.action,navigator:i,future:r})}const ih=typeof window<"u"&&typeof window.document<"u"&&typeof window.document.createElement<"u",oh=/^(?:[a-z][a-z0-9+.-]*:|\/\/)/i,hh=E.forwardRef(function(t,n){let{onClick:r,relative:l,reloadDocument:u,replace:i,state:o,target:a,to:s,preventScrollReset:h,viewTransition:p}=t,m=bp(t,rh),{basename:y}=E.useContext(wt),g,w=!1;if(typeof s=="string"&&oh.test(s)&&(g=s,ih))try{let d=new URL(window.location.href),v=s.startsWith("//")?new URL(d.protocol+s):new URL(s),k=Yi(v.pathname,y);v.origin===d.origin&&k!=null?s=k+v.search+v.hash:w=!0}catch{}let C=Fp(s,{relative:l}),f=ah(s,{replace:i,state:o,target:a,preventScrollReset:h,relative:l,viewTransition:p});function c(d){r&&r(d),d.defaultPrevented||f(d)}return E.createElement("a",Zu({},m,{href:g||C,onClick:w||u?r:c,ref:n,target:a}))});var ma;(function(e){e.UseScrollRestoration="useScrollRestoration",e.UseSubmit="useSubmit",e.UseSubmitFetcher="useSubmitFetcher",e.UseFetcher="useFetcher",e.useViewTransitionState="useViewTransitionState"})(ma||(ma={}));var va;(function(e){e.UseFetcher="useFetcher",e.UseFetchers="useFetchers",e.UseScrollRestoration="useScrollRestoration"})(va||(va={}));function ah(e,t){let{target:n,replace:r,state:l,preventScrollReset:u,relative:i,viewTransition:o}=t===void 0?{}:t,a=Ji(),s=hn(),h=Oc(e,{relative:i});return E.useCallback(p=>{if(th(p,n)){p.preventDefault();let m=r!==void 0?r:sl(s)===sl(h);a(e,{replace:m,state:l,preventScrollReset:u,relative:i,viewTransition:o})}},[s,a,h,r,l,n,e,u,i,o])}function mh(e){let t=E.useRef(Ju(e)),n=E.useRef(!1),r=hn(),l=E.useMemo(()=>nh(r.search,n.current?null:t.current),[r.search]),u=Ji(),i=E.useCallback((o,a)=>{const s=Ju(typeof o=="function"?o(l):o);n.current=!0,u("?"+s,a)},[u,l]);return[l,i]}export{ph as B,hh as L,fh as N,dh as R,sh as a,hn as b,Jp as c,ch as d,ef as e,mh as f,E as r,Ji as u};
+ */function Zu(){return Zu=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},Zu.apply(this,arguments)}function bp(e,t){if(e==null)return{};var n={},r=Object.keys(e),l,u;for(u=0;u<r.length;u++)l=r[u],!(t.indexOf(l)>=0)&&(n[l]=e[l]);return n}function eh(e){return!!(e.metaKey||e.altKey||e.ctrlKey||e.shiftKey)}function th(e,t){return e.button===0&&(!t||t==="_self")&&!eh(e)}function Ju(e){return e===void 0&&(e=""),new URLSearchParams(typeof e=="string"||Array.isArray(e)||e instanceof URLSearchParams?e:Object.keys(e).reduce((t,n)=>{let r=e[n];return t.concat(Array.isArray(r)?r.map(l=>[n,l]):[[n,r]])},[]))}function nh(e,t){let n=Ju(e);return t&&t.forEach((r,l)=>{n.has(l)||t.getAll(l).forEach(u=>{n.append(l,u)})}),n}const rh=["onClick","relative","reloadDocument","replace","state","target","to","preventScrollReset","viewTransition"],lh="6";try{window.__reactRouterVersion=lh}catch{}const uh="startTransition",ha=tf[uh];function ph(e){let{basename:t,children:n,future:r,window:l}=e,u=E.useRef();u.current==null&&(u.current=op({window:l,v5Compat:!0}));let i=u.current,[o,a]=E.useState({action:i.action,location:i.location}),{v7_startTransition:s}=r||{},h=E.useCallback(p=>{s&&ha?ha(()=>a(p)):a(p)},[a,s]);return E.useLayoutEffect(()=>i.listen(h),[i,h]),E.useEffect(()=>Zp(r),[r]),E.createElement(qp,{basename:t,children:n,location:o.location,navigationType:o.action,navigator:i,future:r})}const ih=typeof window<"u"&&typeof window.document<"u"&&typeof window.document.createElement<"u",oh=/^(?:[a-z][a-z0-9+.-]*:|\/\/)/i,hh=E.forwardRef(function(t,n){let{onClick:r,relative:l,reloadDocument:u,replace:i,state:o,target:a,to:s,preventScrollReset:h,viewTransition:p}=t,m=bp(t,rh),{basename:y}=E.useContext(wt),g,w=!1;if(typeof s=="string"&&oh.test(s)&&(g=s,ih))try{let d=new URL(window.location.href),v=s.startsWith("//")?new URL(d.protocol+s):new URL(s),k=Yi(v.pathname,y);v.origin===d.origin&&k!=null?s=k+v.search+v.hash:w=!0}catch{}let C=Fp(s,{relative:l}),f=ah(s,{replace:i,state:o,target:a,preventScrollReset:h,relative:l,viewTransition:p});function c(d){r&&r(d),d.defaultPrevented||f(d)}return E.createElement("a",Zu({},m,{href:g||C,onClick:w||u?r:c,ref:n,target:a}))});var ma;(function(e){e.UseScrollRestoration="useScrollRestoration",e.UseSubmit="useSubmit",e.UseSubmitFetcher="useSubmitFetcher",e.UseFetcher="useFetcher",e.useViewTransitionState="useViewTransitionState"})(ma||(ma={}));var va;(function(e){e.UseFetcher="useFetcher",e.UseFetchers="useFetchers",e.UseScrollRestoration="useScrollRestoration"})(va||(va={}));function ah(e,t){let{target:n,replace:r,state:l,preventScrollReset:u,relative:i,viewTransition:o}=t===void 0?{}:t,a=Ji(),s=hn(),h=Oc(e,{relative:i});return E.useCallback(p=>{if(th(p,n)){p.preventDefault();let m=r!==void 0?r:sl(s)===sl(h);a(e,{replace:m,state:l,preventScrollReset:u,relative:i,viewTransition:o})}},[s,a,h,r,l,n,e,u,i,o])}function mh(e){let t=E.useRef(Ju(e)),n=E.useRef(!1),r=hn(),l=E.useMemo(()=>nh(r.search,n.current?null:t.current),[r.search]),u=Ji(),i=E.useCallback((o,a)=>{const s=Ju(typeof o=="function"?o(l):o);n.current=!0,u("?"+s,a)},[u,l]);return[l,i]}export{ph as B,hh as L,fh as N,dh as R,sh as a,hn as b,Jp as c,ch as d,ef as e,mh as f,jc as g,E as r,Ji as u};

package/public/index.html

@@ -3,11 +3,16 @@
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <!-- Without an explicit favicon, requests to /favicon.ico hit the SPA
+         fallback (returns index.html), and Chrome then picks the largest
+         already-loaded image as the tab icon — typically /logos/hermes.png
+         from the instance cards, making the panel look like Hermes. -->
+    <link rel="icon" type="image/png" href="/favicon.png" />
     <title>JishuShell</title>
-    <script type="module" crossorigin src="/assets/index-BuTQtuNy.js"></script>
-    <link rel="modulepreload" crossorigin href="/assets/vendor-react-B1-3Yrt-.js">
-    <link rel="modulepreload" crossorigin href="/assets/vendor-i18n-CfW0RvgE.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-B6qQP4mH.css">
+    <script type="module" crossorigin src="/assets/index-DQsM6Joa.js"></script>
+    <link rel="modulepreload" crossorigin href="/assets/vendor-react-Bk1hRGiY.js">
+    <link rel="modulepreload" crossorigin href="/assets/vendor-i18n-ucpM0OR0.js">
+    <link rel="stylesheet" crossorigin href="/assets/index-CPhVFEsx.css">
   </head>
   <body class="bg-white min-h-screen">
     <div id="root"></div>

package/public/logos/openclaw.svg

@@ -0,0 +1,60 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 16 16" role="img" aria-label="Pixel lobster">
+  <rect width="16" height="16" fill="none"/>
+  <!-- outline -->
+  <g fill="#3a0a0d">
+    <rect x="1" y="5" width="1" height="3"/>
+    <rect x="2" y="4" width="1" height="1"/>
+    <rect x="2" y="8" width="1" height="1"/>
+    <rect x="3" y="3" width="1" height="1"/>
+    <rect x="3" y="9" width="1" height="1"/>
+    <rect x="4" y="2" width="1" height="1"/>
+    <rect x="4" y="10" width="1" height="1"/>
+    <rect x="5" y="2" width="6" height="1"/>
+    <rect x="11" y="2" width="1" height="1"/>
+    <rect x="12" y="3" width="1" height="1"/>
+    <rect x="12" y="9" width="1" height="1"/>
+    <rect x="13" y="4" width="1" height="1"/>
+    <rect x="13" y="8" width="1" height="1"/>
+    <rect x="14" y="5" width="1" height="3"/>
+    <rect x="5" y="11" width="6" height="1"/>
+    <rect x="4" y="12" width="1" height="1"/>
+    <rect x="11" y="12" width="1" height="1"/>
+    <rect x="3" y="13" width="1" height="1"/>
+    <rect x="12" y="13" width="1" height="1"/>
+    <rect x="5" y="14" width="6" height="1"/>
+  </g>
+
+  <!-- body -->
+  <g fill="#ff4f40">
+    <rect x="5" y="3" width="6" height="1"/>
+    <rect x="4" y="4" width="8" height="1"/>
+    <rect x="3" y="5" width="10" height="1"/>
+    <rect x="3" y="6" width="10" height="1"/>
+    <rect x="3" y="7" width="10" height="1"/>
+    <rect x="4" y="8" width="8" height="1"/>
+    <rect x="5" y="9" width="6" height="1"/>
+    <rect x="5" y="12" width="6" height="1"/>
+    <rect x="6" y="13" width="4" height="1"/>
+  </g>
+
+  <!-- claws -->
+  <g fill="#ff775f">
+    <rect x="1" y="6" width="2" height="1"/>
+    <rect x="2" y="5" width="1" height="1"/>
+    <rect x="2" y="7" width="1" height="1"/>
+    <rect x="13" y="6" width="2" height="1"/>
+    <rect x="13" y="5" width="1" height="1"/>
+    <rect x="13" y="7" width="1" height="1"/>
+  </g>
+
+  <!-- eyes -->
+  <g fill="#081016">
+    <rect x="6" y="5" width="1" height="1"/>
+    <rect x="9" y="5" width="1" height="1"/>
+  </g>
+  <g fill="#f5fbff">
+    <rect x="6" y="4" width="1" height="1"/>
+    <rect x="9" y="4" width="1" height="1"/>
+  </g>
+</svg>
+

package/scripts/build-hermes-image.sh

@@ -0,0 +1,21 @@
+#!/bin/bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+PROJECT_ROOT="$(dirname "$SCRIPT_DIR")"
+
+IMAGE_NAME="${HERMES_IMAGE:-ghcr.io/x-aijishu/hermes-runtime}"
+IMAGE_TAG="${HERMES_TAG:-local}"
+HERMES_REF="${HERMES_REF:-main}"
+
+echo "Building ${IMAGE_NAME}:${IMAGE_TAG} from Hermes ref ${HERMES_REF} ..."
+docker build \
+  --network=host \
+  --build-arg "HERMES_REF=${HERMES_REF}" \
+  -f "${PROJECT_ROOT}/Dockerfile.hermes-slim" \
+  -t "${IMAGE_NAME}:${IMAGE_TAG}" \
+  "${PROJECT_ROOT}"
+
+echo
+echo "Done: ${IMAGE_NAME}:${IMAGE_TAG}"
+docker image inspect "${IMAGE_NAME}:${IMAGE_TAG}" --format '{{.Id}}'

package/scripts/build-local.sh

@@ -0,0 +1,54 @@
+#!/usr/bin/env bash
+# scripts/build-local.sh — Build Docker images locally for development/testing.
+# Usage:
+#   ./scripts/build-local.sh openclaw           # Build OpenClaw runtime image
+#   ./scripts/build-local.sh hermes             # Build Hermes Agent + Open WebUI image
+#   ./scripts/build-local.sh all                # Build all images
+#   PLATFORM=linux/arm64 ./scripts/build-local.sh openclaw  # Build for specific platform
+set -euo pipefail
+cd "$(dirname "$0")/.."
+
+PLATFORM="${PLATFORM:-linux/$(dpkg --print-architecture 2>/dev/null || uname -m)}"
+
+build_openclaw() {
+  local version="${OPENCLAW_VERSION:-latest}"
+  echo "==> Building OpenClaw runtime image (version=${version}, platform=${PLATFORM})"
+  docker build \
+    -f Dockerfile.openclaw-slim \
+    --build-arg "OPENCLAW_VERSION=${version}" \
+    --platform "${PLATFORM}" \
+    -t "jishushell-openclaw:${version}" \
+    -t "jishushell-openclaw:latest" \
+    .
+  echo "==> Done: jishushell-openclaw:${version}"
+}
+
+build_hermes() {
+  local hermes_ver="${HERMES_VERSION:-latest}"
+  local webui_ver="${OPEN_WEBUI_VERSION:-latest}"
+  echo "==> Building Hermes Agent + Open WebUI image (hermes=${hermes_ver}, webui=${webui_ver}, platform=${PLATFORM})"
+  docker build \
+    -f Dockerfile.hermes-agent \
+    --build-arg "HERMES_VERSION=${hermes_ver}" \
+    --build-arg "OPEN_WEBUI_VERSION=${webui_ver}" \
+    --platform "${PLATFORM}" \
+    -t "jishushell-hermes:${hermes_ver}" \
+    -t "jishushell-hermes:latest" \
+    .
+  echo "==> Done: jishushell-hermes:${hermes_ver}"
+}
+
+case "${1:-all}" in
+  openclaw) build_openclaw ;;
+  hermes)   build_hermes ;;
+  all)      build_openclaw; build_hermes ;;
+  *)
+    echo "Usage: $0 {openclaw|hermes|all}"
+    echo "Environment variables:"
+    echo "  PLATFORM              Target platform (default: auto-detect)"
+    echo "  OPENCLAW_VERSION      OpenClaw version (default: latest)"
+    echo "  HERMES_VERSION        Hermes Agent version (default: latest)"
+    echo "  OPEN_WEBUI_VERSION    Open WebUI version (default: latest)"
+    exit 1
+    ;;
+esac

package/scripts/check-adapter-isolation.ts

@@ -0,0 +1,293 @@
+#!/usr/bin/env -S node --experimental-strip-types
+/**
+ * check-adapter-isolation — §32.2.1 static enforcement + §30.3 fixtures.
+ *
+ * Two invariants:
+ *
+ *   1. Core framework files never import from
+ *      `src/services/runtime/adapters/*`. Adapters load exclusively through
+ *      `src/services/runtime/index.ts` side-effect imports, and framework
+ *      code reaches adapters through `getAdapter(kind)` only.
+ *
+ *   2. Fixture `instance.json` samples under
+ *      `scripts/fixtures/instances/<name>/` satisfy the minimum meta
+ *      contract: `id`, `name`, resolvable agent discriminator, and
+ *      (for Hermes) the required `paths.agentHome` / `paths.primaryConfig`
+ *      / `paths.secretEnv` entries. Legacy openclaw samples round-trip
+ *      through `backfillInstanceMeta` to `agentType="openclaw"`.
+ *
+ * Run via `npm run check:contracts`. Exits non-zero on violation.
+ */
+
+import { readFileSync, readdirSync, statSync } from "node:fs";
+import { resolve } from "node:path";
+
+const REPO_ROOT = resolve(import.meta.dirname ?? ".", "..");
+
+/**
+ * Files that must not import any specific adapter directly. Matches the
+ * list in docs/multi-agent-runtime-generalization-plan.md §32.2.1.
+ */
+const CORE_FILES = [
+  "src/services/instance-manager.ts",
+  "src/services/nomad-manager.ts",
+  "src/services/setup-manager.ts",
+  "src/services/backup-manager.ts",
+  "src/services/llm-proxy/index.ts",
+  "src/routes/instances.ts",
+  "src/routes/setup.ts",
+  "src/server.ts",
+] as const;
+
+/**
+ * Regexes for forbidden adapter imports. Covers both static imports and
+ * dynamic `import()`. Note: we deliberately allow references to the
+ * registry / runtime/index (`./runtime/index.js`, `./runtime/registry.js`,
+ * `./runtime/types.js`, `./runtime/instance.js`) because those contain
+ * the framework surface, not adapter-specific logic.
+ */
+const FORBIDDEN_IMPORT_PATTERNS = [
+  /from\s+["'][^"']*\/runtime\/adapters\/[^"']+["']/g,
+  /import\s*\(\s*["'][^"']*\/runtime\/adapters\/[^"']+["']\s*\)/g,
+];
+
+/**
+ * Literal strings that indicate kind-specific bleed-through into
+ * framework files. These are advisory only for now: existing OpenClaw
+ * legacy code may still contain OPENCLAW_HOME env references etc. We log
+ * them but don't fail the build — the physical migration cleans them up
+ * in a follow-up PR. When MIGRATION_STRICT=1 is set, they become errors.
+ */
+const KIND_LITERAL_PATTERNS: Array<{ pattern: RegExp; description: string }> = [
+  {
+    pattern: /JOB_PREFIX\s*=\s*["']openclaw-/,
+    description: `JOB_PREFIX literal "openclaw-" — §32.2.7 wants panel.nomadJobPrefix`,
+  },
+  {
+    pattern: /OPENCLAW_HOME|OPENCLAW_INSTANCE_ID|OPENCLAW_GATEWAY_PORT/,
+    description: `OpenClaw-specific env var literal — should live in OpenClawAdapter`,
+  },
+  {
+    pattern: /isHermesInstance\s*\(/,
+    description: `isHermesInstance() — runtime-specific branch, should dispatch via getAdapter`,
+  },
+  {
+    pattern: /agentType\s*===\s*["']hermes["']|agentType\s*===\s*["']openclaw["']/,
+    description: `agentType literal comparison — dispatch through adapter instead`,
+  },
+];
+
+const STRICT = process.env.MIGRATION_STRICT === "1";
+
+type Violation = {
+  file: string;
+  line: number;
+  column: number;
+  text: string;
+  rule: string;
+};
+
+function isCommentLine(lineText: string): boolean {
+  const t = lineText.trimStart();
+  return t.startsWith("//") || t.startsWith("*") || t.startsWith("/*");
+}
+
+function findViolations(filepath: string, content: string): Violation[] {
+  const violations: Violation[] = [];
+
+  // 1. Forbidden adapter imports (HARD errors)
+  for (const pattern of FORBIDDEN_IMPORT_PATTERNS) {
+    let match: RegExpExecArray | null;
+    const re = new RegExp(pattern.source, "g");
+    while ((match = re.exec(content)) !== null) {
+      const before = content.slice(0, match.index);
+      const line = before.split("\n").length;
+      const column = match.index - before.lastIndexOf("\n");
+      violations.push({
+        file: filepath,
+        line,
+        column,
+        text: match[0],
+        rule: "adapter-import-forbidden",
+      });
+    }
+  }
+
+  // 2. Kind-specific literals (SOFT warnings unless MIGRATION_STRICT=1).
+  //    Comment lines are skipped — references in docstrings or `§32`
+  //    migration notes are not actual code bleed-through.
+  if (STRICT) {
+    const lines = content.split("\n");
+    for (let i = 0; i < lines.length; i++) {
+      const lineText = lines[i];
+      if (isCommentLine(lineText)) continue;
+      for (const { pattern, description } of KIND_LITERAL_PATTERNS) {
+        if (pattern.test(lineText)) {
+          violations.push({
+            file: filepath,
+            line: i + 1,
+            column: 1,
+            text: lineText.trim().slice(0, 120),
+            rule: `kind-literal: ${description}`,
+          });
+        }
+      }
+    }
+  }
+
+  return violations;
+}
+
+// ── Fixture schema checks (plan §30.3) ───────────────────────────────
+//
+// Keep the schema rules inline: we only validate a handful of fields and
+// pulling in ajv for a single static script adds disproportionate churn.
+// The check mirrors the runtime contract in `runtime/migrations.ts`:
+//   - every meta must carry `id` / `name`
+//   - `agentType` resolves (missing → defaults to "openclaw")
+//   - Hermes fixtures must declare `paths.agentHome` + `paths.primaryConfig`
+//   - legacy openclaw fixtures must backfill to `agentType === "openclaw"`
+
+type FixtureViolation = { fixture: string; rule: string; detail: string };
+
+function resolveFixtureAgentType(meta: Record<string, unknown>): string {
+  const raw = typeof meta.agentType === "string" ? meta.agentType : "";
+  return raw.trim() ? raw.trim() : "openclaw";
+}
+
+function checkFixture(fixtureName: string, meta: Record<string, unknown>): FixtureViolation[] {
+  const out: FixtureViolation[] = [];
+  const agentType = resolveFixtureAgentType(meta);
+  if (typeof meta.id !== "string" || !meta.id) {
+    out.push({ fixture: fixtureName, rule: "missing-id", detail: "instance.json must carry a non-empty string id" });
+  }
+  if (typeof meta.name !== "string" || !meta.name) {
+    out.push({ fixture: fixtureName, rule: "missing-name", detail: "instance.json must carry a non-empty string name" });
+  }
+  if (agentType === "hermes") {
+    const paths = (meta.paths ?? {}) as Record<string, unknown>;
+    for (const key of ["agentHome", "primaryConfig", "secretEnv"] as const) {
+      if (typeof paths[key] !== "string" || !paths[key]) {
+        out.push({
+          fixture: fixtureName,
+          rule: `hermes-paths-${key}`,
+          detail: `hermes instance.json requires paths.${key}`,
+        });
+      }
+    }
+  }
+  if (fixtureName.startsWith("legacy-openclaw") && agentType !== "openclaw") {
+    out.push({
+      fixture: fixtureName,
+      rule: "legacy-backfill",
+      detail: `legacy fixture must backfill to agentType="openclaw", got "${agentType}"`,
+    });
+  }
+  return out;
+}
+
+function loadFixtures(): FixtureViolation[] {
+  const fixturesRoot = resolve(REPO_ROOT, "scripts/fixtures/instances");
+  let entries: string[];
+  try {
+    entries = readdirSync(fixturesRoot);
+  } catch {
+    return []; // directory optional during early migrations
+  }
+  const violations: FixtureViolation[] = [];
+  for (const entry of entries) {
+    const fullPath = resolve(fixturesRoot, entry);
+    try {
+      if (!statSync(fullPath).isDirectory()) continue;
+    } catch {
+      continue;
+    }
+    const metaPath = resolve(fullPath, "instance.json");
+    let raw: string;
+    try {
+      raw = readFileSync(metaPath, "utf-8");
+    } catch {
+      violations.push({ fixture: entry, rule: "missing-instance-json", detail: metaPath });
+      continue;
+    }
+    try {
+      const meta = JSON.parse(raw) as Record<string, unknown>;
+      violations.push(...checkFixture(entry, meta));
+    } catch (e: any) {
+      violations.push({ fixture: entry, rule: "invalid-json", detail: e?.message ?? String(e) });
+    }
+  }
+  return violations;
+}
+
+function main(): void {
+  const allViolations: Violation[] = [];
+  const softFindings: Array<{ file: string; line: number; text: string; description: string }> = [];
+
+  for (const relPath of CORE_FILES) {
+    const abs = resolve(REPO_ROOT, relPath);
+    let content: string;
+    try {
+      content = readFileSync(abs, "utf-8");
+    } catch {
+      console.warn(`[check-adapter-isolation] skip (not found): ${relPath}`);
+      continue;
+    }
+    allViolations.push(...findViolations(relPath, content));
+
+    // Collect soft findings separately so non-strict runs can still report them.
+    if (!STRICT) {
+      const lines = content.split("\n");
+      for (let i = 0; i < lines.length; i++) {
+        const lineText = lines[i];
+        if (isCommentLine(lineText)) continue;
+        for (const { pattern, description } of KIND_LITERAL_PATTERNS) {
+          if (pattern.test(lineText)) {
+            softFindings.push({
+              file: relPath,
+              line: i + 1,
+              text: lineText.trim().slice(0, 120),
+              description,
+            });
+          }
+        }
+      }
+    }
+  }
+
+  const fixtureViolations = loadFixtures();
+
+  if (allViolations.length === 0 && softFindings.length === 0 && fixtureViolations.length === 0) {
+    console.log("[check-adapter-isolation] OK — core files are fully decoupled from specific adapters");
+    process.exit(0);
+  }
+
+  if (allViolations.length > 0) {
+    console.error(`\n[check-adapter-isolation] ${allViolations.length} HARD violation(s):\n`);
+    for (const v of allViolations) {
+      console.error(`  ${v.file}:${v.line}:${v.column}  [${v.rule}]`);
+      console.error(`    ${v.text}`);
+    }
+  }
+
+  if (fixtureViolations.length > 0) {
+    console.error(`\n[check-adapter-isolation] ${fixtureViolations.length} fixture violation(s):\n`);
+    for (const v of fixtureViolations) {
+      console.error(`  fixtures/${v.fixture}  [${v.rule}] ${v.detail}`);
+    }
+  }
+
+  if (softFindings.length > 0) {
+    console.warn(
+      `\n[check-adapter-isolation] ${softFindings.length} soft finding(s) (remaining framework bleed-through — migrate in follow-up PRs; run with MIGRATION_STRICT=1 to fail on these):\n`,
+    );
+    for (const f of softFindings) {
+      console.warn(`  ${f.file}:${f.line}  ${f.description}`);
+      console.warn(`    ${f.text}`);
+    }
+  }
+
+  process.exit(allViolations.length > 0 || fixtureViolations.length > 0 ? 1 : 0);
+}
+
+main();

package/scripts/fixtures/instances/hermes-sample/instance.json

@@ -0,0 +1,37 @@
+{
+  "id": "hermes-sample",
+  "name": "Hermes Sample",
+  "description": "Fixture for plan §30.3 contract check",
+  "agentType": "hermes",
+  "paths": {
+    "instanceDir": "/tmp/instances/hermes-sample",
+    "agentHome": "/tmp/instances/hermes-sample/agent-home",
+    "primaryConfig": "/tmp/instances/hermes-sample/agent-home/config.yaml",
+    "secretEnv": "/tmp/instances/hermes-sample/agent-home/.env"
+  },
+  "runtime": {
+    "driver": "docker",
+    "image": "ghcr.io/x-aijishu/hermes-runtime:latest",
+    "envFiles": ["/tmp/instances/hermes-sample/agent-home/.env"],
+    "ports": [
+      { "name": "gateway", "containerPort": 8642, "hostPort": 8642 }
+    ]
+  },
+  "x-jishushell": {
+    "proxy": {
+      "upstream": {
+        "providerId": "openai",
+        "baseUrl": "https://api.openai.com",
+        "api": "openai-completions",
+        "authHeader": false,
+        "headers": {},
+        "models": [{ "id": "gpt-4o-mini", "name": "gpt-4o-mini", "contextWindow": 128000 }],
+        "selectedModelId": "gpt-4o-mini",
+        "apiKey": "",
+        "hasApiKey": false,
+        "clearApiKey": false
+      }
+    }
+  },
+  "created_at": "2026-04-20T00:00:00.000Z"
+}

package/scripts/fixtures/instances/legacy-openclaw-sample/instance.json

@@ -0,0 +1,7 @@
+{
+  "id": "legacy-openclaw-sample",
+  "name": "Legacy OpenClaw",
+  "description": "Pre-§32.2 instance: no agentType, only openclaw_home. Must backfill to agentType=openclaw.",
+  "openclaw_home": "/tmp/instances/legacy-openclaw-sample/openclaw-home",
+  "created_at": "2025-11-01T00:00:00.000Z"
+}