jishushell 0.4.30 → 0.5.22

package/dist/services/runtime/adapters/openclaw.d.ts

@@ -36,6 +36,13 @@
 import { type InstallResult } from "../../setup-manager.js";
 import type { AdapterHooks, AdapterManifest, AgentType, CapabilityProfile, ConfigDocument, CreateInstanceArgs, CreateInstanceContext, InstanceConfigMeta, InstancePaths, PairingApproveInput, RuntimeAdapter, RuntimeSpec, RuntimeVersionInfo } from "../types.js";
 export declare const OPENCLAW_DEFAULT_GATEWAY_PORT = 18789;
+export declare function isPrivateNetworkBaseUrl(baseUrl: string): boolean;
+/**
+ * Ensure `request.allowPrivateNetwork: true` is set on providers whose baseUrl
+ * targets a private/internal host (e.g. host.docker.internal). Without this,
+ * OpenClaw's SSRF guard blocks requests to the JishuShell local proxy.
+ */
+export declare function patchPrivateNetworkAllowFlag(configPath: string): void;
 /**
  * Ensure the `llm-agent` capability advertised by openclaw-*.yaml works for
  * every instance, including ones created before this code shipped: enable
@@ -93,6 +100,117 @@ export declare function applySearxngConnectionToConfig(configPath: string, baseU
  * No-op when the config file is absent.
  */
 export declare function clearSearxngConnectionFromConfig(configPath: string): void;
+/**
+ * Deep-merge a Browserless CDP connection into an OpenClaw config file at
+ * `configPath`. Mirrors `applySearxngConnectionToConfig` for the browser slot.
+ *
+ * Writes:
+ *   browser.profiles.browserless.cdpUrl     = cdpUrl            // ws:// or wss://
+ *   browser.profiles.browserless.attachOnly = true              // since v2026.3.2
+ *   browser.profiles.browserless.color      = "#00AA66"         // required by schema
+ *   browser.defaultProfile                  = "browserless"     // only if unset
+ *   browser.enabled                         = true              // only if unset
+ *   gateway.nodes.browser.mode              = "off"             // only if unset
+ *
+ * Why per-profile `attachOnly` and not global `browser.attachOnly`: global
+ * attachOnly forces every profile to skip launch — that breaks the user's
+ * other manually-configured profiles. Per-profile attachOnly was added in
+ * OpenClaw v2026.3.2; older versions silently ignore the extra field and
+ * fall back to attach-via-cdpUrl semantics (which `cdpUrl` triggers on its
+ * own from v2.0.0-beta5), so the schema is forward-compatible all the way
+ * back to the first remote-CDP release.
+ *
+ * Why `gateway.nodes.browser.mode = "off"`: in OpenClaw 2026.5.6 the
+ * gateway only registers the `browser.request` WS method when this config
+ * block exists. Without it, `openclaw browser …` CLI and the gateway
+ * canvas tool both fail with `unknown method: browser.request` or
+ * `node required`. Setting `mode: "off"` forces gateway-local CDP
+ * dispatch (use `cdpUrl` directly, never look for paired nodes), which
+ * matches jishushell's intent: Browserless is a service-style provider,
+ * not a node-style provider. Verified end-to-end on Pi 2 (2026-05-07):
+ * Browserless `/sessions` shows `numbConnected: 1` and `openclaw browser
+ * navigate <allowed-host>` succeeds + screenshots render correctly.
+ *
+ * `defaultProfile`, `enabled`, and `gateway.nodes.browser.mode` are all
+ * set only when absent so user-customized values survive a re-bind. The
+ * `enabled` flag is never flipped off — Browserless binding shouldn't
+ * override a user who explicitly disabled the browser tool tree.
+ *
+ * SSRF policy is intentionally NOT touched here: `browser.ssrfPolicy`
+ * (`dangerouslyAllowPrivateNetwork`, `allowedHostnames`) is a user-level
+ * security decision (default deny-all is correct for an LLM-driven
+ * browser); jishushell would be over-reaching to silently widen it on
+ * binding. Users who want the agent to reach a specific host configure
+ * the allowlist themselves.
+ *
+ * No-op when the config file is absent (instance not yet started).
+ */
+export declare function applyBrowserlessConnectionToConfig(configPath: string, cdpUrl: string): void;
+/**
+ * Counterpart to `applyBrowserlessConnectionToConfig` — invoked when the user
+ * unbinds the BROWSER slot in the Connections tab. Removes the
+ * jishushell-managed `browserless` profile and clears `defaultProfile` only
+ * if it still points at that profile (so user-set defaults pointing at their
+ * own profiles survive). Other profiles and `browser.enabled` are left alone.
+ *
+ * No-op when the config file is absent.
+ */
+export declare function clearBrowserlessConnectionFromConfig(configPath: string): void;
+/**
+ * Inject a guarded section into the agent's TOOLS.md telling the LLM that
+ * user files live on the local filesystem (host==container bind mount),
+ * not on some remote "drive server", and showing the concrete
+ * resolve-then-send chain for IM channels (Feishu / WeChat).
+ *
+ * Why this exists: the LLM defaults to interpreting `drive` as a remote
+ * service, then refuses to send NAS files via IM with "I can't access the
+ * cloud drive" — even when `drive_list` literally just enumerated them.
+ * Verified on pi2 2026-05-11: claw1 saw `文档/宇树G1-D...xlsx` via
+ * drive_list, then told the user to "open Feishu cloud space and forward
+ * it back" because nothing in TOOLS.md tied drive paths to filesystem
+ * paths. This patcher closes that gap by spelling it out.
+ *
+ * Idempotent: section is bracketed by HTML markers; content between them
+ * is rewritten on every call. User edits OUTSIDE the markers are kept.
+ *
+ * filesRoot is baked in so the example abs path matches the actual install
+ * — third-party users on `/home/alice/.jishushell/files/` see their own
+ * root, not pi's.
+ */
+export declare function patchToolsMdDriveHint(workspaceDir: string, filesRoot: string): void;
+/**
+ * Inject a guarded section into TOOLS.md describing the kb_search MCP
+ * tool — only when an AnythingLLM-backed knowledge base is wired into
+ * this instance. Mirrors patchToolsMdDriveHint's marker model so an
+ * uninstall / unbind can cleanly strip the section.
+ *
+ * `mode === "install"` writes the kb hint between the markers
+ * (overwriting any previous content there). `mode === "remove"`
+ * deletes the entire bracketed section, leaving the user's
+ * surrounding content intact.
+ */
+export declare function patchToolsMdKbHint(workspaceDir: string, mode: "install" | "remove"): void;
+/**
+ * Patch the session fence bug in OpenClaw >= 5.19 by replacing the
+ * `eventMayReachTranscriptWriters` function in the minified bundle.
+ *
+ * Idempotent: uses a marker file containing the SHA-256 of the patched
+ * file. Skips if already patched or if the pattern is not found (future
+ * fixed version or different bundle layout).
+ *
+ * Docker-only: the bug manifests through the virtiofs mount timing
+ * discrepancy between container and host — raw_exec/process modes are
+ * unaffected in practice.
+ */
+export declare function patchSessionFenceBug(openclawHome: string, instanceId: string): void;
+/**
+ * Write the container-side patch script and entrypoint wrapper to the
+ * openclaw-home directory so they are available inside the container
+ * via the bind mount.
+ *
+ * Called from onBeforeStart. Idempotent — only writes if content changed.
+ */
+export declare function writeContainerPatchScript(openclawHome: string): void;
 declare class OpenClawAdapter implements RuntimeAdapter {
     readonly agentType: AgentType;
     readonly displayName = "OpenClaw";