jishushell 0.6.5 → 0.6.18

package/dist/services/runtime/adapters/custom.js

@@ -1,188 +0,0 @@
-/**
- * CustomAdapter — Phase 1 skeleton for non-agent "custom app" runtimes.
- *
- * Per docs/app-dir-v2-plan.md §2.1 / §3.1 Phase 1:
- *
- * - `agentType: "custom"` is the dispatch key used internally by
- *   `resolveAgentType()` when an instance.json carries an `app_spec_ref`
- *   field instead of `agentType`. The string "custom" never appears on disk
- *   in instance.json — it only lives in the registry and in dispatch code.
- *
- * - `nomadJobPrefix: ""` (empty) — custom app instance IDs are already
- *   properly prefixed (by AppSpec id or singleInstance rules), so no
- *   additional Nomad prefix is applied.
- *
- * Phase 1 scope: plumbing only. All lifecycle methods throw clearly-labelled
- * "not implemented until Phase 2" errors because no custom AppSpec YAML
- * exists yet and nothing in Phase 1 dispatches to them.
- */
-import { registerAdapter } from "../registry.js";
-import { getInstance } from "../../instance-manager.js";
-import { instanceMetaPath } from "../../../config.js";
-import { safeWriteJson } from "../../../utils/safe-json.js";
-// ── Capability profile — openclaw baseline with messagingPlatforms cleared ──
-//
-// Custom apps (Ollama, Searxng, Dify, etc.) are not agent-style runtimes, so
-// all agent capabilities (pairing, plugin install, skills, memory, MCP, IM
-// channels) are disabled. Phase 2 will override per-AppSpec as needed.
-const DEFAULT_CAPABILITIES = {
-    gateway: {
-        http: true,
-        websocket: false,
-        chatPanel: "none",
-    },
-    pairing: {
-        list: false,
-        approve: false,
-        revoke: false,
-        clearPending: false,
-    },
-    configEditor: "custom",
-    configSchema: false,
-    customProvider: false,
-    pluginInstall: false,
-    skills: false,
-    mcp: false,
-    memory: false,
-    backupRestore: false,
-    // Match LEGACY_INSTANCE_CAPABILITIES["custom"] in runtime/instance.ts.
-    // The llm-proxy logs usage records for every instance (including custom
-    // apps that proxy traffic), so the Usage tab is meaningful. Keeping the
-    // two sources aligned means the UI doesn't flip when the legacy bridge
-    // is eventually removed.
-    usageStats: true,
-    restartlessReload: false,
-    messagingPlatforms: [],
-};
-export const customAdapter = {
-    agentType: "custom",
-    displayName: "Custom App",
-    nomadJobPrefix: "",
-    defaultCapabilities: DEFAULT_CAPABILITIES,
-    /**
-     * Generic custom apps historically persisted their gateway port in
-     * `runtime.env.OPENCLAW_GATEWAY_PORT` even when they did not yet carry a
-     * full `runtime.ports[]` block. Keep reading that value so start-time
-     * reallocation can discover the current host port for legacy records.
-     */
-    readLegacyGatewayPort(runtime) {
-        if (!runtime)
-            return null;
-        const envPort = runtime.env?.OPENCLAW_GATEWAY_PORT;
-        if (envPort == null)
-            return null;
-        const parsed = Number.parseInt(String(envPort), 10);
-        return Number.isInteger(parsed) && parsed > 0 ? parsed : null;
-    },
-    /**
-     * Rewrite the published host port while preserving container-facing
-     * settings. Custom AppSpec runtimes may store the port in `runtime.ports[]`
-     * (generic app-dir installs) or only in `runtime.env.OPENCLAW_GATEWAY_PORT`
-     * plus `runtime.container_port` (legacy instance-dir installs).
-     */
-    reallocateRuntimePort(runtime, newPort) {
-        const previousGatewayPort = this.readLegacyGatewayPort(runtime);
-        const env = runtime.env && typeof runtime.env === "object"
-            ? { ...runtime.env }
-            : {};
-        env.OPENCLAW_GATEWAY_PORT = String(newPort);
-        runtime.env = env;
-        if (Array.isArray(runtime.ports) && runtime.ports.length > 0) {
-            let rewrote = false;
-            runtime.ports = runtime.ports.map((port, index) => {
-                if (rewrote)
-                    return port;
-                if (port?.name === "gateway" || index === 0) {
-                    rewrote = true;
-                    return { ...port, hostPort: newPort };
-                }
-                return port;
-            });
-        }
-        else {
-            const containerPort = Number.parseInt(String(runtime.container_port ?? ""), 10);
-            runtime.ports = [{
-                    name: "gateway",
-                    hostPort: newPort,
-                    containerPort: Number.isInteger(containerPort) && containerPort > 0 ? containerPort : newPort,
-                }];
-        }
-        if (runtime.health
-            && typeof runtime.health === "object"
-            && runtime.health.port != null
-            && previousGatewayPort != null
-            && Number(runtime.health.port) === previousGatewayPort) {
-            runtime.health = { ...runtime.health, port: newPort };
-        }
-    },
-    async buildNomadTask(instanceId) {
-        const { getInstance } = await import("../../instance-manager.js");
-        const { getApp } = await import("../../app/app-manager.js");
-        const { buildNomadTaskCustom } = await import("../../app/custom-manager.js");
-        const meta = getInstance(instanceId);
-        const runtime = meta?.runtime;
-        if (!runtime || typeof runtime !== "object") {
-            throw new Error(`Custom instance ${instanceId} has no runtime configuration`);
-        }
-        const nextRuntime = { ...runtime };
-        const runtimeEnv = runtime.env && typeof runtime.env === "object"
-            ? { ...runtime.env }
-            : {};
-        const appData = getApp(instanceId);
-        const serviceTaskEnv = appData?.spec?.tasks?.find((task) => (task.role ?? "service") === "service")?.env;
-        if (serviceTaskEnv && typeof serviceTaskEnv === "object") {
-            nextRuntime.env = {
-                ...serviceTaskEnv,
-                ...runtimeEnv,
-            };
-        }
-        else if (runtime.env && typeof runtime.env === "object") {
-            nextRuntime.env = runtimeEnv;
-        }
-        return buildNomadTaskCustom(instanceId, nextRuntime, instanceId);
-    },
-    async applyConnectionEnv(instanceId, env) {
-        const meta = getInstance(instanceId);
-        if (!meta)
-            return;
-        const runtime = meta.runtime && typeof meta.runtime === "object"
-            ? { ...meta.runtime }
-            : {};
-        const runtimeEnv = runtime.env && typeof runtime.env === "object"
-            ? { ...runtime.env }
-            : {};
-        runtime.env = { ...runtimeEnv, ...env };
-        safeWriteJson(instanceMetaPath(instanceId), { ...meta, runtime }, true);
-    },
-    // ── Required lifecycle methods — stub until Phase 2 ───────────────────
-    //
-    // These are called only when an actual custom AppSpec instance is being
-    // operated (created, started, configured). No such flow exists in Phase 1,
-    // so they throw loud errors rather than silently returning bad data.
-    async createInitialLayout(_ctx) {
-        throw new Error("[custom-adapter] createInitialLayout: not implemented until Phase 2 (custom AppSpec runtime)");
-    },
-    async buildRuntime(_instanceId) {
-        throw new Error("[custom-adapter] buildRuntime: not implemented until Phase 2 (custom AppSpec runtime)");
-    },
-    async getRuntimeVersion(_instanceId) {
-        return { agentType: "custom", mode: "baseline" };
-    },
-    async getConfigMeta(_instanceId) {
-        throw new Error("[custom-adapter] getConfigMeta: not implemented until Phase 2 (custom AppSpec runtime)");
-    },
-    async readConfig(_instanceId) {
-        throw new Error("[custom-adapter] readConfig: not implemented until Phase 2 (custom AppSpec runtime)");
-    },
-    async writeConfig(_instanceId, _doc) {
-        throw new Error("[custom-adapter] writeConfig: not implemented until Phase 2 (custom AppSpec runtime)");
-    },
-    async buildPairingListCommand(_instanceId) {
-        throw new Error("[custom-adapter] buildPairingListCommand: not implemented until Phase 2 (custom AppSpec runtime)");
-    },
-    async buildPairingApproveCommand(_instanceId, _input) {
-        throw new Error("[custom-adapter] buildPairingApproveCommand: not implemented until Phase 2 (custom AppSpec runtime)");
-    },
-};
-registerAdapter(customAdapter);
-//# sourceMappingURL=custom.js.map

package/dist/services/runtime/adapters/custom.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"custom.js","sourceRoot":"","sources":["../../../../src/services/runtime/adapters/custom.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAaH,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,uEAAuE;AAEvE,MAAM,oBAAoB,GAAsB;IAC9C,OAAO,EAAE;QACP,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,MAAM;KAClB;IACD,OAAO,EAAE;QACP,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,KAAK;QACb,YAAY,EAAE,KAAK;KACpB;IACD,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE,KAAK;IACnB,cAAc,EAAE,KAAK;IACrB,aAAa,EAAE,KAAK;IACpB,MAAM,EAAE,KAAK;IACb,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,KAAK;IACb,aAAa,EAAE,KAAK;IACpB,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,yBAAyB;IACzB,UAAU,EAAE,IAAI;IAChB,iBAAiB,EAAE,KAAK;IACxB,kBAAkB,EAAE,EAAE;CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAmB;IAC3C,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,YAAY;IACzB,cAAc,EAAE,EAAE;IAClB,mBAAmB,EAAE,oBAAoB;IAEzC;;;;;OAKG;IACH,qBAAqB,CAAC,OAA4B;QAChD,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,qBAAqB,CAAC;QACnD,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAED;;;;;OAKG;IACH,qBAAqB,CAAC,OAA4B,EAAE,OAAe;QACjE,MAAM,mBAAmB,GAAG,IAAI,CAAC,qBAAsB,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YACxD,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;YACpB,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,qBAAqB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC;QAElB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,KAAa,EAAE,EAAE;gBAC7D,IAAI,OAAO;oBAAE,OAAO,IAAI,CAAC;gBACzB,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;oBAC5C,OAAO,GAAG,IAAI,CAAC;oBACf,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;gBACxC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAChF,OAAO,CAAC,KAAK,GAAG,CAAC;oBACf,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,OAAO;oBACjB,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO;iBAC9F,CAAC,CAAC;QACL,CAAC;QAED,IACE,OAAO,CAAC,MAAM;eACX,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;eAClC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI;eAC3B,mBAAmB,IAAI,IAAI;eAC3B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,mBAAmB,EACtD,CAAC;YACD,OAAO,CAAC,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,UAAkB;QACrC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAClE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAC5D,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAA+B,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC;QAC9B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,mBAAmB,UAAU,+BAA+B,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,WAAW,GAAG,EAAE,GAAG,OAAO,EAAyB,CAAC;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAC/D,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;YACpB,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,cAAc,GAAG,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,KAAK,SAAS,CAAC,EAAE,GAAG,CAAC;QACzG,IAAI,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;YACzD,WAAW,CAAC,GAAG,GAAG;gBAChB,GAAG,cAAc;gBACjB,GAAG,UAAU;aACd,CAAC;QACJ,CAAC;aAAM,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC1D,WAAW,CAAC,GAAG,GAAG,UAAU,CAAC;QAC/B,CAAC;QACD,OAAO,oBAAoB,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,UAAkB,EAClB,GAA2B;QAE3B,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAA+B,CAAC;QACnE,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAC9D,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE;YACrB,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAC/D,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;YACpB,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,UAAU,EAAE,GAAG,GAAG,EAAE,CAAC;QACxC,aAAa,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAED,yEAAyE;IACzE,EAAE;IACF,wEAAwE;IACxE,2EAA2E;IAC3E,qEAAqE;IAErE,KAAK,CAAC,mBAAmB,CAAC,IAA2B;QACnD,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAAmB;QACpC,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,WAAmB;QACzC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,WAAmB;QACrC,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,IAAoB;QACzD,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,WAAmB;QAC/C,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,WAAmB,EACnB,MAA2B;QAE3B,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,CAAC,aAAa,CAAC,CAAC"}

package/dist/services/runtime/adapters/hermes.d.ts

@@ -1,204 +0,0 @@
-/**
- * HermesAdapter — first non-OpenClaw runtime adapter.
- *
- * Design: docs/multi-agent-runtime-generalization-plan.md §11, §28, §32.
- *
- * MVP scope (§32.3):
- *   - Only create / buildRuntime / getRuntimeVersion are wired up.
- *   - Baseline image mode only. Overlay upgrade CLI is deferred.
- *   - Assumes core.json.runtime_catalog.hermes has been populated by
- *     setup-manager.installHermes(): defaultImage (+ optional defaultImageDigest),
- *     shimPath, resources, homeDirName.
- */
-import { type InstallResult } from "../../setup-manager.js";
-import type { AdapterHooks, AdapterManifest, ConfigDocument, CreateInstanceArgs, CreateInstanceContext, InstancePaths, RuntimeAdapter, RuntimeSpec, RuntimeVersionInfo, CapabilityProfile, InstanceConfigMeta, PairingApproveInput } from "../types.js";
-export declare const HERMES_DEFAULT_GATEWAY_PORT = 8642;
-/**
- * One-shot startup migration for Hermes installs whose
- * catalog still stores `:latest` / `:slim`. Silent no-op when the catalog
- * already holds a pinned tag, when docker is unreachable, or when the
- * local image lacks the expected LABEL. Called from server.ts onReady.
- */
-export declare function migrateHermesImageTagIfNeeded(): void;
-/**
- * Resolve the hermes instance filesystem layout. Agent-home lives inside the
- * per-instance directory and is bind-mounted to /opt/data inside the container.
- */
-export declare function resolveHermesPaths(instanceId: string): InstancePaths;
-declare class HermesAdapter implements RuntimeAdapter {
-    readonly agentType: "hermes";
-    readonly displayName = "Hermes Agent";
-    readonly defaultCapabilities: CapabilityProfile;
-    readonly defaultGatewayPort = 8642;
-    readonly manifest: AdapterManifest;
-    readonly hooks: AdapterHooks;
-    /**
-     * Full Hermes instance bootstrap, physically migrated from the legacy
-     * `instance-manager.createHermesInstance()`. The framework routes layer
-     * calls this uniformly via `getAdapter(agentType).createInstance(args)` —
-     * instance-manager no longer owns any Hermes business logic.
-     *
-     * Rejection cases (all raise `InstanceCreationRejected`):
-     *   - core service_manager !== "nomad"
-     *   - core nomad_driver !== "docker"
-     *   - core runtime_catalog.hermes not present (install not run yet)
-     */
-    createInstance(args: CreateInstanceArgs): Promise<Record<string, any>>;
-    createInitialLayout(ctx: CreateInstanceContext): Promise<InstancePaths>;
-    buildRuntime(instanceId: string): Promise<RuntimeSpec>;
-    /**
-     * Hermes has no `openclaw.json` — it stores upstream metadata directly
-     * on instance.json under `x-jishushell`. Return a synthetic stub
-     * containing just that block so the LLM proxy's
-     * `deriveUpstreamConfig()` finds what it needs.
-     */
-    getNativeConfig(instanceId: string): Record<string, any> | null;
-    getStoredNativeConfig(instanceId: string): Record<string, any> | null;
-    /**
-     * Persist the `x-jishushell` meta block to instance.json. Hermes's user-
-     * facing config lives in yaml+env (editable via `writeConfig`), so this
-     * hook is scoped to the meta block only — any other keys in the payload
-     * are ignored intentionally.
-     *
-     * Called by `llm-proxy.saveInstanceConfig` when the editor saves a
-     * per-instance provider override. By implementing the same
-     * `saveNativeConfig(instanceId, {x-jishushell})` contract OpenClaw uses,
-     * Hermes piggy-backs on the shared API key encryption + rollback flow.
-     */
-    saveNativeConfig(instanceId: string, config: Record<string, any>): boolean;
-    /**
-     * Connection-apply hook (§7 / §17 of app-interconnect-design):
-     * translate resolved bindings into Hermes-native config.yaml updates.
-     *
-     * Hermes' web tool only supports Firecrawl/Tavily/Exa/Parallel as direct
-     * search backends — it does NOT recognize SearXNG natively. We expose
-     * SearXNG (and any other MCP-shaped capability) to the agent via the
-     * jishushell MCP firewall (see `mcp-shims/firewall.ts`).
-     *
-     * The firewall replaces the upstream package's `tools/list` description
-     * with the canonical wording declared in app yaml's
-     * `provides[].tool_schema` — preventing prompt-injection like the
-     * "news / recent events" + `time_range` slots of upstream `mcp-searxng`,
-     * which was rewriting Chinese queries into English and hallucinating
-     * dates on MiniMax-class models.
-     *
-     * For each `SEARCH_API_BASE_URL` (or future MCP-shaped slot):
-     *   1. Find the producing capability entry in the registry.
-     *   2. If it carries `toolSchema`, drop firewall + config.json into
-     *      agent-home and write `mcp_servers.<cap_id>` pointing at it.
-     *   3. If it doesn't (legacy yaml without §17 fields), fall back to
-     *      the PR 7 in-tree searxng-shim — kept for one release cycle as
-     *      backstop while community apps migrate.
-     *
-     * Other env (OPENAI_API_BASE_URL etc.) is a no-op here; the framework
-     * still injects them via `nomad-manager.injectConnectionsRuntimeEnv`
-     * and Hermes picks them up natively.
-     */
-    applyConnectionEnv(instanceId: string, env: Record<string, string>): Promise<void>;
-    getRuntimeVersion(instanceId: string): Promise<RuntimeVersionInfo>;
-    getConfigMeta(instanceId: string): Promise<InstanceConfigMeta>;
-    readConfig(instanceId: string): Promise<ConfigDocument>;
-    writeConfig(instanceId: string, doc: ConfigDocument): Promise<ConfigDocument>;
-    /**
-     * Persist Feishu/Lark OAuth credentials returned by the device-flow
-     * endpoints (handled by openclaw-routes.ts but adapter-agnostic at the
-     * persistence layer — framework code dispatches here via
-     * `instance-manager.saveFeishuCredentials`).
-     *
-     * Hermes reads platform config from two places on every gateway start:
-     *   - `config.yaml` → `platforms.feishu.enabled` + `platforms.feishu.extra.*`
-     *   - `.env`         → `FEISHU_APP_ID`, `FEISHU_APP_SECRET`
-     *
-     * We write into BOTH. The YAML holds structural config (enabled flag,
-     * connection mode, domain) and references the secret env vars via
-     * `${...}` interpolation. That way the YAML can be backed up / shared
-     * without leaking credentials, and the real secrets live next to the
-     * .env the user already edits.
-     */
-    saveFeishuCredentials(instanceId: string, creds: {
-        appId: string;
-        appSecret: string;
-        domain: string;
-        channelKey?: string;
-    }): void;
-    /**
-     * Persist WeChat (personal-account) credentials returned by iLink Bot API's QR
-     * login flow. Called from the shared `/api/instances/:id/weixin/login`
-     * handler via `instance-manager.saveWeixinCredentials` → adapter dispatch.
-     *
-     * Upstream Hermes's `WeixinAdapter.__init__` scans
-     * `$HERMES_HOME/weixin/accounts/*.json` at startup and auto-connects every
-     * account file it finds, so the handshake we persist here is everything
-     * the runtime needs to come online after an instance restart. The JSON
-     * shape is pinned to upstream's `save_weixin_account` helper:
-     * `{token, base_url, user_id, saved_at}` with mode 0600.
-     *
-     * We also flip `platforms.weixin.enabled: true` in the instance's
-     * config.yaml so the gateway actually tries to connect the adapter on
-     * next start (without it, hermes ignores the weixin folder entirely).
-     */
-    saveWeixinCredentials(instanceId: string, creds: {
-        accountId: string;
-        token: string;
-        baseUrl: string;
-        userId: string;
-    }): void;
-    /**
-     * List connected WeChat accounts for an instance. Backs the panel UI's
-     * "Connected Accounts" section in WeixinLoginPanel. Tolerates a missing
-     * directory (returns empty) and skips sidecar files the runtime writes
-     * alongside account records (sync buffers + context-token caches).
-     */
-    getWeixinAccounts(instanceId: string): Array<{
-        accountId: string;
-        userId?: string;
-        savedAt?: string;
-    }>;
-    /**
-     * Build the Nomad docker task spec directly from the persisted RuntimeSpec.
-     * Physically migrated from `nomad-manager.buildHermesTaskDocker`. Framework
-     * code now calls `getAdapter(agentType).buildNomadTask(id)` uniformly.
-     */
-    buildNomadTask(instanceId: string): Promise<Record<string, any>>;
-    /**
-     * Rewrite a persisted Hermes runtime spec to use a new host port.
-     * Hermes persists its port in `ports[0].hostPort/containerPort`,
-     * `env.API_SERVER_PORT`, and `health.port`.
-     */
-    reallocateRuntimePort(runtime: Record<string, any>, newPort: number): void;
-    readonly nomadJobPrefix = "hermes-";
-    migrateStartup(): void;
-    readonly inlineChatDescriptor: {
-        readonly apiKeyEnvVar: "API_SERVER_KEY";
-        readonly endpointPath: "/v1/chat/completions";
-    };
-    buildPairingListCommand(_instanceId: string): Promise<string[]>;
-    buildPairingApproveCommand(_instanceId: string, input: PairingApproveInput): Promise<string[]>;
-    installRuntime(_opts?: Record<string, any>): Promise<InstallResult>;
-    /**
-     * Non-blocking variant — returns a task id immediately and runs the
-     * install in the background. Matches OpenClaw's startBuildRuntimeImage.
-     */
-    startInstallRuntime(_opts?: Record<string, any>): InstallResult;
-    /**
-     * Shared helper that pulls (or builds) the Hermes runtime image and
-     * finalises the runtime catalog entry. Mirrors OpenClaw's
-     * `pullOrBuildOpenclawImageWithTask` so both runtimes expose the same
-     * install UX (local → pull → fallback build → digest pin).
-     */
-    private prepareHermesWithTask;
-    /**
-     * Hermes readiness: the image must retain an official RepoDigest from
-     * ghcr.io/x-aijishu/hermes-runtime. This accepts images pulled directly
-     * from our registry (and docker save/load copies that preserve RepoDigests)
-     * while rejecting arbitrary local retags that only look like Hermes runtime.
-     */
-    getInstallStatus(): {
-        installed: boolean;
-        imageReady: boolean;
-        version?: string;
-        digest?: string;
-    };
-}
-export declare const hermesAdapter: HermesAdapter;
-export {};