jishushell 0.6.5 → 0.6.18

package/dist/services/integrations/catalog.js

@@ -0,0 +1,73 @@
+/**
+ * Integration catalog service.
+ *
+ * Builds the `/api/integrations` payload from the registered Core-native
+ * integrations. Lives under `services/integrations/` because the catalog is the
+ * service-layer fact source for "what integrations does this Core know about
+ * and are they installed?", not a route concern.
+ *
+ * The HTTP wrapper at `routes/integrations.ts` is intentionally thin: it only
+ * exposes this payload over Fastify so frontend code can iterate without
+ * per-runtime branches.
+ */
+import { listRegisteredIntegrations } from "./index.js";
+// Per-integration install-status probe budget. Integrations may run
+// `docker image inspect` or npm metadata reads; if any hangs (slow docker
+// socket, fs contention, DNS) the catalog endpoint would stall too. Cap
+// each probe and treat a timeout as "unknown install status".
+const INSTALL_STATUS_TIMEOUT_MS = 2500;
+async function probeInstallStatus(integration) {
+    if (!integration.getInstallStatus)
+        return null;
+    let timer;
+    try {
+        return (await Promise.race([
+            Promise.resolve(integration.getInstallStatus()),
+            new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new Error("install-status probe timed out")), INSTALL_STATUS_TIMEOUT_MS);
+            }),
+        ]));
+    }
+    catch {
+        return null;
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+export async function buildIntegrationCatalogPayload() {
+    const integrations = await Promise.all(listRegisteredIntegrations().map(async (integration) => {
+        // Manifest is the integration's self-declared metadata. `manifest` is
+        // optional on the contract, so back-fill missing fields from the
+        // integration's top-level properties.
+        const manifest = integration.manifest ?? {
+            kind: integration.kind,
+            displayName: integration.displayName,
+            description: "",
+            defaultCapabilities: integration.defaultCapabilities,
+        };
+        const installStatus = await probeInstallStatus(integration);
+        const chatPanel = integration.defaultCapabilities?.ui?.chatPanel;
+        const hasInlineChatDescriptor = !!integration.inlineChatDescriptor;
+        return {
+            kind: integration.kind,
+            displayName: manifest.displayName ?? integration.displayName,
+            description: manifest.description ?? "",
+            defaultCapabilities: manifest.defaultCapabilities ?? integration.defaultCapabilities,
+            defaultCatalogEntry: manifest.defaultCatalogEntry ?? null,
+            requiresNomadDocker: manifest.requiresNomadDocker ?? false,
+            diskSpaceMB: manifest.diskSpaceMB ?? null,
+            providerPresets: manifest.providerPresets ?? [],
+            required: manifest.requiredForSetupReady === true,
+            nomadJobPrefix: integration.nomadJobPrefix ?? null,
+            nomadVariablePath: integration.nomadVariablePath ?? null,
+            preferredHostPort: integration.preferredHostPort ?? null,
+            chatPanel: chatPanel ?? null,
+            supportsInlineChat: hasInlineChatDescriptor,
+            installStatus,
+        };
+    }));
+    return { integrations };
+}
+//# sourceMappingURL=catalog.js.map

package/dist/services/integrations/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../src/services/integrations/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAExD,oEAAoE;AACpE,0EAA0E;AAC1E,wEAAwE;AACxE,8DAA8D;AAC9D,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC,KAAK,UAAU,kBAAkB,CAC/B,WAAkE;IAIlE,IAAI,CAAC,WAAW,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,KAAiC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC;YACzB,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC9B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC;YAC3G,CAAC,CAAC;SACH,CAAC,CAA0F,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B;IAClD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CACpC,0BAA0B,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;QACrD,sEAAsE;QACtE,iEAAiE;QACjE,sCAAsC;QACtC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,IAAI;YACvC,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,WAAW,EAAE,EAAE;YACf,mBAAmB,EAAE,WAAW,CAAC,mBAAmB;SACrD,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,WAAW,CAAC,mBAAmB,EAAE,EAAE,EAAE,SAAS,CAAC;QACjE,MAAM,uBAAuB,GAAG,CAAC,CAAC,WAAW,CAAC,oBAAoB,CAAC;QACnE,OAAO;YACL,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,WAAW,CAAC,WAAW;YAC5D,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;YACvC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,IAAI,WAAW,CAAC,mBAAmB;YACpF,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,IAAI,IAAI;YACzD,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,IAAI,KAAK;YAC1D,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI;YACzC,eAAe,EAAE,QAAQ,CAAC,eAAe,IAAI,EAAE;YAC/C,QAAQ,EAAE,QAAQ,CAAC,qBAAqB,KAAK,IAAI;YACjD,cAAc,EAAE,WAAW,CAAC,cAAc,IAAI,IAAI;YAClD,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,IAAI,IAAI;YACxD,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,IAAI,IAAI;YACxD,SAAS,EAAE,SAAS,IAAI,IAAI;YAC5B,kBAAkB,EAAE,uBAAuB;YAC3C,aAAa;SACd,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IACF,OAAO,EAAE,YAAY,EAAE,CAAC;AAC1B,CAAC"}

package/dist/services/integrations/custom/integration.d.ts

@@ -0,0 +1,28 @@
+/**
+ * CustomIntegration — registry placeholder for generic / user-imported AppSpec
+ * runtimes.
+ *
+ * Status (Step 13, 2026-06-09):
+ *   - The runtime hot path no longer dispatches to this integration for any
+ *     official builtin AppSpec. Generic container apps (Ollama, SearXNG,
+ *     Browserless, File Browser, WeKnora, Jishu KB …) are handled inline
+ *     by `runtime/instance.ts` using `GENERIC_APP_CAPABILITIES`; nobody
+ *     calls `getIntegration("custom")` on a normal lifecycle path.
+ *   - This file is kept as unregistered forward-looking plumbing for the
+ *     "user-imported restricted AppSpec YAML" feature (NOT yet exposed in
+ *     this release). When that feature ships, the lifecycle stubs below
+ *     will be implemented and registered deliberately from integrations/index.ts.
+ *
+ * Scope of this refactor:
+ *   - We DO support custom apps as a product capability.
+ *   - We do NOT, in this refactor, do any extra work to back-port or
+ *     migrate previously installed user-defined apps. Such installs are
+ *     classified by the migrator as unsupported and surfaced in its
+ *     report; they are not silently rehydrated by this integration.
+ *
+ * Port-rewrite helpers (`reallocateRuntimePort`, `getPersistedRuntimeSpec`,
+ * `applyConnectionEnv`) operate purely on canonical `runtime` blocks and are
+ * kept here for the future user-imported AppSpec feature.
+ */
+import type { AppIntegration } from "../types.js";
+export declare const customIntegration: AppIntegration;

package/dist/services/integrations/custom/integration.js

@@ -0,0 +1,179 @@
+/**
+ * CustomIntegration — registry placeholder for generic / user-imported AppSpec
+ * runtimes.
+ *
+ * Status (Step 13, 2026-06-09):
+ *   - The runtime hot path no longer dispatches to this integration for any
+ *     official builtin AppSpec. Generic container apps (Ollama, SearXNG,
+ *     Browserless, File Browser, WeKnora, Jishu KB …) are handled inline
+ *     by `runtime/instance.ts` using `GENERIC_APP_CAPABILITIES`; nobody
+ *     calls `getIntegration("custom")` on a normal lifecycle path.
+ *   - This file is kept as unregistered forward-looking plumbing for the
+ *     "user-imported restricted AppSpec YAML" feature (NOT yet exposed in
+ *     this release). When that feature ships, the lifecycle stubs below
+ *     will be implemented and registered deliberately from integrations/index.ts.
+ *
+ * Scope of this refactor:
+ *   - We DO support custom apps as a product capability.
+ *   - We do NOT, in this refactor, do any extra work to back-port or
+ *     migrate previously installed user-defined apps. Such installs are
+ *     classified by the migrator as unsupported and surfaced in its
+ *     report; they are not silently rehydrated by this integration.
+ *
+ * Port-rewrite helpers (`reallocateRuntimePort`, `getPersistedRuntimeSpec`,
+ * `applyConnectionEnv`) operate purely on canonical `runtime` blocks and are
+ * kept here for the future user-imported AppSpec feature.
+ */
+import { getInstance, updateInstanceMeta } from "../../instances/manager.js";
+// ── Capability profile — openclaw baseline with messagingPlatforms cleared ──
+//
+// Custom apps (Ollama, Searxng, Dify, etc.) are not agent-style runtimes, so
+// all agent capabilities (pairing, plugin install, skills, memory, MCP, IM
+// channels) are disabled. Phase 2 will override per-AppSpec as needed.
+const DEFAULT_CAPABILITIES = {
+    ui: {
+        http: true,
+        websocket: false,
+        chatPanel: "none",
+    },
+    pairing: {
+        list: false,
+        approve: false,
+        revoke: false,
+        clearPending: false,
+    },
+    configEditor: "custom",
+    configSchema: false,
+    customProvider: false,
+    pluginInstall: false,
+    skills: false,
+    mcp: false,
+    memory: false,
+    backupRestore: false,
+    // Match the generic AppSpec capability profile in runtime/instance.ts so
+    // future user-imported YAML installs do not change UI behavior when this
+    // integration becomes registered.
+    usageStats: true,
+    restartlessReload: false,
+    messagingPlatforms: [],
+};
+export const customIntegration = {
+    kind: "custom",
+    displayName: "Custom App",
+    nomadJobPrefix: "",
+    defaultCapabilities: DEFAULT_CAPABILITIES,
+    hooks: {
+        async onCreatePrepare(_ctx) {
+            throw new Error("[custom-integration] hooks.onCreatePrepare: not implemented - user-imported AppSpec YAML is not yet supported in this release");
+        },
+    },
+    /**
+     * Rewrite only the first externally reachable host port on the canonical
+     * `runtime.ports[]` mapping.
+     *
+     * Domain semantics:
+     *   - `hostPort` is the Core-allocated port exposed on the host; reallocation
+     *     may rewrite it freely.
+     *   - `containerPort` is the in-container listener owned by the workload
+     *     and MUST stay stable across host-port reallocations.
+     *   - `runtime.health.port`, when previously bound to the old host port,
+     *     is kept in sync so health checks keep targeting the published port.
+     *
+     * Legacy env mirrors are intentionally not written here: canonical
+     * `runtime.ports[]` is the only host-port fact source.
+     */
+    reallocateRuntimePort(runtime, newPort) {
+        let previousHostPort = null;
+        if (Array.isArray(runtime.ports) && runtime.ports.length > 0) {
+            let rewrote = false;
+            runtime.ports = runtime.ports.map((port, index) => {
+                if (rewrote)
+                    return port;
+                if ((port?.visibility ?? "external") !== "internal" || index === 0) {
+                    rewrote = true;
+                    if (Number.isInteger(port?.hostPort) && port.hostPort > 0) {
+                        previousHostPort = port.hostPort;
+                    }
+                    return { ...port, hostPort: newPort };
+                }
+                return port;
+            });
+        }
+        else {
+            // No canonical `runtime.ports[]` yet. Per Step 2, an integration's
+            // `reallocateRuntimePort` is NOT allowed to derive `containerPort`
+            // from the new host port — that would let host-port reallocation
+            // silently rewrite the in-container listener. Materializing a
+            // canonical port mapping for un-migrated records is the migrator's
+            // job; throw loudly so any caller that reaches this path through a
+            // mis-routed legacy instance is forced to repair before reallocation.
+            throw new Error("[custom-integration] reallocateRuntimePort: instance is missing canonical "
+                + "runtime.ports[]; run the legacy migrator before reallocating.");
+        }
+        if (runtime.health
+            && typeof runtime.health === "object"
+            && runtime.health.port != null
+            && previousHostPort != null
+            && Number(runtime.health.port) === previousHostPort) {
+            runtime.health = { ...runtime.health, port: newPort };
+        }
+    },
+    async getPersistedRuntimeSpec(instanceId) {
+        const meta = getInstance(instanceId);
+        const runtime = meta?.runtime;
+        if (!runtime || typeof runtime !== "object") {
+            throw new Error(`Custom instance ${instanceId} has no runtime configuration`);
+        }
+        return {
+            ...runtime,
+            env: runtime.env && typeof runtime.env === "object"
+                ? { ...runtime.env }
+                : {},
+        };
+    },
+    async applyConnectionEnv(instanceId, env) {
+        const meta = getInstance(instanceId);
+        if (!meta)
+            return;
+        const runtime = meta.runtime && typeof meta.runtime === "object"
+            ? { ...meta.runtime }
+            : {};
+        const runtimeEnv = runtime.env && typeof runtime.env === "object"
+            ? { ...runtime.env }
+            : {};
+        runtime.env = { ...runtimeEnv, ...env };
+        // Route through the canonical metadata writer. Even though this
+        // integration is currently dormant, future activation must not introduce
+        // a second raw instance.json write path.
+        updateInstanceMeta(instanceId, { runtime });
+    },
+    // ── Required lifecycle methods — stub for future user-imported YAML ──
+    //
+    // These are called only if/when a user-imported AppSpec instance is
+    // operated (created, started, configured). The current release does not
+    // expose such installs, so they throw loud errors rather than silently
+    // returning bad data. They will be implemented when the user-imported
+    // restricted YAML feature ships.
+    async buildRuntime(_instanceId) {
+        throw new Error("[custom-integration] buildRuntime: not implemented — user-imported AppSpec YAML is not yet supported in this release");
+    },
+    async getRuntimeVersion(_instanceId) {
+        return { integrationKind: "custom", mode: "baseline" };
+    },
+    async getConfigMeta(_instanceId) {
+        throw new Error("[custom-integration] getConfigMeta: not implemented — user-imported AppSpec YAML is not yet supported in this release");
+    },
+    async readConfig(_instanceId) {
+        throw new Error("[custom-integration] readConfig: not implemented — user-imported AppSpec YAML is not yet supported in this release");
+    },
+    async writeConfig(_instanceId, _doc) {
+        throw new Error("[custom-integration] writeConfig: not implemented — user-imported AppSpec YAML is not yet supported in this release");
+    },
+    async buildPairingListCommand(_instanceId) {
+        throw new Error("[custom-integration] buildPairingListCommand: not implemented — user-imported AppSpec YAML is not yet supported in this release");
+    },
+    async buildPairingApproveCommand(_instanceId, _input) {
+        throw new Error("[custom-integration] buildPairingApproveCommand: not implemented — user-imported AppSpec YAML is not yet supported in this release");
+    },
+};
+//# sourceMappingURL=integration.js.map

package/dist/services/integrations/custom/integration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.js","sourceRoot":"","sources":["../../../../src/services/integrations/custom/integration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAWH,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAE7E,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,uEAAuE;AAEvE,MAAM,oBAAoB,GAAsB;IAC9C,EAAE,EAAE;QACF,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,MAAM;KAClB;IACD,OAAO,EAAE;QACP,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,KAAK;QACb,YAAY,EAAE,KAAK;KACpB;IACD,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE,KAAK;IACnB,cAAc,EAAE,KAAK;IACrB,aAAa,EAAE,KAAK;IACpB,MAAM,EAAE,KAAK;IACb,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,KAAK;IACb,aAAa,EAAE,KAAK;IACpB,yEAAyE;IACzE,yEAAyE;IACzE,kCAAkC;IAClC,UAAU,EAAE,IAAI;IAChB,iBAAiB,EAAE,KAAK;IACxB,kBAAkB,EAAE,EAAE;CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAmB;IAC/C,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,YAAY;IACzB,cAAc,EAAE,EAAE;IAClB,mBAAmB,EAAE,oBAAoB;IACzC,KAAK,EAAE;QACL,KAAK,CAAC,eAAe,CAAC,IAAI;YACxB,MAAM,IAAI,KAAK,CACb,+HAA+H,CAChI,CAAC;QACJ,CAAC;KACF;IAED;;;;;;;;;;;;;;OAcG;IACH,qBAAqB,CAAC,OAA4B,EAAE,OAAe;QACjE,IAAI,gBAAgB,GAAkB,IAAI,CAAC;QAE3C,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,KAAa,EAAE,EAAE;gBAC7D,IAAI,OAAO;oBAAE,OAAO,IAAI,CAAC;gBACzB,IAAI,CAAC,IAAI,EAAE,UAAU,IAAI,UAAU,CAAC,KAAK,UAAU,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;oBACnE,OAAO,GAAG,IAAI,CAAC;oBACf,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;wBAC1D,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC;oBACnC,CAAC;oBACD,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;gBACxC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,mEAAmE;YACnE,mEAAmE;YACnE,iEAAiE;YACjE,8DAA8D;YAC9D,mEAAmE;YACnE,mEAAmE;YACnE,sEAAsE;YACtE,MAAM,IAAI,KAAK,CACb,4EAA4E;kBAC1E,+DAA+D,CAClE,CAAC;QACJ,CAAC;QAED,IACE,OAAO,CAAC,MAAM;eACX,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;eAClC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI;eAC3B,gBAAgB,IAAI,IAAI;eACxB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,gBAAgB,EACnD,CAAC;YACD,OAAO,CAAC,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,UAAkB;QAC9C,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAA+B,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC;QAC9B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,mBAAmB,UAAU,+BAA+B,CAAC,CAAC;QAChF,CAAC;QACD,OAAO;YACL,GAAI,OAAuB;YAC3B,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;gBACjD,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;gBACpB,CAAC,CAAC,EAAE;SACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,UAAkB,EAClB,GAA2B;QAE3B,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAA+B,CAAC;QACnE,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAC9D,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE;YACrB,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAC/D,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;YACpB,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,UAAU,EAAE,GAAG,GAAG,EAAE,CAAC;QACxC,gEAAgE;QAChE,yEAAyE;QACzE,yCAAyC;QACzC,kBAAkB,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,wEAAwE;IACxE,EAAE;IACF,oEAAoE;IACpE,wEAAwE;IACxE,uEAAuE;IACvE,sEAAsE;IACtE,iCAAiC;IAEjC,KAAK,CAAC,YAAY,CAAC,WAAmB;QACpC,MAAM,IAAI,KAAK,CACb,sHAAsH,CACvH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,WAAmB;QACzC,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,WAAmB;QACrC,MAAM,IAAI,KAAK,CACb,uHAAuH,CACxH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,MAAM,IAAI,KAAK,CACb,oHAAoH,CACrH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,IAAoB;QACzD,MAAM,IAAI,KAAK,CACb,qHAAqH,CACtH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,WAAmB;QAC/C,MAAM,IAAI,KAAK,CACb,iIAAiI,CAClI,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,WAAmB,EACnB,MAA2B;QAE3B,MAAM,IAAI,KAAK,CACb,oIAAoI,CACrI,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/services/integrations/hermes/integration.d.ts

@@ -0,0 +1,194 @@
+/**
+ * HermesIntegration — first non-OpenClaw runtime integration.
+ *
+ * Legacy AppIntegration implementation retained during migration toward the
+ * model described in docs/core-app-architecture.md.
+ *
+ * Current scope:
+ *   - Only create / buildRuntime / getRuntimeVersion are wired up.
+ *   - Baseline image mode only. Overlay upgrade CLI is deferred.
+ *   - Assumes the Hermes integration runtime record has been populated in
+ *     core.json.runtime_catalog.hermes: defaultImage (+ optional
+ *     defaultImageDigest), resources, homeDirName.
+ */
+import { type InstallResult } from "../../setup/setup-manager.js";
+import type { AppIntegrationHooks, AppIntegrationManifest, ConfigDocument, InstancePaths, AppIntegration, IntegrationConnectionSideEffectArgs, RuntimeSpec, RuntimeVersionInfo, CapabilityProfile, InstanceConfigMeta, PairingApproveInput } from "../types.js";
+import type { RuntimeContribution } from "../../runtime/workload-types.js";
+export declare const HERMES_PREFERRED_HOST_PORT = 8642;
+/**
+ * One-shot startup migration for Hermes installs whose
+ * catalog still stores `:latest` / `:slim`. Silent no-op when the catalog
+ * already holds a pinned tag, when docker is unreachable, or when the
+ * local image lacks the expected LABEL. Called from server.ts onReady.
+ */
+export declare function migrateHermesImageTagIfNeeded(): void;
+/**
+ * Resolve the hermes instance filesystem layout. Agent-home lives inside the
+ * per-instance directory and is bind-mounted to /opt/data inside the container.
+ */
+export declare function resolveHermesPaths(instanceId: string): InstancePaths;
+declare class HermesIntegration implements AppIntegration {
+    readonly kind: "hermes";
+    readonly displayName = "Hermes Agent";
+    readonly defaultCapabilities: CapabilityProfile;
+    readonly preferredHostPort = 8642;
+    readonly manifest: AppIntegrationManifest;
+    readonly hooks: AppIntegrationHooks;
+    private prepareInitialLayout;
+    buildRuntime(instanceId: string): Promise<RuntimeSpec>;
+    getPersistedRuntimeSpec(instanceId: string): Promise<RuntimeSpec>;
+    buildRuntimeContribution(instanceId: string): Promise<RuntimeContribution>;
+    /**
+     * Hermes has no `openclaw.json` — it stores upstream metadata directly
+     * on instance.json under `x-jishushell`. Return a synthetic stub
+     * containing just that block so the LLM proxy's
+     * `deriveUpstreamConfig()` finds what it needs.
+     */
+    getNativeConfig(instanceId: string): Record<string, any> | null;
+    getStoredNativeConfig(instanceId: string): Record<string, any> | null;
+    /**
+     * Persist the `x-jishushell` meta block to instance.json. Hermes's user-
+     * facing config lives in yaml+env (editable via `writeConfig`), so this
+     * hook is scoped to the meta block only — any other keys in the payload
+     * are ignored intentionally.
+     *
+     * Called by `llm-proxy.saveInstanceConfig` when the editor saves a
+     * per-instance provider override. By implementing the same
+     * `saveNativeConfig(instanceId, {x-jishushell})` contract OpenClaw uses,
+     * Hermes piggy-backs on the shared API key encryption + rollback flow.
+     */
+    saveNativeConfig(instanceId: string, config: Record<string, any>): boolean;
+    /**
+     * Connection-apply hook: translate resolved bindings into Hermes-native
+     * config.yaml updates.
+     *
+     * Hermes' web tool only supports Firecrawl/Tavily/Exa/Parallel as direct
+     * search backends — it does NOT recognize SearXNG natively. We expose
+     * SearXNG (and any other MCP-shaped capability) to the agent via the
+     * jishushell MCP firewall (see `mcp-shims/firewall.ts`).
+     *
+     * The firewall replaces the upstream package's `tools/list` description
+     * with the canonical wording declared in app yaml's
+     * `provides[].tool_schema` — preventing prompt-injection like the
+     * "news / recent events" + `time_range` slots of upstream `mcp-searxng`,
+     * which was rewriting Chinese queries into English and hallucinating
+     * dates on MiniMax-class models.
+     *
+     * For each `SEARCH_API_BASE_URL` (or future MCP-shaped slot):
+     *   1. Find the producing capability entry in the registry.
+     *   2. If it carries `toolSchema`, drop firewall + config.json into
+     *      agent-home and write `mcp_servers.<cap_id>` pointing at it.
+     *   3. If it doesn't (legacy yaml without §17 fields), fall back to
+     *      the PR 7 in-tree searxng-shim — kept for one release cycle as
+     *      backstop while community apps migrate.
+     *
+     * Other env (OPENAI_API_BASE_URL etc.) is a no-op here; the framework
+     * still injects them through the Nomad driver's runtime env phase
+     * and Hermes picks them up natively.
+     */
+    applyConnectionEnv(instanceId: string, env: Record<string, string>): Promise<void>;
+    listConnectionSideEffectFiles(args: IntegrationConnectionSideEffectArgs): string[];
+    getRuntimeVersion(instanceId: string): Promise<RuntimeVersionInfo>;
+    getConfigMeta(instanceId: string): Promise<InstanceConfigMeta>;
+    readConfig(instanceId: string): Promise<ConfigDocument>;
+    writeConfig(instanceId: string, doc: ConfigDocument): Promise<ConfigDocument>;
+    /**
+     * Persist Feishu/Lark OAuth credentials returned by the device-flow
+     * endpoints. The HTTP route belongs to the OpenClaw integration surface, but
+     * persistence dispatches through the consumer integration here because Hermes
+     * owns its private config/env layout.
+     *
+     * Hermes reads platform config from two places on every gateway start:
+     *   - `config.yaml` → `platforms.feishu.enabled` + `platforms.feishu.extra.*`
+     *   - `.env`         → `FEISHU_APP_ID`, `FEISHU_APP_SECRET`
+     *
+     * We write into BOTH. The YAML holds structural config (enabled flag,
+     * connection mode, domain) and references the secret env vars via
+     * `${...}` interpolation. That way the YAML can be backed up / shared
+     * without leaking credentials, and the real secrets live next to the
+     * .env the user already edits.
+     */
+    saveFeishuCredentials(instanceId: string, creds: {
+        appId: string;
+        appSecret: string;
+        domain: string;
+        channelKey?: string;
+    }): void;
+    /**
+     * Persist WeChat (personal-account) credentials returned by iLink Bot API's QR
+     * login flow. Called from the shared `/api/instances/:id/weixin/login`
+     * handler via `instance-manager.saveWeixinCredentials` → integration dispatch.
+     *
+     * Upstream Hermes's `WeixinAdapter.__init__` scans
+     * `$HERMES_HOME/weixin/accounts/*.json` at startup and auto-connects every
+     * account file it finds, so the handshake we persist here is everything
+     * the runtime needs to come online after an instance restart. The JSON
+     * shape is pinned to upstream's `save_weixin_account` helper:
+     * `{token, base_url, user_id, saved_at}` with mode 0600.
+     *
+     * We also flip `platforms.weixin.enabled: true` in the instance's
+     * config.yaml so the gateway actually tries to connect the integration on
+     * next start (without it, hermes ignores the weixin folder entirely).
+     */
+    saveWeixinCredentials(instanceId: string, creds: {
+        accountId: string;
+        token: string;
+        baseUrl: string;
+        userId: string;
+    }): void;
+    /**
+     * List connected WeChat accounts for an instance. Backs the panel UI's
+     * "Connected Accounts" section in WeixinLoginPanel. Tolerates a missing
+     * directory (returns empty) and skips sidecar files the runtime writes
+     * alongside account records (sync buffers + context-token caches).
+     */
+    getWeixinAccounts(instanceId: string): Array<{
+        accountId: string;
+        userId?: string;
+        savedAt?: string;
+    }>;
+    /**
+     * Rewrite only the host-side published gateway port.
+     *
+     * Hermes keeps listening on a fixed `HERMES_CONTAINER_PORT` inside the
+     * container regardless of how Core publishes it; reallocation only
+     * touches `hostPort`. Missing canonical `runtime.ports[]` is a migration
+     * error for ordinary lifecycle paths.
+     */
+    reallocateRuntimePort(runtime: Record<string, any>, newPort: number): void;
+    readonly nomadJobPrefix = "hermes-";
+    normalizeCoreConfigOnStartup(): void;
+    readonly inlineChatDescriptor: {
+        readonly apiKeyEnvVar: "API_SERVER_KEY";
+        readonly endpointPath: "/v1/chat/completions";
+    };
+    buildPairingListCommand(_instanceId: string): Promise<string[]>;
+    buildPairingApproveCommand(_instanceId: string, input: PairingApproveInput): Promise<string[]>;
+    installRuntime(_opts?: Record<string, any>): Promise<InstallResult>;
+    /**
+     * Non-blocking variant — returns a task id immediately and runs the
+     * install in the background. Matches OpenClaw's startBuildRuntimeImage.
+     */
+    startInstallRuntime(_opts?: Record<string, any>): InstallResult;
+    /**
+     * Shared helper that pulls (or builds) the Hermes runtime image and
+     * finalises the integration runtime record. Mirrors OpenClaw's
+     * `pullOrBuildOpenclawImageWithTask` so both runtimes expose the same
+     * install UX (local → pull → fallback build → digest pin).
+     */
+    private prepareHermesWithTask;
+    /**
+     * Hermes readiness: the image must retain an official RepoDigest from
+     * ghcr.io/x-aijishu/hermes-runtime. This accepts images pulled directly
+     * from our registry (and docker save/load copies that preserve RepoDigests)
+     * while rejecting arbitrary local retags that only look like Hermes runtime.
+     */
+    getInstallStatus(): {
+        installed: boolean;
+        imageReady: boolean;
+        version?: string;
+        digest?: string;
+    };
+}
+export declare const hermesIntegration: HermesIntegration;
+export {};