Some checks failed
ClawSweeper Dispatch / dispatch (push) Has been cancelled
CodeQL / Security High (actions) (push) Has been cancelled
CodeQL / Security High (channel-runtime-boundary) (push) Has been cancelled
CodeQL / Security High (core-auth-secrets) (push) Has been cancelled
CodeQL / Security High (mcp-process-tool-boundary) (push) Has been cancelled
CodeQL / Security High (network-ssrf-boundary) (push) Has been cancelled
CodeQL / Security High (plugin-trust-boundary) (push) Has been cancelled
CodeQL / Security High (process-exec-boundary) (push) Has been cancelled
Docs Sync Publish Repo / sync-publish-repo (push) Has been cancelled
Docs / docs (push) Has been cancelled
OpenClaw Stable Main Closeout / Resolve stable release closeout inputs (push) Has been cancelled
OpenClaw Stable Main Closeout / Verify stable main closeout (push) Has been cancelled
Workflow Sanity / no-tabs (push) Has been cancelled
Workflow Sanity / actionlint (push) Has been cancelled
Workflow Sanity / generated-doc-baselines (push) Has been cancelled
CI / runner-admission (push) Has been cancelled
CI / preflight (push) Has been cancelled
CI / security-fast (push) Has been cancelled
CI / pnpm-store-warmup (push) Has been cancelled
CI / build-artifacts (push) Has been cancelled
CI / native-i18n (push) Has been cancelled
CI / ${{ matrix.check_name }} (push) Has been cancelled
CI / ${{ matrix.checkName }} (push) Has been cancelled
CI / checks-node-compat-node22 (push) Has been cancelled
CI / check-bundled-channel-config-metadata (push) Has been cancelled
CI / check-dependencies (push) Has been cancelled
CI / check-guards (push) Has been cancelled
CI / check-lint (push) Has been cancelled
CI / check-prod-types (push) Has been cancelled
CI / check-shrinkwrap (push) Has been cancelled
CI / check-test-types (push) Has been cancelled
CI / check-additional-boundaries-a (push) Has been cancelled
CI / check-additional-boundaries-bcd (push) Has been cancelled
CI / check-additional-extension-bundled (push) Has been cancelled
CI / check-additional-extension-channels (push) Has been cancelled
CI / check-additional-extension-package-boundary (push) Has been cancelled
CI / check-additional-runtime-topology-architecture (push) Has been cancelled
CI / check-session-accessor-boundary (push) Has been cancelled
CI / check-session-transcript-reader-boundary (push) Has been cancelled
CI / check-docs (push) Has been cancelled
CI / skills-python (push) Has been cancelled
CI / macos-swift (push) Has been cancelled
CI / ios-build (push) Has been cancelled
CI / ci-timings-summary (push) Has been cancelled
Native App Locale Refresh / Refresh native fa (push) Has been cancelled
Native App Locale Refresh / Refresh native fr (push) Has been cancelled
Native App Locale Refresh / Refresh native hi (push) Has been cancelled
Native App Locale Refresh / Refresh native id (push) Has been cancelled
Native App Locale Refresh / Refresh native it (push) Has been cancelled
Native App Locale Refresh / Refresh native ja-JP (push) Has been cancelled
Control UI Locale Refresh / plan (push) Has been cancelled
Control UI Locale Refresh / Refresh ${{ matrix.locale }} (push) Has been cancelled
Control UI Locale Refresh / Commit control UI locale refresh (push) Has been cancelled
Live Media Runner Image / Build live media runner image (push) Has been cancelled
Native App Locale Refresh / Refresh native ar (push) Has been cancelled
Native App Locale Refresh / Refresh native de (push) Has been cancelled
Native App Locale Refresh / Refresh native es (push) Has been cancelled
Native App Locale Refresh / Refresh native ko (push) Has been cancelled
Native App Locale Refresh / Refresh native nl (push) Has been cancelled
Native App Locale Refresh / Refresh native pl (push) Has been cancelled
Native App Locale Refresh / Refresh native pt-BR (push) Has been cancelled
Native App Locale Refresh / Refresh native ru (push) Has been cancelled
Native App Locale Refresh / Refresh native sv (push) Has been cancelled
Native App Locale Refresh / Refresh native th (push) Has been cancelled
Native App Locale Refresh / Refresh native tr (push) Has been cancelled
Native App Locale Refresh / Refresh native uk (push) Has been cancelled
Native App Locale Refresh / Refresh native vi (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-CN (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-TW (push) Has been cancelled
Native App Locale Refresh / Commit native locale refresh (push) Has been cancelled
Plugin Init Scaffold Validation / Validate provider scaffold (push) Has been cancelled
Plugin NPM Release / preview_plugins_npm (push) Has been cancelled
Plugin NPM Release / Validate release publish approval (push) Has been cancelled
Plugin NPM Release / preview_plugin_pack (push) Has been cancelled
Plugin NPM Release / publish_plugins_npm (push) Has been cancelled
Sandbox Common Smoke / sandbox-common-smoke (push) Has been cancelled
Website Installer Sync / static (push) Has been cancelled
Website Installer Sync / linux-docker (push) Has been cancelled
Website Installer Sync / macos-installer (push) Has been cancelled
Website Installer Sync / windows-installer (push) Has been cancelled
Website Installer Sync / sync-website (push) Has been cancelled
Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11), free to diverge. Tree copied sans upstream .git; upstream remote added for future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19. Preserves docs/ARCHITECTURE.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2
125 lines
4.2 KiB
TypeScript
125 lines
4.2 KiB
TypeScript
// Migrate Hermes plugin module implements items behavior.
|
|
import type { MigrationItem } from "openclaw/plugin-sdk/migration";
|
|
import {
|
|
createMigrationItem,
|
|
markMigrationItemConflict,
|
|
markMigrationItemError,
|
|
markMigrationItemSkipped,
|
|
} from "openclaw/plugin-sdk/migration";
|
|
import { readString } from "./helpers.js";
|
|
|
|
export const HERMES_REASON_ALREADY_CONFIGURED = "already configured";
|
|
export const HERMES_REASON_DEFAULT_MODEL_CONFIGURED = "default model already configured";
|
|
export const HERMES_REASON_INCLUDE_SECRETS = "auth credential migration not selected";
|
|
export const HERMES_REASON_AUTH_PROFILE_EXISTS = "auth profile exists";
|
|
export const HERMES_REASON_CONFIG_RUNTIME_UNAVAILABLE = "config runtime unavailable";
|
|
export const HERMES_REASON_MISSING_SECRET_METADATA = "missing secret metadata";
|
|
export const HERMES_REASON_SECRET_NO_LONGER_PRESENT = "secret no longer present";
|
|
export const HERMES_REASON_AUTH_PROFILE_WRITE_FAILED = "failed to write auth profile";
|
|
|
|
export function createHermesModelItem(params: {
|
|
model: string;
|
|
currentModel?: string;
|
|
overwrite?: boolean;
|
|
}): MigrationItem {
|
|
const alreadyConfigured = params.currentModel === params.model;
|
|
const conflict = Boolean(params.currentModel && !params.overwrite && !alreadyConfigured);
|
|
return createMigrationItem({
|
|
id: "config:default-model",
|
|
kind: "config",
|
|
action: alreadyConfigured ? "skip" : "update",
|
|
target: "agents.defaults.model",
|
|
status: alreadyConfigured ? "skipped" : conflict ? "conflict" : "planned",
|
|
reason: alreadyConfigured
|
|
? HERMES_REASON_ALREADY_CONFIGURED
|
|
: conflict
|
|
? HERMES_REASON_DEFAULT_MODEL_CONFIGURED
|
|
: undefined,
|
|
details: { model: params.model },
|
|
});
|
|
}
|
|
|
|
export function readHermesModelDetails(item: MigrationItem): { model: string } | undefined {
|
|
const model = readString(item.details?.model);
|
|
return model ? { model } : undefined;
|
|
}
|
|
|
|
export function createHermesSecretItem(params: {
|
|
id: string;
|
|
source?: string;
|
|
target: string;
|
|
includeSecrets?: boolean;
|
|
existsAlready?: boolean;
|
|
details: {
|
|
envVar?: string;
|
|
provider: string;
|
|
profileId: string;
|
|
mode?: "token";
|
|
sourceKind?: "hermes-env" | "opencode-auth-json";
|
|
sourceProvider?: string;
|
|
secretField?: string;
|
|
};
|
|
}): MigrationItem {
|
|
const skipped = !params.includeSecrets;
|
|
const conflict = Boolean(params.existsAlready && !skipped);
|
|
return createMigrationItem({
|
|
id: params.id,
|
|
kind: "secret",
|
|
action: skipped ? "skip" : "create",
|
|
source: params.source,
|
|
target: params.target,
|
|
status: skipped ? "skipped" : conflict ? "conflict" : "planned",
|
|
sensitive: true,
|
|
reason: skipped
|
|
? HERMES_REASON_INCLUDE_SECRETS
|
|
: conflict
|
|
? HERMES_REASON_AUTH_PROFILE_EXISTS
|
|
: undefined,
|
|
details: params.details,
|
|
});
|
|
}
|
|
|
|
export function readHermesSecretDetails(item: MigrationItem):
|
|
| {
|
|
envVar?: string;
|
|
provider: string;
|
|
profileId: string;
|
|
mode?: "token";
|
|
sourceKind?: string;
|
|
sourceProvider?: string;
|
|
secretField?: string;
|
|
}
|
|
| undefined {
|
|
const envVar = readString(item.details?.envVar);
|
|
const provider = readString(item.details?.provider);
|
|
const profileId = readString(item.details?.profileId);
|
|
if (!provider || !profileId) {
|
|
return undefined;
|
|
}
|
|
const mode = item.details?.mode === "token" ? "token" : undefined;
|
|
const sourceKind = readString(item.details?.sourceKind);
|
|
const sourceProvider = readString(item.details?.sourceProvider);
|
|
const secretField = readString(item.details?.secretField);
|
|
return {
|
|
...(envVar ? { envVar } : {}),
|
|
provider,
|
|
profileId,
|
|
...(mode ? { mode } : {}),
|
|
...(sourceKind ? { sourceKind } : {}),
|
|
...(sourceProvider ? { sourceProvider } : {}),
|
|
...(secretField ? { secretField } : {}),
|
|
};
|
|
}
|
|
|
|
export function hermesItemConflict(item: MigrationItem, reason: string): MigrationItem {
|
|
return markMigrationItemConflict(item, reason);
|
|
}
|
|
|
|
export function hermesItemError(item: MigrationItem, reason: string): MigrationItem {
|
|
return markMigrationItemError(item, reason);
|
|
}
|
|
|
|
export function hermesItemSkipped(item: MigrationItem, reason: string): MigrationItem {
|
|
return markMigrationItemSkipped(item, reason);
|
|
}
|