@alfe.ai/openclaw-chat 0.8.0 → 0.8.2

package/dist/plugin2.cjs

@@ -3,8 +3,8 @@ let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");
 let node_os = require("node:os");
 let _alfe_ai_chat = require("@alfe.ai/chat");
-let node_crypto = require("node:crypto");
 let _alfe_ai_agent_api_client = require("@alfe.ai/agent-api-client");
+let node_crypto = require("node:crypto");
 let _alfe_ai_config = require("@alfe.ai/config");
 let node_fs = require("node:fs");
 //#region src/outbound-media.ts
@@ -106,9 +106,9 @@ function extensionOf(p) {
 function isRemoteUrl(ref) {
 	return /^https?:\/\//i.test(ref);
 }
-/** Non-http(s) URI schemes (data:, blob:, media://inbound claim-checks…) —
-* not local paths, nothing we can upload. Windows drive letters (C:\) are
-* paths, not schemes. */
+/** Non-http(s) URI schemes (data:, blob:, …) — not local paths, nothing we
+* can upload. Windows drive letters (C:\) are paths, not schemes.
+* `media://inbound/<id>` is handled separately (resolveOpenClawMediaPath). */
 function hasNonPathScheme(ref) {
 	if (/^file:\/\//i.test(ref)) return false;
 	if (/^[a-zA-Z]:[\\/]/.test(ref)) return false;
@@ -120,6 +120,34 @@ function resolveLocalMediaPath(ref) {
 	if (p === "~" || p.startsWith("~/")) p = (0, node_path.join)((0, node_os.homedir)(), p.slice(1));
 	return (0, node_path.isAbsolute)(p) ? p : (0, node_path.resolve)(process.cwd(), p);
 }
+const MEDIA_INBOUND_RE = /^media:\/\/inbound\/([^/\\]+)$/i;
+/** Resolve a `media://inbound/<id>` URI to its media-store file, or null if
+* the ref isn't one (or the id is unsafe). Traversal-hardened: the id must
+* be a single path segment. */
+function resolveOpenClawMediaPath(ref) {
+	const match = MEDIA_INBOUND_RE.exec(ref.trim());
+	if (!match) return null;
+	let id = match[1];
+	try {
+		id = decodeURIComponent(id);
+	} catch {}
+	if (!id || id === "." || id === ".." || /[/\\\0]/.test(id)) return null;
+	const stateDirOverride = process.env.OPENCLAW_STATE_DIR?.trim();
+	const home = process.env.OPENCLAW_HOME?.trim();
+	return (0, node_path.join)(stateDirOverride?.length ? stateDirOverride : (0, node_path.join)(home?.length ? home : (0, node_os.homedir)(), ".openclaw"), "media", "inbound", id);
+}
+/**
+* Map an outbound ref to the local file we would upload: media-store path
+* for `media://inbound/…`, filesystem path for path-shaped refs, null for
+* remote URLs and unsupported schemes (data:, blob:, …).
+*/
+function toLocalUploadPath(ref) {
+	if (isRemoteUrl(ref)) return null;
+	const mediaStorePath = resolveOpenClawMediaPath(ref);
+	if (mediaStorePath) return mediaStorePath;
+	if (hasNonPathScheme(ref)) return null;
+	return resolveLocalMediaPath(ref);
+}
 async function uploadLocalFile(localPath, log, deps) {
 	const client = deps.getClient ? deps.getClient() : getUploadClient(log);
 	if (!client) return null;
@@ -197,11 +225,11 @@ function resolveOutboundMediaRef(ref, ctx, log, deps = {}) {
 	const trimmed = ref.trim();
 	if (!trimmed) return Promise.resolve(null);
 	if (isRemoteUrl(trimmed)) return Promise.resolve({ url: trimmed });
-	if (hasNonPathScheme(trimmed)) {
+	const localPath = toLocalUploadPath(trimmed);
+	if (!localPath) {
 		log.warn(`Outbound media ref has unsupported scheme — skipping: ${trimmed.slice(0, 120)}`);
 		return Promise.resolve(null);
 	}
-	const localPath = resolveLocalMediaPath(trimmed);
 	const cached = ctx.uploads.get(localPath);
 	if (cached) return cached;
 	const promise = ctx.uploads.size >= 10 ? (() => {
@@ -230,8 +258,8 @@ async function resolveOutboundMedia(refs, ctx, log, deps = {}) {
 			attachments.push(resolved);
 			continue;
 		}
-		if (isRemoteUrl(trimmed) || hasNonPathScheme(trimmed)) continue;
-		const localPath = resolveLocalMediaPath(trimmed);
+		const localPath = toLocalUploadPath(trimmed);
+		if (!localPath) continue;
 		if (!ctx.annotatedFailures.has(localPath)) {
 			ctx.annotatedFailures.add(localPath);
 			newFailures.push((0, node_path.basename)(localPath));
@@ -327,11 +355,16 @@ async function rewriteLocalMarkdownImages(text, ctx, log, deps = {}) {
 			const start = match.index;
 			out += seg.text.slice(cursor, start);
 			cursor = start + full.length;
-			if (isRemoteUrl(src) || hasNonPathScheme(src)) {
+			if (isRemoteUrl(src)) {
+				out += full;
+				continue;
+			}
+			const localPath = toLocalUploadPath(src);
+			if (!localPath) {
 				out += full;
 				continue;
 			}
-			const ext = extensionOf(src.split("?")[0]);
+			const ext = extensionOf(localPath.split("?")[0]);
 			if (!ext || !IMAGE_EXTENSIONS.has(ext)) {
 				out += full;
 				continue;
@@ -2652,6 +2685,7 @@ const plugin = {
 		api.registerChannel(alfeChannel);
 		log.info(`Registered channel: ${alfeChannel.id}`);
 		if (typeof api.registerTool === "function") {
+			(0, _alfe_ai_agent_api_client.installToolErrorCapture)(api, { plugin: "openclaw-chat" });
 			const present = async (args) => {
 				const clean = sanitizeComponents(args.components);
 				if (clean.length === 0) throw new Error("No valid components: link_button requires a `label` and an https `url` on an Alfe-owned host");

package/dist/plugin2.js

@@ -3,8 +3,8 @@ import { mkdir, open, readFile, readdir, stat, unlink, writeFile } from "node:fs
 import { basename, dirname, isAbsolute, join, resolve } from "node:path";
 import { homedir } from "node:os";
 import { ChatServiceClient, resolveAlfeChat } from "@alfe.ai/chat";
+import { AgentApiClient, installToolErrorCapture } from "@alfe.ai/agent-api-client";
 import { randomUUID } from "node:crypto";
-import { AgentApiClient } from "@alfe.ai/agent-api-client";
 import { resolveConfig } from "@alfe.ai/config";
 import { existsSync } from "node:fs";
 //#region src/outbound-media.ts
@@ -106,9 +106,9 @@ function extensionOf(p) {
 function isRemoteUrl(ref) {
 	return /^https?:\/\//i.test(ref);
 }
-/** Non-http(s) URI schemes (data:, blob:, media://inbound claim-checks…) —
-* not local paths, nothing we can upload. Windows drive letters (C:\) are
-* paths, not schemes. */
+/** Non-http(s) URI schemes (data:, blob:, …) — not local paths, nothing we
+* can upload. Windows drive letters (C:\) are paths, not schemes.
+* `media://inbound/<id>` is handled separately (resolveOpenClawMediaPath). */
 function hasNonPathScheme(ref) {
 	if (/^file:\/\//i.test(ref)) return false;
 	if (/^[a-zA-Z]:[\\/]/.test(ref)) return false;
@@ -120,6 +120,34 @@ function resolveLocalMediaPath(ref) {
 	if (p === "~" || p.startsWith("~/")) p = join(homedir(), p.slice(1));
 	return isAbsolute(p) ? p : resolve(process.cwd(), p);
 }
+const MEDIA_INBOUND_RE = /^media:\/\/inbound\/([^/\\]+)$/i;
+/** Resolve a `media://inbound/<id>` URI to its media-store file, or null if
+* the ref isn't one (or the id is unsafe). Traversal-hardened: the id must
+* be a single path segment. */
+function resolveOpenClawMediaPath(ref) {
+	const match = MEDIA_INBOUND_RE.exec(ref.trim());
+	if (!match) return null;
+	let id = match[1];
+	try {
+		id = decodeURIComponent(id);
+	} catch {}
+	if (!id || id === "." || id === ".." || /[/\\\0]/.test(id)) return null;
+	const stateDirOverride = process.env.OPENCLAW_STATE_DIR?.trim();
+	const home = process.env.OPENCLAW_HOME?.trim();
+	return join(stateDirOverride?.length ? stateDirOverride : join(home?.length ? home : homedir(), ".openclaw"), "media", "inbound", id);
+}
+/**
+* Map an outbound ref to the local file we would upload: media-store path
+* for `media://inbound/…`, filesystem path for path-shaped refs, null for
+* remote URLs and unsupported schemes (data:, blob:, …).
+*/
+function toLocalUploadPath(ref) {
+	if (isRemoteUrl(ref)) return null;
+	const mediaStorePath = resolveOpenClawMediaPath(ref);
+	if (mediaStorePath) return mediaStorePath;
+	if (hasNonPathScheme(ref)) return null;
+	return resolveLocalMediaPath(ref);
+}
 async function uploadLocalFile(localPath, log, deps) {
 	const client = deps.getClient ? deps.getClient() : getUploadClient(log);
 	if (!client) return null;
@@ -197,11 +225,11 @@ function resolveOutboundMediaRef(ref, ctx, log, deps = {}) {
 	const trimmed = ref.trim();
 	if (!trimmed) return Promise.resolve(null);
 	if (isRemoteUrl(trimmed)) return Promise.resolve({ url: trimmed });
-	if (hasNonPathScheme(trimmed)) {
+	const localPath = toLocalUploadPath(trimmed);
+	if (!localPath) {
 		log.warn(`Outbound media ref has unsupported scheme — skipping: ${trimmed.slice(0, 120)}`);
 		return Promise.resolve(null);
 	}
-	const localPath = resolveLocalMediaPath(trimmed);
 	const cached = ctx.uploads.get(localPath);
 	if (cached) return cached;
 	const promise = ctx.uploads.size >= 10 ? (() => {
@@ -230,8 +258,8 @@ async function resolveOutboundMedia(refs, ctx, log, deps = {}) {
 			attachments.push(resolved);
 			continue;
 		}
-		if (isRemoteUrl(trimmed) || hasNonPathScheme(trimmed)) continue;
-		const localPath = resolveLocalMediaPath(trimmed);
+		const localPath = toLocalUploadPath(trimmed);
+		if (!localPath) continue;
 		if (!ctx.annotatedFailures.has(localPath)) {
 			ctx.annotatedFailures.add(localPath);
 			newFailures.push(basename(localPath));
@@ -327,11 +355,16 @@ async function rewriteLocalMarkdownImages(text, ctx, log, deps = {}) {
 			const start = match.index;
 			out += seg.text.slice(cursor, start);
 			cursor = start + full.length;
-			if (isRemoteUrl(src) || hasNonPathScheme(src)) {
+			if (isRemoteUrl(src)) {
+				out += full;
+				continue;
+			}
+			const localPath = toLocalUploadPath(src);
+			if (!localPath) {
 				out += full;
 				continue;
 			}
-			const ext = extensionOf(src.split("?")[0]);
+			const ext = extensionOf(localPath.split("?")[0]);
 			if (!ext || !IMAGE_EXTENSIONS.has(ext)) {
 				out += full;
 				continue;
@@ -2652,6 +2685,7 @@ const plugin = {
 		api.registerChannel(alfeChannel);
 		log.info(`Registered channel: ${alfeChannel.id}`);
 		if (typeof api.registerTool === "function") {
+			installToolErrorCapture(api, { plugin: "openclaw-chat" });
 			const present = async (args) => {
 				const clean = sanitizeComponents(args.components);
 				if (clean.length === 0) throw new Error("No valid components: link_button requires a `label` and an https `url` on an Alfe-owned host");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/openclaw-chat",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "description": "OpenClaw chat plugin for Alfe — web widget and mobile app channels",
   "type": "module",
   "main": "./dist/plugin.js",
@@ -27,9 +27,9 @@
     "openclaw.plugin.json"
   ],
   "dependencies": {
-    "@alfe.ai/agent-api-client": "^0.7.0",
-    "@alfe.ai/chat": "^0.0.14",
-    "@alfe.ai/config": "^0.3.0"
+    "@alfe.ai/agent-api-client": "^0.8.0",
+    "@alfe.ai/config": "^0.3.0",
+    "@alfe.ai/chat": "^0.0.14"
   },
   "peerDependencies": {
     "openclaw": ">=2026.3.0"