@dai_ming/plugin-deliverables 1.1.5 → 1.1.6

package/README.md

@@ -47,9 +47,9 @@ deliverables__upload_deliverable
 配置字段：
 
 - `kbBaseUrl` — 知识库 API 内部地址（Pod 内通信）
-- `kbPublicUrl` — 用户可见的预览链接地址
 
-环境变量 `KNOWLEDGE_DB_URL` / `KNOWLEDGE_DB_PUBLIC_URL` 可覆盖配置文件值。`KNOWLEDGE_DB_API_KEY` 仅通过环境变量配置（默认 `kb-agent-key-2025`）。
+环境变量 `KNOWLEDGE_DB_URL` 可覆盖配置文件值。`KNOWLEDGE_DB_API_KEY` 仅通过环境变量配置（默认 `kb-agent-key-2025`）。
+IM 交付物链接信任校验使用固定前缀规则：`https://uniclaw-ai-kb`、`http://knowledge-db` 或 `http://localhost`。
 
 ## 发布
 

package/deliverables.dev.config.json

@@ -1,4 +1,3 @@
 {
-  "kbBaseUrl": "http://knowledge-db:8080/api/v1",
-  "kbPublicUrl": "https://uniclaw-ai-kb.csaiagent.com/api/v1"
+  "kbBaseUrl": "http://knowledge-db:8080/api/v1"
 }

package/deliverables.prod.config.json

@@ -1,4 +1,3 @@
 {
-  "kbBaseUrl": "http://knowledge-db:8080/api/v1",
-  "kbPublicUrl": "https://uniclaw-ai-kb.csagentai.com/api/v1"
+  "kbBaseUrl": "http://knowledge-db:8080/api/v1"
 }

package/deliverables.staging.config.json

@@ -1,4 +1,3 @@
 {
-  "kbBaseUrl": "http://knowledge-db:8080/api/v1",
-  "kbPublicUrl": "https://uniclaw-ai-kb.csjkagent.com/api/v1"
+  "kbBaseUrl": "http://knowledge-db:8080/api/v1"
 }

package/index.js

@@ -54,7 +54,7 @@ const AUTO_UPLOAD_MAX_FILES = 8;
 const AUTO_UPLOAD_MAX_BYTES = 200 * 1024 * 1024;
 const AUTO_UPLOAD_SCAN_MAX_ENTRIES = 4000;
 const AUTO_UPLOAD_SCAN_DEPTH = 5;
-const DELIVERABLE_KB_PATH_RE = /\/documents\/content\b/u;
+const DELIVERABLE_KB_PATH_RE = /\/documents\/(?:content|preview)(?:\/|$)/u;
 const DELIVERABLE_LINK_PREFIX_RE =
   /^\s*(?:[-*+]\s+)?(?:预览链接|下载链接|文件列表|项目入口|在线预览|在线体验|目录链接)\s*[:：]/u;
 const DELIVERABLE_LINK_LABEL_RE =
@@ -715,11 +715,6 @@ function kbBaseURL() {
   return (process.env.KNOWLEDGE_DB_URL || cfg.kbBaseUrl || DEFAULT_KB_BASE_URL).replace(/\/$/, "");
 }
 
-function kbPublicURL() {
-  const cfg = loadDeliverableConfig();
-  return (process.env.KNOWLEDGE_DB_PUBLIC_URL || cfg.kbPublicUrl || process.env.KNOWLEDGE_DB_URL || cfg.kbBaseUrl || DEFAULT_KB_BASE_URL).replace(/\/$/, "");
-}
-
 function kbApiKey() {
   return process.env.KNOWLEDGE_DB_API_KEY || DEFAULT_KB_API_KEY;
 }
@@ -732,25 +727,77 @@ function kbUploadPath(groupId, groupName) {
   return "/" + gname + "/raw";
 }
 
-function kbPreviewURL(documentId, userId, groupId) {
-  return kbPublicURL() + "/documents/content?user_id="
-    + encodeURIComponent(trimString(userId) || "default")
-    + "&group_id=" + encodeURIComponent(trimString(groupId) || DEFAULT_GROUP_ID)
-    + "&id=" + encodeURIComponent(String(documentId));
+function kbUploadItems(response) {
+  const data = (response && response.data) || response || {};
+  return Array.isArray(data.items) ? data.items : [];
 }
 
-function kbExtractDocumentId(response) {
+function kbFirstSuccessfulUploadItem(response) {
+  const items = kbUploadItems(response);
+  if (items.length === 0) {
+    return null;
+  }
+  return items.find((item) => item && !item.error && item.document) || items[0] || null;
+}
+
+function kbExtractDocument(response) {
+  const item = kbFirstSuccessfulUploadItem(response);
+  if (item && item.document && typeof item.document === "object" && !Array.isArray(item.document)) {
+    return item.document;
+  }
   const data = (response && response.data) || response || {};
-  const items = Array.isArray(data.items) ? data.items : [];
-  if (items.length > 0 && items[0].document && items[0].document.id !== undefined) {
-    return items[0].document.id;
+  if (data.document && typeof data.document === "object" && !Array.isArray(data.document)) {
+    return data.document;
   }
+  return data && typeof data === "object" && !Array.isArray(data) ? data : {};
+}
+
+function kbExtractDocumentId(response) {
+  const document = kbExtractDocument(response);
+  if (document.id !== undefined) {
+    return document.id;
+  }
+  const data = (response && response.data) || response || {};
   if (data.id !== undefined) {
     return data.id;
   }
   return null;
 }
 
+function extractURLField(obj, keys) {
+  if (!obj || typeof obj !== "object" || Array.isArray(obj)) {
+    return "";
+  }
+  for (const key of keys) {
+    const value = obj[key];
+    if (isString(value) && value.trim()) {
+      return value.trim();
+    }
+  }
+  return "";
+}
+
+function kbExtractReturnedLinks(response) {
+  const item = kbFirstSuccessfulUploadItem(response) || {};
+  const document = kbExtractDocument(response);
+  return {
+    downloadURL:
+      extractURLField(document, ["download_url", "downloadURL"]) ||
+      extractURLField(item, ["download_url", "downloadURL"]),
+    previewURL:
+      extractURLField(document, ["preview_url", "previewURL"]) ||
+      extractURLField(item, ["preview_url", "previewURL"]),
+  };
+}
+
+function requireKBReturnedLink(response) {
+  const links = kbExtractReturnedLinks(response);
+  if (!links.previewURL && !links.downloadURL) {
+    throw new Error("kb upload response missing preview_url/download_url");
+  }
+  return links;
+}
+
 function buildFileBuffersFromBody(body, isDirectory) {
   if (isDirectory && Array.isArray(body.files)) {
     return body.files.map((file) => ({
@@ -1185,8 +1232,9 @@ async function uploadDeliverable(args) {
   };
   const response = await kbMultipartUpload(fileBuffers, fields);
   const documentId = kbExtractDocumentId(response);
-  const previewURL = documentId ? kbPreviewURL(documentId, userId, groupId) : "";
-  const downloadURL = previewURL;
+  const links = requireKBReturnedLink(response);
+  const previewURL = links.previewURL || links.downloadURL;
+  const downloadURL = links.downloadURL || previewURL;
   const replyMarkdown = buildReplyMarkdown({
     previewURL,
     downloadURL,
@@ -1255,12 +1303,14 @@ async function uploadCandidate(candidate, body) {
     path: uploadPath,
   });
   const documentId = kbExtractDocumentId(response);
-  const previewURL = documentId ? kbPreviewURL(documentId, userId, groupId) : "";
+  const links = requireKBReturnedLink(response);
+  const previewURL = links.previewURL || links.downloadURL;
+  const downloadURL = links.downloadURL || previewURL;
   const result = {
     fileName,
     document_id: documentId,
     previewURL,
-    downloadURL: previewURL,
+    downloadURL,
   };
   cache.set(cacheKey, { result, createdAt: Date.now() });
   return result;
@@ -1755,8 +1805,6 @@ function extractDeliverableURL(line) {
 function configuredKBHosts() {
   const cfg = loadDeliverableConfig();
   const values = [
-    process.env.KNOWLEDGE_DB_PUBLIC_URL,
-    cfg.kbPublicUrl,
     process.env.KNOWLEDGE_DB_URL,
     cfg.kbBaseUrl,
     DEFAULT_KB_BASE_URL,
@@ -1777,6 +1825,15 @@ function configuredKBHosts() {
   return hosts;
 }
 
+function isTrustedDeliverableURLPrefix(rawURL) {
+  const normalized = String(rawURL || "").trim().toLowerCase();
+  return (
+    normalized.startsWith("https://uniclaw-ai-kb") ||
+    normalized.startsWith("http://knowledge-db") ||
+    normalized.startsWith("http://localhost")
+  );
+}
+
 function isTrustedDeliverableURL(rawURL) {
   if (!isString(rawURL) || !rawURL.trim()) {
     return false;
@@ -1790,6 +1847,9 @@ function isTrustedDeliverableURL(rawURL) {
   if (!DELIVERABLE_KB_PATH_RE.test(parsed.pathname)) {
     return false;
   }
+  if (isTrustedDeliverableURLPrefix(rawURL)) {
+    return true;
+  }
   const hosts = configuredKBHosts();
   const host = parsed.host.toLowerCase();
   const hostname = parsed.hostname.toLowerCase();
@@ -1922,7 +1982,11 @@ function extractDeliverableIdentity(rawURL) {
     return "";
   }
   const docId = parsed.searchParams.get("id");
-  return docId ? String(docId) : "";
+  if (docId) {
+    return String(docId);
+  }
+  const match = parsed.pathname.match(/\/documents\/(?:content|preview)\/([^/]+)/u);
+  return match && match[1] ? decodeURIComponent(match[1]) : "";
 }
 
 function selectPalzFileURL(linkItems) {
@@ -1939,8 +2003,8 @@ function selectPalzFileURL(linkItems) {
   if (identities.size !== 1) {
     return "";
   }
-  const download = linkItems.find((item) => /下载链接/u.test(String((item && item.line) || "")));
-  return (download && download.url) || linkItems[0].url || "";
+  const preview = linkItems.find((item) => /预览链接/u.test(String((item && item.line) || "")));
+  return (preview && preview.url) || linkItems[0].url || "";
 }
 
 function cloneBody(body, content, suffix) {
@@ -2217,10 +2281,11 @@ plugin.__test = {
   isOSSLikeURL,
   isTrustedDeliverableURL,
   kbExtractDocumentId,
+  kbExtractReturnedLinks,
   kbMultipartUpload,
-  kbPreviewURL,
   kbUploadPath,
   loadDeliverableConfig,
+  requireKBReturnedLink,
   selectPalzFileURL,
   splitDeliverableMessage,
 };

package/openclaw-plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "plugin-deliverables",
-  "version": "1.1.5",
+  "version": "1.1.6",
   "npm_package": "@dai_ming/plugin-deliverables",
   "description": "Deliverables plugin: native upload tool + skill + AGENTS rules for AI-generated file uploads",
   "skills": {

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "plugin-deliverables",
   "name": "Deliverables",
   "description": "Deliverables runtime guard for upload-first file delivery with Palz split-send diagnostics.",
-  "version": "1.1.5",
+  "version": "1.1.6",
   "skills": ["./skills"],
   "configSchema": {
     "type": "object",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dai_ming/plugin-deliverables",
-  "version": "1.1.5",
+  "version": "1.1.6",
   "description": "OpenClaw deliverables native plugin — upload AI-generated files to OSS and return shareable preview/download links",
   "keywords": [
     "openclaw",