@dai_ming/plugin-deliverables 1.2.1 → 1.2.2

package/index.js

@@ -287,6 +287,7 @@ function deliverableTypeForPath(filePath, isDirectory) {
 
 function isAllowedWorkspacePath(candidatePath) {
   const normalized = normalizeSlash(path.resolve(candidatePath));
+  // 老布局：根目录直接挂 workspace（保持向后兼容）。
   if (
     normalized.indexOf("/data/workspace-") === 0 ||
     normalized.indexOf("/home/node/.openclaw/workspace") === 0
@@ -294,7 +295,13 @@ function isAllowedWorkspacePath(candidatePath) {
     return true;
   }
   const openclawRoot = normalizeSlash(path.resolve(__dirname, "..", ".."));
-  return normalized.indexOf(openclawRoot + "/workspace") === 0;
+  if (normalized.indexOf(openclawRoot + "/workspace") === 0) {
+    return true;
+  }
+  // 新布局（多租户）及通用情况：绝对路径中任意位置含有 `xxx/workspace-*`
+  // 目录段都允许，覆盖 /data/tenants/<user>/workspace-<lobster>、
+  // /home/node/.openclaw/<user>/workspace-<lobster> 等。
+  return /\/workspace-[^/]+(?:\/|$)/.test(normalized);
 }
 
 function shouldIgnorePath(candidatePath) {
@@ -336,6 +343,38 @@ async function workspaceRoots() {
   } catch (_err) {
     // /data is not guaranteed in non-pod test environments.
   }
+  // 多租户布局：枚举 <base>/<tenant-or-user>/workspace-* 下的 workspace 根目录，
+  // 覆盖 /data/tenants/<user>/workspace-<lobster>、
+  // /home/node/.openclaw/<user>/workspace-<lobster> 等。
+  for (const base of ["/data/tenants", "/home/node/.openclaw"]) {
+    let tenants;
+    try {
+      tenants = await fs.promises.readdir(base);
+    } catch (_err) {
+      continue;
+    }
+    for (const tenant of tenants) {
+      if (!tenant || tenant.indexOf("workspace") === 0) {
+        continue;
+      }
+      const tenantDir = path.join(base, tenant);
+      let children;
+      try {
+        children = await fs.promises.readdir(tenantDir);
+      } catch (_err) {
+        continue;
+      }
+      for (const child of children) {
+        if (!child || child.indexOf("workspace-") !== 0) {
+          continue;
+        }
+        const root = path.join(tenantDir, child);
+        if ((await safeStat(root)) && roots.indexOf(root) === -1) {
+          roots.push(root);
+        }
+      }
+    }
+  }
   const openclawRoot = path.resolve(__dirname, "..", "..");
   try {
     for (const entry of await fs.promises.readdir(openclawRoot)) {

package/openclaw-plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "plugin-deliverables",
-  "version": "1.2.1",
+  "version": "1.2.2",
   "npm_package": "@dai_ming/plugin-deliverables",
   "description": "Deliverables plugin: native upload tool + skill + AGENTS rules for AI-generated file uploads",
   "skills": {

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "plugin-deliverables",
   "name": "Deliverables",
   "description": "Deliverables runtime guard for upload-first file delivery with Palz split-send diagnostics.",
-  "version": "1.2.1",
+  "version": "1.2.2",
   "skills": ["./skills"],
   "configSchema": {
     "type": "object",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dai_ming/plugin-deliverables",
-  "version": "1.2.1",
+  "version": "1.2.2",
   "description": "OpenClaw deliverables native plugin — upload AI-generated files to OSS and return shareable preview/download links",
   "keywords": [
     "openclaw",