@hualinge/relay-mcp-server 0.1.3

package/dist/tools/session-chain-tools.js

@@ -0,0 +1,288 @@
+/*
+ * *
+ *  * Copyright (C) Huawei Technologies Co., Ltd. 2026. All rights reserved.
+ *
+ */
+/**
+ * Session Chain MCP Tools — F24 Phase D + F98
+ * Tools for cats to read sealed session transcripts.
+ *
+ * Tools:
+ * - list_session_chain: List sessions for a thread
+ * - read_session_events: Paginated event read (view=raw|chat|handoff)
+ * - read_session_digest: Read extractive digest
+ * - read_invocation_detail: Read all events for a specific invocation
+ * - session_search: Full-text search across transcripts/digests
+ */
+import { z } from 'zod';
+import { errorResult, successResult } from './file-tools.js';
+const API_URL = process.env['OFFICE_CLAW_API_URL'];
+function resolveToolUserId() {
+    return process.env['OFFICE_CLAW_USER_ID'] ?? 'default-user';
+}
+function resolveToolAgentId() {
+    return process.env['OFFICE_CLAW_AGENT_ID'];
+}
+function buildAuthHeaders() {
+    const headers = {
+        'x-office-claw-user': resolveToolUserId(),
+    };
+    const agentId = resolveToolAgentId();
+    if (agentId)
+        headers['x-agent-id'] = agentId;
+    return headers;
+}
+// --- list_session_chain ---
+export const listSessionChainInputSchema = {
+    threadId: z.string().min(1).describe('Thread ID'),
+    agentId: z.string().optional().describe('Filter by agent ID (opus/codex/gemini)'),
+    limit: z.number().int().min(1).max(100).optional().describe('Max results'),
+};
+export async function handleListSessionChain(input) {
+    const params = new URLSearchParams();
+    if (input.agentId)
+        params.set('agentId', input.agentId);
+    const url = `${API_URL}/api/threads/${input.threadId}/sessions?${params.toString()}`;
+    try {
+        const res = await fetch(url, {
+            headers: buildAuthHeaders(),
+        });
+        if (!res.ok) {
+            return errorResult(`Failed to list sessions (${res.status}): ${await res.text()}`);
+        }
+        const data = (await res.json());
+        const sessions = input.limit ? data.sessions.slice(0, input.limit) : data.sessions;
+        if (sessions.length === 0) {
+            return successResult('No sessions found for this thread.');
+        }
+        return successResult(JSON.stringify(sessions, null, 2));
+    }
+    catch (err) {
+        return errorResult(`List sessions failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+// --- read_session_events ---
+export const readSessionEventsInputSchema = {
+    sessionId: z.string().min(1).describe('Session ID to read events from'),
+    cursor: z.number().int().min(0).optional().describe('Start from event number (0-based)'),
+    limit: z.number().int().min(1).max(200).optional().describe('Max events per page (default 50)'),
+    view: z
+        .enum(['raw', 'chat', 'handoff'])
+        .optional()
+        .describe('View mode: raw (default, full JSONL events), chat (role/content pairs), handoff (per-invocation summaries)'),
+};
+export async function handleReadSessionEvents(input) {
+    const params = new URLSearchParams();
+    if (input.cursor != null)
+        params.set('cursor', String(input.cursor));
+    if (input.limit != null)
+        params.set('limit', String(input.limit));
+    if (input.view)
+        params.set('view', input.view);
+    const url = `${API_URL}/api/sessions/${input.sessionId}/events?${params.toString()}`;
+    try {
+        const res = await fetch(url, {
+            headers: buildAuthHeaders(),
+        });
+        if (!res.ok) {
+            return errorResult(`Failed to read events (${res.status}): ${await res.text()}`);
+        }
+        const view = input.view ?? 'raw';
+        if (view === 'chat') {
+            const data = (await res.json());
+            const lines = [];
+            lines.push(`Total events: ${data.total}, messages: ${data.messages.length}`);
+            if (data.nextCursor)
+                lines.push(`Next cursor: ${data.nextCursor.eventNo}`);
+            lines.push('');
+            for (const msg of data.messages) {
+                lines.push(`[${msg.role}] ${msg.content.slice(0, 300)}`);
+            }
+            return successResult(lines.join('\n'));
+        }
+        if (view === 'handoff') {
+            const data = (await res.json());
+            const lines = [];
+            lines.push(`Total events: ${data.total}, invocations: ${data.invocations.length}`);
+            if (data.nextCursor)
+                lines.push(`Next cursor: ${data.nextCursor.eventNo}`);
+            lines.push('');
+            for (const inv of data.invocations) {
+                const dur = inv.durationMs > 0 ? ` (${Math.round(inv.durationMs / 1000)}s)` : '';
+                lines.push(`--- Invocation ${inv.invocationId}${dur} ---`);
+                lines.push(`  Events: ${inv.eventCount}, Errors: ${inv.errors}`);
+                if (inv.toolCalls.length > 0)
+                    lines.push(`  Tools: ${inv.toolCalls.join(', ')}`);
+                for (const msg of inv.keyMessages) {
+                    lines.push(`  > ${msg}`);
+                }
+                lines.push('');
+            }
+            return successResult(lines.join('\n'));
+        }
+        // raw view (default)
+        const data = (await res.json());
+        const lines = [];
+        lines.push(`Total events: ${data.total}, returned: ${data.events.length}`);
+        if (data.nextCursor)
+            lines.push(`Next cursor: ${data.nextCursor.eventNo}`);
+        lines.push('');
+        for (const evt of data.events) {
+            const evtType = evt.event?.type ?? 'unknown';
+            lines.push(`[${evt.eventNo}] ${evtType}: ${JSON.stringify(evt.event).slice(0, 300)}`);
+        }
+        return successResult(lines.join('\n'));
+    }
+    catch (err) {
+        return errorResult(`Read events failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+// --- read_session_digest ---
+export const readSessionDigestInputSchema = {
+    sessionId: z.string().min(1).describe('Session ID to read digest from'),
+};
+export async function handleReadSessionDigest(input) {
+    const url = `${API_URL}/api/sessions/${input.sessionId}/digest`;
+    try {
+        const res = await fetch(url, {
+            headers: buildAuthHeaders(),
+        });
+        if (!res.ok) {
+            if (res.status === 404) {
+                return successResult('No digest found for this session (may not be sealed yet).');
+            }
+            return errorResult(`Failed to read digest (${res.status}): ${await res.text()}`);
+        }
+        const data = await res.json();
+        return successResult(JSON.stringify(data, null, 2));
+    }
+    catch (err) {
+        return errorResult(`Read digest failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+// --- read_invocation_detail (F98 Gap 2) ---
+export const readInvocationDetailInputSchema = {
+    sessionId: z.string().min(1).describe('Session ID containing the invocation'),
+    invocationId: z.string().min(1).describe('Invocation ID to read events for'),
+};
+export async function handleReadInvocationDetail(input) {
+    const url = `${API_URL}/api/sessions/${input.sessionId}/invocations/${input.invocationId}`;
+    try {
+        const res = await fetch(url, {
+            headers: buildAuthHeaders(),
+        });
+        if (!res.ok) {
+            if (res.status === 404) {
+                return successResult('Invocation not found in this session.');
+            }
+            return errorResult(`Failed to read invocation (${res.status}): ${await res.text()}`);
+        }
+        const data = (await res.json());
+        const lines = [];
+        lines.push(`Invocation ${data.invocationId}: ${data.total} event(s)`);
+        lines.push('');
+        for (const evt of data.events) {
+            const evtType = evt.event['type'] ?? 'unknown';
+            lines.push(`[${evt.eventNo}] ${evtType}: ${JSON.stringify(evt.event).slice(0, 300)}`);
+        }
+        return successResult(lines.join('\n'));
+    }
+    catch (err) {
+        return errorResult(`Read invocation failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+// --- session_search ---
+export const sessionSearchInputSchema = {
+    threadId: z.string().min(1).describe('Thread ID to search within'),
+    query: z.string().min(1).max(500).describe('Search query'),
+    agents: z.string().optional().describe('Comma-separated agent IDs to filter'),
+    limit: z.number().int().min(1).max(50).optional().describe('Max results (default 10)'),
+    scope: z.enum(['digests', 'transcripts', 'both']).optional().describe('Search scope (default both)'),
+};
+export async function handleSessionSearch(input) {
+    const params = new URLSearchParams({ q: input.query });
+    if (input.agents)
+        params.set('agents', input.agents);
+    if (input.limit != null)
+        params.set('limit', String(input.limit));
+    if (input.scope)
+        params.set('scope', input.scope);
+    const url = `${API_URL}/api/threads/${input.threadId}/sessions/search?${params.toString()}`;
+    try {
+        const res = await fetch(url, {
+            headers: buildAuthHeaders(),
+        });
+        if (!res.ok) {
+            return errorResult(`Search failed (${res.status}): ${await res.text()}`);
+        }
+        const data = (await res.json());
+        if (data.hits.length === 0) {
+            return successResult(`No results found for: ${input.query}`);
+        }
+        const lines = [];
+        lines.push(`Found ${data.hits.length} result(s) for "${input.query}":`);
+        lines.push('');
+        for (const hit of data.hits) {
+            lines.push(`[${hit.kind}] session=${hit.sessionId} score=${hit.score}`);
+            if (hit.pointer.eventNo != null) {
+                lines.push(`  eventNo: ${hit.pointer.eventNo}`);
+            }
+            if (hit.pointer.invocationId) {
+                lines.push(`  invocationId: ${hit.pointer.invocationId} (use read_invocation_detail to inspect)`);
+            }
+            lines.push(`  > ${hit.snippet.slice(0, 200).replace(/\n/g, ' ')}`);
+            lines.push('');
+        }
+        return successResult(lines.join('\n'));
+    }
+    catch (err) {
+        return errorResult(`Search failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+// --- Tool definitions ---
+export const sessionChainTools = [
+    {
+        name: 'office_claw_list_session_chain',
+        description: 'List session chain for a thread. Shows session IDs, sequence numbers, status, and context health for each agent. ' +
+            'Use when you need to find a specific session ID to drill into (e.g. "what did opus do in thread X?"). ' +
+            'WORKFLOW: list_session_chain → read_session_digest (overview first) → read_session_events (detail). ' +
+            'TIP: Filter by agentId to narrow results when a thread has many sessions from different cats.',
+        inputSchema: listSessionChainInputSchema,
+        handler: handleListSessionChain,
+    },
+    {
+        name: 'office_claw_read_session_events',
+        description: 'Read events from a sealed session transcript. Supports view modes: raw (default, full events), chat (role/content pairs), handoff (per-invocation summaries). Pagination via cursor. ' +
+            'VIEW SELECTION: ' +
+            'handoff (RECOMMENDED first) = per-invocation summaries with tool calls and key messages — best overview of what happened. ' +
+            'chat = role/content message pairs — useful when you need to see the actual conversation flow. ' +
+            'raw = full JSONL events — only when you need low-level event details (rarely needed). ' +
+            'GOTCHA: Only sealed (completed) sessions are readable — in-progress sessions return empty. ' +
+            'TIP: Start with view=handoff to get the big picture, then use read_invocation_detail for specific invocations.',
+        inputSchema: readSessionEventsInputSchema,
+        handler: handleReadSessionEvents,
+    },
+    {
+        name: 'office_claw_read_session_digest',
+        description: 'Read the extractive digest of a sealed session. Contains tool names, files touched, errors, and timing info. ' +
+            'ALWAYS start here before reading full events — the digest gives you a quick overview ' +
+            'so you know which parts of the session are worth drilling into. ' +
+            'GOTCHA: Returns 404 if the session is not yet sealed (still in progress). ' +
+            'TIP: After reading the digest, use read_session_events with view=handoff for more detail, ' +
+            'or read_invocation_detail if the digest mentions a specific invocationId of interest.',
+        inputSchema: readSessionDigestInputSchema,
+        handler: handleReadSessionDigest,
+    },
+    {
+        name: 'office_claw_read_invocation_detail',
+        description: 'Read all events for a specific invocation within a sealed session. ' +
+            'Use AFTER search_evidence or read_session_events (handoff view) returns an invocationId you want to inspect. ' +
+            'This gives you the complete picture of one invocation: every tool call, response, and error. ' +
+            'GOTCHA: You need both sessionId AND invocationId. Get sessionId from list_session_chain, ' +
+            'and invocationId from read_session_events (handoff view) or search_evidence results.',
+        inputSchema: readInvocationDetailInputSchema,
+        handler: handleReadInvocationDetail,
+    },
+    // D15: office_claw_session_search removed — superseded by search_evidence unified entry point
+];
+//# sourceMappingURL=session-chain-tools.js.map

package/dist/tools/session-chain-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-chain-tools.js","sourceRoot":"","sources":["../../src/tools/session-chain-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE7D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAE,CAAC;AAEpD,SAAS,iBAAiB;IACxB,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,cAAc,CAAC;AAC9D,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,OAAO,GAA2B;QACtC,oBAAoB,EAAE,iBAAiB,EAAE;KAC1C,CAAC;IACF,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,IAAI,OAAO;QAAE,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC;IAC7C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,6BAA6B;AAE7B,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACjF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;CAC3E,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAI5C;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO;QAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAExD,MAAM,GAAG,GAAG,GAAG,OAAO,gBAAgB,KAAK,CAAC,QAAQ,aAAa,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAErF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,gBAAgB,EAAE;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,WAAW,CAAC,4BAA4B,GAAG,CAAC,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAEnF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,aAAa,CAAC,oCAAoC,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,yBAAyB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,8BAA8B;AAE9B,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACxF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC/F,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;SAChC,QAAQ,EAAE;SACV,QAAQ,CACP,4GAA4G,CAC7G;CACJ,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAK7C;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAE/C,MAAM,GAAG,GAAG,GAAG,OAAO,iBAAiB,KAAK,CAAC,SAAS,WAAW,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAErF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,gBAAgB,EAAE;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,WAAW,CAAC,0BAA0B,GAAG,CAAC,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC;QAEjC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;YACF,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,KAAK,eAAe,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7E,IAAI,IAAI,CAAC,UAAU;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAW7B,CAAC;YACF,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,KAAK,kBAAkB,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;YACnF,IAAI,IAAI,CAAC,UAAU;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnC,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,KAAK,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,YAAY,GAAG,GAAG,MAAM,CAAC,CAAC;gBAC3D,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,UAAU,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjE,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACjF,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;oBAClC,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;gBAC3B,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,CAAC;YACD,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,CAAC;QAED,qBAAqB;QACrB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;QACF,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,KAAK,eAAe,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,IAAI,SAAS,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,8BAA8B;AAE9B,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC;CACxE,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAA4B;IACxE,MAAM,GAAG,GAAG,GAAG,OAAO,iBAAiB,KAAK,CAAC,SAAS,SAAS,CAAC;IAEhE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,gBAAgB,EAAE;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,OAAO,aAAa,CAAC,2DAA2D,CAAC,CAAC;YACpF,CAAC;YACD,OAAO,WAAW,CAAC,0BAA0B,GAAG,CAAC,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,6CAA6C;AAE7C,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAC7E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;CAC7E,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAGhD;IACC,MAAM,GAAG,GAAG,GAAG,OAAO,iBAAiB,KAAK,CAAC,SAAS,gBAAgB,KAAK,CAAC,YAAY,EAAE,CAAC;IAE3F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,gBAAgB,EAAE;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,OAAO,aAAa,CAAC,uCAAuC,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,WAAW,CAAC,8BAA8B,GAAG,CAAC,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;QAEF,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,KAAK,WAAW,CAAC,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAY,IAAI,SAAS,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC;AACH,CAAC;AAED,yBAAyB;AAEzB,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAClE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC7E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACtF,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;CACrG,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAMzC;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,GAAG,OAAO,gBAAgB,KAAK,CAAC,QAAQ,oBAAoB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAE5F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,gBAAgB,EAAE;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,WAAW,CAAC,kBAAkB,GAAG,CAAC,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAQ7B,CAAC;QAEF,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,aAAa,CAAC,yBAAyB,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,mBAAmB,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC,SAAS,UAAU,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YACxE,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,OAAO,CAAC,YAAY,0CAA0C,CAAC,CAAC;YACpG,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACnE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,2BAA2B;AAE3B,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B;QACE,IAAI,EAAE,gCAAgC;QACtC,WAAW,EACT,mHAAmH;YACnH,wGAAwG;YACxG,sGAAsG;YACtG,+FAA+F;QACjG,WAAW,EAAE,2BAA2B;QACxC,OAAO,EAAE,sBAAsB;KAChC;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,WAAW,EACT,uLAAuL;YACvL,kBAAkB;YAClB,4HAA4H;YAC5H,gGAAgG;YAChG,wFAAwF;YACxF,6FAA6F;YAC7F,gHAAgH;QAClH,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE,uBAAuB;KACjC;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,WAAW,EACT,+GAA+G;YAC/G,uFAAuF;YACvF,kEAAkE;YAClE,4EAA4E;YAC5E,4FAA4F;YAC5F,uFAAuF;QACzF,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE,uBAAuB;KACjC;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EACT,qEAAqE;YACrE,+GAA+G;YAC/G,+FAA+F;YAC/F,2FAA2F;YAC3F,sFAAsF;QACxF,WAAW,EAAE,+BAA+B;QAC5C,OAAO,EAAE,0BAA0B;KACpC;IACD,8FAA8F;CACtF,CAAC"}

package/dist/utils/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Utils Index
+ * 导出所有工具函数
+ */
+export { ensureDir, getOfficeClawDir, getDefaultConfig, getSafePath, initOfficeClawDir, isPathAllowed, type PathConfig, } from './path-validator.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAMA;;;GAGG;AAEH,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,KAAK,UAAU,GAChB,MAAM,qBAAqB,CAAC"}

package/dist/utils/index.js

@@ -0,0 +1,11 @@
+/*
+ * *
+ *  * Copyright (C) Huawei Technologies Co., Ltd. 2026. All rights reserved.
+ *
+ */
+/**
+ * Utils Index
+ * 导出所有工具函数
+ */
+export { ensureDir, getOfficeClawDir, getDefaultConfig, getSafePath, initOfficeClawDir, isPathAllowed, } from './path-validator.js';
+//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AAEH,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,aAAa,GAEd,MAAM,qBAAqB,CAAC"}

package/dist/utils/path-utils.d.ts

@@ -0,0 +1,6 @@
+export declare function expandHomeDir(inputPath: string): string;
+export declare function resolveAbsolutePath(inputPath: string): string;
+export declare function tryRealpathSync(targetPath: string): string | null;
+export declare function isWithinPath(targetPath: string, baseDir: string): boolean;
+export declare function findDeepestExistingPath(targetPath: string): string | null;
+//# sourceMappingURL=path-utils.d.ts.map

package/dist/utils/path-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-utils.d.ts","sourceRoot":"","sources":["../../src/utils/path-utils.ts"],"names":[],"mappings":"AAeA,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAQvD;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMjE;AAWD,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAUzE;AAED,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAezE"}

package/dist/utils/path-utils.js

@@ -0,0 +1,63 @@
+/*
+ * *
+ *  * Copyright (C) Huawei Technologies Co., Ltd. 2026. All rights reserved.
+ *
+ */
+/**
+ * Path Utilities
+ * 路径处理的内部工具函数
+ */
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+export function expandHomeDir(inputPath) {
+    if (inputPath === '~') {
+        return os.homedir();
+    }
+    if (inputPath.startsWith('~/')) {
+        return path.join(os.homedir(), inputPath.slice(2));
+    }
+    return inputPath;
+}
+export function resolveAbsolutePath(inputPath) {
+    return path.resolve(expandHomeDir(inputPath));
+}
+export function tryRealpathSync(targetPath) {
+    try {
+        return fs.realpathSync(targetPath);
+    }
+    catch {
+        return null;
+    }
+}
+function stripTrailingSeparators(targetPath) {
+    const root = path.parse(targetPath).root;
+    let result = targetPath;
+    while (result.length > root.length && result.endsWith(path.sep)) {
+        result = result.slice(0, -1);
+    }
+    return result;
+}
+export function isWithinPath(targetPath, baseDir) {
+    const normalizedTarget = stripTrailingSeparators(targetPath);
+    const normalizedBase = stripTrailingSeparators(baseDir);
+    const baseRoot = path.parse(normalizedBase).root;
+    if (normalizedBase === baseRoot) {
+        return normalizedTarget.startsWith(normalizedBase);
+    }
+    return normalizedTarget === normalizedBase || normalizedTarget.startsWith(normalizedBase + path.sep);
+}
+export function findDeepestExistingPath(targetPath) {
+    let current = targetPath;
+    while (true) {
+        if (fs.existsSync(current)) {
+            return current;
+        }
+        const parent = path.dirname(current);
+        if (parent === current) {
+            return null;
+        }
+        current = parent;
+    }
+}
+//# sourceMappingURL=path-utils.js.map

package/dist/utils/path-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-utils.js","sourceRoot":"","sources":["../../src/utils/path-utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;IACzC,IAAI,MAAM,GAAG,UAAU,CAAC;IACxB,OAAO,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,OAAe;IAC9D,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC;IAEjD,IAAI,cAAc,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,gBAAgB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,gBAAgB,KAAK,cAAc,IAAI,gBAAgB,CAAC,UAAU,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,IAAI,OAAO,GAAG,UAAU,CAAC;IAEzB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/utils/path-validator.d.ts

@@ -0,0 +1,45 @@
+/**
+ * 配置接口
+ */
+export interface PathConfig {
+    officeClawDir: string;
+    allowedDirs: string[];
+}
+/**
+ * 获取默认配置
+ * 从环境变量读取配置，若未设置则使用默认值
+ */
+export declare function getDefaultConfig(): PathConfig;
+/**
+ * 验证路径是否在允许的目录内
+ * @param targetPath - 要验证的路径
+ * @param config - 可选的配置，默认使用 getDefaultConfig()
+ * @returns 是否允许访问该路径
+ */
+export declare function isPathAllowed(targetPath: string, config?: PathConfig): boolean;
+/**
+ * 获取 OfficeClaw 数据目录
+ * @param config - 可选的配置
+ * @returns OfficeClaw 数据目录路径
+ */
+export declare function getOfficeClawDir(config?: PathConfig): string;
+/**
+ * 确保目录存在，若不存在则创建
+ * @param dirPath - 目录路径
+ */
+export declare function ensureDir(dirPath: string): void;
+/**
+ * 初始化 OfficeClaw 目录结构
+ * 创建 ~/.office-claw/ 及其子目录
+ * @param config - 可选的配置
+ */
+export declare function initOfficeClawDir(config?: PathConfig): void;
+/**
+ * 获取安全的绝对路径
+ * 解析路径并验证是否允许访问
+ * @param targetPath - 目标路径
+ * @param config - 可选的配置
+ * @returns 解析后的绝对路径，若不允许则返回 null
+ */
+export declare function getSafePath(targetPath: string, config?: PathConfig): string | null;
+//# sourceMappingURL=path-validator.d.ts.map

package/dist/utils/path-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-validator.d.ts","sourceRoot":"","sources":["../../src/utils/path-validator.ts"],"names":[],"mappings":"AAgBA;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAOD;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,UAAU,CAsB7C;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAqC9E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,CAG5D;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAI/C;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI,CAc3D;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAQlF"}

package/dist/utils/path-validator.js

@@ -0,0 +1,126 @@
+/*
+ * *
+ *  * Copyright (C) Huawei Technologies Co., Ltd. 2026. All rights reserved.
+ *
+ */
+/**
+ * Path Validator
+ * 路径验证和目录管理工具
+ */
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { findDeepestExistingPath, isWithinPath, resolveAbsolutePath, tryRealpathSync } from './path-utils.js';
+/**
+ * 默认的 OfficeClaw 子目录
+ */
+const OFFICE_CLAW_SUBDIRS = ['chat', 'memory', 'workspace', 'assets', '.state'];
+/**
+ * 获取默认配置
+ * 从环境变量读取配置，若未设置则使用默认值
+ */
+export function getDefaultConfig() {
+    const homeDir = os.homedir();
+    const defaultOfficeClawDir = path.join(homeDir, '.office-claw');
+    const officeClawDir = process.env['OFFICE_CLAW_DATA_DIR'] ?? defaultOfficeClawDir;
+    // 解析允许的工作目录
+    const allowedWorkspaceDirs = process.env['ALLOWED_WORKSPACE_DIRS'];
+    const additionalDirs = allowedWorkspaceDirs
+        ? allowedWorkspaceDirs
+            .split(/[:,]/)
+            .map((dir) => dir.trim())
+            .filter(Boolean)
+        : [];
+    // 默认允许 office-claw 目录和额外配置的目录
+    const allowedDirs = [officeClawDir, ...additionalDirs];
+    return {
+        officeClawDir,
+        allowedDirs,
+    };
+}
+/**
+ * 验证路径是否在允许的目录内
+ * @param targetPath - 要验证的路径
+ * @param config - 可选的配置，默认使用 getDefaultConfig()
+ * @returns 是否允许访问该路径
+ */
+export function isPathAllowed(targetPath, config) {
+    const { allowedDirs } = config ?? getDefaultConfig();
+    // 解析为绝对路径
+    const resolvedPath = resolveAbsolutePath(targetPath);
+    const resolvedAllowedDirs = allowedDirs.map(resolveAbsolutePath);
+    // Quick reject using pure path prefix check
+    const prefixAllowed = resolvedAllowedDirs.some((allowedDir) => isWithinPath(resolvedPath, allowedDir));
+    if (!prefixAllowed) {
+        return false;
+    }
+    const realAllowedDirs = resolvedAllowedDirs.map((allowedDir) => tryRealpathSync(allowedDir) ?? allowedDir);
+    // If target exists, validate its realpath; otherwise validate the realpath of the deepest
+    // existing prefix to prevent symlink escapes like allowed/link -> /etc.
+    if (fs.existsSync(resolvedPath)) {
+        const realTarget = tryRealpathSync(resolvedPath);
+        if (realTarget === null) {
+            return false;
+        }
+        return realAllowedDirs.some((allowedDir) => isWithinPath(realTarget, allowedDir));
+    }
+    const existingPath = findDeepestExistingPath(resolvedPath);
+    if (existingPath === null) {
+        return false;
+    }
+    const realExisting = tryRealpathSync(existingPath);
+    if (realExisting === null) {
+        return false;
+    }
+    return realAllowedDirs.some((allowedDir) => isWithinPath(realExisting, allowedDir));
+}
+/**
+ * 获取 OfficeClaw 数据目录
+ * @param config - 可选的配置
+ * @returns OfficeClaw 数据目录路径
+ */
+export function getOfficeClawDir(config) {
+    const { officeClawDir } = config ?? getDefaultConfig();
+    return resolveAbsolutePath(officeClawDir);
+}
+/**
+ * 确保目录存在，若不存在则创建
+ * @param dirPath - 目录路径
+ */
+export function ensureDir(dirPath) {
+    if (!fs.existsSync(dirPath)) {
+        fs.mkdirSync(dirPath, { recursive: true });
+    }
+}
+/**
+ * 初始化 OfficeClaw 目录结构
+ * 创建 ~/.office-claw/ 及其子目录
+ * @param config - 可选的配置
+ */
+export function initOfficeClawDir(config) {
+    const officeClawDir = getOfficeClawDir(config);
+    // 创建主目录
+    ensureDir(officeClawDir);
+    // 创建子目录
+    for (const subdir of OFFICE_CLAW_SUBDIRS) {
+        const subdirPath = path.join(officeClawDir, subdir);
+        ensureDir(subdirPath);
+    }
+    // 输出到 stderr（stdout 用于 JSON-RPC）
+    console.error(`[office-claw] Initialized directory: ${officeClawDir}`);
+}
+/**
+ * 获取安全的绝对路径
+ * 解析路径并验证是否允许访问
+ * @param targetPath - 目标路径
+ * @param config - 可选的配置
+ * @returns 解析后的绝对路径，若不允许则返回 null
+ */
+export function getSafePath(targetPath, config) {
+    const resolvedPath = resolveAbsolutePath(targetPath);
+    if (!isPathAllowed(resolvedPath, config)) {
+        return null;
+    }
+    return resolvedPath;
+}
+//# sourceMappingURL=path-validator.js.map

package/dist/utils/path-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-validator.js","sourceRoot":"","sources":["../../src/utils/path-validator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAU9G;;GAEG;AACH,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAEzF;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7B,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAEhE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,oBAAoB,CAAC;IAElF,YAAY;IACZ,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,oBAAoB;QACzC,CAAC,CAAC,oBAAoB;aACjB,KAAK,CAAC,MAAM,CAAC;aACb,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;aACxB,MAAM,CAAC,OAAO,CAAC;QACpB,CAAC,CAAC,EAAE,CAAC;IAEP,8BAA8B;IAC9B,MAAM,WAAW,GAAG,CAAC,aAAa,EAAE,GAAG,cAAc,CAAC,CAAC;IAEvD,OAAO;QACL,aAAa;QACb,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,MAAmB;IACnE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,gBAAgB,EAAE,CAAC;IAErD,UAAU;IACV,MAAM,YAAY,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAErD,MAAM,mBAAmB,GAAG,WAAW,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAEjE,4CAA4C;IAC5C,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;IACvG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,eAAe,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,CAAC;IAE3G,0FAA0F;IAC1F,wEAAwE;IACxE,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;QACjD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,YAAY,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;IAC3D,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IACnD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;AACtF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAmB;IAClD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,gBAAgB,EAAE,CAAC;IACvD,OAAO,mBAAmB,CAAC,aAAa,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAE/C,QAAQ;IACR,SAAS,CAAC,aAAa,CAAC,CAAC;IAEzB,QAAQ;IACR,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACpD,SAAS,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;IAED,iCAAiC;IACjC,OAAO,CAAC,KAAK,CAAC,wCAAwC,aAAa,EAAE,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,MAAmB;IACjE,MAAM,YAAY,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAErD,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@hualinge/relay-mcp-server",
+  "version": "0.1.3",
+  "type": "module",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "bin": {
+    "office-claw-mcp-server": "./dist/index.js",
+    "relay-mcp-server": "./dist/index.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "zod": "^3.22.4",
+    "@hualinge/relay-shared": "0.1.3"
+  },
+  "devDependencies": {
+    "@types/node": "^20.11.0",
+    "tsx": "^4.7.0",
+    "typescript": "^5.3.3"
+  },
+  "scripts": {
+    "build": "pnpm clean && tsc",
+    "dev": "tsx watch src/index.ts",
+    "start": "node dist/index.js",
+    "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",
+    "lint": "tsc --noEmit",
+    "test": "tsc && node --test test/*.test.js"
+  }
+}