@kafca/agentdock 0.1.54 → 0.1.56

package/dist-electron/services/local-ai-core/src/channel/weixin/local-core-weixin-gateway.js

@@ -9,12 +9,15 @@ const node_crypto_1 = __importDefault(require("node:crypto"));
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const node_crypto_2 = require("node:crypto");
+const node_stream_1 = require("node:stream");
 const desktop_js_1 = require("../../../../../shared/desktop.js");
 const local_core_errors_js_1 = require("../../kernel/local-core-errors.js");
 const content_js_1 = require("../shared/content.js");
 const file_utils_js_1 = require("../shared/file-utils.js");
+const inbound_attachment_store_js_1 = require("../shared/inbound-attachment-store.js");
 const thread_routing_js_1 = require("../shared/thread-routing.js");
 const base_channel_gateway_js_1 = require("../shared/base-channel-gateway.js");
+const channel_keys_js_1 = require("../shared/channel-keys.js");
 const config_js_1 = require("./config.js");
 const transport_js_1 = require("./transport.js");
 // ==================== Constants ====================
@@ -109,6 +112,7 @@ function createWeixinAttachmentContentPart(att) {
         return {
             type: 'image',
             data: att.data,
+            ...(att.uri ? { uri: att.uri } : {}),
             mimeType: att.mimeType,
             fileName: att.name,
         };
@@ -148,6 +152,7 @@ function renderBridgeContentForWeixin(event) {
 class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGateway {
     processedInboundMessages = new Map();
     pollErrorLogWindows = new Map();
+    inboundAttachmentStore = new inbound_attachment_store_js_1.FileSystemInboundAttachmentStore();
     platform = 'weixin';
     constructor(options) {
         super(options);
@@ -168,7 +173,7 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
     }
     buildStatusObject(state, resolved) {
         this.options.store.expirePendingPairings();
-        const platformKey = state.platformKey || (0, config_js_1.channelPlatformKey)('weixin', resolved.instanceId);
+        const platformKey = state.platformKey || (0, channel_keys_js_1.channelPlatformKey)('weixin', resolved.instanceId);
         const pairings = this.options.store.listPendingPairings(state.workspaceId)
             .filter((row) => row.platform === platformKey && row.expires_at >= new Date().toISOString());
         const users = this.options.store.listAuthorizedUsers(state.workspaceId, platformKey);
@@ -294,8 +299,8 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
             return;
         }
         const routeInstanceId = route.instanceId || 'default';
-        const routePlatformKey = route.platformKey || (0, config_js_1.channelPlatformKey)('weixin', routeInstanceId);
-        const state = this.runtime.get((0, config_js_1.runtimeKey)(route.workspaceId, routeInstanceId)) || this.runtime.get(route.workspaceId);
+        const routePlatformKey = route.platformKey || (0, channel_keys_js_1.channelPlatformKey)('weixin', routeInstanceId);
+        const state = this.runtime.get((0, channel_keys_js_1.runtimeKey)(route.workspaceId, routeInstanceId)) || this.runtime.get(route.workspaceId);
         if (!state?.connected) {
             this.options.log?.(`localcore-weixin bridge event ignored because workspace is not connected: ${route.workspaceId}`);
             return;
@@ -372,7 +377,7 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
     }
     registerScheduledThreadBridge(input) {
         const instanceId = input.route.instanceId || getWeixinInstanceId(input.platform) || 'default';
-        const platformKey = (0, config_js_1.channelPlatformKey)('weixin', instanceId);
+        const platformKey = (0, channel_keys_js_1.channelPlatformKey)('weixin', instanceId);
         const route = {
             workspaceId: input.workspaceId,
             instanceId,
@@ -470,7 +475,7 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
     async handleInboundMessage(input) {
         const msg = input;
         const instanceId = msg.instanceId || 'default';
-        const platformKey = msg.platformKey || (0, config_js_1.channelPlatformKey)('weixin', instanceId);
+        const platformKey = msg.platformKey || (0, channel_keys_js_1.channelPlatformKey)('weixin', instanceId);
         if (this.isDuplicateInboundMessage(msg)) {
             this.options.log?.(`localcore-weixin skipped duplicate inbound message workspace=${msg.workspaceId} chat=${msg.chatId} id=${msg.contextToken || msg.messageId}`);
             return;
@@ -527,7 +532,7 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
                 });
                 this.notifyRuntimeStateChanged();
             }
-            const state = this.runtime.get((0, config_js_1.runtimeKey)(msg.workspaceId, instanceId));
+            const state = this.runtime.get((0, channel_keys_js_1.runtimeKey)(msg.workspaceId, instanceId));
             if (state?.connected) {
                 await this.sendTextMessage(state, msg.chatId, `**已收到消息**\n\n当前账号还未授权接入这个工作区。\n请在桌面端完成审批后再次发送消息。\n\n配对码：\`${pairingCode}\``, msg.contextToken);
             }
@@ -599,7 +604,7 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
     // ==================== Private: Bindings ====================
     // ==================== Private: Workspace Lifecycle ====================
     async startWorkspace(binding) {
-        const key = (0, config_js_1.runtimeKey)(binding.workspaceId, binding.instanceId);
+        const key = (0, channel_keys_js_1.runtimeKey)(binding.workspaceId, binding.instanceId);
         await this.stopWorkspaceKey(key);
         const status = {
             workspaceId: binding.workspaceId,
@@ -669,7 +674,7 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
                 const isApiError = (resp.ret !== undefined && resp.ret !== 0) || (resp.errcode !== undefined && resp.errcode !== 0);
                 if (isApiError) {
                     consecutiveFailures++;
-                    const state = this.runtime.get((0, config_js_1.runtimeKey)(binding.workspaceId, binding.instanceId));
+                    const state = this.runtime.get((0, channel_keys_js_1.runtimeKey)(binding.workspaceId, binding.instanceId));
                     const retryDelayMs = this.computeRetryDelay(consecutiveFailures);
                     if (resp.errcode === -14 || resp.ret === -14) {
                         if (state) {
@@ -693,7 +698,7 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
                     continue;
                 }
                 consecutiveFailures = 0;
-                const state = this.runtime.get((0, config_js_1.runtimeKey)(binding.workspaceId, binding.instanceId));
+                const state = this.runtime.get((0, channel_keys_js_1.runtimeKey)(binding.workspaceId, binding.instanceId));
                 if (state) {
                     this.clearRuntimeError(state);
                     state.status = 'running';
@@ -721,7 +726,16 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
                     const attachmentParts = [];
                     if (mediaItems.length > 0) {
                         const uploadsDir = node_path_1.default.join(binding.stateDir, 'weixin-uploads');
+                        const mayMaterializeAttachments = binding.allowFrom === '*'
+                            || Boolean(this.options.store.getAuthorizedUser(binding.workspaceId, conversationId, binding.platformKey));
                         for (const [idx, item] of mediaItems.entries()) {
+                            const itemData = item.image_item ?? item.file_item ?? null;
+                            const declaredName = String(itemData?.file_name ?? (item.type === transport_js_1.IMAGE_ITEM_TYPE ? 'image' : 'file'));
+                            if (!mayMaterializeAttachments) {
+                                attachmentText += attachmentText ? '\n' : '';
+                                attachmentText += item.type === transport_js_1.IMAGE_ITEM_TYPE ? '[Image]' : `[File: ${declaredName}]`;
+                                continue;
+                            }
                             try {
                                 const att = await this.downloadMediaItem(item, msgId, idx, uploadsDir, binding);
                                 if (att) {
@@ -762,7 +776,7 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
                     return;
                 consecutiveFailures++;
                 const retryDelayMs = this.computeRetryDelay(consecutiveFailures);
-                const state = this.runtime.get((0, config_js_1.runtimeKey)(binding.workspaceId, binding.instanceId));
+                const state = this.runtime.get((0, channel_keys_js_1.runtimeKey)(binding.workspaceId, binding.instanceId));
                 if (state) {
                     state.consecutiveFailures = consecutiveFailures;
                     state.nextRetryAt = new Date(Date.now() + retryDelayMs).toISOString();
@@ -886,37 +900,58 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
             aesKey = decoded.length === 16 ? decoded : decoded.length === 32 ? Buffer.from(decoded.toString('ascii'), 'hex') : undefined;
         }
         const cdnUrl = `${binding.cdnBaseUrl}/download?encrypted_query_param=${encodeURIComponent(encryptQueryParam)}`;
-        const resp = await fetch(cdnUrl, { signal: AbortSignal.timeout(30_000) });
-        if (!resp.ok)
-            throw new Error(`CDN HTTP ${resp.status}`);
-        const rawBuf = Buffer.from(await resp.arrayBuffer());
-        if (rawBuf.length === 0)
-            throw new Error('CDN returned empty data');
-        let resultBuf;
-        if (aesKey) {
-            const decipher = node_crypto_1.default.createDecipheriv('aes-128-ecb', aesKey, null);
-            decipher.setAutoPadding(true);
-            resultBuf = Buffer.concat([decipher.update(rawBuf), decipher.final()]);
-        }
-        else {
-            resultBuf = rawBuf;
-        }
-        const { ext, kind } = this.sniffExtAndKind(resultBuf);
         const declaredName = String(itemData?.file_name ?? (item.type === transport_js_1.IMAGE_ITEM_TYPE ? 'image' : 'file'));
-        const safeName = declaredName.replace(/[^a-zA-Z0-9._-]/g, '_').slice(0, 64);
-        const safeMsgId = msgId.replace(/[^a-zA-Z0-9._-]/g, '_').slice(0, 48);
-        const fileName = `${safeMsgId}-${idx}-${safeName}${ext}`;
-        const filePath = node_path_1.default.join(uploadsDir, fileName);
-        node_fs_1.default.mkdirSync(uploadsDir, { recursive: true });
-        node_fs_1.default.writeFileSync(filePath, resultBuf);
+        const stored = await this.inboundAttachmentStore.save({
+            directory: uploadsDir,
+            storedFileName: `${msgId}-${idx}-${declaredName}`,
+            displayFileName: declaredName,
+            maxBytes: WEIXIN_MAX_UPLOAD_FILE_SIZE,
+            includeBase64: ({ prefix }) => this.sniffExtAndKind(prefix).kind === 'image',
+            finalizeStoredFileName: ({ storedFileName, prefix }) => `${storedFileName}${this.sniffExtAndKind(prefix).ext}`,
+            source: {
+                open: async () => {
+                    const resp = await fetch(cdnUrl, { signal: AbortSignal.timeout(30_000) });
+                    if (!resp.ok)
+                        throw new Error(`CDN HTTP ${resp.status}`);
+                    if (!resp.body)
+                        throw new Error('CDN returned no response body');
+                    const rawStream = node_stream_1.Readable.fromWeb(resp.body);
+                    if (!aesKey) {
+                        return { stream: rawStream };
+                    }
+                    const decipher = node_crypto_1.default.createDecipheriv('aes-128-ecb', aesKey, null);
+                    decipher.setAutoPadding(true);
+                    return { stream: rawStream.pipe(decipher) };
+                },
+            },
+        });
+        const { ext, kind } = this.sniffExtAndKind(stored.prefix);
+        const uri = await this.resolveInboundAttachmentUri(binding, stored.path);
         return {
-            path: filePath,
+            path: stored.path,
             kind,
             name: declaredName,
-            data: kind === 'image' ? resultBuf.toString('base64') : undefined,
+            data: stored.data,
             mimeType: kind === 'image' ? this.mimeTypeForImageExt(ext) : undefined,
+            ...(uri ? { uri } : {}),
         };
     }
+    async resolveInboundAttachmentUri(binding, filePath) {
+        const sandbox = binding.project?.agent?.options?.sandbox;
+        if (!sandbox?.enabled) {
+            return (0, inbound_attachment_store_js_1.resolveInboundAttachmentUri)({ filePath });
+        }
+        const workspace = await this.options.getWorkspaceRouter().getWorkspaceRegistryEntry(binding.workspaceId).catch(() => undefined);
+        if (!workspace) {
+            return undefined;
+        }
+        return (0, inbound_attachment_store_js_1.resolveInboundAttachmentUri)({
+            filePath,
+            workspacePath: workspace.path,
+            sandboxEnabled: true,
+            sandboxWorkspacePath: sandbox.workspace_mount_path,
+        });
+    }
     mimeTypeForImageExt(ext) {
         if (ext === '.jpg')
             return 'image/jpeg';
@@ -1115,7 +1150,7 @@ class LocalCoreWeixinGateway extends base_channel_gateway_js_1.BaseChannelGatewa
         return 60_000;
     }
     logPollError(binding, errorKey, message) {
-        const key = (0, config_js_1.runtimeKey)(binding.workspaceId, binding.instanceId);
+        const key = (0, channel_keys_js_1.runtimeKey)(binding.workspaceId, binding.instanceId);
         const current = this.pollErrorLogWindows.get(key);
         const now = Date.now();
         if (!current || current.errorKey !== errorKey || now - current.at >= ERROR_LOG_WINDOW_MS) {

package/dist-electron/services/local-ai-core/src/kernel/local-core-errors.js

@@ -137,11 +137,12 @@ class LocalCoreError extends Error {
     info;
     constructor(code, message, input = {}) {
         const defaults = DEFAULTS[code];
-        super(message || defaults.userMessage);
+        const messageStr = coerceErrorMessage(message) || defaults.userMessage;
+        super(messageStr);
         this.name = 'LocalCoreError';
         this.info = {
             code,
-            message: message || defaults.userMessage,
+            message: messageStr,
             userMessage: input.userMessage || defaults.userMessage,
             severity: input.severity || defaults.severity,
             retryable: input.retryable ?? defaults.retryable,
@@ -158,9 +159,9 @@ function toLocalCoreErrorInfo(error, fallbackCode = 'internal_error', details =
     }
     const maybeInfo = error?.info;
     if (maybeInfo?.code && maybeInfo.message) {
-        return mergeDetails(maybeInfo, details);
+        return mergeDetails(ensureInfoMessageString(maybeInfo), details);
     }
-    const message = error instanceof Error ? error.message : String(error || '');
+    const message = coerceErrorMessage(error instanceof Error ? error.message : error);
     const classifiedCode = classifyErrorMessage(message, fallbackCode);
     return new LocalCoreError(classifiedCode, message || DEFAULTS[classifiedCode].userMessage, {
         details: Object.keys(details).length ? details : undefined,
@@ -171,7 +172,8 @@ function formatUserError(info) {
 }
 function formatLogError(info) {
     const suffix = info.cause ? ` cause=${info.cause}` : '';
-    return `${info.code}: ${info.message}${suffix}`;
+    const message = typeof info.message === 'string' ? info.message : safeStringify(info.message);
+    return `${info.code}: ${message}${suffix}`;
 }
 function errorInfoToHttpBody(info) {
     return {
@@ -253,3 +255,29 @@ function mergeDetails(info, details) {
         },
     };
 }
+function ensureInfoMessageString(info) {
+    if (typeof info.message === 'string') {
+        return info;
+    }
+    return { ...info, message: safeStringify(info.message) };
+}
+function coerceErrorMessage(value) {
+    if (typeof value === 'string') {
+        return value;
+    }
+    if (value === null || value === undefined) {
+        return '';
+    }
+    return safeStringify(value);
+}
+function safeStringify(value) {
+    if (typeof value === 'string') {
+        return value;
+    }
+    try {
+        return JSON.stringify(value);
+    }
+    catch {
+        return String(value);
+    }
+}

package/dist-electron/services/local-ai-core/src/runtime/channel-service.js

@@ -93,46 +93,6 @@ class ChannelService {
         }
         return runtime.checkQrCodeStatus(workspaceId, ticket, instanceId);
     }
-    async getWeixinQrCode(workspaceId, instanceId) {
-        return this.getQrCode('weixin', workspaceId, instanceId);
-    }
-    async checkWeixinQrCodeStatus(workspaceId, ticket, instanceId) {
-        return this.checkQrCodeStatus('weixin', workspaceId, ticket, instanceId);
-    }
-    // Lark convenience wrappers
-    async listLarkStatuses() {
-        return this.listStatuses('lark');
-    }
-    async getLarkStatus(workspaceId, instanceId) {
-        return this.getStatus('lark', workspaceId, instanceId);
-    }
-    async testLarkConnection(workspaceId, instanceId) {
-        return this.testConnection('lark', workspaceId, instanceId);
-    }
-    async enableLark(workspaceId, instanceId) {
-        return this.enable('lark', workspaceId, instanceId);
-    }
-    async disableLark(workspaceId, instanceId) {
-        return this.disable('lark', workspaceId, instanceId);
-    }
-    async listLarkPendingPairings(workspaceId) {
-        return this.listPendingPairings('lark', workspaceId);
-    }
-    async approveLarkPairing(code) {
-        return this.approvePairing('lark', code);
-    }
-    async rejectLarkPairing(code) {
-        return this.rejectPairing('lark', code);
-    }
-    async listLarkAuthorizedUsers(workspaceId) {
-        return this.listAuthorizedUsers('lark', workspaceId);
-    }
-    async getLarkQrCode(workspaceId, instanceId) {
-        return this.getQrCode('lark', workspaceId, instanceId);
-    }
-    async checkLarkQrCodeStatus(workspaceId, ticket, instanceId) {
-        return this.checkQrCodeStatus('lark', workspaceId, ticket, instanceId);
-    }
     async refreshBindings() {
         await Promise.all([...this.runtimes.values()].map((runtime) => runtime.refreshBindings?.()));
     }

package/dist-electron/services/local-ai-core/src/runtime/external-service.js

@@ -175,20 +175,7 @@ class ExternalService {
         });
     }
     async readAndMigrateConfigFile() {
-        const current = await this.deps.readRuntimeConfig();
-        const migrated = (0, provider_config_migration_js_1.migrateLegacyProjectProvidersToStore)(current.config, this.store);
-        if (!migrated.changed) {
-            return current;
-        }
-        const saved = await this.deps.saveRuntimeConfig(migrated.config);
-        return {
-            ...saved,
-            warnings: [
-                ...(current.warnings || []),
-                ...(saved.warnings || []),
-                ...migrated.warnings,
-            ],
-        };
+        return (0, provider_config_migration_js_1.applyLegacyProviderMigration)(await this.deps.readRuntimeConfig(), this.store, (config) => this.deps.saveRuntimeConfig(config));
     }
     projectBasePath(userId, externalProjectId) {
         return (0, node_path_1.join)(this.workspaceRoot(), 'users', normalizeExternalSegment(userId, 'user'), 'projects', normalizeExternalSegment(externalProjectId, 'project'));

package/dist-electron/services/local-ai-core/src/runtime/local-core-controller.js

@@ -284,20 +284,7 @@ class LocalCoreController extends node_events_1.EventEmitter {
         }
     }
     async readAndMigrateRuntimeConfig() {
-        const current = this.store.readRuntimeConfig();
-        const migrated = (0, provider_config_migration_js_1.migrateLegacyProjectProvidersToStore)(current.config, this.store);
-        if (!migrated.changed) {
-            return current;
-        }
-        const saved = this.store.saveRuntimeConfig(migrated.config);
-        return {
-            ...saved,
-            warnings: [
-                ...(current.warnings || []),
-                ...(saved.warnings || []),
-                ...migrated.warnings,
-            ],
-        };
+        return (0, provider_config_migration_js_1.applyLegacyProviderMigration)(this.store.readRuntimeConfig(), this.store, (config) => this.store.saveRuntimeConfig(config));
     }
 }
 exports.LocalCoreController = LocalCoreController;

package/dist-electron/services/local-ai-core/src/runtime/provider-config-migration.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.migrateLegacyProjectProvidersToStore = migrateLegacyProjectProvidersToStore;
+exports.applyLegacyProviderMigration = applyLegacyProviderMigration;
 const config_migration_js_1 = require("./config-migration.js");
 function migrateLegacyProjectProvidersToStore(input, store) {
     const config = cloneConfig(input);
@@ -27,6 +28,21 @@ function migrateLegacyProjectProvidersToStore(input, store) {
     }
     return { config, changed, warnings };
 }
+async function applyLegacyProviderMigration(current, store, save) {
+    const migrated = migrateLegacyProjectProvidersToStore(current.config, store);
+    if (!migrated.changed) {
+        return current;
+    }
+    const saved = await save(migrated.config);
+    return {
+        ...saved,
+        warnings: [
+            ...(current.warnings || []),
+            ...(saved.warnings || []),
+            ...migrated.warnings,
+        ],
+    };
+}
 function cloneConfig(input) {
     return JSON.parse(JSON.stringify(input || {}));
 }

package/dist-electron/services/local-ai-core/src/scheduler/channel-execution-policy.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createChannelExecutionPolicy = createChannelExecutionPolicy;
+const definition_js_1 = require("../agents/shared/definition.js");
 const scheduled_bridge_session_js_1 = require("./scheduled-bridge-session.js");
 function createChannelExecutionPolicy(job, options, config) {
     if (job.executionMode === 'side-thread') {
@@ -79,16 +80,13 @@ class SideThreadChannelExecutionPolicy {
         this.bridgeSession = undefined;
     }
     async resolveTargetAgent(job) {
-        const preferredAgent = normalizeAgentType(this.config.preferredAgentType?.(job));
+        const preferredAgent = (0, definition_js_1.normalizeAgentType)(this.config.preferredAgentType?.(job));
         if (preferredAgent) {
             return preferredAgent;
         }
-        return normalizeAgentType(await this.options.workspaceRouter.getWorkspaceDefaultAgentType(job.workspaceId));
+        return (0, definition_js_1.normalizeAgentType)(await this.options.workspaceRouter.getWorkspaceDefaultAgentType(job.workspaceId));
     }
     threadMatchesTargetAgent(thread, targetAgent) {
-        return normalizeAgentType(thread.agentType) === targetAgent;
+        return (0, definition_js_1.normalizeAgentType)(thread.agentType) === targetAgent;
     }
 }
-function normalizeAgentType(value) {
-    return String(value || '').trim().toLowerCase();
-}

package/dist-electron/tests/electron/sandbox-config.test.js

@@ -168,7 +168,9 @@ function launchConfig() {
 });
 (0, node_test_1.default)('workspace route launches sandbox proxy when sandbox is enabled', () => {
     const root = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'agentdock-sandbox-'));
+    const previousUserDataDir = process.env.AI_WORKSTATION_USER_DATA_DIR;
     try {
+        delete process.env.AI_WORKSTATION_USER_DATA_DIR;
         (0, node_fs_1.mkdirSync)((0, node_path_1.join)(root, 'runtime'), { recursive: true });
         const route = (0, workspace_route_config_js_1.toLocalCoreProjectConfig)(configState((0, node_path_1.join)(root, 'runtime', 'config.toml')), project({
             enabled: true,
@@ -186,6 +188,9 @@ function launchConfig() {
         strict_1.default.equal(JSON.parse(route.env.AGENTDOCK_SANDBOX_CONFIG).image, 'agentdock/pi-acp:local');
     }
     finally {
+        if (previousUserDataDir !== undefined) {
+            process.env.AI_WORKSTATION_USER_DATA_DIR = previousUserDataDir;
+        }
         (0, node_fs_1.rmSync)(root, { recursive: true, force: true });
     }
 });

package/dist-electron/tests/integration/channel-inbound-attachment-store.test.js

@@ -0,0 +1,117 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = __importDefault(require("node:test"));
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const node_stream_1 = require("node:stream");
+const inbound_attachment_store_js_1 = require("../../services/local-ai-core/src/channel/shared/inbound-attachment-store.js");
+(0, node_test_1.default)('inbound attachment store streams a platform source into an atomic local file', async () => {
+    const tempDir = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'channel-inbound-store-'));
+    try {
+        const store = new inbound_attachment_store_js_1.FileSystemInboundAttachmentStore();
+        const stored = await store.save({
+            directory: tempDir,
+            storedFileName: 'message/one-report.pdf',
+            displayFileName: 'report.pdf',
+            source: {
+                open: async () => ({
+                    stream: node_stream_1.Readable.from([Buffer.from('hello '), Buffer.from('world')]),
+                    mimeType: 'application/pdf',
+                }),
+            },
+        });
+        strict_1.default.equal(stored.path, (0, node_path_1.join)(tempDir, 'message_one-report.pdf'));
+        strict_1.default.equal(stored.fileName, 'report.pdf');
+        strict_1.default.equal(stored.mimeType, 'application/pdf');
+        strict_1.default.equal(stored.size, 11);
+        strict_1.default.equal((0, node_fs_1.readFileSync)(stored.path, 'utf8'), 'hello world');
+        strict_1.default.deepEqual((0, node_fs_1.readdirSync)(tempDir), ['message_one-report.pdf']);
+    }
+    finally {
+        (0, node_fs_1.rmSync)(tempDir, { recursive: true, force: true });
+    }
+});
+(0, node_test_1.default)('inbound attachment store removes partial files when the size limit is exceeded', async () => {
+    const tempDir = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'channel-inbound-limit-'));
+    try {
+        const store = new inbound_attachment_store_js_1.FileSystemInboundAttachmentStore();
+        await strict_1.default.rejects(() => store.save({
+            directory: tempDir,
+            storedFileName: 'large.bin',
+            displayFileName: 'large.bin',
+            maxBytes: 4,
+            source: {
+                open: async () => ({ stream: node_stream_1.Readable.from([Buffer.from('12345')]) }),
+            },
+        }), /exceeds 4 bytes/);
+        strict_1.default.deepEqual((0, node_fs_1.readdirSync)(tempDir), []);
+    }
+    finally {
+        (0, node_fs_1.rmSync)(tempDir, { recursive: true, force: true });
+    }
+});
+(0, node_test_1.default)('inbound attachment store finalizes the filename before commit and can return base64', async () => {
+    const tempDir = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'channel-inbound-finalize-'));
+    try {
+        const store = new inbound_attachment_store_js_1.FileSystemInboundAttachmentStore();
+        const stored = await store.save({
+            directory: tempDir,
+            storedFileName: 'image-1',
+            displayFileName: 'image.png',
+            includeBase64: true,
+            finalizeStoredFileName: ({ storedFileName, prefix }) => {
+                strict_1.default.deepEqual(prefix.subarray(0, 4), Buffer.from([0x89, 0x50, 0x4e, 0x47]));
+                return `${storedFileName}.png`;
+            },
+            source: {
+                open: async () => ({ stream: node_stream_1.Readable.from([Buffer.from([0x89, 0x50, 0x4e, 0x47, 1, 2])]) }),
+            },
+        });
+        strict_1.default.equal(stored.path, (0, node_path_1.join)(tempDir, 'image-1.png'));
+        strict_1.default.equal(stored.data, 'iVBORwEC');
+        strict_1.default.deepEqual((0, node_fs_1.readdirSync)(tempDir), ['image-1.png']);
+    }
+    finally {
+        (0, node_fs_1.rmSync)(tempDir, { recursive: true, force: true });
+    }
+});
+(0, node_test_1.default)('inbound attachment store removes temporary data when filename finalization fails', async () => {
+    const tempDir = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'channel-inbound-finalize-error-'));
+    try {
+        const store = new inbound_attachment_store_js_1.FileSystemInboundAttachmentStore();
+        await strict_1.default.rejects(() => store.save({
+            directory: tempDir,
+            storedFileName: 'image-1',
+            displayFileName: 'image.png',
+            finalizeStoredFileName: () => {
+                throw new Error('cannot identify image');
+            },
+            source: {
+                open: async () => ({ stream: node_stream_1.Readable.from([Buffer.from('image')]) }),
+            },
+        }), /cannot identify image/);
+        strict_1.default.deepEqual((0, node_fs_1.readdirSync)(tempDir), []);
+    }
+    finally {
+        (0, node_fs_1.rmSync)(tempDir, { recursive: true, force: true });
+    }
+});
+(0, node_test_1.default)('inbound attachment URI maps workspace files into sandbox and hides external files', () => {
+    strict_1.default.equal((0, inbound_attachment_store_js_1.resolveInboundAttachmentUri)({
+        filePath: '/host/project/.agentdock/image.png',
+        workspacePath: '/host/project',
+        sandboxEnabled: true,
+        sandboxWorkspacePath: '/workspace',
+    }), 'file:///workspace/.agentdock/image.png');
+    strict_1.default.equal((0, inbound_attachment_store_js_1.resolveInboundAttachmentUri)({
+        filePath: '/host/state/image.png',
+        workspacePath: '/host/project',
+        sandboxEnabled: true,
+        sandboxWorkspacePath: '/workspace',
+    }), undefined);
+});