@xgjktech/xg_cwork_im 1.10.0 → 1.10.2

package/README.md

@@ -175,8 +175,10 @@ openclaw gateway restart
       // 可选：首条 AI 回复超时时间（毫秒），默认 30 分钟
       // 未配置时：30 * 60_000 = 1800000
       "firstReplyTimeoutMs": 1800000,
-      // 可选：入站附件先下载到当前 Agent workspace 下该子目录，再以 file:// 交给 OpenClaw
+      // 可选：入站附件先下载到当前 Agent workspace 下该子目录，MediaPath 为相对路径或 /workspace/...（见下）
       "inboundMediaWorkspaceSubdir": "xg_im_inbound",
+      // 沙箱 Agent 建议加：MediaPath 使用 /workspace/... 而不是 ./...（避免 read 按 cwd 解析失败）
+      "inboundMediaSandboxRootPrefix": "/workspace",
       "accounts": {
         "main": { "appKey": "appKey_机器人A", "agentId": "main",  "name": "个人助手" },
         "sales": { "appKey": "appKey_机器人B", "agentId": "sales", "name": "销售助手" }
@@ -233,7 +235,8 @@ openclaw gateway restart
 | `reconnectJitter` | number | `0.3` | 重连抖动因子（0-1） |
 | `firstReplyTimeoutMs` | number | `300000` | **首条 AI 回复超时时间（毫秒）**。用于保护「思考中」占位消息：若在该时间窗口内 AI 没有任何回复，则自动将占位消息更新为「当前请求处理超时，请稍后重试」。|
 | `inboundMediaWorkspaceSubdir` | string | — | **可选**。非空时，将入站附件先下载到**当前 Agent workspace** 下该**相对子目录**（如 `xg_im_inbound`），路径约定：`{子目录}/{发送者 userId}/{YYYY-MM-DD}/{文件名}_{HHmmssmmm}.ext`（时间为本机写入时刻），再向 OpenClaw 传入 **MediaPath**；默认使用 **workspace 相对路径**（如 `./xg_im_inbound/...`），便于 **沙箱** 将 `/workspace` 映射到同一套目录树；未配置则仍使用 IM 返回的 URL。需 runtime 提供 `resolveAgentWorkspaceDir`。 |
-| `inboundMediaOpenClawPath` | string | `workspaceRelative`（默认） | `workspaceRelative`：入站落盘后 `MediaPath` 为 `./子目录/...`；`absoluteFileUrl`：宿主机 `file://...`（仅适合无沙箱、网关与 Agent 同盘场景）。 |
+| `inboundMediaOpenClawPath` | string | `workspaceRelative`（默认） | `workspaceRelative`：入站落盘后 `MediaPath` 为 `./子目录/...`（若配置了 `inboundMediaSandboxRootPrefix` 则为该前缀 + 相对路径，如 `/workspace/xg_im_inbound/...`）；`absoluteFileUrl`：宿主机 `file://...`（仅适合无沙箱、网关与 Agent 同盘场景）。 |
+| `inboundMediaSandboxRootPrefix` | string | — | **可选**。沙箱内 workspace 挂载根，填 **`/workspace`** 时，在 `workspaceRelative` 模式下 `MediaPath` 为 **`/workspace/xg_im_inbound/...`**，避免 `./` 被 `read` 等工具按**进程 cwd**解析导致「不可访问」。须以 `/` 开头。 |
 
 ### 账户配置（`accounts.<accountId>` / `accounts[n]`）
 
@@ -245,6 +248,7 @@ openclaw gateway restart
 | `groupPolicy` | string | 继承顶层 | 可覆盖顶层的 groupPolicy |
 | `inboundMediaWorkspaceSubdir` | string | 继承顶层 | 可覆盖顶层的入站附件落盘子目录 |
 | `inboundMediaOpenClawPath` | string | 继承顶层 | 可覆盖顶层的 MediaPath 形式（相对路径 vs file://） |
+| `inboundMediaSandboxRootPrefix` | string | 继承顶层 | 可覆盖沙箱根前缀（如 `/workspace`） |
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xgjktech/xg_cwork_im",
-  "version": "1.10.0",
+  "version": "1.10.2",
   "description": "XG CWork IM channel plugin for OpenClaw",
   "keywords": [
     "bot",

package/src/channel.ts

@@ -56,6 +56,7 @@ const XgImAccountConfigSchema = z.object({
     maxAttachmentBytes: z.number().int().positive().optional(),
     inboundMediaWorkspaceSubdir: z.string().optional(),
     inboundMediaOpenClawPath: z.enum(["workspaceRelative", "absoluteFileUrl"]).optional(),
+    inboundMediaSandboxRootPrefix: z.string().optional(),
 });
 
 const XgImConfigSchema = z.object({
@@ -80,6 +81,8 @@ const XgImConfigSchema = z.object({
      */
     inboundMediaWorkspaceSubdir: z.string().optional(),
     inboundMediaOpenClawPath: z.enum(["workspaceRelative", "absoluteFileUrl"]).optional(),
+    /** 沙箱内 workspace 挂载根，如 `/workspace`；与 workspaceRelative 组合生成绝对引用 */
+    inboundMediaSandboxRootPrefix: z.string().optional(),
     // 多账户：对象 map（key 为 accountId）
     accounts: z.record(z.string(), XgImAccountConfigSchema).optional(),
 }).superRefine((val, ctx) => {
@@ -95,6 +98,17 @@ const XgImConfigSchema = z.object({
         });
     }
 
+    const badSandboxPrefix = (s: string | undefined): boolean =>
+        typeof s === "string" && s.trim().length > 0 && !s.trim().startsWith("/");
+
+    if (badSandboxPrefix(val.inboundMediaSandboxRootPrefix)) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["inboundMediaSandboxRootPrefix"],
+            message: "inboundMediaSandboxRootPrefix must be empty or an absolute path such as /workspace",
+        });
+    }
+
     const accounts = val.accounts;
     if (!accounts) return;
     for (const [key, acc] of Object.entries(accounts)) {
@@ -115,6 +129,14 @@ const XgImConfigSchema = z.object({
                     "inboundMediaWorkspaceSubdir must be a relative path under workspace (no .., no absolute path)",
             });
         }
+        if (badSandboxPrefix(acc.inboundMediaSandboxRootPrefix)) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["accounts", key, "inboundMediaSandboxRootPrefix"],
+                message:
+                    "inboundMediaSandboxRootPrefix must be empty or an absolute path such as /workspace",
+            });
+        }
     }
 });
 
@@ -671,6 +693,9 @@ export const xgCworkImChannelPlugin: XgImChannelPlugin = {
 
                     const inboundSub = config.inboundMediaWorkspaceSubdir?.trim();
                     if (inboundSub && fileItems.length > 0 && normalizeInboundWorkspaceSubdir(inboundSub)) {
+                        log.info(
+                            `${logPrefix} [inbound-local] enabled subdir=${inboundSub} sender=${senderId ?? "unknown"} files=${fileItems.length} pathStyle=${config.inboundMediaOpenClawPath ?? "workspaceRelative"} sandboxPrefix=${config.inboundMediaSandboxRootPrefix ?? "(none)"}`,
+                        );
                         fileItems = await saveInboundFilesToWorkspace({
                             rt,
                             cfg: ctx.cfg,

package/src/inbound-media-local.ts

@@ -5,7 +5,7 @@
  * 时间取写入时的本地时区。
  */
 
-import { mkdir, writeFile } from "node:fs/promises";
+import { mkdir, stat, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
 import type { OpenClawConfig } from "openclaw/plugin-sdk";
@@ -98,16 +98,39 @@ export function absPathToWorkspaceRelativeOpenClawRef(workspaceRoot: string, abs
     return posix.startsWith("./") ? posix : `./${posix}`;
 }
 
+/**
+ * 沙箱内常用挂载点（如 `/workspace`）+ 相对 workspace 的路径，供 read 等工具按「绝对路径」解析。
+ * 若未配置 sandboxRootPrefix，则仍用 `./xg_im_inbound/...`（相对当前 cwd，部分沙箱工具会误判为不可访问）。
+ */
+export function sandboxWorkspaceMediaRef(
+    workspaceRoot: string,
+    absPath: string,
+    sandboxRootPrefix: string,
+): string | null {
+    const rel = absPathToWorkspaceRelativeOpenClawRef(workspaceRoot, absPath);
+    if (!rel) return null;
+    const root = sandboxRootPrefix.trim().replace(/\/+$/, "") || "/workspace";
+    const relStrip = rel.replace(/^\.\/+/, "").replace(/^\/+/, "");
+    return `${root}/${relStrip}`;
+}
+
 function openClawMediaRefForSavedFile(args: {
     workspaceRoot: string;
     absPath: string;
     style: "workspaceRelative" | "absoluteFileUrl" | undefined;
+    /** 非空且 style 为 workspaceRelative 时，用 `/workspace/...` 形式代替 `./...` */
+    sandboxRootPrefix?: string;
     log?: Log;
 }): string {
-    const { workspaceRoot, absPath, style, log } = args;
+    const { workspaceRoot, absPath, style, sandboxRootPrefix, log } = args;
     if (style === "absoluteFileUrl") {
         return pathToFileURL(absPath).href;
     }
+    const prefix = sandboxRootPrefix?.trim();
+    if (prefix) {
+        const boxed = sandboxWorkspaceMediaRef(workspaceRoot, absPath, prefix);
+        if (boxed) return boxed;
+    }
     const rel = absPathToWorkspaceRelativeOpenClawRef(workspaceRoot, absPath);
     if (rel) return rel;
     log?.warn?.(
@@ -154,6 +177,12 @@ export async function saveInboundFilesToWorkspace(args: {
     const maxBytes = resolveMaxAttachmentBytes(config);
     const userSeg = sanitizeUserIdForPath(senderUserId ?? "unknown");
     const relParts = normalized.split("/");
+    const pathStyle = config.inboundMediaOpenClawPath ?? "workspaceRelative";
+    const sandboxPrefix = config.inboundMediaSandboxRootPrefix?.trim() || "";
+
+    log?.info?.(
+        `[cwork_im:inbound-local] begin files=${fileItems.length} cwd=${process.cwd()} workspaceRoot=${workspaceRoot} subdir=${normalized} user=${userSeg} style=${pathStyle} sandboxPrefix=${sandboxPrefix || "(none)"}`,
+    );
 
     const out: MsgFileVO[] = [];
     for (const item of fileItems) {
@@ -169,18 +198,22 @@ export async function saveInboundFilesToWorkspace(args: {
         const absPath = path.join(dir, localName);
 
         try {
+            log?.info?.(
+                `[cwork_im:inbound-local] prepare src=${srcUrl.slice(0, 120)} dir=${dir} abs=${absPath}`,
+            );
             await mkdir(dir, { recursive: true });
             const { buffer } = await downloadMediaBuffer(srcUrl, maxBytes, log);
             await writeFile(absPath, buffer);
-            const pathStyle = config.inboundMediaOpenClawPath ?? "workspaceRelative";
             const mediaRef = openClawMediaRefForSavedFile({
                 workspaceRoot,
                 absPath,
                 style: pathStyle,
+                sandboxRootPrefix: sandboxPrefix,
                 log,
             });
+            const st = await stat(absPath);
             log?.info?.(
-                `[cwork_im:inbound-local] saved ${localName} bytes=${buffer.length} abs=${absPath} openclawRef=${mediaRef.slice(0, 120)}`,
+                `[cwork_im:inbound-local] saved ${localName} bytes=${buffer.length} stat.size=${st.size} stat.mtime=${st.mtime.toISOString()} abs=${absPath} openclawRef=${mediaRef}`,
             );
             out.push({
                 ...item,

package/src/types.ts

@@ -44,10 +44,16 @@ export interface XgImAccountConfig {
     inboundMediaWorkspaceSubdir?: string;
     /**
      * 覆盖顶层：入站落盘后交给 OpenClaw 的 `MediaPath` 形式。
-     * - `workspaceRelative`（默认）：`./xg_im_inbound/...`，沙箱内 `/workspace` 可解析。
+     * - `workspaceRelative`（默认）：`./子目录/...`，或配合 `inboundMediaSandboxRootPrefix` 为 `/workspace/子目录/...`。
      * - `absoluteFileUrl`：宿主机 `file://...`，仅适合无沙箱、同进程读盘场景。
      */
     inboundMediaOpenClawPath?: "workspaceRelative" | "absoluteFileUrl";
+    /**
+     * 沙箱内 Agent workspace 挂载根路径（如 `/workspace`）。
+     * 与 `inboundMediaOpenClawPath: workspaceRelative` 联用时，入站 `MediaPath` 为
+     * `{inboundMediaSandboxRootPrefix}/xg_im_inbound/...`，避免 `./` 被工具按 cwd 解析而报「不可访问」。
+     */
+    inboundMediaSandboxRootPrefix?: string;
 }
 
 export interface XgImConfig extends OpenClawConfig {
@@ -107,6 +113,8 @@ export interface XgImConfig extends OpenClawConfig {
      * Agent 在沙箱中运行时应用 `workspaceRelative`，避免宿主机绝对 `file://` 在沙箱内不可读。
      */
     inboundMediaOpenClawPath?: "workspaceRelative" | "absoluteFileUrl";
+    /** 见 {@link XgImAccountConfig.inboundMediaSandboxRootPrefix} */
+    inboundMediaSandboxRootPrefix?: string;
 }
 
 // ─── IM 接口 Request / Response ─────────────────────────────────────────────