@xgjktech/xg_cwork_im 1.19.21 → 1.19.23

package/dist/src/tools/register-exec-env-hook.test.js

@@ -0,0 +1,189 @@
+import assert from "node:assert/strict";
+import { afterEach, beforeEach, describe, it } from "node:test";
+import { registerExecEnvHook, stripLeadingXgOpenApiAppKeyAssignments, XG_OPENAPI_BASE_URL, } from "./register-exec-env-hook.js";
+import { __resetSessionEnvStoreForTests, linkChildSession, setSessionEnvEntry, XG_OPENAPI_APP_KEY, } from "../session/session-env-store.js";
+let registeredHandler;
+function captureApi(cfg) {
+    return {
+        runtime: {
+            config: {
+                current: () => ({
+                    channels: {
+                        xg_cwork_im: cfg?.baseUrl
+                            ? { baseUrl: cfg.baseUrl }
+                            : {},
+                    },
+                }),
+            },
+            agent: {
+                session: {
+                    getSessionEntry: ({ sessionKey }) => cfg?.entries?.[sessionKey],
+                    resolveStorePath: () => "test-session-store",
+                },
+            },
+        },
+        on: (_name, handler) => {
+            registeredHandler = handler;
+        },
+    };
+}
+beforeEach(() => {
+    registeredHandler = undefined;
+    __resetSessionEnvStoreForTests();
+});
+afterEach(() => __resetSessionEnvStoreForTests());
+describe("stripLeadingXgOpenApiAppKeyAssignments", () => {
+    it("剥掉行首无引号赋值", () => {
+        const result = stripLeadingXgOpenApiAppKeyAssignments("XG_OPENAPI_APP_KEY=*** python3 /tmp/script.py --x 1");
+        assert.equal(result.stripped, true);
+        assert.equal(result.command, "python3 /tmp/script.py --x 1");
+    });
+    it("剥掉行首引号赋值（含部分掩码）", () => {
+        const result = stripLeadingXgOpenApiAppKeyAssignments("XG_OPENAPI_APP_KEY='***RuyZWCYzkozPXL3XHs89B9xVGa' python3 script.py");
+        assert.equal(result.stripped, true);
+        assert.equal(result.command, "python3 script.py");
+    });
+    it("剥掉 export 与分号形式", () => {
+        const result = stripLeadingXgOpenApiAppKeyAssignments("export XG_OPENAPI_APP_KEY=***; python3 script.py");
+        assert.equal(result.stripped, true);
+        assert.equal(result.command, "python3 script.py");
+    });
+    it("剥掉 env 工具前缀", () => {
+        const result = stripLeadingXgOpenApiAppKeyAssignments("env XG_OPENAPI_APP_KEY=*** python3 script.py");
+        assert.equal(result.stripped, true);
+        assert.equal(result.command, "python3 script.py");
+    });
+    it("只剥本变量，保留其他行首赋值", () => {
+        const result = stripLeadingXgOpenApiAppKeyAssignments("XG_OPENAPI_APP_KEY=bad KEEP=1 python3 script.py");
+        assert.equal(result.stripped, true);
+        assert.equal(result.command, "KEEP=1 python3 script.py");
+    });
+    it("不碰命令正文中的同名提及", () => {
+        const cmd = 'python3 -c "print(\'XG_OPENAPI_APP_KEY\')"';
+        const result = stripLeadingXgOpenApiAppKeyAssignments(cmd);
+        assert.equal(result.stripped, false);
+        assert.equal(result.command, cmd);
+    });
+    it("不碰非行首的赋值", () => {
+        const cmd = "echo hi && XG_OPENAPI_APP_KEY=*** python3 script.py";
+        const result = stripLeadingXgOpenApiAppKeyAssignments(cmd);
+        assert.equal(result.stripped, false);
+        assert.equal(result.command, cmd);
+    });
+});
+describe("register-exec-env-hook", () => {
+    it("注册 before_tool_call handler", () => {
+        registerExecEnvHook(captureApi());
+        assert.equal(typeof registeredHandler, "function");
+    });
+    it("非 exec 工具不注入", () => {
+        registerExecEnvHook(captureApi({ baseUrl: "https://api.example.com" }));
+        setSessionEnvEntry("session-a", XG_OPENAPI_APP_KEY, "k");
+        const result = registeredHandler({ toolName: "read", params: {} }, { sessionKey: "session-a" });
+        assert.equal(result, undefined);
+    });
+    it("无 appKey 且无 baseUrl 时返回 undefined（不动作）", () => {
+        registerExecEnvHook(captureApi());
+        const result = registeredHandler({ toolName: "exec", params: { command: "echo hi" } }, { sessionKey: "session-empty" });
+        assert.equal(result, undefined);
+    });
+    it("只有 baseUrl（配置）时也注入", () => {
+        registerExecEnvHook(captureApi({ baseUrl: "https://api.example.com" }));
+        const result = registeredHandler({ toolName: "exec", params: { command: "echo hi" } }, { sessionKey: "session-a" });
+        const resultParams = result.params;
+        assert.deepEqual(resultParams.env, { [XG_OPENAPI_BASE_URL]: "https://api.example.com" });
+    });
+    it("appKey 与 baseUrl 同时注入", () => {
+        registerExecEnvHook(captureApi({ baseUrl: "https://api.example.com" }));
+        setSessionEnvEntry("session-a", XG_OPENAPI_APP_KEY, "key-a");
+        const result = registeredHandler({ toolName: "exec", params: { command: "echo hi" } }, { sessionKey: "session-a" });
+        const resultParams = result.params;
+        assert.deepEqual(resultParams.env, {
+            [XG_OPENAPI_APP_KEY]: "key-a",
+            [XG_OPENAPI_BASE_URL]: "https://api.example.com",
+        });
+    });
+    it("有 appKey 但无 baseUrl 配置时只注入 appKey", () => {
+        registerExecEnvHook(captureApi());
+        setSessionEnvEntry("session-a", XG_OPENAPI_APP_KEY, "key-a");
+        const result = registeredHandler({ toolName: "exec", params: { command: "echo hi" } }, { sessionKey: "session-a" });
+        const resultParams = result.params;
+        assert.deepEqual(resultParams.env, { [XG_OPENAPI_APP_KEY]: "key-a" });
+    });
+    it("exec 且本会话有 appKey：注入 env，保留原 env 并覆盖同 key", () => {
+        registerExecEnvHook(captureApi());
+        setSessionEnvEntry("session-a", XG_OPENAPI_APP_KEY, "key-a");
+        const result = registeredHandler({
+            toolName: "exec",
+            params: { command: "echo hi", env: { EXISTING: "keep", [XG_OPENAPI_APP_KEY]: "old" } },
+        }, { sessionKey: "session-a" });
+        const resultParams = result.params;
+        assert.deepEqual(resultParams.env, {
+            EXISTING: "keep",
+            [XG_OPENAPI_APP_KEY]: "key-a",
+        });
+        assert.equal(resultParams.command, "echo hi");
+    });
+    it("有注入时剥掉 command 行首赋值并写入绑定值", () => {
+        registerExecEnvHook(captureApi());
+        setSessionEnvEntry("session-a", XG_OPENAPI_APP_KEY, "key-a");
+        const result = registeredHandler({
+            toolName: "exec",
+            params: {
+                command: "XG_OPENAPI_APP_KEY='***RuyZWCYzkozPXL3XHs89B9xVGa' python3 script.py",
+                env: { [XG_OPENAPI_APP_KEY]: "***" },
+            },
+        }, { sessionKey: "session-a" });
+        const resultParams = result.params;
+        assert.equal(resultParams.command, "python3 script.py");
+        assert.deepEqual(resultParams.env, { [XG_OPENAPI_APP_KEY]: "key-a" });
+    });
+    it("无注入时不改 command 前缀", () => {
+        registerExecEnvHook(captureApi());
+        const command = "XG_OPENAPI_APP_KEY=*** python3 script.py";
+        const result = registeredHandler({ toolName: "exec", params: { command, env: { KEEP: "1" } } }, { sessionKey: "session-empty" });
+        assert.equal(result, undefined);
+    });
+    it("subagent 子会话经父子链反查父会话 appKey", () => {
+        registerExecEnvHook(captureApi());
+        setSessionEnvEntry("parent-session", XG_OPENAPI_APP_KEY, "parent-key");
+        linkChildSession("child-session", "parent-session");
+        const result = registeredHandler({ toolName: "exec", params: { command: "echo hi" } }, { sessionKey: "child-session" });
+        const resultParams = result.params;
+        assert.deepEqual(resultParams.env, { [XG_OPENAPI_APP_KEY]: "parent-key" });
+    });
+    it("原 params 无 env 时新建 env 字段", () => {
+        registerExecEnvHook(captureApi());
+        setSessionEnvEntry("session-a", XG_OPENAPI_APP_KEY, "key-a");
+        const result = registeredHandler({ toolName: "exec", params: { command: "echo hi" } }, { sessionKey: "session-a" });
+        const resultParams = result.params;
+        assert.deepEqual(resultParams.env, { [XG_OPENAPI_APP_KEY]: "key-a" });
+    });
+    it("使用 OpenClaw Session 元数据解析父链，不依赖 subagent_spawned", () => {
+        registerExecEnvHook(captureApi({
+            entries: {
+                "agent:agent-a:child": { spawnedBy: "agent:agent-a:parent" },
+                "agent:agent-a:parent": { parentSessionKey: "agent:agent-a:root" },
+            },
+        }));
+        setSessionEnvEntry("agent:agent-a:root", XG_OPENAPI_APP_KEY, "parent-key");
+        const result = registeredHandler({ toolName: "exec", params: { command: "echo hi" } }, { sessionKey: "agent:agent-a:child" });
+        assert.deepEqual(result.params.env, { [XG_OPENAPI_APP_KEY]: "parent-key" });
+    });
+    it("无绑定时删除普通 Session 的 AI AppKey，但不阻断 exec", () => {
+        registerExecEnvHook(captureApi());
+        const result = registeredHandler({ toolName: "exec", params: { command: "echo hi", env: { XG_OPENAPI_APP_KEY: "ai-wrong", KEEP: "1" } } }, { sessionKey: "agent:agent-a:main" });
+        assert.deepEqual(result.params.env, { KEEP: "1" });
+    });
+    it("父 Session 属于其他 agent 时不注入 AppKey", () => {
+        registerExecEnvHook(captureApi({
+            entries: {
+                "agent:agent-a:child": { spawnedBy: "agent:agent-b:parent" },
+            },
+        }));
+        setSessionEnvEntry("agent:agent-b:parent", XG_OPENAPI_APP_KEY, "other-agent-key");
+        const result = registeredHandler({ toolName: "exec", params: { env: { XG_OPENAPI_APP_KEY: "ai-wrong" } } }, { sessionKey: "agent:agent-a:child", agentId: "agent-a" });
+        assert.deepEqual(result.params.env, {});
+    });
+});
+//# sourceMappingURL=register-exec-env-hook.test.js.map

package/dist/src/tools/register-exec-env-hook.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-exec-env-hook.test.js","sourceRoot":"","sources":["../../../src/tools/register-exec-env-hook.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AAEhE,OAAO,EACH,mBAAmB,EACnB,sCAAsC,EACtC,mBAAmB,GACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACH,8BAA8B,EAC9B,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GACrB,MAAM,iCAAiC,CAAC;AAOzC,IAAI,iBAAoD,CAAC;AAEzD,SAAS,UAAU,CAAC,GAA6D;IAC7E,OAAO;QACH,OAAO,EAAE;YACL,MAAM,EAAE;gBACJ,OAAO,EAAE,GAAG,EAAE,CACV,CAAC;oBACG,QAAQ,EAAE;wBACN,WAAW,EAAE,GAAG,EAAE,OAAO;4BACrB,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;4BAC1B,CAAC,CAAC,EAAE;qBACX;iBACJ,CAAU;aAClB;YACD,KAAK,EAAE;gBACH,OAAO,EAAE;oBACL,eAAe,EAAE,CAAC,EAAE,UAAU,EAA0B,EAAE,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,UAAU,CAAU;oBAChG,gBAAgB,EAAE,GAAG,EAAE,CAAC,oBAAoB;iBAC/C;aACJ;SACJ;QACD,EAAE,EAAE,CAAC,KAAa,EAAE,OAAgB,EAAE,EAAE;YACpC,iBAAiB,GAAG,OAAgC,CAAC;QACzD,CAAC;KAC4B,CAAC;AACtC,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACZ,iBAAiB,GAAG,SAAS,CAAC;IAC9B,8BAA8B,EAAE,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE,CAAC,8BAA8B,EAAE,CAAC,CAAC;AAElD,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;QACjB,MAAM,MAAM,GAAG,sCAAsC,CACjD,qDAAqD,CACxD,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE;QACvB,MAAM,MAAM,GAAG,sCAAsC,CACjD,sEAAsE,CACzE,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE;QACvB,MAAM,MAAM,GAAG,sCAAsC,CACjD,kDAAkD,CACrD,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;QACnB,MAAM,MAAM,GAAG,sCAAsC,CACjD,8CAA8C,CACjD,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gBAAgB,EAAE,GAAG,EAAE;QACtB,MAAM,MAAM,GAAG,sCAAsC,CACjD,iDAAiD,CACpD,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;QACpB,MAAM,GAAG,GAAG,4CAA4C,CAAC;QACzD,MAAM,MAAM,GAAG,sCAAsC,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;QAChB,MAAM,GAAG,GAAG,qDAAqD,CAAC;QAClE,MAAM,MAAM,GAAG,sCAAsC,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACnC,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,OAAO,iBAAiB,EAAE,UAAU,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;QACpB,mBAAmB,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC;QACxE,kBAAkB,CAAC,WAAW,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,iBAAkB,CAC7B,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAChC,EAAE,UAAU,EAAE,WAAW,EAAE,CAC9B,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAC9C,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,iBAAkB,CAC7B,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EACpD,EAAE,UAAU,EAAE,eAAe,EAAE,CAClC,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC1B,mBAAmB,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,iBAAkB,CAC7B,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EACpD,EAAE,UAAU,EAAE,WAAW,EAAE,CAC9B,CAAC;QACF,MAAM,YAAY,GAAI,MAA8C,CAAC,MAAM,CAAC;QAC5E,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC7B,mBAAmB,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC;QACxE,kBAAkB,CAAC,WAAW,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,iBAAkB,CAC7B,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EACpD,EAAE,UAAU,EAAE,WAAW,EAAE,CAC9B,CAAC;QACF,MAAM,YAAY,GAAI,MAA8C,CAAC,MAAM,CAAC;QAC5E,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE;YAC/B,CAAC,kBAAkB,CAAC,EAAE,OAAO;YAC7B,CAAC,mBAAmB,CAAC,EAAE,yBAAyB;SACnD,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QACzC,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAC;QAClC,kBAAkB,CAAC,WAAW,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,iBAAkB,CAC7B,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EACpD,EAAE,UAAU,EAAE,WAAW,EAAE,CAC9B,CAAC;QACF,MAAM,YAAY,GAAI,MAA8C,CAAC,MAAM,CAAC;QAC5E,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACjD,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAC;QAClC,kBAAkB,CAAC,WAAW,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,iBAAkB,CAC7B;YACI,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,EAAE;SACzF,EACD,EAAE,UAAU,EAAE,WAAW,EAAE,CAC9B,CAAC;QACF,MAAM,YAAY,GAAI,MAA8C,CAAC,MAAM,CAAC;QAC5E,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE;YAC/B,QAAQ,EAAE,MAAM;YAChB,CAAC,kBAAkB,CAAC,EAAE,OAAO;SAChC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACjC,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAC;QAClC,kBAAkB,CAAC,WAAW,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,iBAAkB,CAC7B;YACI,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE;gBACJ,OAAO,EAAE,sEAAsE;gBAC/E,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE;aACvC;SACJ,EACD,EAAE,UAAU,EAAE,WAAW,EAAE,CAC9B,CAAC;QACF,MAAM,YAAY,GAAI,MAA8C,CAAC,MAAM,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QACxD,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACzB,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,0CAA0C,CAAC;QAC3D,MAAM,MAAM,GAAG,iBAAkB,CAC7B,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,EAC7D,EAAE,UAAU,EAAE,eAAe,EAAE,CAClC,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACpC,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAC;QAClC,kBAAkB,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC;QACvE,gBAAgB,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,iBAAkB,CAC7B,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EACpD,EAAE,UAAU,EAAE,eAAe,EAAE,CAClC,CAAC;QACF,MAAM,YAAY,GAAI,MAA8C,CAAC,MAAM,CAAC;QAC5E,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACjC,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAC;QAClC,kBAAkB,CAAC,WAAW,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,iBAAkB,CAC7B,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EACpD,EAAE,UAAU,EAAE,WAAW,EAAE,CAC9B,CAAC;QACF,MAAM,YAAY,GAAI,MAA8C,CAAC,MAAM,CAAC;QAC5E,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QACxD,mBAAmB,CAAC,UAAU,CAAC;YAC3B,OAAO,EAAE;gBACL,qBAAqB,EAAE,EAAE,SAAS,EAAE,sBAAsB,EAAE;gBAC5D,sBAAsB,EAAE,EAAE,gBAAgB,EAAE,oBAAoB,EAAE;aACrE;SACJ,CAAC,CAAC,CAAC;QACJ,kBAAkB,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,iBAAkB,CAC7B,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EACpD,EAAE,UAAU,EAAE,qBAAqB,EAAE,CACxC,CAAC;QACF,MAAM,CAAC,SAAS,CAAE,MAA0C,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IACrH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAC9C,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,iBAAkB,CAC7B,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,kBAAkB,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,EACxG,EAAE,UAAU,EAAE,oBAAoB,EAAE,CACvC,CAAC;QACF,MAAM,CAAC,SAAS,CAAE,MAA0C,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QACxC,mBAAmB,CAAC,UAAU,CAAC;YAC3B,OAAO,EAAE;gBACL,qBAAqB,EAAE,EAAE,SAAS,EAAE,sBAAsB,EAAE;aAC/D;SACJ,CAAC,CAAC,CAAC;QACJ,kBAAkB,CAAC,sBAAsB,EAAE,kBAAkB,EAAE,iBAAiB,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,iBAAkB,CAC7B,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,kBAAkB,EAAE,UAAU,EAAE,EAAE,EAAE,EACzE,EAAE,UAAU,EAAE,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,CAC5D,CAAC;QACF,MAAM,CAAC,SAAS,CAAE,MAA0C,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/src/tools/send-file-tool.d.ts

@@ -0,0 +1,81 @@
+/**
+ * XG-IM 文件发送工具（`xg_cwork_im_send_file`）
+ *
+ * 直接发送当前 Agent workspace 内的文件到**当前 IM 会话**：校验 workspace 路径与文件 → 上传资源中心 →
+ * 发送 FILE 消息。避免 HTML/SVG 等经 `MEDIA:` + OpenClaw 本地媒体安全规则被拦截。
+ *
+ * 与 `xg_cwork_im_send_group_message`（仅纯文本、需模型给 groupId）不同：
+ * - groupId / accountId 从注入的会话上下文（deliveryContext）获取，模型不可指定；
+ * - 上传或发送失败一律返回 `ok:false`，绝不降级成文本后谎报成功。
+ */
+import type { AnyAgentTool } from "openclaw/plugin-sdk/agent-harness-runtime";
+import type { XgImConfig } from "../plugin/types.js";
+/** 由 OpenClaw 工具工厂上下文（`ctx`）节选注入，模型不可见、不可篡改。 */
+export type XgImSendFileToolHints = {
+    /** Agent 在宿主机上的 workspace 根目录（ctx.workspaceDir） */
+    workspaceDir?: string;
+    /** 当前 Agent ID（ctx.agentId），仅用于日志 */
+    agentId?: string;
+    /** 当前 IM 通道账户（ctx.agentAccountId） */
+    channelAccountId?: string;
+    /** 当前发送者 userId（ctx.requesterSenderId） */
+    requesterSenderId?: string;
+    /** 当前投递目标：channel / to(=groupId) / accountId / threadId（ctx.deliveryContext） */
+    deliveryContext?: {
+        channel?: string | null;
+        to?: string | null;
+        accountId?: string | null;
+        threadId?: string | number | null;
+    } | null;
+};
+export type SendFileErrorCode = "NO_XG_IM_CONTEXT" | "NO_DELIVERY_TARGET" | "NO_WORKSPACE" | "ACCOUNT_MISMATCH" | "ACCOUNT_NOT_FOUND" | "FILE_NOT_FOUND" | "PATH_IS_DIRECTORY" | "PATH_OUTSIDE_WORKSPACE" | "SYMLINK_ESCAPE" | "EMPTY_FILE" | "FILE_TOO_LARGE" | "EXTENSION_NOT_ALLOWED" | "AUTH_FAILED" | "READ_FAILED" | "UPLOAD_FAILED" | "MESSAGE_SEND_FAILED";
+export declare class SendFileError extends Error {
+    readonly code: SendFileErrorCode;
+    constructor(code: SendFileErrorCode, message: string);
+}
+/**
+ * 将模型传入的 path 解析为 workspace 内的宿主机绝对路径。
+ *
+ * 校验顺序与 docs/send-file-tool-design.md §3 一致：
+ * 去前缀 → 拒绝绝对/URL/UNC/.. → resolve 后仍在 workspace → realpath 防符号链接逃逸 →
+ * isFile → 存在/非空/不超限 → 拒绝可执行扩展名。
+ *
+ * @returns 解析后的真实路径、字节数与源文件名。
+ */
+export declare function resolveWorkspaceFile(workspaceDir: string, inputPath: string, maxBytes: number): Promise<{
+    realPath: string;
+    size: number;
+    sourceName: string;
+}>;
+/**
+ * 依据可选的 fileName 生成用户可见文件名：
+ * 去掉路径部分与非法字符，并强制沿用源文件扩展名（不允许模型改扩展名）。
+ */
+export declare function resolveDisplayFileName(sourceName: string, fileNameParam?: string): string;
+/**
+ * 从两个可信来源（deliveryContext.accountId、agentAccountId）确定账户 ID：
+ * 两者都存在且不一致时视为上下文冲突，拒绝执行（避免用错机器人）。
+ */
+export declare function selectTrustedAccountId(deliveryAccountId?: string | null, channelAccountId?: string): {
+    accountId?: string;
+} | {
+    conflict: {
+        a: string;
+        b: string;
+    };
+};
+/**
+ * 严格解析账户配置：
+ * - 单账户模式（无 accounts）：直接返回顶层配置。
+ * - 多账户模式：指定账户必须存在；未指定账户时仅当只有一个非 default 账户才可自动选定，
+ *   否则视为无法确定账户而拒绝。**不会**像 {@link resolveAccountConfig} 那样静默回退到第一个账户。
+ */
+export declare function resolveAccountConfigStrict(base: XgImConfig, accountId?: string): {
+    config: XgImConfig;
+    accountId?: string;
+} | {
+    error: "ACCOUNT_NOT_FOUND";
+    message: string;
+};
+export declare function buildSendFileTool(config: XgImConfig, hints?: XgImSendFileToolHints): AnyAgentTool;
+//# sourceMappingURL=send-file-tool.d.ts.map

package/dist/src/tools/send-file-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-file-tool.d.ts","sourceRoot":"","sources":["../../../src/tools/send-file-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAY9E,OAAO,KAAK,EAA0C,UAAU,EAAE,MAAM,oBAAoB,CAAC;AA2B7F,gDAAgD;AAChD,MAAM,MAAM,qBAAqB,GAAG;IAChC,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,0CAA0C;IAC1C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,eAAe,CAAC,EAAE;QACd,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;KACrC,GAAG,IAAI,CAAC;CACZ,CAAC;AAIF,MAAM,MAAM,iBAAiB,GACvB,kBAAkB,GAClB,oBAAoB,GACpB,cAAc,GACd,kBAAkB,GAClB,mBAAmB,GACnB,gBAAgB,GAChB,mBAAmB,GACnB,wBAAwB,GACxB,gBAAgB,GAChB,YAAY,GACZ,gBAAgB,GAChB,uBAAuB,GACvB,aAAa,GACb,aAAa,GACb,eAAe,GACf,qBAAqB,CAAC;AAE5B,qBAAa,aAAc,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;gBACrB,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM;CAKvD;AAWD;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACtC,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAwFjE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAgBzF;AAID;;;GAGG;AACH,wBAAgB,sBAAsB,CAClC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,EACjC,gBAAgB,CAAC,EAAE,MAAM,GAC1B;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAKjE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACtC,IAAI,EAAE,UAAU,EAChB,SAAS,CAAC,EAAE,MAAM,GACnB;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA8B9F;AAID,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,qBAAqB,GAAG,YAAY,CAkKjG"}

package/dist/src/tools/send-file-tool.js

@@ -0,0 +1,363 @@
+/**
+ * XG-IM 文件发送工具（`xg_cwork_im_send_file`）
+ *
+ * 直接发送当前 Agent workspace 内的文件到**当前 IM 会话**：校验 workspace 路径与文件 → 上传资源中心 →
+ * 发送 FILE 消息。避免 HTML/SVG 等经 `MEDIA:` + OpenClaw 本地媒体安全规则被拦截。
+ *
+ * 与 `xg_cwork_im_send_group_message`（仅纯文本、需模型给 groupId）不同：
+ * - groupId / accountId 从注入的会话上下文（deliveryContext）获取，模型不可指定；
+ * - 上传或发送失败一律返回 `ok:false`，绝不降级成文本后谎报成功。
+ */
+import { Type } from "@sinclair/typebox";
+import { readFile, realpath, stat } from "node:fs/promises";
+import path from "node:path";
+import { getToken } from "../plugin/auth.js";
+import { resolveAccountConfig } from "./group-history-tool.js";
+import { formatFromFilename, resolveMaxAttachmentBytes, resolveResourceUploadUrl, uploadWholeResourceFileWithRetry, } from "../workspace/resource-file.js";
+import { sendFileRunEvent } from "../delivery/send-file-event.js";
+import { generateClientMsgId, sendUploadedFileMessage } from "../delivery/send-service.js";
+import { toolJsonResult } from "./tool-json-result.js";
+// ─── 工具参数 Schema ─────────────────────────────────────────────────────────
+const SendFileParams = Type.Object({
+    path: Type.String({
+        minLength: 1,
+        description: "当前 Agent workspace 内的文件相对路径，例如 report.html 或 output/report.pdf；" +
+            "可选前缀 ./ 或 /workspace/。禁止绝对路径、URL、UNC、workspace 外或 .. 越界路径。",
+    }),
+    caption: Type.Optional(Type.String({
+        description: "附件说明文字（可选）",
+        maxLength: 2000,
+    })),
+    fileName: Type.Optional(Type.String({
+        description: "用户看到的文件名（可选）；省略时使用源文件名。扩展名以源文件为准，不可修改。",
+    })),
+    atUserIds: Type.Optional(Type.Array(Type.String(), { maxItems: 50 })),
+});
+export class SendFileError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = "SendFileError";
+        this.code = code;
+    }
+}
+/** 默认拒绝的可执行 / 脚本扩展名（去掉点、小写） */
+const BLOCKED_EXTENSIONS = new Set(["exe", "dll", "bat", "cmd", "msi", "ps1", "sh"]);
+// ─── 路径安全解析 ─────────────────────────────────────────────────────────────
+function isUrlLike(ref) {
+    return /^[a-zA-Z][a-zA-Z0-9+.-]*:\/\//.test(ref) || ref.startsWith("file:");
+}
+/**
+ * 将模型传入的 path 解析为 workspace 内的宿主机绝对路径。
+ *
+ * 校验顺序与 docs/send-file-tool-design.md §3 一致：
+ * 去前缀 → 拒绝绝对/URL/UNC/.. → resolve 后仍在 workspace → realpath 防符号链接逃逸 →
+ * isFile → 存在/非空/不超限 → 拒绝可执行扩展名。
+ *
+ * @returns 解析后的真实路径、字节数与源文件名。
+ */
+export async function resolveWorkspaceFile(workspaceDir, inputPath, maxBytes) {
+    const raw = inputPath.trim();
+    const posix = raw.replace(/\\/g, "/");
+    if (isUrlLike(raw)) {
+        throw new SendFileError("PATH_OUTSIDE_WORKSPACE", "不支持 URL 或 file:// 路径，只能发送 workspace 内文件。");
+    }
+    // Windows 盘符绝对路径 / UNC
+    if (/^[a-zA-Z]:[/\\]/.test(raw) || posix.startsWith("//")) {
+        throw new SendFileError("PATH_OUTSIDE_WORKSPACE", "不支持宿主机绝对路径或 UNC 路径。");
+    }
+    // 去掉可选前缀：/workspace/、./
+    let rel;
+    if (posix === "/workspace" || posix === "/workspace/") {
+        rel = "";
+    }
+    else if (posix.startsWith("/workspace/")) {
+        rel = posix.slice("/workspace/".length);
+    }
+    else if (posix.startsWith("./")) {
+        rel = posix.slice(2);
+    }
+    else if (posix.startsWith("/")) {
+        // 其它绝对路径（如 /tmp/openclaw/...）一律拒绝
+        throw new SendFileError("PATH_OUTSIDE_WORKSPACE", "不支持 workspace 外的绝对路径。");
+    }
+    else {
+        rel = posix;
+    }
+    rel = rel.replace(/^\/+/, "").trim();
+    if (!rel || rel === ".") {
+        throw new SendFileError("PATH_IS_DIRECTORY", "指定路径是 workspace 根目录，不是可发送文件。");
+    }
+    if (rel.split("/").some((seg) => seg === "..")) {
+        throw new SendFileError("PATH_OUTSIDE_WORKSPACE", "路径包含 .. ，越出 workspace。");
+    }
+    const absolutePath = path.resolve(workspaceDir, rel);
+    const relToRoot = path.relative(workspaceDir, absolutePath);
+    if (relToRoot === ".." || relToRoot.startsWith(`..${path.sep}`) || path.isAbsolute(relToRoot)) {
+        throw new SendFileError("PATH_OUTSIDE_WORKSPACE", "解析后的路径不在当前 Agent workspace 内。");
+    }
+    // realpath 防止符号链接逃逸；workspace 自身也 realpath 以对齐比较基准。
+    let realWorkspace;
+    try {
+        realWorkspace = await realpath(workspaceDir);
+    }
+    catch {
+        realWorkspace = path.resolve(workspaceDir);
+    }
+    let realPath;
+    try {
+        realPath = await realpath(absolutePath);
+    }
+    catch (err) {
+        if (err?.code === "ENOENT") {
+            throw new SendFileError("FILE_NOT_FOUND", "文件不存在。请先在 workspace 内创建该文件。");
+        }
+        throw new SendFileError("READ_FAILED", `无法解析文件路径：${String(err)}`);
+    }
+    const realRel = path.relative(realWorkspace, realPath);
+    if (realRel === ".." || realRel.startsWith(`..${path.sep}`) || path.isAbsolute(realRel)) {
+        throw new SendFileError("SYMLINK_ESCAPE", "符号链接指向 workspace 之外，已拒绝。");
+    }
+    const st = await stat(realPath);
+    if (st.isDirectory()) {
+        throw new SendFileError("PATH_IS_DIRECTORY", "指定路径是目录，不是可发送文件。");
+    }
+    if (!st.isFile()) {
+        throw new SendFileError("FILE_NOT_FOUND", "指定路径不是普通文件。");
+    }
+    if (st.size <= 0) {
+        throw new SendFileError("EMPTY_FILE", "文件为空，无法发送。");
+    }
+    if (st.size > maxBytes) {
+        throw new SendFileError("FILE_TOO_LARGE", `文件大小 ${st.size} 字节超过上限 ${maxBytes} 字节。`);
+    }
+    const sourceName = path.basename(realPath) || "file";
+    const ext = path.extname(sourceName).replace(/^\./, "").toLowerCase();
+    if (ext && BLOCKED_EXTENSIONS.has(ext)) {
+        throw new SendFileError("EXTENSION_NOT_ALLOWED", `默认禁止发送 .${ext} 可执行/脚本文件。`);
+    }
+    return { realPath, size: st.size, sourceName };
+}
+/**
+ * 依据可选的 fileName 生成用户可见文件名：
+ * 去掉路径部分与非法字符，并强制沿用源文件扩展名（不允许模型改扩展名）。
+ */
+export function resolveDisplayFileName(sourceName, fileNameParam) {
+    if (!fileNameParam || !fileNameParam.trim())
+        return sourceName;
+    const sourceExt = path.extname(sourceName); // 含点，可能为空
+    const base = path.basename(fileNameParam.replace(/\\/g, "/"));
+    // 去掉调用方自带扩展名，统一使用源扩展名
+    const baseNoExt = sourceExt && base.toLowerCase().endsWith(sourceExt.toLowerCase())
+        ? base.slice(0, base.length - sourceExt.length)
+        : base.replace(/\.[^.]*$/, "");
+    // 过滤控制字符与文件系统非法字符
+    const cleaned = baseNoExt
+        .replace(/[\x00-\x1f\x7f/\\:*?"<>|]/g, "")
+        .replace(/\s+/g, " ")
+        .trim();
+    if (!cleaned)
+        return sourceName;
+    return `${cleaned}${sourceExt}`;
+}
+// ─── 账户严格解析 ─────────────────────────────────────────────────────────────
+/**
+ * 从两个可信来源（deliveryContext.accountId、agentAccountId）确定账户 ID：
+ * 两者都存在且不一致时视为上下文冲突，拒绝执行（避免用错机器人）。
+ */
+export function selectTrustedAccountId(deliveryAccountId, channelAccountId) {
+    const a = deliveryAccountId?.trim() || undefined;
+    const b = channelAccountId?.trim() || undefined;
+    if (a && b && a !== b)
+        return { conflict: { a, b } };
+    return { accountId: a ?? b };
+}
+/**
+ * 严格解析账户配置：
+ * - 单账户模式（无 accounts）：直接返回顶层配置。
+ * - 多账户模式：指定账户必须存在；未指定账户时仅当只有一个非 default 账户才可自动选定，
+ *   否则视为无法确定账户而拒绝。**不会**像 {@link resolveAccountConfig} 那样静默回退到第一个账户。
+ */
+export function resolveAccountConfigStrict(base, accountId) {
+    const accounts = base.accounts;
+    if (!accounts || typeof accounts !== "object") {
+        return { config: base, accountId };
+    }
+    const map = accounts;
+    const nonDefaultKeys = Object.keys(map).filter((k) => k !== "default" && map[k]);
+    if (accountId && accountId !== "default") {
+        if (!map[accountId]) {
+            return {
+                error: "ACCOUNT_NOT_FOUND",
+                message: `指定账户 ${accountId} 不存在，已拒绝以免用错机器人发送。`,
+            };
+        }
+        return { config: resolveAccountConfig(base, accountId), accountId };
+    }
+    // 未提供明确账户：只有唯一非 default 账户时才可自动选定。
+    if (nonDefaultKeys.length === 1) {
+        return { config: resolveAccountConfig(base, nonDefaultKeys[0]), accountId: nonDefaultKeys[0] };
+    }
+    if (nonDefaultKeys.length === 0) {
+        // 仅有 default：交给 resolveAccountConfig 合并 default 到顶层。
+        return { config: resolveAccountConfig(base, undefined), accountId };
+    }
+    return {
+        error: "ACCOUNT_NOT_FOUND",
+        message: "存在多个账户但当前会话未提供明确账户，无法安全选择，已拒绝。",
+    };
+}
+// ─── 工具构建函数 ─────────────────────────────────────────────────────────────
+export function buildSendFileTool(config, hints) {
+    return {
+        name: "xg_cwork_im_send_file",
+        label: "【xg_cwork_im】发送 workspace 文件到当前会话",
+        description: [
+            "【用途】把**当前 Agent workspace 内的文件**发送到**当前 IM 会话**（生成/返回/发送报告、HTML、PDF 等文件时使用）。",
+            "【为何用它】HTML、SVG 等经 MEDIA 会被 OpenClaw 本地媒体安全规则拦截；本工具直接上传资源中心并发 FILE 消息，用户可直接下载。",
+            "【流程】先在 workspace 内创建具体文件 → 用相对路径调用本工具（path 支持 ./ 或 /workspace/ 前缀）。",
+            "【约束】groupId / 账户由会话上下文自动决定，不用也不能传；只能发 workspace 内文件，禁止 URL、宿主机绝对路径、workspace 外或 .. 路径。",
+            "【判成功】仅当返回 ok:true 才能告知用户已发送；ok:false 时按 code 修正文件或路径，不得谎报成功。",
+        ].join("\n"),
+        parameters: SendFileParams,
+        async execute(_toolCallId, params) {
+            const log = makeConsoleLog();
+            const delivery = hints?.deliveryContext ?? null;
+            const channel = delivery?.channel ?? undefined;
+            const groupId = (delivery?.to ?? "").trim();
+            const workspaceDir = hints?.workspaceDir?.trim();
+            const fail = (code, error) => {
+                console.warn(`[cwork_im][tool] xg_cwork_im_send_file rejected code=${code}: ${error}`);
+                return toolJsonResult({ ok: false, code, error });
+            };
+            // 该工具限定「当前 xg_cwork_im 会话」：channel 必须严格等于 xg_cwork_im（缺失也拒绝）。
+            if (channel !== "xg_cwork_im") {
+                return fail("NO_XG_IM_CONTEXT", "当前会话不是 xg_cwork_im 通道（或缺少通道标识），无法使用本工具。");
+            }
+            if (!groupId) {
+                return fail("NO_DELIVERY_TARGET", "缺少当前 IM 会话目标（groupId），无法发送。");
+            }
+            if (!workspaceDir) {
+                return fail("NO_WORKSPACE", "缺少当前 Agent workspace，无法解析文件路径。");
+            }
+            // 账户：两个可信来源冲突时拒绝；随后严格解析（不存在/无法确定时拒绝，绝不回退到第一个账户）。
+            const selected = selectTrustedAccountId(delivery?.accountId, hints?.channelAccountId);
+            if ("conflict" in selected) {
+                return fail("ACCOUNT_MISMATCH", `会话上下文账户不一致（${selected.conflict.a} ≠ ${selected.conflict.b}），已拒绝以免用错机器人。`);
+            }
+            const resolvedAccount = resolveAccountConfigStrict(config, selected.accountId);
+            if ("error" in resolvedAccount) {
+                return fail(resolvedAccount.error, resolvedAccount.message);
+            }
+            const accountConfig = resolvedAccount.config;
+            const effectiveAccountId = resolvedAccount.accountId;
+            // 账户级 maxAttachmentBytes 优先于顶层，避免账户级限制被绕过。
+            const maxBytes = resolveMaxAttachmentBytes(accountConfig);
+            // 1) 路径与文件安全校验
+            let resolved;
+            try {
+                resolved = await resolveWorkspaceFile(workspaceDir, params.path, maxBytes);
+            }
+            catch (err) {
+                if (err instanceof SendFileError)
+                    return fail(err.code, err.message);
+                return fail("READ_FAILED", `路径校验失败：${String(err)}`);
+            }
+            const displayName = resolveDisplayFileName(resolved.sourceName, params.fileName);
+            const displayRel = path.relative(workspaceDir, resolved.realPath).split(path.sep).join("/");
+            console.log(`[cwork_im][tool] xg_cwork_im_send_file start groupId=${groupId} agentId=${hints?.agentId ?? "?"} ` +
+                `file=${displayName} bytes=${resolved.size} accountId=${effectiveAccountId ?? "0"}`);
+            // 2) 鉴权
+            let identity;
+            try {
+                identity = await getToken(accountConfig, log);
+            }
+            catch (err) {
+                return fail("AUTH_FAILED", `获取鉴权 token 失败：${String(err)}`);
+            }
+            // 3) 读取文件，并按实际字节数复核（防止校验后文件继续写入导致超限/清空）
+            let buffer;
+            try {
+                buffer = await readFile(resolved.realPath);
+            }
+            catch (err) {
+                return fail("READ_FAILED", `读取文件失败：${String(err)}`);
+            }
+            if (buffer.length <= 0) {
+                return fail("EMPTY_FILE", "读取到空文件，无法发送。");
+            }
+            if (buffer.length > maxBytes) {
+                return fail("FILE_TOO_LARGE", `读取后文件大小 ${buffer.length} 字节超过上限 ${maxBytes} 字节（可能校验后仍在写入）。`);
+            }
+            // 4) 上传资源中心（带重试）
+            const formField = accountConfig.fileUploadFormField?.trim() || "file";
+            let fileId;
+            try {
+                const uploaded = await uploadWholeResourceFileWithRetry({
+                    fileUploadUrl: resolveResourceUploadUrl(accountConfig.baseUrl),
+                    token: identity.token,
+                    buffer,
+                    filename: displayName,
+                    formField,
+                    log,
+                });
+                fileId = uploaded.fileId;
+            }
+            catch (err) {
+                return fail("UPLOAD_FAILED", `上传文件失败：${String(err)}`);
+            }
+            // 5) 发送 FILE 消息（失败即失败，绝不降级为文本谎报成功）
+            const attachment = {
+                fileId,
+                fileType: "FILE",
+                format: formatFromFilename(displayName),
+                name: displayName,
+                size: buffer.length,
+                source: "resource",
+            };
+            const clientMsgId = generateClientMsgId();
+            try {
+                const sent = await sendUploadedFileMessage({
+                    config: accountConfig,
+                    token: identity.token,
+                    groupId,
+                    caption: params.caption,
+                    attachment,
+                    atUserIds: params.atUserIds ?? [],
+                    clientMsgId,
+                    log,
+                });
+                console.log(`[cwork_im][tool] xg_cwork_im_send_file success groupId=${groupId} fileId=${fileId} ` +
+                    `serverMsgId=${sent.serverMsgId ?? "unknown"}`);
+                sendFileRunEvent({
+                    groupId,
+                    fileId,
+                    fileName: displayName,
+                    fileSize: buffer.length,
+                    format: attachment.format,
+                    path: displayRel,
+                });
+                return toolJsonResult({
+                    ok: true,
+                    path: displayRel,
+                    fileName: displayName,
+                    size: buffer.length,
+                    fileId,
+                    clientMsgId: sent.clientMsgId,
+                    ...(sent.serverMsgId ? { serverMsgId: sent.serverMsgId } : {}),
+                });
+            }
+            catch (err) {
+                return fail("MESSAGE_SEND_FAILED", `发送文件消息失败：${String(err)}`);
+            }
+        },
+    };
+}
+function makeConsoleLog() {
+    return {
+        info: (m) => console.log(`[cwork_im] ${m}`),
+        warn: (m) => console.warn(`[cwork_im] ${m}`),
+        error: (m) => console.error(`[cwork_im] ${m}`),
+    };
+}
+//# sourceMappingURL=send-file-tool.js.map