@xgjktech/xg_cwork_im 1.19.21 → 1.19.23

package/dist/src/workspace/inbound-media-local.js

@@ -0,0 +1,194 @@
+/**
+ * 入站附件：可选落盘到当前 Agent workspace 下指定子目录（相对路径）。
+ *
+ * 目录约定：{subdir}/{userId}/{YYYY-MM-DD}/{stem}_{HHmmssmmm}{ext}
+ * 时间取写入时的本地时区。
+ */
+import { mkdir, stat, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+import { downloadMediaBuffer, resolveMaxAttachmentBytes } from "./resource-file.js";
+/** 校验：非空、相对路径、不含 `..` 段 */
+export function normalizeInboundWorkspaceSubdir(subdir) {
+    const t = subdir.trim().replace(/\\/g, "/");
+    if (!t || t === "." || t === "..")
+        return null;
+    const parts = t.split("/").filter(Boolean);
+    for (const p of parts) {
+        if (p === "..")
+            return null;
+    }
+    if (path.isAbsolute(t))
+        return null;
+    return parts.join("/");
+}
+export function resolveAgentWorkspaceDirFromRuntime(rt, cfg) {
+    const agent = rt?.agent;
+    const fn = agent?.resolveAgentWorkspaceDir;
+    if (typeof fn !== "function")
+        return undefined;
+    try {
+        const out = fn(cfg);
+        if (typeof out === "string" && out.trim())
+            return path.resolve(out.trim());
+    }
+    catch {
+        /* ignore */
+    }
+    return undefined;
+}
+export async function ensureAgentWorkspaceFromRuntime(rt, cfg) {
+    const agent = rt?.agent;
+    const fn = agent?.ensureAgentWorkspace;
+    if (typeof fn !== "function")
+        return;
+    try {
+        await fn(cfg);
+    }
+    catch {
+        /* 落盘前仍会 mkdir，不阻断 */
+    }
+}
+function sanitizeUserIdForPath(id) {
+    const t = id.trim();
+    if (/^-?\d+$/.test(t) && t.length <= 32)
+        return t;
+    const safe = t.replace(/[^\w.-]/g, "_").replace(/_+/g, "_").replace(/^_|_$/g, "");
+    return safe.slice(0, 64) || "unknown";
+}
+export function formatDateFolderLocal(d) {
+    const y = d.getFullYear();
+    const m = String(d.getMonth() + 1).padStart(2, "0");
+    const day = String(d.getDate()).padStart(2, "0");
+    return `${y}-${m}-${day}`;
+}
+/** `HHmmss` + 三位毫秒，如 `120459237` */
+export function formatInboundTimeSuffix(d) {
+    const h = String(d.getHours()).padStart(2, "0");
+    const min = String(d.getMinutes()).padStart(2, "0");
+    const s = String(d.getSeconds()).padStart(2, "0");
+    const ms = String(d.getMilliseconds()).padStart(3, "0");
+    return `${h}${min}${s}${ms}`;
+}
+const MAX_STEM_LEN = 120;
+function sanitizeStem(stem) {
+    const s = stem
+        .replace(/[<>:"/\\|?*\u0000-\u001f]/g, "_")
+        .replace(/_+/g, "_")
+        .replace(/^\.+|\.+$/g, "")
+        .trim();
+    const out = s || "file";
+    return out.length > MAX_STEM_LEN ? out.slice(0, MAX_STEM_LEN) : out;
+}
+/**
+ * 将落盘绝对路径转为 OpenClaw / 沙箱可用的 workspace 相对引用（POSIX 风格，带 `./` 前缀）。
+ * 若文件不在 workspaceRoot 之下则返回 null（调用方应回退 file:// 或报错）。
+ */
+export function absPathToWorkspaceRelativeOpenClawRef(workspaceRoot, absPath) {
+    const root = path.resolve(workspaceRoot.trim());
+    const abs = path.resolve(absPath);
+    const rel = path.relative(root, abs);
+    if (rel.startsWith("..") || path.isAbsolute(rel))
+        return null;
+    const piece = rel.length > 0 ? rel : path.basename(abs);
+    const posix = piece.split(path.sep).join("/");
+    return posix.startsWith("./") ? posix : `./${posix}`;
+}
+/**
+ * 沙箱内常用挂载点（如 `/workspace`）+ 相对 workspace 的路径，供 read 等工具按「绝对路径」解析。
+ * 若未配置 sandboxRootPrefix，则仍用 `./xg_im_inbound/...`（相对当前 cwd，部分沙箱工具会误判为不可访问）。
+ */
+export function sandboxWorkspaceMediaRef(workspaceRoot, absPath, sandboxRootPrefix) {
+    const rel = absPathToWorkspaceRelativeOpenClawRef(workspaceRoot, absPath);
+    if (!rel)
+        return null;
+    const root = sandboxRootPrefix.trim().replace(/\/+$/, "") || "/workspace";
+    const relStrip = rel.replace(/^\.\/+/, "").replace(/^\/+/, "");
+    return `${root}/${relStrip}`;
+}
+export function openClawMediaRefForSavedFile(args) {
+    const { workspaceRoot, absPath, style, sandboxRootPrefix, log } = args;
+    if (style === "absoluteFileUrl") {
+        return pathToFileURL(absPath).href;
+    }
+    const prefix = sandboxRootPrefix?.trim();
+    if (prefix) {
+        const boxed = sandboxWorkspaceMediaRef(workspaceRoot, absPath, prefix);
+        if (boxed)
+            return boxed;
+    }
+    const rel = absPathToWorkspaceRelativeOpenClawRef(workspaceRoot, absPath);
+    if (rel)
+        return rel;
+    log?.warn?.(`[cwork_im:inbound-local] file not under workspace root, fallback to file:// absPath=${absPath.slice(0, 120)}`);
+    return pathToFileURL(absPath).href;
+}
+/** `report_120459237.pdf` */
+export function buildInboundStoredFilename(originalFilename, at) {
+    const base = path.basename(originalFilename) || "file";
+    const ext = path.extname(base);
+    const stem = ext ? base.slice(0, -ext.length) : base;
+    const suffix = formatInboundTimeSuffix(at);
+    return `${sanitizeStem(stem)}_${suffix}${ext.toLowerCase()}`;
+}
+/**
+ * 将入站附件下载到 workspace 下子目录；失败项保留原 URL。
+ */
+export async function saveInboundFilesToWorkspace(args) {
+    const { rt, cfg, config, workspaceSubdir, senderUserId, fileItems, log } = args;
+    const normalized = normalizeInboundWorkspaceSubdir(workspaceSubdir);
+    if (!normalized || fileItems.length === 0)
+        return fileItems;
+    const workspaceRoot = resolveAgentWorkspaceDirFromRuntime(rt, cfg);
+    if (!workspaceRoot) {
+        log?.warn?.("[cwork_im:inbound-local] resolveAgentWorkspaceDir unavailable, skip inbound download; keep remote URLs");
+        return fileItems;
+    }
+    await ensureAgentWorkspaceFromRuntime(rt, cfg);
+    const maxBytes = resolveMaxAttachmentBytes(config);
+    const userSeg = sanitizeUserIdForPath(senderUserId ?? "unknown");
+    const relParts = normalized.split("/");
+    const pathStyle = config.inboundMediaOpenClawPath ?? "workspaceRelative";
+    const sandboxPrefix = config.inboundMediaSandboxRootPrefix?.trim() || "";
+    log?.info?.(`[cwork_im:inbound-local] begin files=${fileItems.length} cwd=${process.cwd()} workspaceRoot=${workspaceRoot} subdir=${normalized} user=${userSeg} style=${pathStyle} sandboxPrefix=${sandboxPrefix || "(none)"}`);
+    const out = [];
+    for (const item of fileItems) {
+        const srcUrl = item.url?.trim();
+        if (!srcUrl) {
+            out.push(item);
+            continue;
+        }
+        const now = new Date();
+        const dateFolder = formatDateFolderLocal(now);
+        const localName = buildInboundStoredFilename(item.name?.trim() || "file", now);
+        const dir = path.join(workspaceRoot, ...relParts, userSeg, dateFolder);
+        const absPath = path.join(dir, localName);
+        try {
+            log?.info?.(`[cwork_im:inbound-local] prepare src=${srcUrl.slice(0, 120)} dir=${dir} abs=${absPath}`);
+            await mkdir(dir, { recursive: true });
+            const { buffer } = await downloadMediaBuffer(srcUrl, maxBytes, log);
+            await writeFile(absPath, buffer);
+            const mediaRef = openClawMediaRefForSavedFile({
+                workspaceRoot,
+                absPath,
+                style: pathStyle,
+                sandboxRootPrefix: sandboxPrefix,
+                log,
+            });
+            const st = await stat(absPath);
+            log?.info?.(`[cwork_im:inbound-local] saved ${localName} bytes=${buffer.length} stat.size=${st.size} stat.mtime=${st.mtime.toISOString()} abs=${absPath} openclawRef=${mediaRef}`);
+            out.push({
+                ...item,
+                url: mediaRef,
+                size: buffer.length,
+                name: localName,
+            });
+        }
+        catch (e) {
+            log?.warn?.(`[cwork_im:inbound-local] download/save failed, degrade to OpenClaw URL: ${String(e)} ref=${srcUrl.slice(0, 80)}`);
+            out.push(item);
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=inbound-media-local.js.map

package/dist/src/workspace/inbound-media-local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-media-local.js","sourceRoot":"","sources":["../../../src/workspace/inbound-media-local.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAGpF,2BAA2B;AAC3B,MAAM,UAAU,+BAA+B,CAAC,MAAc;IAC1D,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,EAAW,EAAE,GAAmB;IAChF,MAAM,KAAK,GAAI,EAAgF,EAAE,KAAK,CAAC;IACvG,MAAM,EAAE,GAAG,KAAK,EAAE,wBAAwB,CAAC;IAC3C,IAAI,OAAO,EAAE,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACL,YAAY;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,EAAW,EAAE,GAAmB;IAClF,MAAM,KAAK,GAAI,EAAkF,EAAE,KAAK,CAAC;IACzG,MAAM,EAAE,GAAG,KAAK,EAAE,oBAAoB,CAAC;IACvC,IAAI,OAAO,EAAE,KAAK,UAAU;QAAE,OAAO;IACrC,IAAI,CAAC;QACD,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACL,qBAAqB;IACzB,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,EAAU;IACrC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;IACpB,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,CAAO;IACzC,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;AAC9B,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,uBAAuB,CAAC,CAAO;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAClD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxD,OAAO,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB,SAAS,YAAY,CAAC,IAAY;IAC9B,MAAM,CAAC,GAAG,IAAI;SACT,OAAO,CAAC,4BAA4B,EAAE,GAAG,CAAC;SAC1C,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;SACzB,IAAI,EAAE,CAAC;IACZ,MAAM,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC;IACxB,OAAO,GAAG,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qCAAqC,CAAC,aAAqB,EAAE,OAAe;IACxF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACpC,aAAqB,EACrB,OAAe,EACf,iBAAyB;IAEzB,MAAM,GAAG,GAAG,qCAAqC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC1E,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC;IAC1E,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/D,OAAO,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAO5C;IACG,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACvE,IAAI,KAAK,KAAK,iBAAiB,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACzC,IAAI,MAAM,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,wBAAwB,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACvE,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC5B,CAAC;IACD,MAAM,GAAG,GAAG,qCAAqC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC1E,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,GAAG,EAAE,IAAI,EAAE,CACP,uFAAuF,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACjH,CAAC;IACF,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,6BAA6B;AAC7B,MAAM,UAAU,0BAA0B,CAAC,gBAAwB,EAAE,EAAQ;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,CAAC,CAAC;IAC3C,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAQjD;IACG,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAChF,MAAM,UAAU,GAAG,+BAA+B,CAAC,eAAe,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE5D,MAAM,aAAa,GAAG,mCAAmC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACnE,IAAI,CAAC,aAAa,EAAE,CAAC;QACjB,GAAG,EAAE,IAAI,EAAE,CACP,wGAAwG,CAC3G,CAAC;QACF,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,+BAA+B,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAE/C,MAAM,QAAQ,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,qBAAqB,CAAC,YAAY,IAAI,SAAS,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,MAAM,CAAC,wBAAwB,IAAI,mBAAmB,CAAC;IACzE,MAAM,aAAa,GAAG,MAAM,CAAC,6BAA6B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAEzE,GAAG,EAAE,IAAI,EAAE,CACP,wCAAwC,SAAS,CAAC,MAAM,QAAQ,OAAO,CAAC,GAAG,EAAE,kBAAkB,aAAa,WAAW,UAAU,SAAS,OAAO,UAAU,SAAS,kBAAkB,aAAa,IAAI,QAAQ,EAAE,CACpN,CAAC;IAEF,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,SAAS;QACb,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAE1C,IAAI,CAAC;YACD,GAAG,EAAE,IAAI,EAAE,CACP,wCAAwC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,OAAO,EAAE,CAC3F,CAAC;YACF,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YACpE,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,4BAA4B,CAAC;gBAC1C,aAAa;gBACb,OAAO;gBACP,KAAK,EAAE,SAAS;gBAChB,iBAAiB,EAAE,aAAa;gBAChC,GAAG;aACN,CAAC,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,GAAG,EAAE,IAAI,EAAE,CACP,kCAAkC,SAAS,UAAU,MAAM,CAAC,MAAM,cAAc,EAAE,CAAC,IAAI,eAAe,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,OAAO,gBAAgB,QAAQ,EAAE,CACxK,CAAC;YACF,GAAG,CAAC,IAAI,CAAC;gBACL,GAAG,IAAI;gBACP,GAAG,EAAE,QAAQ;gBACb,IAAI,EAAE,MAAM,CAAC,MAAM;gBACnB,IAAI,EAAE,SAAS;aAClB,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YAClB,GAAG,EAAE,IAAI,EAAE,CACP,2EAA2E,MAAM,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CACpH,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC"}

package/dist/src/workspace/nas-site.d.ts

@@ -0,0 +1,16 @@
+import type { XgImConfig } from "../plugin/types.js";
+/**
+ * 当前没有显式配置 NAS 站点时使用的站点编码。
+ *
+ * 站点编码是给 IM 客户端和后续下载路由使用的稳定业务标识，不是主机名、IP、URL，
+ * 也不能用于推导或暴露 NAS 的宿主机真实挂载路径。
+ */
+export declare const DEFAULT_NAS_SITE_CODE = "SZ_PRIMARY";
+/**
+ * 读取当前 OpenClaw 服务所挂载 NAS 的站点编码。
+ *
+ * 配置路径：channels.xg_cwork_im.nasSiteCode
+ * 未配置时：SZ_PRIMARY
+ */
+export declare function resolveNasSiteCode(config: Pick<XgImConfig, "nasSiteCode">): string;
+//# sourceMappingURL=nas-site.d.ts.map

package/dist/src/workspace/nas-site.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nas-site.d.ts","sourceRoot":"","sources":["../../../src/workspace/nas-site.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,eAAe,CAAC;AAElD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,MAAM,CAElF"}

package/dist/src/workspace/nas-site.js

@@ -0,0 +1,17 @@
+/**
+ * 当前没有显式配置 NAS 站点时使用的站点编码。
+ *
+ * 站点编码是给 IM 客户端和后续下载路由使用的稳定业务标识，不是主机名、IP、URL，
+ * 也不能用于推导或暴露 NAS 的宿主机真实挂载路径。
+ */
+export const DEFAULT_NAS_SITE_CODE = "SZ_PRIMARY";
+/**
+ * 读取当前 OpenClaw 服务所挂载 NAS 的站点编码。
+ *
+ * 配置路径：channels.xg_cwork_im.nasSiteCode
+ * 未配置时：SZ_PRIMARY
+ */
+export function resolveNasSiteCode(config) {
+    return config.nasSiteCode?.trim() || DEFAULT_NAS_SITE_CODE;
+}
+//# sourceMappingURL=nas-site.js.map

package/dist/src/workspace/nas-site.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nas-site.js","sourceRoot":"","sources":["../../../src/workspace/nas-site.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAElD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAuC;IACtE,OAAO,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,qBAAqB,CAAC;AAC/D,CAAC"}

package/dist/src/workspace/nas-volume-fs-sync.d.ts

@@ -0,0 +1,37 @@
+/**
+ * nasVolumes sync=pull|push：在宿主机 NAS 路径与 Agent workspace 之间按 include 拷贝文件。
+ * 不阻断消息投递；调用方负责吞掉异常或仅记日志。
+ */
+export type NasFsSyncMode = "pull" | "push";
+export type NasFsSyncVolume = {
+    /** 宿主机 NAS 真实目录（已解析）。 */
+    hostNasDir: string;
+    /** Agent workspace 下的相对目录（POSIX，无 /workspace 前缀）。 */
+    workspaceRelDir: string;
+    sync: NasFsSyncMode;
+    /** 原始 include 字符串；空表示全部。 */
+    include?: string;
+};
+export type NasFsSyncResult = {
+    mode: NasFsSyncMode;
+    workspaceRelDir: string;
+    copied: number;
+    skippedDotOrFiltered: number;
+};
+/** 解析 include；空 → null（表示全部非点文件）。 */
+export declare function parseNasIncludePatterns(include: string | undefined | null): string[] | null;
+/** 路径任一段以 `.` 开头则忽略（含 `.git`、`.DS_Store`、嵌套隐藏目录）。 */
+export declare function isDotPathSegment(relPosix: string): boolean;
+/**
+ * include 为空：接受全部非点文件。
+ * 否则对相对路径或 basename 做简易 glob 匹配（支持多层级，如 `*.md` 匹配 `a/b/c.md`）。
+ */
+export declare function matchesNasInclude(relPosix: string, patterns: string[] | null): boolean;
+/**
+ * 执行单个体积的 pull/push。源目录不存在时创建空目录（低代价）；目标始终确保存在。
+ */
+export declare function syncNasVolumeFilesystem(params: {
+    agentWorkspaceDir: string;
+    volume: NasFsSyncVolume;
+}): Promise<NasFsSyncResult>;
+//# sourceMappingURL=nas-volume-fs-sync.d.ts.map

package/dist/src/workspace/nas-volume-fs-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nas-volume-fs-sync.d.ts","sourceRoot":"","sources":["../../../src/workspace/nas-volume-fs-sync.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5C,MAAM,MAAM,eAAe,GAAG;IAC1B,yBAAyB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,aAAa,CAAC;IACpB,4BAA4B;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC1B,IAAI,EAAE,aAAa,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,qCAAqC;AACrC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,EAAE,GAAG,IAAI,CAO3F;AAcD,qDAAqD;AACrD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,OAAO,CAQtF;AAwED;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,MAAM,EAAE;IAClD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,eAAe,CAAC;CAC3B,GAAG,OAAO,CAAC,eAAe,CAAC,CA8C3B"}

package/dist/src/workspace/nas-volume-fs-sync.js

@@ -0,0 +1,156 @@
+/**
+ * nasVolumes sync=pull|push：在宿主机 NAS 路径与 Agent workspace 之间按 include 拷贝文件。
+ * 不阻断消息投递；调用方负责吞掉异常或仅记日志。
+ */
+import { copyFile, mkdir, readdir, stat } from "node:fs/promises";
+import path from "node:path";
+/** 解析 include；空 → null（表示全部非点文件）。 */
+export function parseNasIncludePatterns(include) {
+    if (include == null)
+        return null;
+    const parts = include
+        .split(/[,;]+/)
+        .map((part) => part.trim())
+        .filter((part) => part.length > 0);
+    return parts.length > 0 ? parts : null;
+}
+function globToRegExp(pattern) {
+    let out = "^";
+    for (const ch of pattern) {
+        if (ch === "*")
+            out += ".*";
+        else if (ch === "?")
+            out += ".";
+        else if (".+^${}()|[]\\".includes(ch))
+            out += `\\${ch}`;
+        else
+            out += ch;
+    }
+    out += "$";
+    return new RegExp(out, "i");
+}
+/** 路径任一段以 `.` 开头则忽略（含 `.git`、`.DS_Store`、嵌套隐藏目录）。 */
+export function isDotPathSegment(relPosix) {
+    return relPosix.split("/").some((segment) => segment.startsWith("."));
+}
+/**
+ * include 为空：接受全部非点文件。
+ * 否则对相对路径或 basename 做简易 glob 匹配（支持多层级，如 `*.md` 匹配 `a/b/c.md`）。
+ */
+export function matchesNasInclude(relPosix, patterns) {
+    if (isDotPathSegment(relPosix))
+        return false;
+    if (!patterns)
+        return true;
+    const base = path.posix.basename(relPosix);
+    return patterns.some((pattern) => {
+        const re = globToRegExp(pattern);
+        return re.test(relPosix) || re.test(base);
+    });
+}
+function assertInsideRoot(root, target, label) {
+    const resolvedRoot = path.resolve(root);
+    const resolvedTarget = path.resolve(target);
+    const relative = path.relative(resolvedRoot, resolvedTarget);
+    if (relative.startsWith("..") || path.isAbsolute(relative)) {
+        throw new Error(`NAS_FS_SYNC_FORBIDDEN: ${label} 越出允许根: ${target}`);
+    }
+}
+async function ensureDirectory(dir) {
+    await mkdir(dir, { recursive: true });
+}
+async function copyFilteredTree(params) {
+    const { sourceRoot, destRoot, patterns } = params;
+    let copied = 0;
+    let skippedDotOrFiltered = 0;
+    await ensureDirectory(destRoot);
+    const walk = async (relPosix) => {
+        const sourceDir = relPosix ? path.join(sourceRoot, ...relPosix.split("/")) : sourceRoot;
+        let entries;
+        try {
+            entries = await readdir(sourceDir, { withFileTypes: true });
+        }
+        catch (error) {
+            throw new Error(`NAS_FS_SYNC_READ_FAILED: 无法读取目录 ${sourceDir}: ${String(error)}`);
+        }
+        for (const entry of entries) {
+            if (entry.name.startsWith(".")) {
+                skippedDotOrFiltered += 1;
+                continue;
+            }
+            const childRel = relPosix ? `${relPosix}/${entry.name}` : entry.name;
+            if (isDotPathSegment(childRel)) {
+                skippedDotOrFiltered += 1;
+                continue;
+            }
+            const sourcePath = path.join(sourceRoot, ...childRel.split("/"));
+            const destPath = path.join(destRoot, ...childRel.split("/"));
+            if (entry.isDirectory()) {
+                await ensureDirectory(destPath);
+                await walk(childRel);
+                continue;
+            }
+            if (!entry.isFile()) {
+                skippedDotOrFiltered += 1;
+                continue;
+            }
+            if (!matchesNasInclude(childRel, patterns)) {
+                skippedDotOrFiltered += 1;
+                continue;
+            }
+            await ensureDirectory(path.dirname(destPath));
+            await copyFile(sourcePath, destPath);
+            copied += 1;
+        }
+    };
+    await walk("");
+    return { copied, skippedDotOrFiltered };
+}
+/**
+ * 执行单个体积的 pull/push。源目录不存在时创建空目录（低代价）；目标始终确保存在。
+ */
+export async function syncNasVolumeFilesystem(params) {
+    const { agentWorkspaceDir, volume } = params;
+    const workspaceRoot = path.resolve(agentWorkspaceDir);
+    const workspaceDir = path.resolve(workspaceRoot, ...volume.workspaceRelDir.split("/"));
+    assertInsideRoot(workspaceRoot, workspaceDir, "workspaceRelDir");
+    const nasDir = path.resolve(volume.hostNasDir);
+    const patterns = parseNasIncludePatterns(volume.include);
+    if (volume.sync === "pull") {
+        await ensureDirectory(nasDir);
+        const nasStat = await stat(nasDir);
+        if (!nasStat.isDirectory()) {
+            throw new Error(`NAS_FS_SYNC_INVALID: NAS 路径不是目录: ${nasDir}`);
+        }
+        await ensureDirectory(workspaceDir);
+        const { copied, skippedDotOrFiltered } = await copyFilteredTree({
+            sourceRoot: nasDir,
+            destRoot: workspaceDir,
+            patterns,
+        });
+        return {
+            mode: "pull",
+            workspaceRelDir: volume.workspaceRelDir,
+            copied,
+            skippedDotOrFiltered,
+        };
+    }
+    await ensureDirectory(workspaceDir);
+    const wsStat = await stat(workspaceDir);
+    if (!wsStat.isDirectory()) {
+        throw new Error(`NAS_FS_SYNC_INVALID: workspace 路径不是目录: ${workspaceDir}`);
+    }
+    await ensureDirectory(nasDir);
+    const { copied, skippedDotOrFiltered } = await copyFilteredTree({
+        sourceRoot: workspaceDir,
+        destRoot: nasDir,
+        patterns,
+    });
+    return {
+        mode: "push",
+        workspaceRelDir: volume.workspaceRelDir,
+        copied,
+        skippedDotOrFiltered,
+    };
+}
+//# sourceMappingURL=nas-volume-fs-sync.js.map

package/dist/src/workspace/nas-volume-fs-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nas-volume-fs-sync.js","sourceRoot":"","sources":["../../../src/workspace/nas-volume-fs-sync.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,IAAI,MAAM,WAAW,CAAC;AAqB7B,qCAAqC;AACrC,MAAM,UAAU,uBAAuB,CAAC,OAAkC;IACtE,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO;SAChB,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACjC,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACvB,IAAI,EAAE,KAAK,GAAG;YAAE,GAAG,IAAI,IAAI,CAAC;aACvB,IAAI,EAAE,KAAK,GAAG;YAAE,GAAG,IAAI,GAAG,CAAC;aAC3B,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,GAAG,IAAI,KAAK,EAAE,EAAE,CAAC;;YACnD,GAAG,IAAI,EAAE,CAAC;IACnB,CAAC;IACD,GAAG,IAAI,GAAG,CAAC;IACX,OAAO,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC7C,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,QAAyB;IACzE,IAAI,gBAAgB,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,MAAc,EAAE,KAAa;IACjE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,WAAW,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAW;IACtC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,MAI/B;IACG,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAClD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAE7B,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAEhC,MAAM,IAAI,GAAG,KAAK,EAAE,QAAgB,EAAiB,EAAE;QACnD,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QACxF,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACD,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,mCAAmC,SAAS,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,oBAAoB,IAAI,CAAC,CAAC;gBAC1B,SAAS;YACb,CAAC;YACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YACrE,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,oBAAoB,IAAI,CAAC,CAAC;gBAC1B,SAAS;YACb,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAE7D,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtB,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;gBAChC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACrB,SAAS;YACb,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAClB,oBAAoB,IAAI,CAAC,CAAC;gBAC1B,SAAS;YACb,CAAC;YACD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACzC,oBAAoB,IAAI,CAAC,CAAC;gBAC1B,SAAS;YACb,CAAC;YACD,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9C,MAAM,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,CAAC;QAChB,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAG7C;IACG,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC7C,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACvF,gBAAgB,CAAC,aAAa,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEzD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC;QACpC,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,gBAAgB,CAAC;YAC5D,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,YAAY;YACtB,QAAQ;SACX,CAAC,CAAC;QACH,OAAO;YACH,IAAI,EAAE,MAAM;YACZ,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,MAAM;YACN,oBAAoB;SACvB,CAAC;IACN,CAAC;IAED,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,0CAA0C,YAAY,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,gBAAgB,CAAC;QAC5D,UAAU,EAAE,YAAY;QACxB,QAAQ,EAAE,MAAM;QAChB,QAAQ;KACX,CAAC,CAAC;IACH,OAAO;QACH,IAAI,EAAE,MAAM;QACZ,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,MAAM;QACN,oBAAoB;KACvB,CAAC;AACN,CAAC"}

package/dist/src/workspace/nas-volume-fs-sync.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=nas-volume-fs-sync.test.d.ts.map

package/dist/src/workspace/nas-volume-fs-sync.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nas-volume-fs-sync.test.d.ts","sourceRoot":"","sources":["../../../src/workspace/nas-volume-fs-sync.test.ts"],"names":[],"mappings":""}

package/dist/src/workspace/nas-volume-fs-sync.test.js

@@ -0,0 +1,49 @@
+import assert from "node:assert/strict";
+import { mkdtemp, mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { afterEach, describe, it } from "node:test";
+import { isDotPathSegment, matchesNasInclude, parseNasIncludePatterns, syncNasVolumeFilesystem, } from "./nas-volume-fs-sync.js";
+const tempDirs = [];
+afterEach(async () => {
+    await Promise.all(tempDirs.splice(0).map((dir) => rm(dir, { recursive: true, force: true })));
+});
+describe("nas-volume-fs-sync", () => {
+    it("parses include patterns and treats empty as all", () => {
+        assert.equal(parseNasIncludePatterns(undefined), null);
+        assert.equal(parseNasIncludePatterns("  "), null);
+        assert.deepEqual(parseNasIncludePatterns("*.md, *.html"), ["*.md", "*.html"]);
+    });
+    it("ignores dot path segments and matches basename globs across nested dirs", () => {
+        assert.equal(isDotPathSegment(".git/config"), true);
+        assert.equal(isDotPathSegment("a/.hidden/b"), true);
+        assert.equal(isDotPathSegment("a/b.md"), false);
+        assert.equal(matchesNasInclude("deep/nested/a.md", ["*.md"]), true);
+        assert.equal(matchesNasInclude("deep/nested/a.txt", ["*.md"]), false);
+        assert.equal(matchesNasInclude(".env", null), false);
+    });
+    it("pull copies filtered nested files and skips dotfiles", async () => {
+        const root = await mkdtemp(path.join(os.tmpdir(), "xg-fs-sync-"));
+        tempDirs.push(root);
+        const nas = path.join(root, "nas");
+        const workspace = path.join(root, "ws");
+        await mkdir(path.join(nas, "sub"), { recursive: true });
+        await writeFile(path.join(nas, "sub", "a.md"), "md");
+        await writeFile(path.join(nas, "sub", "b.html"), "html");
+        await writeFile(path.join(nas, "sub", ".skip"), "x");
+        const result = await syncNasVolumeFilesystem({
+            agentWorkspaceDir: workspace,
+            volume: {
+                hostNasDir: nas,
+                workspaceRelDir: "project/in",
+                sync: "pull",
+                include: "*.md",
+            },
+        });
+        assert.equal(result.copied, 1);
+        assert.equal(await readFile(path.join(workspace, "project", "in", "sub", "a.md"), "utf8"), "md");
+        await assert.rejects(stat(path.join(workspace, "project", "in", "sub", "b.html")), /ENOENT/);
+        await assert.rejects(stat(path.join(workspace, "project", "in", "sub", ".skip")), /ENOENT/);
+    });
+});
+//# sourceMappingURL=nas-volume-fs-sync.test.js.map

package/dist/src/workspace/nas-volume-fs-sync.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nas-volume-fs-sync.test.js","sourceRoot":"","sources":["../../../src/workspace/nas-volume-fs-sync.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EACH,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,uBAAuB,GAC1B,MAAM,yBAAyB,CAAC;AAEjC,MAAM,QAAQ,GAAa,EAAE,CAAC;AAE9B,SAAS,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAClG,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACtE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC;YACzC,iBAAiB,EAAE,SAAS;YAC5B,MAAM,EAAE;gBACJ,UAAU,EAAE,GAAG;gBACf,eAAe,EAAE,YAAY;gBAC7B,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,MAAM;aAClB;SACJ,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QACjG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC7F,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/src/workspace/nas-volumes.d.ts

@@ -0,0 +1,73 @@
+/**
+ * 会话级 NAS 目录声明：路径规范化、安全校验、幂等指纹与 OpenClaw sandbox bind 注入。
+ */
+import type { OpenClawConfig } from "openclaw/plugin-sdk/core";
+import type { NasVolume } from "../session/agent-context-types.js";
+import type { XgImConfig } from "../plugin/types.js";
+export interface NormalizedNasVolume {
+    /** 已解析软链接后的宿主机真实目录。 */
+    realDir: string;
+    /** 相对 Agent workspace 的 POSIX 路径。 */
+    dockerDir: string;
+    /** 容器内绝对路径。 */
+    sandboxDir: string;
+    mode: "ro" | "rw";
+    /** mount=原 bind；pull/push=工作区拷贝。 */
+    syncMode: "mount" | "pull" | "push";
+    include?: string;
+}
+/** 将 IM 的 dockerDir 规范为不带 /workspace 前缀的 workspace 相对路径。 */
+export declare function normalizeNasDockerDir(raw: string): string;
+export declare function nasVolumeSandboxDir(dockerDir: string): string;
+/** Prompt 使用的轻量规范化；真实路径与白名单在 dispatch 前再次校验。 */
+export declare function normalizeNasVolumesForPrompt(volumes: NasVolume[] | undefined): Array<{
+    dockerDir: string;
+    sandboxDir: string;
+    mode: "ro" | "rw";
+    syncMode: "mount" | "pull" | "push";
+}>;
+/** 空 / none → mount；pull|push 原样；其它未知值按 mount（兼容旧客户端）。 */
+export declare function resolveNasSyncMode(sync: string | undefined | null): "mount" | "pull" | "push";
+/**
+ * 将 IM 下发的 NAS 逻辑目录解析为当前宿主机上的真实目录，仅用于目录浏览和文件读取。
+ *
+ * 与会话 sandbox bind 的解析不同，本方法绝不会创建缺失目录：工作区浏览只能反映磁盘
+ * 当前状态，不能因为一次查询而改变 NAS 内容。返回前会解析符号链接并再次确认目标仍在
+ * 配置的 hostRoot 内。
+ */
+export declare function resolveNasVolumeHostDirectoryForRead(rawDir: string, config: XgImConfig): Promise<string>;
+export declare function validateAndNormalizeNasVolumes(volumes: NasVolume[], config: XgImConfig): NormalizedNasVolume[];
+export declare function nasVolumeSpecHash(volumes: NormalizedNasVolume[]): string;
+/** 方案 A：仅声明指纹；同会话声明未变则跳过拷贝。 */
+export declare function nasVolumeSyncDeclarationHash(volumes: NormalizedNasVolume[]): string;
+export type NasVolumeDispatchLog = {
+    info?: (message: string) => void;
+    warn?: (message: string) => void;
+};
+export type NasVolumeDispatchResult = {
+    cfg: OpenClawConfig;
+    configOverride?: OpenClawConfig;
+    /** mount 声明指纹；仅当本轮存在/复用了 bind 时有值。 */
+    specHash?: string;
+    /** pull/push 声明指纹。 */
+    syncDeclarationHash?: string;
+    reused: boolean;
+};
+/**
+ * 将本会话期望的 NAS mounts 注入本轮 cfg，并对 pull/push 体积执行工作区拷贝。
+ * sync 为空/none → Docker bind（原逻辑）；pull/push → 不挂载，仅拷贝。
+ * 重复传入相同声明是幂等的；同一 session 改 mount 绑则拒绝。拷贝失败只记日志。
+ */
+export declare function resolveNasVolumeDispatchConfig(args: {
+    cfg: OpenClawConfig;
+    config: XgImConfig;
+    agentId: string;
+    sessionKey: string;
+    volumes?: NasVolume[];
+    /** Agent 宿主机 workspace；pull/push 必需，缺失则跳过拷贝。 */
+    agentWorkspaceDir?: string;
+    log?: NasVolumeDispatchLog;
+}): Promise<NasVolumeDispatchResult>;
+/** 测试与 Gateway 停止时使用。 */
+export declare function clearSessionNasVolumeStates(): void;
+//# sourceMappingURL=nas-volumes.d.ts.map

package/dist/src/workspace/nas-volumes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nas-volumes.d.ts","sourceRoot":"","sources":["../../../src/workspace/nas-volumes.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AASrD,MAAM,WAAW,mBAAmB;IAChC,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,oCAAoC;IACpC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAwED,4DAA4D;AAC5D,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAqBzD;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,gDAAgD;AAChD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,SAAS,GAAG,KAAK,CAAC;IAClF,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;CACvC,CAAC,CAWD;AAED,0DAA0D;AAC1D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAM7F;AAiGD;;;;;;GAMG;AACH,wBAAsB,oCAAoC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA+D9G;AAcD,wBAAgB,8BAA8B,CAC1C,OAAO,EAAE,SAAS,EAAE,EACpB,MAAM,EAAE,UAAU,GACnB,mBAAmB,EAAE,CAqBvB;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,EAAE,GAAG,MAAM,CAMxE;AAED,+BAA+B;AAC/B,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,mBAAmB,EAAE,GAAG,MAAM,CAYnF;AAuGD,MAAM,MAAM,oBAAoB,GAAG;IAC/B,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IAClC,GAAG,EAAE,cAAc,CAAC;IACpB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,sCAAsC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,MAAM,EAAE,OAAO,CAAC;CACnB,CAAC;AAyCF;;;;GAIG;AACH,wBAAsB,8BAA8B,CAAC,IAAI,EAAE;IACvD,GAAG,EAAE,cAAc,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;IACtB,gDAAgD;IAChD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,oBAAoB,CAAC;CAC9B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAiHnC;AAED,yBAAyB;AACzB,wBAAgB,2BAA2B,IAAI,IAAI,CAGlD"}