@xgjktech/xg_cwork_im 1.19.39 → 1.19.41

package/dist/src/item-event-guard.d.ts

@@ -1,28 +0,0 @@
-/**
- * `onItemEvent` 条目过滤：已由专用回调覆盖的条目（工具、Reasoning）不再进入
- * RUN_EVENT 兜底，避免把内部诊断标识 `unmapped:*` 展示给最终用户。
- */
-export interface ItemEventPayload {
-    toolCallId?: string;
-    kind?: string;
-    title?: string;
-    name?: string;
-    phase?: string;
-    status?: string;
-}
-export type ItemEventGuardResult = {
-    suppress: true;
-    reason: "tool" | "reasoning";
-} | {
-    suppress: false;
-    kind: string;
-    title: string;
-};
-/**
- * 判断 `onItemEvent` 条目是否应被抑制：
- * - 工具类（`toolCallId` 或 `kind=tool`）已由 onToolStart/onToolResult 覆盖；
- * - Reasoning 条目（`kind=analysis` 且 `title=reasoning`）已由
- *   onReasoningStream/onReasoningEnd 覆盖，同一条目 start/end 各触发一次，禁止重复投递。
- */
-export declare function resolveItemEventGuard(p: ItemEventPayload): ItemEventGuardResult;
-//# sourceMappingURL=item-event-guard.d.ts.map

package/dist/src/item-event-guard.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"item-event-guard.d.ts","sourceRoot":"","sources":["../../src/item-event-guard.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,gBAAgB;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,oBAAoB,GAC1B;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAA;CAAE,GAChD;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,gBAAgB,GAAG,oBAAoB,CAU/E"}

package/dist/src/item-event-guard.js

@@ -1,22 +0,0 @@
-/**
- * `onItemEvent` 条目过滤：已由专用回调覆盖的条目（工具、Reasoning）不再进入
- * RUN_EVENT 兜底，避免把内部诊断标识 `unmapped:*` 展示给最终用户。
- */
-/**
- * 判断 `onItemEvent` 条目是否应被抑制：
- * - 工具类（`toolCallId` 或 `kind=tool`）已由 onToolStart/onToolResult 覆盖；
- * - Reasoning 条目（`kind=analysis` 且 `title=reasoning`）已由
- *   onReasoningStream/onReasoningEnd 覆盖，同一条目 start/end 各触发一次，禁止重复投递。
- */
-export function resolveItemEventGuard(p) {
-    if (p.toolCallId || p.kind === "tool") {
-        return { suppress: true, reason: "tool" };
-    }
-    const kind = String(p.kind ?? "").trim().toLowerCase();
-    const title = String(p.title ?? "").trim().toLowerCase();
-    if (kind === "analysis" && title === "reasoning") {
-        return { suppress: true, reason: "reasoning" };
-    }
-    return { suppress: false, kind, title };
-}
-//# sourceMappingURL=item-event-guard.js.map

package/dist/src/item-event-guard.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"item-event-guard.js","sourceRoot":"","sources":["../../src/item-event-guard.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAeH;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,CAAmB;IACrD,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACpC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzD,IAAI,IAAI,KAAK,UAAU,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QAC/C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC5C,CAAC"}

package/dist/src/item-event-guard.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=item-event-guard.test.d.ts.map

package/dist/src/item-event-guard.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"item-event-guard.test.d.ts","sourceRoot":"","sources":["../../src/item-event-guard.test.ts"],"names":[],"mappings":""}

package/dist/src/item-event-guard.test.js

@@ -1,55 +0,0 @@
-import assert from "node:assert/strict";
-import { describe, it } from "node:test";
-import { resolveItemEventGuard } from "./item-event-guard.js";
-describe("item-event-guard", () => {
-    it("suppresses reasoning item start (phase=start)", () => {
-        const r = resolveItemEventGuard({
-            kind: "analysis",
-            title: "Reasoning",
-            phase: "start",
-            status: "running",
-        });
-        assert.equal(r.suppress, true);
-        assert.equal(r.reason, "reasoning");
-    });
-    it("suppresses reasoning item end (phase=end)", () => {
-        const r = resolveItemEventGuard({
-            kind: "analysis",
-            title: "Reasoning",
-            phase: "end",
-            status: "completed",
-        });
-        assert.equal(r.suppress, true);
-        assert.equal(r.reason, "reasoning");
-    });
-    it("suppresses tool-call items even when title is reasoning", () => {
-        const r = resolveItemEventGuard({
-            toolCallId: "call_123",
-            kind: "analysis",
-            title: "Reasoning",
-        });
-        assert.equal(r.suppress, true);
-        assert.equal(r.reason, "tool");
-    });
-    it("suppresses kind=tool items", () => {
-        const r = resolveItemEventGuard({ kind: "tool", title: "Web search" });
-        assert.equal(r.suppress, true);
-        assert.equal(r.reason, "tool");
-    });
-    it("matches reasoning case-insensitively with surrounding whitespace", () => {
-        const r = resolveItemEventGuard({ kind: " ANALYSIS ", title: " reasoning " });
-        assert.equal(r.suppress, true);
-    });
-    it("keeps supported user-facing progress events (not suppressed)", () => {
-        const r = resolveItemEventGuard({
-            kind: "search",
-            title: "Web search",
-            phase: "start",
-            status: "running",
-        });
-        assert.equal(r.suppress, false);
-        assert.equal(r.kind, "search");
-        assert.equal(r.title, "web search");
-    });
-});
-//# sourceMappingURL=item-event-guard.test.js.map

package/dist/src/item-event-guard.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"item-event-guard.test.js","sourceRoot":"","sources":["../../src/item-event-guard.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,GAAG,qBAAqB,CAAC;YAC5B,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,SAAS;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,qBAAqB,CAAC;YAC5B,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,WAAW;SACtB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAG,qBAAqB,CAAC;YAC5B,UAAU,EAAE,UAAU;YACtB,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,WAAW;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,qBAAqB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,GAAG,qBAAqB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,GAAG,qBAAqB,CAAC;YAC5B,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,SAAS;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/src/nas-site.d.ts

@@ -1,16 +0,0 @@
-import type { XgImConfig } from "./types.js";
-/**
- * 当前没有显式配置 NAS 站点时使用的站点编码。
- *
- * 站点编码是给 IM 客户端和后续下载路由使用的稳定业务标识，不是主机名、IP、URL，
- * 也不能用于推导或暴露 NAS 的宿主机真实挂载路径。
- */
-export declare const DEFAULT_NAS_SITE_CODE = "SZ_PRIMARY";
-/**
- * 读取当前 OpenClaw 服务所挂载 NAS 的站点编码。
- *
- * 配置路径：channels.xg_cwork_im.nasSiteCode
- * 未配置时：SZ_PRIMARY
- */
-export declare function resolveNasSiteCode(config: Pick<XgImConfig, "nasSiteCode">): string;
-//# sourceMappingURL=nas-site.d.ts.map

package/dist/src/nas-site.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"nas-site.d.ts","sourceRoot":"","sources":["../../src/nas-site.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,eAAe,CAAC;AAElD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,MAAM,CAElF"}

package/dist/src/nas-site.js

@@ -1,17 +0,0 @@
-/**
- * 当前没有显式配置 NAS 站点时使用的站点编码。
- *
- * 站点编码是给 IM 客户端和后续下载路由使用的稳定业务标识，不是主机名、IP、URL，
- * 也不能用于推导或暴露 NAS 的宿主机真实挂载路径。
- */
-export const DEFAULT_NAS_SITE_CODE = "SZ_PRIMARY";
-/**
- * 读取当前 OpenClaw 服务所挂载 NAS 的站点编码。
- *
- * 配置路径：channels.xg_cwork_im.nasSiteCode
- * 未配置时：SZ_PRIMARY
- */
-export function resolveNasSiteCode(config) {
-    return config.nasSiteCode?.trim() || DEFAULT_NAS_SITE_CODE;
-}
-//# sourceMappingURL=nas-site.js.map

package/dist/src/nas-site.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"nas-site.js","sourceRoot":"","sources":["../../src/nas-site.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAElD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAuC;IACtE,OAAO,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,qBAAqB,CAAC;AAC/D,CAAC"}

package/dist/src/nas-volumes.d.ts

@@ -1,53 +0,0 @@
-/**
- * 会话级 NAS 目录声明：路径规范化、安全校验、幂等指纹与 OpenClaw sandbox bind 注入。
- */
-import type { OpenClawConfig } from "openclaw/plugin-sdk/core";
-import type { NasVolume } from "./agent-context-types.js";
-import type { XgImConfig } from "./types.js";
-export interface NormalizedNasVolume {
-    /** 已解析软链接后的宿主机真实目录。 */
-    realDir: string;
-    /** 相对 Agent workspace 的 POSIX 路径。 */
-    dockerDir: string;
-    /** 容器内绝对路径。 */
-    sandboxDir: string;
-    mode: "ro" | "rw";
-}
-/** 将 IM 的 dockerDir 规范为不带 /workspace 前缀的 workspace 相对路径。 */
-export declare function normalizeNasDockerDir(raw: string): string;
-export declare function nasVolumeSandboxDir(dockerDir: string): string;
-/** Prompt 使用的轻量规范化；真实路径与白名单在 dispatch 前再次校验。 */
-export declare function normalizeNasVolumesForPrompt(volumes: NasVolume[] | undefined): Array<{
-    dockerDir: string;
-    sandboxDir: string;
-    mode: "ro" | "rw";
-}>;
-/**
- * 将 IM 下发的 NAS 逻辑目录解析为当前宿主机上的真实目录，仅用于目录浏览和文件读取。
- *
- * 与会话 sandbox bind 的解析不同，本方法绝不会创建缺失目录：工作区浏览只能反映磁盘
- * 当前状态，不能因为一次查询而改变 NAS 内容。返回前会解析符号链接并再次确认目标仍在
- * 配置的 hostRoot 内。
- */
-export declare function resolveNasVolumeHostDirectoryForRead(rawDir: string, config: XgImConfig): Promise<string>;
-export declare function validateAndNormalizeNasVolumes(volumes: NasVolume[], config: XgImConfig): NormalizedNasVolume[];
-export declare function nasVolumeSpecHash(volumes: NormalizedNasVolume[]): string;
-/**
- * 将本会话期望的 NAS mounts 注入本轮 cfg，并产出 published runtime 所需的 configOverride。
- * 重复传入相同声明是幂等的；同一 session 改绑则拒绝。
- */
-export declare function resolveNasVolumeDispatchConfig(args: {
-    cfg: OpenClawConfig;
-    config: XgImConfig;
-    agentId: string;
-    sessionKey: string;
-    volumes?: NasVolume[];
-}): {
-    cfg: OpenClawConfig;
-    configOverride?: OpenClawConfig;
-    specHash?: string;
-    reused: boolean;
-};
-/** 测试与 Gateway 停止时使用。 */
-export declare function clearSessionNasVolumeStates(): void;
-//# sourceMappingURL=nas-volumes.d.ts.map

package/dist/src/nas-volumes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"nas-volumes.d.ts","sourceRoot":"","sources":["../../src/nas-volumes.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAQ7C,MAAM,WAAW,mBAAmB;IAChC,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;CACrB;AAqED,4DAA4D;AAC5D,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAqBzD;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,gDAAgD;AAChD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,SAAS,GAAG,KAAK,CAAC;IAClF,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;CACrB,CAAC,CAMD;AAiGD;;;;;;GAMG;AACH,wBAAsB,oCAAoC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA+D9G;AAcD,wBAAgB,8BAA8B,CAC1C,OAAO,EAAE,SAAS,EAAE,EACpB,MAAM,EAAE,UAAU,GACnB,mBAAmB,EAAE,CAcvB;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,EAAE,GAAG,MAAM,CAKxE;AAuGD;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE;IACjD,GAAG,EAAE,cAAc,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;CACzB,GAAG;IAAE,GAAG,EAAE,cAAc,CAAC;IAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CA2C/F;AAED,yBAAyB;AACzB,wBAAgB,2BAA2B,IAAI,IAAI,CAGlD"}

package/dist/src/nas-volumes.js

@@ -1,417 +0,0 @@
-/**
- * 会话级 NAS 目录声明：路径规范化、安全校验、幂等指纹与 OpenClaw sandbox bind 注入。
- */
-import { createHash } from "node:crypto";
-import { existsSync, mkdirSync, realpathSync, statSync } from "node:fs";
-import { realpath, stat } from "node:fs/promises";
-import path from "node:path";
-import { getSharedMap } from "./process-shared-store.js";
-const SANDBOX_WORKSPACE_ROOT = "/workspace";
-/** 缓存仅用于短期复用同一会话声明；硬上限防止长期运行时随历史会话无限增长。 */
-const SESSION_NAS_VOLUME_STATE_MAX_ENTRIES = 2_000;
-const SESSION_NAS_VOLUME_STATE_TTL_MS = 2 * 60 * 60 * 1_000;
-const SESSION_NAS_VOLUME_STATE_PRUNE_INTERVAL_MS = 60 * 1_000;
-const sessionVolumeStates = getSharedMap("nas-volume-states");
-let lastSessionVolumeStatePruneAt = 0;
-function pruneSessionNasVolumeStates(now, force = false) {
-    if (!force &&
-        sessionVolumeStates.size <= SESSION_NAS_VOLUME_STATE_MAX_ENTRIES &&
-        now - lastSessionVolumeStatePruneAt < SESSION_NAS_VOLUME_STATE_PRUNE_INTERVAL_MS) {
-        return;
-    }
-    lastSessionVolumeStatePruneAt = now;
-    for (const [key, state] of sessionVolumeStates) {
-        if (now - state.lastSeenAt >= SESSION_NAS_VOLUME_STATE_TTL_MS) {
-            sessionVolumeStates.delete(key);
-        }
-    }
-    while (sessionVolumeStates.size > SESSION_NAS_VOLUME_STATE_MAX_ENTRIES) {
-        const oldestKey = sessionVolumeStates.keys().next().value;
-        if (oldestKey == null)
-            break;
-        sessionVolumeStates.delete(oldestKey);
-    }
-}
-function isInsideOrEqual(root, target) {
-    const relative = path.relative(root, target);
-    return relative === "" || (!relative.startsWith("..") && !path.isAbsolute(relative));
-}
-function bindContainerTarget(bind) {
-    const parts = bind.split(":");
-    for (let index = parts.length - 1; index >= 0; index -= 1) {
-        const candidate = parts[index].trim().replace(/\\/g, "/");
-        if (candidate.startsWith("/"))
-            return path.posix.normalize(candidate);
-    }
-    return undefined;
-}
-function assertNoExistingBindTargetConflicts(existingBinds, incomingBinds) {
-    for (const incoming of incomingBinds) {
-        const incomingTarget = bindContainerTarget(incoming);
-        if (!incomingTarget)
-            continue;
-        for (const existing of existingBinds) {
-            if (existing === incoming)
-                continue;
-            const existingTarget = bindContainerTarget(existing);
-            if (!existingTarget)
-                continue;
-            if (incomingTarget === existingTarget ||
-                incomingTarget.startsWith(`${existingTarget}/`) ||
-                existingTarget.startsWith(`${incomingTarget}/`)) {
-                throw new Error(`NAS_VOLUME_TARGET_CONFLICT: dockerDir 与已有 sandbox bind 目标冲突: ${incomingTarget}, ${existingTarget}`);
-            }
-        }
-    }
-}
-/** 将 IM 的 dockerDir 规范为不带 /workspace 前缀的 workspace 相对路径。 */
-export function normalizeNasDockerDir(raw) {
-    let value = raw.trim().replace(/\\/g, "/");
-    if (value === "/workspace" || value === "/workspace/") {
-        throw new Error("nasVolumes.dockerDir 不能指向 workspace 根目录");
-    }
-    if (value.startsWith("/workspace/"))
-        value = value.slice("/workspace/".length);
-    while (value.startsWith("./"))
-        value = value.slice(2);
-    while (value.startsWith("/"))
-        value = value.slice(1);
-    value = value.replace(/\/+$/, "");
-    if (!value)
-        throw new Error("nasVolumes.dockerDir 不能为空");
-    const parts = value.split("/");
-    for (const part of parts) {
-        if (!part || part === "." || part === "..") {
-            throw new Error(`nasVolumes.dockerDir 含非法路径段: ${raw}`);
-        }
-        if (/[\0-\x1f:*?"<>|]/.test(part)) {
-            throw new Error(`nasVolumes.dockerDir 含非法字符: ${raw}`);
-        }
-    }
-    return parts.join("/");
-}
-export function nasVolumeSandboxDir(dockerDir) {
-    return `${SANDBOX_WORKSPACE_ROOT}/${normalizeNasDockerDir(dockerDir)}`;
-}
-/** Prompt 使用的轻量规范化；真实路径与白名单在 dispatch 前再次校验。 */
-export function normalizeNasVolumesForPrompt(volumes) {
-    if (!volumes?.length)
-        return [];
-    return volumes.map((volume) => {
-        const dockerDir = normalizeNasDockerDir(volume.dockerDir);
-        return { dockerDir, sandboxDir: nasVolumeSandboxDir(dockerDir), mode: volume.mode };
-    });
-}
-function normalizeAllowedRoots(config) {
-    const mappings = config.nasVolumeRootMappings ?? [];
-    if (mappings.length === 0) {
-        throw new Error("NAS_VOLUME_ROOTS_NOT_CONFIGURED: channels.xg_cwork_im.nasVolumeRootMappings 未配置");
-    }
-    return mappings.map((mapping) => {
-        const logicalRoot = normalizeLogicalRoot(mapping.logicalRoot);
-        const hostRoot = mapping.hostRoot.trim();
-        if (!path.isAbsolute(hostRoot)) {
-            throw new Error(`NAS_VOLUME_ROOT_INVALID: hostRoot 必须是宿主机绝对路径: ${hostRoot}`);
-        }
-        const configuredRoot = path.resolve(hostRoot);
-        const realRoot = realpathSync(configuredRoot);
-        if (!statSync(realRoot).isDirectory()) {
-            throw new Error(`NAS_VOLUME_ROOT_INVALID: hostRoot 不是目录: ${hostRoot}`);
-        }
-        return { logicalRoot, configuredRoot, realRoot };
-    }).sort((left, right) => right.logicalRoot.length - left.logicalRoot.length);
-}
-function normalizeLogicalRoot(raw) {
-    const value = raw.trim().replace(/\\/g, "/");
-    if (!value.startsWith("/")) {
-        throw new Error(`NAS_VOLUME_ROOT_INVALID: logicalRoot 必须是绝对逻辑路径: ${raw}`);
-    }
-    const normalized = path.posix.normalize(value).replace(/\/+$/, "") || "/";
-    if (normalized === "/") {
-        throw new Error("NAS_VOLUME_ROOT_INVALID: logicalRoot 不能是根目录 /");
-    }
-    return normalized;
-}
-function nearestExistingAncestor(target) {
-    let current = target;
-    while (!existsSync(current)) {
-        const parent = path.dirname(current);
-        if (parent === current)
-            break;
-        current = parent;
-    }
-    return current;
-}
-/**
- * 业务目录允许按需创建，但创建前后都必须确认路径仍位于已存在的白名单根内。
- */
-function ensureNasSourceDirectory(rawDir, allowedRoots) {
-    const logicalDir = path.posix.normalize(rawDir.trim().replace(/\\/g, "/"));
-    if (!logicalDir.startsWith("/")) {
-        throw new Error(`NAS_VOLUME_SOURCE_INVALID: realDir 必须是绝对逻辑路径: ${rawDir}`);
-    }
-    const allowed = allowedRoots.find((root) => logicalDir !== root.logicalRoot && logicalDir.startsWith(`${root.logicalRoot}/`));
-    if (!allowed) {
-        throw new Error(`NAS_VOLUME_SOURCE_FORBIDDEN: realDir 未匹配允许的 logicalRoot: ${rawDir}`);
-    }
-    const target = path.resolve(allowed.configuredRoot, ...path.posix.relative(allowed.logicalRoot, logicalDir).split("/"));
-    if (!isInsideOrEqual(allowed.configuredRoot, target) || target === allowed.configuredRoot) {
-        throw new Error(`NAS_VOLUME_SOURCE_FORBIDDEN: realDir 越出映射根目录: ${rawDir}`);
-    }
-    if (!existsSync(target)) {
-        const existingAncestor = realpathSync(nearestExistingAncestor(target));
-        if (!isInsideOrEqual(allowed.realRoot, existingAncestor)) {
-            throw new Error(`NAS_VOLUME_SOURCE_FORBIDDEN: realDir 的父目录越出允许根: ${rawDir}`);
-        }
-        mkdirSync(target, { recursive: true });
-    }
-    const realDir = realpathSync(target);
-    if (realDir === allowed.realRoot || !isInsideOrEqual(allowed.realRoot, realDir)) {
-        throw new Error(`NAS_VOLUME_SOURCE_FORBIDDEN: realDir 不在允许根的业务子目录内: ${rawDir}`);
-    }
-    if (!statSync(realDir).isDirectory()) {
-        throw new Error(`NAS_VOLUME_SOURCE_INVALID: realDir 不是目录: ${rawDir}`);
-    }
-    const colonIndex = realDir.indexOf(":");
-    const isWindowsDrivePrefix = process.platform === "win32" && colonIndex === 1 && /^[A-Za-z]:[\\/]/.test(realDir);
-    if (colonIndex >= 0 && !isWindowsDrivePrefix) {
-        throw new Error(`NAS_VOLUME_SOURCE_INVALID: realDir 含 Docker bind 不支持的冒号: ${rawDir}`);
-    }
-    return realDir;
-}
-/**
- * 将 IM 下发的 NAS 逻辑目录解析为当前宿主机上的真实目录，仅用于目录浏览和文件读取。
- *
- * 与会话 sandbox bind 的解析不同，本方法绝不会创建缺失目录：工作区浏览只能反映磁盘
- * 当前状态，不能因为一次查询而改变 NAS 内容。返回前会解析符号链接并再次确认目标仍在
- * 配置的 hostRoot 内。
- */
-export async function resolveNasVolumeHostDirectoryForRead(rawDir, config) {
-    const mappings = config.nasVolumeRootMappings ?? [];
-    if (mappings.length === 0) {
-        throw new Error("NAS_VOLUME_ROOTS_NOT_CONFIGURED: channels.xg_cwork_im.nasVolumeRootMappings 未配置");
-    }
-    const logicalDir = path.posix.normalize(rawDir.trim().replace(/\\/g, "/"));
-    if (!logicalDir.startsWith("/")) {
-        throw new Error(`NAS_VOLUME_SOURCE_INVALID: realDir 必须是绝对逻辑路径: ${rawDir}`);
-    }
-    // 只选择当前 realDir 命中的最长逻辑根；其他站点未挂载时不应阻断本次读取。
-    const matched = mappings
-        .map((mapping) => {
-        try {
-            return { mapping, logicalRoot: normalizeLogicalRoot(mapping.logicalRoot) };
-        }
-        catch {
-            return undefined;
-        }
-    })
-        .filter((item) => Boolean(item))
-        .filter((item) => logicalDir === item.logicalRoot || logicalDir.startsWith(`${item.logicalRoot}/`))
-        .sort((left, right) => right.logicalRoot.length - left.logicalRoot.length)[0];
-    if (!matched) {
-        throw new Error(`NAS_VOLUME_SOURCE_FORBIDDEN: realDir 未匹配允许的 logicalRoot: ${rawDir}`);
-    }
-    const hostRoot = matched.mapping.hostRoot.trim();
-    if (!path.isAbsolute(hostRoot)) {
-        throw new Error(`NAS_VOLUME_ROOT_INVALID: hostRoot 必须是宿主机绝对路径: ${hostRoot}`);
-    }
-    const configuredRoot = path.resolve(hostRoot);
-    const realRoot = await realpath(configuredRoot);
-    if (!(await stat(realRoot)).isDirectory()) {
-        throw new Error(`NAS_VOLUME_ROOT_INVALID: hostRoot 不是目录: ${hostRoot}`);
-    }
-    const allowed = {
-        logicalRoot: matched.logicalRoot,
-        configuredRoot,
-        realRoot,
-    };
-    const target = path.resolve(allowed.configuredRoot, ...path.posix.relative(allowed.logicalRoot, logicalDir).split("/"));
-    if (!isInsideOrEqual(allowed.configuredRoot, target)) {
-        throw new Error(`NAS_VOLUME_SOURCE_FORBIDDEN: realDir 越出映射根目录: ${rawDir}`);
-    }
-    let realDir;
-    try {
-        realDir = await realpath(target);
-    }
-    catch {
-        throw new Error(`NAS_VOLUME_SOURCE_NOT_FOUND: realDir 对应目录不存在: ${rawDir}`);
-    }
-    if (!isInsideOrEqual(allowed.realRoot, realDir)) {
-        throw new Error(`NAS_VOLUME_SOURCE_FORBIDDEN: realDir 不在允许根的业务子目录内: ${rawDir}`);
-    }
-    if (!(await stat(realDir)).isDirectory()) {
-        throw new Error(`NAS_VOLUME_SOURCE_INVALID: realDir 不是目录: ${rawDir}`);
-    }
-    return realDir;
-}
-function assertNonOverlappingTargets(volumes) {
-    for (let i = 0; i < volumes.length; i += 1) {
-        for (let j = i + 1; j < volumes.length; j += 1) {
-            const left = volumes[i].dockerDir;
-            const right = volumes[j].dockerDir;
-            if (left === right || left.startsWith(`${right}/`) || right.startsWith(`${left}/`)) {
-                throw new Error(`NAS_VOLUME_TARGET_CONFLICT: dockerDir 不能重复或嵌套: ${left}, ${right}`);
-            }
-        }
-    }
-}
-export function validateAndNormalizeNasVolumes(volumes, config) {
-    const allowedRoots = normalizeAllowedRoots(config);
-    const normalized = volumes.map((volume) => {
-        const realDir = ensureNasSourceDirectory(volume.realDir.trim(), allowedRoots);
-        const dockerDir = normalizeNasDockerDir(volume.dockerDir);
-        return {
-            realDir,
-            dockerDir,
-            sandboxDir: nasVolumeSandboxDir(dockerDir),
-            mode: volume.mode,
-        };
-    });
-    assertNonOverlappingTargets(normalized);
-    return normalized;
-}
-export function nasVolumeSpecHash(volumes) {
-    const stable = [...volumes]
-        .sort((left, right) => left.dockerDir.localeCompare(right.dockerDir))
-        .map(({ realDir, dockerDir, mode }) => ({ realDir, dockerDir, mode }));
-    return createHash("sha256").update(JSON.stringify(stable)).digest("hex");
-}
-function readStringBinds(docker) {
-    return Array.isArray(docker?.binds)
-        ? docker.binds.filter((entry) => typeof entry === "string")
-        : [];
-}
-function agentEntryRecord(agents, agentId) {
-    const entries = agents.entries;
-    if (!entries || typeof entries !== "object" || Array.isArray(entries))
-        return undefined;
-    const entry = entries[agentId];
-    if (!entry || typeof entry !== "object" || Array.isArray(entry))
-        return undefined;
-    return entry;
-}
-function effectiveSandboxScope(cfg, agentId) {
-    const agents = cfg.agents;
-    const defaults = agents?.defaults;
-    const defaultSandbox = defaults?.sandbox;
-    const entry = agents ? agentEntryRecord(agents, agentId) : undefined;
-    const agentSandbox = entry?.sandbox;
-    return agentSandbox?.scope ?? defaultSandbox?.scope;
-}
-/**
- * 将 NAS binds 写入 agents.entries[agentId].sandbox.docker（OpenClaw 2026.9.3+）。
- * 同时产出供 published runtime 使用的最小 configOverride（applyMergePatch 对数组整段替换，
- * 因此 binds 必须是「已有 + NAS」合并结果）。
- */
-function injectDockerBinds(cfg, agentId, binds) {
-    const cfgRecord = cfg;
-    const agents = cfgRecord.agents ?? {};
-    const defaults = agents.defaults ?? {};
-    const defaultSandbox = defaults.sandbox ?? {};
-    const defaultDocker = defaultSandbox.docker ?? {};
-    const entriesRaw = agents.entries && typeof agents.entries === "object" && !Array.isArray(agents.entries)
-        ? agents.entries
-        : {};
-    const existingEntry = agentEntryRecord(agents, agentId) ?? {};
-    const entrySandbox = existingEntry.sandbox ?? {};
-    const entryDocker = entrySandbox.docker ?? {};
-    const defaultBinds = readStringBinds(defaultDocker);
-    const entryBinds = readStringBinds(entryDocker);
-    // 最终 sandbox binds = defaults ∪ entry；冲突检测必须覆盖两侧。
-    assertNoExistingBindTargetConflicts([...defaultBinds, ...entryBinds], binds);
-    const mergedEntryBinds = [...new Set([...entryBinds, ...binds])];
-    // 仅改挂载相关字段；不要把 image/network/env 等一并打进 override，
-    // 否则 applyMergePatch 会用请求快照覆盖 published runtime 里可能更新过的值。
-    const nasDockerPatch = {
-        binds: mergedEntryBinds,
-        // OpenClaw 默认禁止 workspace 子路径和 workspace 外来源；本插件已在上方执行真实路径白名单校验。
-        dangerouslyAllowExternalBindSources: true,
-        dangerouslyAllowReservedContainerTargets: true,
-    };
-    const nextDocker = {
-        ...entryDocker,
-        ...nasDockerPatch,
-    };
-    const nextEntry = {
-        ...existingEntry,
-        sandbox: {
-            ...entrySandbox,
-            docker: nextDocker,
-        },
-    };
-    const nextCfg = {
-        ...cfgRecord,
-        agents: {
-            ...agents,
-            entries: {
-                ...entriesRaw,
-                [agentId]: nextEntry,
-            },
-        },
-    };
-    // published runtime 只吃 configOverride；只 patch binds/安全开关。
-    const configOverride = {
-        agents: {
-            entries: {
-                [agentId]: {
-                    sandbox: {
-                        docker: nasDockerPatch,
-                    },
-                },
-            },
-        },
-    };
-    return { cfg: nextCfg, configOverride };
-}
-/**
- * 将本会话期望的 NAS mounts 注入本轮 cfg，并产出 published runtime 所需的 configOverride。
- * 重复传入相同声明是幂等的；同一 session 改绑则拒绝。
- */
-export function resolveNasVolumeDispatchConfig(args) {
-    const stateKey = `${args.agentId}\0${args.sessionKey}`;
-    const now = Date.now();
-    pruneSessionNasVolumeStates(now);
-    let prior = sessionVolumeStates.get(stateKey);
-    if (prior && now - prior.lastSeenAt >= SESSION_NAS_VOLUME_STATE_TTL_MS) {
-        sessionVolumeStates.delete(stateKey);
-        prior = undefined;
-    }
-    let binds;
-    let specHash;
-    if (args.volumes?.length) {
-        const normalized = validateAndNormalizeNasVolumes(args.volumes, args.config);
-        specHash = nasVolumeSpecHash(normalized);
-        binds = normalized.map((volume) => `${volume.realDir}:${volume.sandboxDir}:${volume.mode}`);
-        if (prior && prior.specHash !== specHash) {
-            throw new Error("NAS_VOLUME_SESSION_CONFLICT: 当前会话已绑定另一组 NAS 目录，请创建新会话");
-        }
-    }
-    else if (prior) {
-        binds = prior.binds;
-        specHash = prior.specHash;
-    }
-    else {
-        return { cfg: args.cfg, reused: false };
-    }
-    if (effectiveSandboxScope(args.cfg, args.agentId) !== "session") {
-        throw new Error("NAS_VOLUME_SANDBOX_SCOPE_INVALID: NAS 挂载要求 sandbox.scope=session");
-    }
-    // 先完成无状态的配置注入与冲突校验，失败时不得污染会话缓存。
-    const injected = injectDockerBinds(args.cfg, args.agentId, binds);
-    // delete + set 让 Map 插入顺序同时承担 LRU 顺序；达到硬上限时淘汰最久未使用项。
-    sessionVolumeStates.delete(stateKey);
-    sessionVolumeStates.set(stateKey, { specHash, binds, lastSeenAt: now });
-    pruneSessionNasVolumeStates(now, sessionVolumeStates.size > SESSION_NAS_VOLUME_STATE_MAX_ENTRIES);
-    return {
-        cfg: injected.cfg,
-        configOverride: injected.configOverride,
-        specHash,
-        reused: prior?.specHash === specHash,
-    };
-}
-/** 测试与 Gateway 停止时使用。 */
-export function clearSessionNasVolumeStates() {
-    sessionVolumeStates.clear();
-    lastSessionVolumeStatePruneAt = 0;
-}
-//# sourceMappingURL=nas-volumes.js.map