@xgjktech/xg_cwork_im 1.19.41 → 1.19.43

package/dist/src/item-event-guard.d.ts

@@ -0,0 +1,28 @@
+/**
+ * `onItemEvent` 条目过滤：已由专用回调覆盖的条目（工具、Reasoning）不再进入
+ * RUN_EVENT 兜底，避免把内部诊断标识 `unmapped:*` 展示给最终用户。
+ */
+export interface ItemEventPayload {
+    toolCallId?: string;
+    kind?: string;
+    title?: string;
+    name?: string;
+    phase?: string;
+    status?: string;
+}
+export type ItemEventGuardResult = {
+    suppress: true;
+    reason: "tool" | "reasoning";
+} | {
+    suppress: false;
+    kind: string;
+    title: string;
+};
+/**
+ * 判断 `onItemEvent` 条目是否应被抑制：
+ * - 工具类（`toolCallId` 或 `kind=tool`）已由 onToolStart/onToolResult 覆盖；
+ * - Reasoning 条目（`kind=analysis` 且 `title=reasoning`）已由
+ *   onReasoningStream/onReasoningEnd 覆盖，同一条目 start/end 各触发一次，禁止重复投递。
+ */
+export declare function resolveItemEventGuard(p: ItemEventPayload): ItemEventGuardResult;
+//# sourceMappingURL=item-event-guard.d.ts.map

package/dist/src/item-event-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"item-event-guard.d.ts","sourceRoot":"","sources":["../../src/item-event-guard.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,gBAAgB;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,oBAAoB,GAC1B;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAA;CAAE,GAChD;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,gBAAgB,GAAG,oBAAoB,CAU/E"}

package/dist/src/item-event-guard.js

@@ -0,0 +1,22 @@
+/**
+ * `onItemEvent` 条目过滤：已由专用回调覆盖的条目（工具、Reasoning）不再进入
+ * RUN_EVENT 兜底，避免把内部诊断标识 `unmapped:*` 展示给最终用户。
+ */
+/**
+ * 判断 `onItemEvent` 条目是否应被抑制：
+ * - 工具类（`toolCallId` 或 `kind=tool`）已由 onToolStart/onToolResult 覆盖；
+ * - Reasoning 条目（`kind=analysis` 且 `title=reasoning`）已由
+ *   onReasoningStream/onReasoningEnd 覆盖，同一条目 start/end 各触发一次，禁止重复投递。
+ */
+export function resolveItemEventGuard(p) {
+    if (p.toolCallId || p.kind === "tool") {
+        return { suppress: true, reason: "tool" };
+    }
+    const kind = String(p.kind ?? "").trim().toLowerCase();
+    const title = String(p.title ?? "").trim().toLowerCase();
+    if (kind === "analysis" && title === "reasoning") {
+        return { suppress: true, reason: "reasoning" };
+    }
+    return { suppress: false, kind, title };
+}
+//# sourceMappingURL=item-event-guard.js.map

package/dist/src/item-event-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"item-event-guard.js","sourceRoot":"","sources":["../../src/item-event-guard.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAeH;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,CAAmB;IACrD,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACpC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzD,IAAI,IAAI,KAAK,UAAU,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QAC/C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC5C,CAAC"}

package/dist/src/item-event-guard.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=item-event-guard.test.d.ts.map

package/dist/src/item-event-guard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"item-event-guard.test.d.ts","sourceRoot":"","sources":["../../src/item-event-guard.test.ts"],"names":[],"mappings":""}

package/dist/src/item-event-guard.test.js

@@ -0,0 +1,55 @@
+import assert from "node:assert/strict";
+import { describe, it } from "node:test";
+import { resolveItemEventGuard } from "./item-event-guard.js";
+describe("item-event-guard", () => {
+    it("suppresses reasoning item start (phase=start)", () => {
+        const r = resolveItemEventGuard({
+            kind: "analysis",
+            title: "Reasoning",
+            phase: "start",
+            status: "running",
+        });
+        assert.equal(r.suppress, true);
+        assert.equal(r.reason, "reasoning");
+    });
+    it("suppresses reasoning item end (phase=end)", () => {
+        const r = resolveItemEventGuard({
+            kind: "analysis",
+            title: "Reasoning",
+            phase: "end",
+            status: "completed",
+        });
+        assert.equal(r.suppress, true);
+        assert.equal(r.reason, "reasoning");
+    });
+    it("suppresses tool-call items even when title is reasoning", () => {
+        const r = resolveItemEventGuard({
+            toolCallId: "call_123",
+            kind: "analysis",
+            title: "Reasoning",
+        });
+        assert.equal(r.suppress, true);
+        assert.equal(r.reason, "tool");
+    });
+    it("suppresses kind=tool items", () => {
+        const r = resolveItemEventGuard({ kind: "tool", title: "Web search" });
+        assert.equal(r.suppress, true);
+        assert.equal(r.reason, "tool");
+    });
+    it("matches reasoning case-insensitively with surrounding whitespace", () => {
+        const r = resolveItemEventGuard({ kind: " ANALYSIS ", title: " reasoning " });
+        assert.equal(r.suppress, true);
+    });
+    it("keeps supported user-facing progress events (not suppressed)", () => {
+        const r = resolveItemEventGuard({
+            kind: "search",
+            title: "Web search",
+            phase: "start",
+            status: "running",
+        });
+        assert.equal(r.suppress, false);
+        assert.equal(r.kind, "search");
+        assert.equal(r.title, "web search");
+    });
+});
+//# sourceMappingURL=item-event-guard.test.js.map

package/dist/src/item-event-guard.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"item-event-guard.test.js","sourceRoot":"","sources":["../../src/item-event-guard.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,GAAG,qBAAqB,CAAC;YAC5B,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,SAAS;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,qBAAqB,CAAC;YAC5B,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,WAAW;SACtB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAG,qBAAqB,CAAC;YAC5B,UAAU,EAAE,UAAU;YACtB,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,WAAW;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,qBAAqB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,GAAG,qBAAqB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,GAAG,qBAAqB,CAAC;YAC5B,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,SAAS;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/src/modified-file-push-tracker.d.ts

@@ -0,0 +1,24 @@
+import type { Logger } from "./channel-log.js";
+import { type ReplyDeliverPayload } from "./send-service.js";
+import type { WsMessageParams, XgImConfig } from "./types.js";
+export type PatchSummaryPayload = {
+    added?: string[];
+    modified?: string[];
+    deleted?: string[];
+};
+type FlushArgs = {
+    config: XgImConfig;
+    token: string;
+    params: WsMessageParams;
+};
+export declare function createModifiedFilePushTracker(options: {
+    agentWorkspaceDir?: string;
+    log: Logger;
+    logPrefix: string;
+}): {
+    recordPatchSummary: (payload: PatchSummaryPayload) => void;
+    markDelivered: (payload: ReplyDeliverPayload) => void;
+    flush: (args: FlushArgs) => Promise<void>;
+};
+export {};
+//# sourceMappingURL=modified-file-push-tracker.d.ts.map

package/dist/src/modified-file-push-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modified-file-push-tracker.d.ts","sourceRoot":"","sources":["../../src/modified-file-push-tracker.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,EAAyB,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE9D,MAAM,MAAM,mBAAmB,GAAG;IAC9B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAEF,KAAK,SAAS,GAAG;IACb,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,eAAe,CAAC;CAC3B,CAAC;AAwFF,wBAAgB,6BAA6B,CAAC,OAAO,EAAE;IACnD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACrB,GAAG;IACA,kBAAkB,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC3D,aAAa,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;IACtD,KAAK,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C,CAgDA"}

package/dist/src/modified-file-push-tracker.js

@@ -0,0 +1,125 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { buildTargetReplyMeta } from "./inbound-display.js";
+import { resolveLocalFsPath, resolveWorkspaceCandidatePaths } from "./resource-file.js";
+import { sendReplyDeliverBlock } from "./send-service.js";
+function isUrlLike(value) {
+    return /^[a-zA-Z][a-zA-Z0-9+.-]*:\/\//.test(value.trim());
+}
+function normalizePushPath(filePath, workspaceDir) {
+    const clean = filePath.trim();
+    if (clean.startsWith("/workspace/") || clean === "/workspace") {
+        return clean;
+    }
+    if (isUrlLike(clean)) {
+        return clean;
+    }
+    const wsDir = workspaceDir?.trim();
+    if (wsDir) {
+        const wsResolved = path.resolve(wsDir);
+        const fileResolved = path.isAbsolute(clean) ? path.resolve(clean) : path.resolve(wsResolved, clean);
+        const relToWorkspace = path.relative(wsResolved, fileResolved);
+        if (!relToWorkspace.startsWith("..") && !path.isAbsolute(relToWorkspace)) {
+            return relToWorkspace ? `/workspace/${relToWorkspace.replace(/\\/g, "/")}` : "/workspace";
+        }
+    }
+    return clean;
+}
+function pushPathCandidates(filePath, workspaceDir) {
+    const clean = filePath.trim();
+    if (!clean)
+        return [];
+    if (clean.startsWith("/workspace/") || clean === "/workspace") {
+        try {
+            return resolveWorkspaceCandidatePaths(clean, workspaceDir);
+        }
+        catch {
+            return [];
+        }
+    }
+    if (clean.startsWith("file://")) {
+        try {
+            return [fileURLToPath(clean)];
+        }
+        catch {
+            return [];
+        }
+    }
+    const local = resolveLocalFsPath(clean);
+    if (local)
+        return [local.fsPath];
+    const wsDir = workspaceDir?.trim();
+    if (wsDir && !path.isAbsolute(clean)) {
+        return [path.resolve(wsDir, clean)];
+    }
+    return [];
+}
+async function isExistingRegularPushFile(filePath, workspaceDir) {
+    for (const candidate of pushPathCandidates(filePath, workspaceDir)) {
+        try {
+            const stat = await fs.stat(candidate);
+            if (stat.isFile())
+                return true;
+        }
+        catch {
+            /* try next candidate */
+        }
+    }
+    return false;
+}
+async function filterExistingPushFiles(files, workspaceDir, log, logPrefix) {
+    const out = [];
+    for (const file of files) {
+        if (await isExistingRegularPushFile(file, workspaceDir)) {
+            out.push(file);
+        }
+        else {
+            log.warn(`${logPrefix} [sync-push] Skip non-existing or non-file path: ${JSON.stringify(file)}`);
+        }
+    }
+    return out;
+}
+function payloadMediaUrls(payload) {
+    return [
+        ...(payload.mediaUrl ? [payload.mediaUrl] : []),
+        ...(payload.mediaUrls ?? []),
+    ].filter((u) => typeof u === "string" && u.trim());
+}
+export function createModifiedFilePushTracker(options) {
+    const { agentWorkspaceDir, log, logPrefix } = options;
+    const modifiedFiles = new Set();
+    return {
+        recordPatchSummary(payload) {
+            payload.added?.forEach((f) => modifiedFiles.add(normalizePushPath(f, agentWorkspaceDir)));
+            payload.modified?.forEach((f) => modifiedFiles.add(normalizePushPath(f, agentWorkspaceDir)));
+        },
+        markDelivered(payload) {
+            for (const url of payloadMediaUrls(payload)) {
+                modifiedFiles.delete(normalizePushPath(url, agentWorkspaceDir));
+            }
+        },
+        async flush(args) {
+            if (modifiedFiles.size === 0)
+                return;
+            const mediaUrls = await filterExistingPushFiles(modifiedFiles, agentWorkspaceDir, log, logPrefix);
+            if (mediaUrls.length === 0) {
+                log.info(`${logPrefix} [sync-push] No existing modified files to push`);
+                return;
+            }
+            log.info(`${logPrefix} [sync-push] 自动推送变动文件至客户端: ${JSON.stringify(mediaUrls)}`);
+            try {
+                const reply = buildTargetReplyMeta(args.params);
+                await sendReplyDeliverBlock(args.config, args.token, args.params.groupId, {
+                    text: "已自动将本次修改的文件同步到工作区，您可以在右侧面板进行审阅：",
+                    isThinking: false,
+                    mediaUrls,
+                }, [reply.targetUserId], log, undefined, reply, agentWorkspaceDir);
+            }
+            catch (err) {
+                log.error(`${logPrefix} [sync-push] 自动推送文件附件失败: ${String(err)}`);
+            }
+        },
+    };
+}
+//# sourceMappingURL=modified-file-push-tracker.js.map

package/dist/src/modified-file-push-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modified-file-push-tracker.js","sourceRoot":"","sources":["../../src/modified-file-push-tracker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAA4B,MAAM,mBAAmB,CAAC;AAepF,SAAS,SAAS,CAAC,KAAa;IAC5B,OAAO,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,YAAqB;IAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,KAAK,EAAE,CAAC;QACR,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACpG,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC/D,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACvE,OAAO,cAAc,CAAC,CAAC,CAAC,cAAc,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;QAC9F,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,YAAqB;IAC/D,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QAC5D,IAAI,CAAC;YACD,OAAO,8BAA8B,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACD,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,KAAK;QAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,YAAY,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,QAAgB,EAAE,YAAqB;IAC5E,KAAK,MAAM,SAAS,IAAI,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACL,wBAAwB;QAC5B,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,uBAAuB,CAClC,KAAuB,EACvB,YAAgC,EAChC,GAAW,EACX,SAAiB;IAEjB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,MAAM,yBAAyB,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACJ,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,oDAAoD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA4B;IAClD,OAAO;QACH,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;KAC/B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAI7C;IAKG,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACtD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAExC,OAAO;QACH,kBAAkB,CAAC,OAA4B;YAC3C,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;YAC1F,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;QACjG,CAAC;QAED,aAAa,CAAC,OAA4B;YACtC,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1C,aAAa,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC;YACpE,CAAC;QACL,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,IAAe;YACvB,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO;YAErC,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,aAAa,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAClG,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,iDAAiD,CAAC,CAAC;gBACxE,OAAO;YACX,CAAC;YAED,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,8BAA8B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAChF,IAAI,CAAC;gBACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAChD,MAAM,qBAAqB,CACvB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB;oBACI,IAAI,EAAE,iCAAiC;oBACvC,UAAU,EAAE,KAAK;oBACjB,SAAS;iBACZ,EACD,CAAC,KAAK,CAAC,YAAY,CAAa,EAChC,GAAG,EACH,SAAS,EACT,KAAK,EACL,iBAAiB,CACpB,CAAC;YACN,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACpB,GAAG,CAAC,KAAK,CAAC,GAAG,SAAS,4BAA4B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrE,CAAC;QACL,CAAC;KACJ,CAAC;AACN,CAAC"}

package/dist/src/nas-volumes.d.ts

@@ -0,0 +1,43 @@
+/**
+ * 会话级 NAS 目录声明：路径规范化、安全校验、幂等指纹与 OpenClaw sandbox bind 注入。
+ */
+import type { OpenClawConfig } from "openclaw/plugin-sdk";
+import type { NasVolume } from "./agent-context-types.js";
+import type { XgImConfig } from "./types.js";
+export interface NormalizedNasVolume {
+    /** 已解析软链接后的宿主机真实目录。 */
+    realDir: string;
+    /** 相对 Agent workspace 的 POSIX 路径。 */
+    dockerDir: string;
+    /** 容器内绝对路径。 */
+    sandboxDir: string;
+    mode: "ro" | "rw";
+}
+/** 将 IM 的 dockerDir 规范为不带 /workspace 前缀的 workspace 相对路径。 */
+export declare function normalizeNasDockerDir(raw: string): string;
+export declare function nasVolumeSandboxDir(dockerDir: string): string;
+/** Prompt 使用的轻量规范化；真实路径与白名单在 dispatch 前再次校验。 */
+export declare function normalizeNasVolumesForPrompt(volumes: NasVolume[] | undefined): Array<{
+    dockerDir: string;
+    sandboxDir: string;
+    mode: "ro" | "rw";
+}>;
+export declare function validateAndNormalizeNasVolumes(volumes: NasVolume[], config: XgImConfig): NormalizedNasVolume[];
+export declare function nasVolumeSpecHash(volumes: NormalizedNasVolume[]): string;
+/**
+ * 将本会话期望的 NAS mounts 注入本轮 cfg。重复传入相同声明是幂等的；同一 session 改绑则拒绝。
+ */
+export declare function resolveNasVolumeDispatchConfig(args: {
+    cfg: OpenClawConfig;
+    config: XgImConfig;
+    agentId: string;
+    sessionKey: string;
+    volumes?: NasVolume[];
+}): {
+    cfg: OpenClawConfig;
+    specHash?: string;
+    reused: boolean;
+};
+/** 测试与 Gateway 停止时使用。 */
+export declare function clearSessionNasVolumeStates(): void;
+//# sourceMappingURL=nas-volumes.d.ts.map

package/dist/src/nas-volumes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nas-volumes.d.ts","sourceRoot":"","sources":["../../src/nas-volumes.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAQ7C,MAAM,WAAW,mBAAmB;IAChC,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;CACrB;AAqED,4DAA4D;AAC5D,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAqBzD;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,gDAAgD;AAChD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,SAAS,GAAG,KAAK,CAAC;IAClF,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;CACrB,CAAC,CAMD;AA6GD,wBAAgB,8BAA8B,CAC1C,OAAO,EAAE,SAAS,EAAE,EACpB,MAAM,EAAE,UAAU,GACnB,mBAAmB,EAAE,CAcvB;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,EAAE,GAAG,MAAM,CAKxE;AAyDD;;GAEG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE;IACjD,GAAG,EAAE,cAAc,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;CACzB,GAAG;IAAE,GAAG,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CA0C9D;AAED,yBAAyB;AACzB,wBAAgB,2BAA2B,IAAI,IAAI,CAGlD"}

package/dist/src/nas-volumes.js

@@ -0,0 +1,307 @@
+/**
+ * 会话级 NAS 目录声明：路径规范化、安全校验、幂等指纹与 OpenClaw sandbox bind 注入。
+ */
+import { createHash } from "node:crypto";
+import { existsSync, mkdirSync, realpathSync, statSync } from "node:fs";
+import path from "node:path";
+const SANDBOX_WORKSPACE_ROOT = "/workspace";
+/** 缓存仅用于短期复用同一会话声明；硬上限防止长期运行时随历史会话无限增长。 */
+const SESSION_NAS_VOLUME_STATE_MAX_ENTRIES = 2_000;
+const SESSION_NAS_VOLUME_STATE_TTL_MS = 2 * 60 * 60 * 1_000;
+const SESSION_NAS_VOLUME_STATE_PRUNE_INTERVAL_MS = 60 * 1_000;
+const sessionVolumeStates = new Map();
+let lastSessionVolumeStatePruneAt = 0;
+function pruneSessionNasVolumeStates(now, force = false) {
+    if (!force &&
+        sessionVolumeStates.size <= SESSION_NAS_VOLUME_STATE_MAX_ENTRIES &&
+        now - lastSessionVolumeStatePruneAt < SESSION_NAS_VOLUME_STATE_PRUNE_INTERVAL_MS) {
+        return;
+    }
+    lastSessionVolumeStatePruneAt = now;
+    for (const [key, state] of sessionVolumeStates) {
+        if (now - state.lastSeenAt >= SESSION_NAS_VOLUME_STATE_TTL_MS) {
+            sessionVolumeStates.delete(key);
+        }
+    }
+    while (sessionVolumeStates.size > SESSION_NAS_VOLUME_STATE_MAX_ENTRIES) {
+        const oldestKey = sessionVolumeStates.keys().next().value;
+        if (oldestKey == null)
+            break;
+        sessionVolumeStates.delete(oldestKey);
+    }
+}
+function isInsideOrEqual(root, target) {
+    const relative = path.relative(root, target);
+    return relative === "" || (!relative.startsWith("..") && !path.isAbsolute(relative));
+}
+function bindContainerTarget(bind) {
+    const parts = bind.split(":");
+    for (let index = parts.length - 1; index >= 0; index -= 1) {
+        const candidate = parts[index].trim().replace(/\\/g, "/");
+        if (candidate.startsWith("/"))
+            return path.posix.normalize(candidate);
+    }
+    return undefined;
+}
+function assertNoExistingBindTargetConflicts(existingBinds, incomingBinds) {
+    for (const incoming of incomingBinds) {
+        const incomingTarget = bindContainerTarget(incoming);
+        if (!incomingTarget)
+            continue;
+        for (const existing of existingBinds) {
+            if (existing === incoming)
+                continue;
+            const existingTarget = bindContainerTarget(existing);
+            if (!existingTarget)
+                continue;
+            if (incomingTarget === existingTarget ||
+                incomingTarget.startsWith(`${existingTarget}/`) ||
+                existingTarget.startsWith(`${incomingTarget}/`)) {
+                throw new Error(`NAS_VOLUME_TARGET_CONFLICT: dockerDir 与已有 sandbox bind 目标冲突: ${incomingTarget}, ${existingTarget}`);
+            }
+        }
+    }
+}
+/** 将 IM 的 dockerDir 规范为不带 /workspace 前缀的 workspace 相对路径。 */
+export function normalizeNasDockerDir(raw) {
+    let value = raw.trim().replace(/\\/g, "/");
+    if (value === "/workspace" || value === "/workspace/") {
+        throw new Error("nasVolumes.dockerDir 不能指向 workspace 根目录");
+    }
+    if (value.startsWith("/workspace/"))
+        value = value.slice("/workspace/".length);
+    while (value.startsWith("./"))
+        value = value.slice(2);
+    while (value.startsWith("/"))
+        value = value.slice(1);
+    value = value.replace(/\/+$/, "");
+    if (!value)
+        throw new Error("nasVolumes.dockerDir 不能为空");
+    const parts = value.split("/");
+    for (const part of parts) {
+        if (!part || part === "." || part === "..") {
+            throw new Error(`nasVolumes.dockerDir 含非法路径段: ${raw}`);
+        }
+        if (/[\0-\x1f:*?"<>|]/.test(part)) {
+            throw new Error(`nasVolumes.dockerDir 含非法字符: ${raw}`);
+        }
+    }
+    return parts.join("/");
+}
+export function nasVolumeSandboxDir(dockerDir) {
+    return `${SANDBOX_WORKSPACE_ROOT}/${normalizeNasDockerDir(dockerDir)}`;
+}
+/** Prompt 使用的轻量规范化；真实路径与白名单在 dispatch 前再次校验。 */
+export function normalizeNasVolumesForPrompt(volumes) {
+    if (!volumes?.length)
+        return [];
+    return volumes.map((volume) => {
+        const dockerDir = normalizeNasDockerDir(volume.dockerDir);
+        return { dockerDir, sandboxDir: nasVolumeSandboxDir(dockerDir), mode: volume.mode };
+    });
+}
+function normalizeAllowedRoots(config) {
+    const mappings = config.nasVolumeRootMappings ?? [];
+    if (mappings.length === 0) {
+        throw new Error("NAS_VOLUME_ROOTS_NOT_CONFIGURED: channels.xg_cwork_im.nasVolumeRootMappings 未配置");
+    }
+    return mappings.map((mapping) => {
+        const logicalRoot = normalizeLogicalRoot(mapping.logicalRoot);
+        const hostRoot = mapping.hostRoot.trim();
+        if (!path.isAbsolute(hostRoot)) {
+            throw new Error(`NAS_VOLUME_ROOT_INVALID: hostRoot 必须是宿主机绝对路径: ${hostRoot}`);
+        }
+        const configuredRoot = path.resolve(hostRoot);
+        const realRoot = realpathSync(configuredRoot);
+        if (!statSync(realRoot).isDirectory()) {
+            throw new Error(`NAS_VOLUME_ROOT_INVALID: hostRoot 不是目录: ${hostRoot}`);
+        }
+        return { logicalRoot, configuredRoot, realRoot };
+    }).sort((left, right) => right.logicalRoot.length - left.logicalRoot.length);
+}
+function normalizeLogicalRoot(raw) {
+    const value = raw.trim().replace(/\\/g, "/");
+    if (!value.startsWith("/")) {
+        throw new Error(`NAS_VOLUME_ROOT_INVALID: logicalRoot 必须是绝对逻辑路径: ${raw}`);
+    }
+    const normalized = path.posix.normalize(value).replace(/\/+$/, "") || "/";
+    if (normalized === "/") {
+        throw new Error("NAS_VOLUME_ROOT_INVALID: logicalRoot 不能是根目录 /");
+    }
+    return normalized;
+}
+function nearestExistingAncestor(target) {
+    let current = target;
+    while (!existsSync(current)) {
+        const parent = path.dirname(current);
+        if (parent === current)
+            break;
+        current = parent;
+    }
+    return current;
+}
+/**
+ * 业务目录允许按需创建，但创建前后都必须确认路径仍位于已存在的白名单根内。
+ */
+function ensureNasSourceDirectory(rawDir, allowedRoots) {
+    const logicalDir = path.posix.normalize(rawDir.trim().replace(/\\/g, "/"));
+    if (!logicalDir.startsWith("/")) {
+        throw new Error(`NAS_VOLUME_SOURCE_INVALID: realDir 必须是绝对逻辑路径: ${rawDir}`);
+    }
+    const allowed = allowedRoots.find((root) => logicalDir !== root.logicalRoot && logicalDir.startsWith(`${root.logicalRoot}/`));
+    if (!allowed) {
+        throw new Error(`NAS_VOLUME_SOURCE_FORBIDDEN: realDir 未匹配允许的 logicalRoot: ${rawDir}`);
+    }
+    const target = path.resolve(allowed.configuredRoot, ...path.posix.relative(allowed.logicalRoot, logicalDir).split("/"));
+    if (!isInsideOrEqual(allowed.configuredRoot, target) || target === allowed.configuredRoot) {
+        throw new Error(`NAS_VOLUME_SOURCE_FORBIDDEN: realDir 越出映射根目录: ${rawDir}`);
+    }
+    if (!existsSync(target)) {
+        const existingAncestor = realpathSync(nearestExistingAncestor(target));
+        if (!isInsideOrEqual(allowed.realRoot, existingAncestor)) {
+            throw new Error(`NAS_VOLUME_SOURCE_FORBIDDEN: realDir 的父目录越出允许根: ${rawDir}`);
+        }
+        mkdirSync(target, { recursive: true });
+    }
+    const realDir = realpathSync(target);
+    if (realDir === allowed.realRoot || !isInsideOrEqual(allowed.realRoot, realDir)) {
+        throw new Error(`NAS_VOLUME_SOURCE_FORBIDDEN: realDir 不在允许根的业务子目录内: ${rawDir}`);
+    }
+    if (!statSync(realDir).isDirectory()) {
+        throw new Error(`NAS_VOLUME_SOURCE_INVALID: realDir 不是目录: ${rawDir}`);
+    }
+    const colonIndex = realDir.indexOf(":");
+    const isWindowsDrivePrefix = process.platform === "win32" && colonIndex === 1 && /^[A-Za-z]:[\\/]/.test(realDir);
+    if (colonIndex >= 0 && !isWindowsDrivePrefix) {
+        throw new Error(`NAS_VOLUME_SOURCE_INVALID: realDir 含 Docker bind 不支持的冒号: ${rawDir}`);
+    }
+    return realDir;
+}
+function assertNonOverlappingTargets(volumes) {
+    for (let i = 0; i < volumes.length; i += 1) {
+        for (let j = i + 1; j < volumes.length; j += 1) {
+            const left = volumes[i].dockerDir;
+            const right = volumes[j].dockerDir;
+            if (left === right || left.startsWith(`${right}/`) || right.startsWith(`${left}/`)) {
+                throw new Error(`NAS_VOLUME_TARGET_CONFLICT: dockerDir 不能重复或嵌套: ${left}, ${right}`);
+            }
+        }
+    }
+}
+export function validateAndNormalizeNasVolumes(volumes, config) {
+    const allowedRoots = normalizeAllowedRoots(config);
+    const normalized = volumes.map((volume) => {
+        const realDir = ensureNasSourceDirectory(volume.realDir.trim(), allowedRoots);
+        const dockerDir = normalizeNasDockerDir(volume.dockerDir);
+        return {
+            realDir,
+            dockerDir,
+            sandboxDir: nasVolumeSandboxDir(dockerDir),
+            mode: volume.mode,
+        };
+    });
+    assertNonOverlappingTargets(normalized);
+    return normalized;
+}
+export function nasVolumeSpecHash(volumes) {
+    const stable = [...volumes]
+        .sort((left, right) => left.dockerDir.localeCompare(right.dockerDir))
+        .map(({ realDir, dockerDir, mode }) => ({ realDir, dockerDir, mode }));
+    return createHash("sha256").update(JSON.stringify(stable)).digest("hex");
+}
+function effectiveSandboxScope(cfg, agentId) {
+    const agents = cfg.agents;
+    const defaults = agents?.defaults;
+    const defaultSandbox = defaults?.sandbox;
+    const list = Array.isArray(agents?.list) ? agents.list : [];
+    const agent = list.find((entry) => entry.id === agentId);
+    const agentSandbox = agent?.sandbox;
+    return agentSandbox?.scope ?? defaultSandbox?.scope;
+}
+function injectDockerBinds(cfg, agentId, binds) {
+    const cfgRecord = cfg;
+    const agents = cfgRecord.agents ?? {};
+    const list = Array.isArray(agents.list) ? agents.list : [];
+    const agentIndex = list.findIndex((entry) => entry.id === agentId);
+    const patchSandbox = (holder) => {
+        const sandbox = holder.sandbox ?? {};
+        const docker = sandbox.docker ?? {};
+        const existingBinds = Array.isArray(docker.binds)
+            ? docker.binds.filter((entry) => typeof entry === "string")
+            : [];
+        assertNoExistingBindTargetConflicts(existingBinds, binds);
+        return {
+            ...holder,
+            sandbox: {
+                ...sandbox,
+                docker: {
+                    ...docker,
+                    binds: [...new Set([...existingBinds, ...binds])],
+                    // OpenClaw 默认禁止 workspace 子路径和 workspace 外来源；本插件已在上方执行真实路径白名单校验。
+                    dangerouslyAllowExternalBindSources: true,
+                    dangerouslyAllowReservedContainerTargets: true,
+                },
+            },
+        };
+    };
+    if (agentIndex >= 0) {
+        const nextList = [...list];
+        nextList[agentIndex] = patchSandbox(list[agentIndex]);
+        return { ...cfgRecord, agents: { ...agents, list: nextList } };
+    }
+    const defaults = agents.defaults ?? {};
+    return {
+        ...cfgRecord,
+        agents: { ...agents, defaults: patchSandbox(defaults) },
+    };
+}
+/**
+ * 将本会话期望的 NAS mounts 注入本轮 cfg。重复传入相同声明是幂等的；同一 session 改绑则拒绝。
+ */
+export function resolveNasVolumeDispatchConfig(args) {
+    const stateKey = `${args.agentId}\0${args.sessionKey}`;
+    const now = Date.now();
+    pruneSessionNasVolumeStates(now);
+    let prior = sessionVolumeStates.get(stateKey);
+    if (prior && now - prior.lastSeenAt >= SESSION_NAS_VOLUME_STATE_TTL_MS) {
+        sessionVolumeStates.delete(stateKey);
+        prior = undefined;
+    }
+    let binds;
+    let specHash;
+    if (args.volumes?.length) {
+        const normalized = validateAndNormalizeNasVolumes(args.volumes, args.config);
+        specHash = nasVolumeSpecHash(normalized);
+        binds = normalized.map((volume) => `${volume.realDir}:${volume.sandboxDir}:${volume.mode}`);
+        if (prior && prior.specHash !== specHash) {
+            throw new Error("NAS_VOLUME_SESSION_CONFLICT: 当前会话已绑定另一组 NAS 目录，请创建新会话");
+        }
+    }
+    else if (prior) {
+        binds = prior.binds;
+        specHash = prior.specHash;
+    }
+    else {
+        return { cfg: args.cfg, reused: false };
+    }
+    if (effectiveSandboxScope(args.cfg, args.agentId) !== "session") {
+        throw new Error("NAS_VOLUME_SANDBOX_SCOPE_INVALID: NAS 挂载要求 sandbox.scope=session");
+    }
+    // 先完成无状态的配置注入与冲突校验，失败时不得污染会话缓存。
+    const nextCfg = injectDockerBinds(args.cfg, args.agentId, binds);
+    // delete + set 让 Map 插入顺序同时承担 LRU 顺序；达到硬上限时淘汰最久未使用项。
+    sessionVolumeStates.delete(stateKey);
+    sessionVolumeStates.set(stateKey, { specHash, binds, lastSeenAt: now });
+    pruneSessionNasVolumeStates(now, sessionVolumeStates.size > SESSION_NAS_VOLUME_STATE_MAX_ENTRIES);
+    return {
+        cfg: nextCfg,
+        specHash,
+        reused: prior?.specHash === specHash,
+    };
+}
+/** 测试与 Gateway 停止时使用。 */
+export function clearSessionNasVolumeStates() {
+    sessionVolumeStates.clear();
+    lastSessionVolumeStatePruneAt = 0;
+}
+//# sourceMappingURL=nas-volumes.js.map