@xopcai/xopc 0.0.99 → 0.0.100

package/dist/src/agent/tools/index.d.ts

@@ -12,6 +12,7 @@ export { createWebSearchTool, createWebFetchTool } from './web.js';
 export { createWebExtractTool, stripHtmlBoilerplate, DEFAULT_WEB_EXTRACT_MAX_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, } from './web-extract.js';
 export { createMessageTool } from './communication.js';
 export { createSendMediaTool } from './send-media.js';
+export { createReadMediaTool } from './media-read-tool.js';
 export { createCreateShareTool, isShareToolAvailable, type CreateShareToolDeps, } from './create-share-tool.js';
 export { createTodoTool, TodoStore, type TodoItem, type TodoStatus } from './todo-tool.js';
 export { createSessionStatusTool } from './session-status-tool.js';

package/dist/src/agent/tools/index.js

@@ -14,6 +14,7 @@ import { createWebFetchTool, createWebSearchTool } from "./web.js";
 import { DEFAULT_WEB_EXTRACT_MAX_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, createWebExtractTool, stripHtmlBoilerplate } from "./web-extract.js";
 import { createMessageTool } from "./communication.js";
 import { createSendMediaTool } from "./send-media.js";
+import { createReadMediaTool } from "./media-read-tool.js";
 import { createCreateShareTool, isShareToolAvailable } from "./create-share-tool.js";
 import { TodoStore, createTodoTool } from "./todo-tool.js";
 import { createSessionStatusTool } from "./session-status-tool.js";
@@ -31,4 +32,4 @@ import { createSkillManageTool } from "./skill-manage-tool.js";
 import { resolveImageModelConfigForTool } from "../image/tool-model-config.js";
 import { createImageTool } from "./image-tool.js";
 import { createImageGenerateTool, resolveImageGenerationModelConfigForTool } from "./image-generate-tool.js";
-export { BrowserManager, DEFAULT_DELEGATE_TOOLS, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_WEB_EXTRACT_MAX_LENGTH, DELEGATE_BLOCKED_TOOLS, GREP_MAX_LINE_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, SANDBOX_ALLOWED_TOOLS, TodoStore, assertBrowserUrlAllowed, buildSandboxToolMap, createClarifyTool, createCreateShareTool, createCronjobTool, createCuratedMemoryTool, createDelegateTool, createDreamingTool, createEditFileTool, createExecuteCodeTool, createFindTool, createGrepTool, createImageGenerateTool, createImageTool, createListDirTool, createMemoryGetTool, createMemorySearchTool, createMessageTool, createReadFileTool, createSendMediaTool, createSessionSearchTool, createSessionStatusTool, createShellTool, createSkillManageTool, createSkillViewTool, createSkillsListTool, createTodoTool, createWebExtractTool, createWebFetchTool, createWebSearchTool, createWorkflowTool, createWriteFileTool, editFileTool, findTool, formatSize, fuzzyFindText, generateDiffString, grepTool, isShareToolAvailable, listDirTool, normalizeForFuzzyMatch, normalizeToLF, resolveImageGenerationModelConfigForTool, resolveImageModelConfigForTool, restoreLineEndings, scanCronPrompt, stripBom, stripHtmlBoilerplate, truncateHead, truncateLine, truncateTail, writeFileTool };
+export { BrowserManager, DEFAULT_DELEGATE_TOOLS, DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, DEFAULT_WEB_EXTRACT_MAX_LENGTH, DELEGATE_BLOCKED_TOOLS, GREP_MAX_LINE_LENGTH, MAX_RAW_HTML_CHARS_FOR_WEB_EXTRACT, SANDBOX_ALLOWED_TOOLS, TodoStore, assertBrowserUrlAllowed, buildSandboxToolMap, createClarifyTool, createCreateShareTool, createCronjobTool, createCuratedMemoryTool, createDelegateTool, createDreamingTool, createEditFileTool, createExecuteCodeTool, createFindTool, createGrepTool, createImageGenerateTool, createImageTool, createListDirTool, createMemoryGetTool, createMemorySearchTool, createMessageTool, createReadFileTool, createReadMediaTool, createSendMediaTool, createSessionSearchTool, createSessionStatusTool, createShellTool, createSkillManageTool, createSkillViewTool, createSkillsListTool, createTodoTool, createWebExtractTool, createWebFetchTool, createWebSearchTool, createWorkflowTool, createWriteFileTool, editFileTool, findTool, formatSize, fuzzyFindText, generateDiffString, grepTool, isShareToolAvailable, listDirTool, normalizeForFuzzyMatch, normalizeToLF, resolveImageGenerationModelConfigForTool, resolveImageModelConfigForTool, restoreLineEndings, scanCronPrompt, stripBom, stripHtmlBoilerplate, truncateHead, truncateLine, truncateTail, writeFileTool };

package/dist/src/agent/tools/media-read-tool.d.ts

@@ -0,0 +1,2 @@
+import type { AgentTool } from '@earendil-works/pi-agent-core';
+export declare function createReadMediaTool(): AgentTool;

package/dist/src/agent/tools/media-read-tool.js

@@ -0,0 +1,89 @@
+import { mimeTypeFromMediaPath } from "../../media/store.js";
+import { readMediaReference } from "../../media/media-reference.js";
+import { Type } from "@sinclair/typebox";
+//#region src/agent/tools/media-read-tool.ts
+const DEFAULT_MAX_BYTES = 1024 * 1024;
+const HARD_MAX_BYTES = 5 * 1024 * 1024;
+const ReadMediaSchema = Type.Object({
+	uri: Type.String({ description: "The media:// URI from an xopc-media-uri line in the user message." }),
+	maxBytes: Type.Optional(Type.Number({ description: "Maximum bytes to read, capped at 5 MiB." }))
+});
+function isLikelyText(mimeType) {
+	return mimeType.startsWith("text/") || mimeType === "application/json" || mimeType === "application/xml" || mimeType === "application/javascript" || mimeType === "application/typescript";
+}
+function clampMaxBytes(raw) {
+	if (typeof raw !== "number" || !Number.isFinite(raw) || raw <= 0) return DEFAULT_MAX_BYTES;
+	return Math.min(Math.floor(raw), HARD_MAX_BYTES);
+}
+function createReadMediaTool() {
+	return {
+		name: "read_media",
+		label: "Read Media Attachment",
+		description: "Read an attachment by media:// URI. Use this for xopc-media-uri attachments in user messages.",
+		parameters: ReadMediaSchema,
+		async execute(_toolCallId, params, _signal) {
+			const uri = typeof params.uri === "string" ? params.uri.trim() : "";
+			if (!uri) return {
+				content: [{
+					type: "text",
+					text: "Missing media URI."
+				}],
+				details: {
+					ok: false,
+					error: "missing_uri"
+				}
+			};
+			try {
+				const { buffer, path } = await readMediaReference(uri, clampMaxBytes(params.maxBytes));
+				const mimeType = mimeTypeFromMediaPath(path);
+				const metadata = {
+					ok: true,
+					uri,
+					mimeType,
+					size: buffer.byteLength,
+					path
+				};
+				if (isLikelyText(mimeType)) return {
+					content: [{
+						type: "text",
+						text: buffer.toString("utf8")
+					}],
+					details: {
+						...metadata,
+						kind: "text"
+					}
+				};
+				return {
+					content: [{
+						type: "text",
+						text: JSON.stringify({
+							...metadata,
+							kind: "binary",
+							base64: buffer.toString("base64")
+						}, null, 2)
+					}],
+					details: {
+						...metadata,
+						kind: "binary"
+					}
+				};
+			} catch (err) {
+				const message = err instanceof Error ? err.message : String(err);
+				return {
+					content: [{
+						type: "text",
+						text: `Media read error: ${message}`
+					}],
+					details: {
+						ok: false,
+						error: message
+					}
+				};
+			}
+		}
+	};
+}
+//#endregion
+export { createReadMediaTool };
+
+//# sourceMappingURL=media-read-tool.js.map

package/dist/src/agent/tools/media-read-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-read-tool.js","names":[],"sources":["../../../../src/agent/tools/media-read-tool.ts"],"sourcesContent":["import { Type } from '@sinclair/typebox';\nimport type { AgentTool, AgentToolResult } from '@earendil-works/pi-agent-core';\n\nimport { readMediaReference } from '../../media/media-reference.js';\nimport { mimeTypeFromMediaPath } from '../../media/store.js';\n\nconst DEFAULT_MAX_BYTES = 1024 * 1024;\nconst HARD_MAX_BYTES = 5 * 1024 * 1024;\n\nconst ReadMediaSchema = Type.Object({\n  uri: Type.String({\n    description: 'The media:// URI from an xopc-media-uri line in the user message.',\n  }),\n  maxBytes: Type.Optional(Type.Number({\n    description: 'Maximum bytes to read, capped at 5 MiB.',\n  })),\n});\n\nfunction isLikelyText(mimeType: string): boolean {\n  return (\n    mimeType.startsWith('text/') ||\n    mimeType === 'application/json' ||\n    mimeType === 'application/xml' ||\n    mimeType === 'application/javascript' ||\n    mimeType === 'application/typescript'\n  );\n}\n\nfunction clampMaxBytes(raw: unknown): number {\n  if (typeof raw !== 'number' || !Number.isFinite(raw) || raw <= 0) {\n    return DEFAULT_MAX_BYTES;\n  }\n  return Math.min(Math.floor(raw), HARD_MAX_BYTES);\n}\n\nexport function createReadMediaTool(): AgentTool {\n  return {\n    name: 'read_media',\n    label: 'Read Media Attachment',\n    description:\n      'Read an attachment by media:// URI. Use this for xopc-media-uri attachments in user messages.',\n    parameters: ReadMediaSchema,\n\n    async execute(\n      _toolCallId: string,\n      params: { uri?: string; maxBytes?: number },\n      _signal?: AbortSignal,\n    ): Promise<AgentToolResult<Record<string, unknown>>> {\n      const uri = typeof params.uri === 'string' ? params.uri.trim() : '';\n      if (!uri) {\n        return {\n          content: [{ type: 'text', text: 'Missing media URI.' }],\n          details: { ok: false, error: 'missing_uri' },\n        };\n      }\n\n      try {\n        const maxBytes = clampMaxBytes(params.maxBytes);\n        const { buffer, path } = await readMediaReference(uri, maxBytes);\n        const mimeType = mimeTypeFromMediaPath(path);\n        const metadata = {\n          ok: true,\n          uri,\n          mimeType,\n          size: buffer.byteLength,\n          path,\n        };\n\n        if (isLikelyText(mimeType)) {\n          const text = buffer.toString('utf8');\n          return {\n            content: [{ type: 'text', text }],\n            details: { ...metadata, kind: 'text' },\n          };\n        }\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: JSON.stringify({\n                ...metadata,\n                kind: 'binary',\n                base64: buffer.toString('base64'),\n              }, null, 2),\n            },\n          ],\n          details: { ...metadata, kind: 'binary' },\n        };\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err);\n        return {\n          content: [{ type: 'text', text: `Media read error: ${message}` }],\n          details: { ok: false, error: message },\n        };\n      }\n    },\n  } as AgentTool;\n}\n"],"mappings":";;;;AAMA,MAAM,oBAAoB,OAAO;AACjC,MAAM,iBAAiB,IAAI,OAAO;AAElC,MAAM,kBAAkB,KAAK,OAAO;CAClC,KAAK,KAAK,OAAO,EACf,aAAa,qEACd,CAAC;CACF,UAAU,KAAK,SAAS,KAAK,OAAO,EAClC,aAAa,2CACd,CAAC,CAAC;CACJ,CAAC;AAEF,SAAS,aAAa,UAA2B;AAC/C,QACE,SAAS,WAAW,QAAQ,IAC5B,aAAa,sBACb,aAAa,qBACb,aAAa,4BACb,aAAa;;AAIjB,SAAS,cAAc,KAAsB;AAC3C,KAAI,OAAO,QAAQ,YAAY,CAAC,OAAO,SAAS,IAAI,IAAI,OAAO,EAC7D,QAAO;AAET,QAAO,KAAK,IAAI,KAAK,MAAM,IAAI,EAAE,eAAe;;AAGlD,SAAgB,sBAAiC;AAC/C,QAAO;EACL,MAAM;EACN,OAAO;EACP,aACE;EACF,YAAY;EAEZ,MAAM,QACJ,aACA,QACA,SACmD;GACnD,MAAM,MAAM,OAAO,OAAO,QAAQ,WAAW,OAAO,IAAI,MAAM,GAAG;AACjE,OAAI,CAAC,IACH,QAAO;IACL,SAAS,CAAC;KAAE,MAAM;KAAQ,MAAM;KAAsB,CAAC;IACvD,SAAS;KAAE,IAAI;KAAO,OAAO;KAAe;IAC7C;AAGH,OAAI;IAEF,MAAM,EAAE,QAAQ,SAAS,MAAM,mBAAmB,KADjC,cAAc,OAAO,SACyB,CAAC;IAChE,MAAM,WAAW,sBAAsB,KAAK;IAC5C,MAAM,WAAW;KACf,IAAI;KACJ;KACA;KACA,MAAM,OAAO;KACb;KACD;AAED,QAAI,aAAa,SAAS,CAExB,QAAO;KACL,SAAS,CAAC;MAAE,MAAM;MAAQ,MAFf,OAAO,SAAS,OAEG;MAAE,CAAC;KACjC,SAAS;MAAE,GAAG;MAAU,MAAM;MAAQ;KACvC;AAGH,WAAO;KACL,SAAS,CACP;MACE,MAAM;MACN,MAAM,KAAK,UAAU;OACnB,GAAG;OACH,MAAM;OACN,QAAQ,OAAO,SAAS,SAAS;OAClC,EAAE,MAAM,EAAE;MACZ,CACF;KACD,SAAS;MAAE,GAAG;MAAU,MAAM;MAAU;KACzC;YACM,KAAK;IACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,WAAO;KACL,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,qBAAqB;MAAW,CAAC;KACjE,SAAS;MAAE,IAAI;MAAO,OAAO;MAAS;KACvC;;;EAGN"}

package/dist/src/channels/attachments/attachment-classifiers.d.ts

@@ -0,0 +1,8 @@
+export declare function isImageInboundAttachment(att: {
+    type?: string;
+    mimeType?: string;
+}): boolean;
+export declare function isVoiceInboundAttachment(att: {
+    type?: string;
+    mimeType?: string;
+}): boolean;

package/dist/src/channels/attachments/attachment-classifiers.js

@@ -0,0 +1,11 @@
+//#region src/channels/attachments/attachment-classifiers.ts
+function isImageInboundAttachment(att) {
+	return att.type === "image" || att.type === "photo" || att.mimeType?.startsWith("image/") === true;
+}
+function isVoiceInboundAttachment(att) {
+	return att.type === "voice" || att.type === "audio" || att.mimeType?.startsWith("audio/") === true;
+}
+//#endregion
+export { isImageInboundAttachment, isVoiceInboundAttachment };
+
+//# sourceMappingURL=attachment-classifiers.js.map

package/dist/src/channels/attachments/attachment-classifiers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-classifiers.js","names":[],"sources":["../../../../src/channels/attachments/attachment-classifiers.ts"],"sourcesContent":["export function isImageInboundAttachment(att: {\n  type?: string;\n  mimeType?: string;\n}): boolean {\n  return (\n    att.type === 'image' ||\n    att.type === 'photo' ||\n    att.mimeType?.startsWith('image/') === true\n  );\n}\n\nexport function isVoiceInboundAttachment(att: { type?: string; mimeType?: string }): boolean {\n  return (\n    att.type === 'voice' ||\n    att.type === 'audio' ||\n    att.mimeType?.startsWith('audio/') === true\n  );\n}\n"],"mappings":";AAAA,SAAgB,yBAAyB,KAG7B;AACV,QACE,IAAI,SAAS,WACb,IAAI,SAAS,WACb,IAAI,UAAU,WAAW,SAAS,KAAK;;AAI3C,SAAgB,yBAAyB,KAAoD;AAC3F,QACE,IAAI,SAAS,WACb,IAAI,SAAS,WACb,IAAI,UAAU,WAAW,SAAS,KAAK"}

package/dist/src/channels/attachments/inbound-persist.d.ts

@@ -1,39 +1,18 @@
 /**
- * Persist inbound channel / Web UI uploads under the agent home dir so the markdown
- * workspace stays user-visible; session transcripts reference stable relative paths.
+ * Persist inbound uploads to the global media store (`{stateDir}/media/inbound/`).
  */
-/** New layout: `<agentHome>/inbound/<session>/` — rel paths use this prefix. */
-export declare const INBOUND_REL_ROOT = "inbound";
-export interface InboundAttachmentInput {
-    type: string;
-    mimeType?: string;
-    data?: string;
-    name?: string;
-    size?: number;
-    /** Set after persist (relative to agent home). */
-    workspaceRelativePath?: string;
-}
-export type InternalAttachmentRoots = {
-    /** `…/agents/<id>/` — primary storage */
-    agentHome: string;
-};
-/** Decode base64 or data-URL payload for inbound attachments (also used by voice STT). */
+import type { InboundAttachmentInput, MediaRef } from '../../media/types.js';
+export type { InboundAttachmentInput, MediaRef } from '../../media/types.js';
+export { isImageInboundAttachment, isVoiceInboundAttachment } from './attachment-classifiers.js';
+export { toMediaRef, mediaRefFromUri } from './inbound-types.js';
+/** Decode base64 or data-URL payload (composer wire + voice STT). */
 export declare function decodeInboundAttachmentBase64(data: string): Buffer;
 /**
- * Write non-image attachments with binary data to disk; returns a shallow copy
- * of each attachment with `workspaceRelativePath` set (POSIX-style, `/` separators).
+ * Write attachments with binary `data` to the media store; returns metadata-only refs.
  */
-export declare function persistInboundAttachmentsToWorkspace(agentHomeRoot: string, sessionKey: string, attachments: InboundAttachmentInput[] | undefined): Promise<InboundAttachmentInput[] | undefined>;
-/**
- * Build transcript text for a non-image file for the LLM (includes machine-readable path lines).
- */
-export declare function formatInboundFileTextBlock(att: InboundAttachmentInput, storageRootAbs: string): string;
-/**
- * Remove inbound file transcript blocks from a string (e.g. auto session titles).
- * Matches Web UI `stripInboundFileMachineText`, plus bare `[File: …]` lines when paths are absent.
- */
-export declare function stripInboundFileMetadataFromText(text: string): string;
-/**
- * Resolve a stored relative path under `inbound/`.
- */
-export declare function resolveSafeInboundFilePath(roots: InternalAttachmentRoots, relRaw: string): string | null;
+export declare function persistInboundAttachments(attachments: InboundAttachmentInput[] | undefined, opts?: {
+    maxBytes?: number;
+}): Promise<MediaRef[] | undefined>;
+/** Read attachment bytes by media URI (voice STT, tools). */
+export declare function readInboundAttachmentBuffer(uri: string): Promise<Buffer>;
+export declare function assertMediaUri(uri: string): void;

package/dist/src/channels/attachments/inbound-persist.js

@@ -1,125 +1,57 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { join, resolve } from "path";
-import { mkdir, writeFile } from "fs/promises";
-import { randomBytes } from "crypto";
+import { parseMediaUri } from "../../media/uri.js";
+import { saveMediaBuffer } from "../../media/store.js";
+import { readMediaReference, resolveMediaReference } from "../../media/media-reference.js";
+import { isImageInboundAttachment, isVoiceInboundAttachment } from "./attachment-classifiers.js";
+import { mediaRefFromUri, toMediaRef } from "./inbound-types.js";
 //#region src/channels/attachments/inbound-persist.ts
-/**
-* Persist inbound channel / Web UI uploads under the agent home dir so the markdown
-* workspace stays user-visible; session transcripts reference stable relative paths.
-*/
 init_logger();
 const log = createLogger("InboundPersist");
-/** New layout: `<agentHome>/inbound/<session>/` — rel paths use this prefix. */
-const INBOUND_REL_ROOT = "inbound";
-function sanitizeSessionSegment(sessionKey) {
-	return sessionKey.replace(/[^a-zA-Z0-9_.-]+/g, "_").slice(0, 180) || "session";
-}
-function sanitizeFilename(name) {
-	return (name.replace(/[/\\?%*:|"<>]/g, "_").trim() || "file").slice(0, 200);
-}
-function isImageAttachment(att) {
-	return att.type === "image" || att.type === "photo" || att.mimeType?.startsWith("image/") === true;
-}
-/** Decode base64 or data-URL payload for inbound attachments (also used by voice STT). */
+/** Decode base64 or data-URL payload (composer wire + voice STT). */
 function decodeInboundAttachmentBase64(data) {
 	const trimmed = data.trim();
 	const b64 = trimmed.startsWith("data:") ? trimmed.split(/base64,/)[1] ?? trimmed : trimmed;
 	return Buffer.from(b64.replace(/\s/g, ""), "base64");
 }
-function resolveUnderRoot(root, rel, requiredPrefix) {
-	const normalized = rel.replace(/\\/g, "/").replace(/^\/+/, "");
-	if (normalized.includes("..") || !normalized.startsWith(requiredPrefix)) return null;
-	const abs = resolve(root, ...normalized.split("/"));
-	const rootResolved = resolve(root);
-	if (!abs.startsWith(rootResolved)) return null;
-	return abs;
-}
 /**
-* Write non-image attachments with binary data to disk; returns a shallow copy
-* of each attachment with `workspaceRelativePath` set (POSIX-style, `/` separators).
+* Write attachments with binary `data` to the media store; returns metadata-only refs.
 */
-async function persistInboundAttachmentsToWorkspace(agentHomeRoot, sessionKey, attachments) {
-	if (!attachments?.length) return attachments;
-	const sessionSeg = sanitizeSessionSegment(sessionKey);
-	const inboundAbs = resolve(agentHomeRoot, INBOUND_REL_ROOT, sessionSeg);
-	await mkdir(inboundAbs, { recursive: true });
+async function persistInboundAttachments(attachments, opts) {
+	if (!attachments?.length) return void 0;
+	const maxBytes = opts?.maxBytes ?? 5242880;
 	const out = [];
 	for (const att of attachments) {
-		if (att.workspaceRelativePath) {
-			out.push({ ...att });
-			continue;
-		}
-		if (isImageAttachment(att)) {
-			out.push({ ...att });
-			continue;
-		}
-		if (!att.data || att.data.length === 0) {
-			out.push({ ...att });
+		if (att.uri?.trim()) {
+			const resolved = await resolveMediaReference(att.uri.trim());
+			out.push(mediaRefFromUri(att, resolved.uri, resolved.path, resolved.bucket, resolved.id));
 			continue;
 		}
-		try {
-			const buf = decodeInboundAttachmentBase64(att.data);
-			const fname = `${randomBytes(8).toString("hex")}_${sanitizeFilename(att.name || "file")}`;
-			await writeFile(join(inboundAbs, fname), buf);
-			const workspaceRelativePath = [
-				INBOUND_REL_ROOT,
-				sessionSeg,
-				fname
-			].join("/");
-			log.debug({
-				sessionKey,
-				workspaceRelativePath,
-				bytes: buf.length
-			}, "Inbound file persisted");
-			out.push({
-				...att,
-				workspaceRelativePath,
-				size: att.size ?? buf.length
-			});
-		} catch (err) {
-			log.warn({
-				err,
-				sessionKey,
-				name: att.name
-			}, "Failed to persist inbound attachment");
-			out.push({ ...att });
-		}
+		if (!att.data || att.data.length === 0) throw new Error(`Inbound attachment "${att.name ?? "file"}" is missing data and uri`);
+		const saved = await saveMediaBuffer(decodeInboundAttachmentBase64(att.data), {
+			contentType: att.mimeType,
+			bucket: "inbound",
+			maxBytes,
+			originalFilename: att.name
+		});
+		log.debug({
+			uri: saved.uri,
+			bytes: saved.size,
+			name: att.name
+		}, "Inbound attachment persisted");
+		out.push(toMediaRef(att, saved));
 	}
-	return out;
+	return out.length ? out : void 0;
 }
-/**
-* Build transcript text for a non-image file for the LLM (includes machine-readable path lines).
-*/
-function formatInboundFileTextBlock(att, storageRootAbs) {
-	const head = `[File: ${att.name || "unknown"} (${att.mimeType || "unknown type"}, ${att.size ?? 0} bytes)]`;
-	if (!att.workspaceRelativePath) return head;
-	const rel = att.workspaceRelativePath.replace(/\\/g, "/");
-	return `${head}\nxopc-path:rel:${rel}\nxopc-path:abs:${resolve(storageRootAbs, ...rel.split("/").filter(Boolean))}`;
+/** Read attachment bytes by media URI (voice STT, tools). */
+async function readInboundAttachmentBuffer(uri) {
+	const { buffer } = await readMediaReference(uri);
+	return buffer;
 }
-/**
-* Remove inbound file transcript blocks from a string (e.g. auto session titles).
-* Matches Web UI `stripInboundFileMachineText`, plus bare `[File: …]` lines when paths are absent.
-*/
-function stripInboundFileMetadataFromText(text) {
-	if (!text.includes("[File:") && !text.includes("xopc-path:")) return text;
-	let out = text;
-	out = out.replace(/\s*\[File:[^\]]+\]\s*\r?\nxopc-path:rel:[^\r\n]+\r?\n\s*xopc-path:abs:[^\r\n]+/g, "");
-	out = out.replace(/\s*\[File:[^\]]+\]\s+xopc-path:rel:\S+\s+xopc-path:abs:\S+/g, "");
-	out = out.replace(/\s*\[File:[^\]]+\]\s*xopc-path:rel:\S+\s*xopc-path:abs:\S+/g, "");
-	out = out.replace(/\s*\[File:[^\]]+\]\s*/g, " ");
-	return out.replace(/\n{3,}/g, "\n\n").replace(/\s{2,}/g, " ").trim();
-}
-/**
-* Resolve a stored relative path under `inbound/`.
-*/
-function resolveSafeInboundFilePath(roots, relRaw) {
-	const rel = relRaw.replace(/\\/g, "/").replace(/^\/+/, "");
-	if (rel.includes("..")) return null;
-	if (rel.startsWith(`inbound/`)) return resolveUnderRoot(roots.agentHome, rel, `${INBOUND_REL_ROOT}/`);
-	return null;
+function assertMediaUri(uri) {
+	parseMediaUri(uri);
 }
 //#endregion
-export { INBOUND_REL_ROOT, decodeInboundAttachmentBase64, formatInboundFileTextBlock, persistInboundAttachmentsToWorkspace, resolveSafeInboundFilePath, stripInboundFileMetadataFromText };
+export { assertMediaUri, decodeInboundAttachmentBase64, isImageInboundAttachment, isVoiceInboundAttachment, mediaRefFromUri, persistInboundAttachments, readInboundAttachmentBuffer, toMediaRef };
 
 //# sourceMappingURL=inbound-persist.js.map

package/dist/src/channels/attachments/inbound-persist.js.map

@@ -1 +1 @@
-{"version":3,"file":"inbound-persist.js","names":[],"sources":["../../../../src/channels/attachments/inbound-persist.ts"],"sourcesContent":["/**\n * Persist inbound channel / Web UI uploads under the agent home dir so the markdown\n * workspace stays user-visible; session transcripts reference stable relative paths.\n */\n\nimport { mkdir, writeFile } from 'fs/promises';\nimport { join, resolve } from 'path';\nimport { randomBytes } from 'crypto';\nimport { createLogger } from '../../utils/logger.js';\nconst log = createLogger('InboundPersist');\n\n/** New layout: `<agentHome>/inbound/<session>/` — rel paths use this prefix. */\nexport const INBOUND_REL_ROOT = 'inbound';\n\nexport interface InboundAttachmentInput {\n  type: string;\n  mimeType?: string;\n  data?: string;\n  name?: string;\n  size?: number;\n  /** Set after persist (relative to agent home). */\n  workspaceRelativePath?: string;\n}\n\nexport type InternalAttachmentRoots = {\n  /** `…/agents/<id>/` — primary storage */\n  agentHome: string;\n};\n\nfunction sanitizeSessionSegment(sessionKey: string): string {\n  return sessionKey.replace(/[^a-zA-Z0-9_.-]+/g, '_').slice(0, 180) || 'session';\n}\n\nfunction sanitizeFilename(name: string): string {\n  const base = name.replace(/[/\\\\?%*:|\"<>]/g, '_').trim() || 'file';\n  return base.slice(0, 200);\n}\n\nfunction isImageAttachment(att: InboundAttachmentInput): boolean {\n  return att.type === 'image' || att.type === 'photo' || att.mimeType?.startsWith('image/') === true;\n}\n\n/** Decode base64 or data-URL payload for inbound attachments (also used by voice STT). */\nexport function decodeInboundAttachmentBase64(data: string): Buffer {\n  const trimmed = data.trim();\n  const b64 = trimmed.startsWith('data:') ? (trimmed.split(/base64,/)[1] ?? trimmed) : trimmed;\n  return Buffer.from(b64.replace(/\\s/g, ''), 'base64');\n}\n\nfunction resolveUnderRoot(root: string, rel: string, requiredPrefix: string): string | null {\n  const normalized = rel.replace(/\\\\/g, '/').replace(/^\\/+/, '');\n  if (normalized.includes('..') || !normalized.startsWith(requiredPrefix)) {\n    return null;\n  }\n  const abs = resolve(root, ...normalized.split('/'));\n  const rootResolved = resolve(root);\n  if (!abs.startsWith(rootResolved)) {\n    return null;\n  }\n  return abs;\n}\n\n/**\n * Write non-image attachments with binary data to disk; returns a shallow copy\n * of each attachment with `workspaceRelativePath` set (POSIX-style, `/` separators).\n */\nexport async function persistInboundAttachmentsToWorkspace(\n  agentHomeRoot: string,\n  sessionKey: string,\n  attachments: InboundAttachmentInput[] | undefined,\n): Promise<InboundAttachmentInput[] | undefined> {\n  if (!attachments?.length) return attachments;\n\n  const sessionSeg = sanitizeSessionSegment(sessionKey);\n  const inboundAbs = resolve(agentHomeRoot, INBOUND_REL_ROOT, sessionSeg);\n  await mkdir(inboundAbs, { recursive: true });\n\n  const out: InboundAttachmentInput[] = [];\n\n  for (const att of attachments) {\n    if (att.workspaceRelativePath) {\n      out.push({ ...att });\n      continue;\n    }\n    if (isImageAttachment(att)) {\n      out.push({ ...att });\n      continue;\n    }\n    if (!att.data || att.data.length === 0) {\n      out.push({ ...att });\n      continue;\n    }\n\n    try {\n      const buf = decodeInboundAttachmentBase64(att.data);\n      const id = randomBytes(8).toString('hex');\n      const fname = `${id}_${sanitizeFilename(att.name || 'file')}`;\n      const absFile = join(inboundAbs, fname);\n      await writeFile(absFile, buf);\n\n      const workspaceRelativePath = [INBOUND_REL_ROOT, sessionSeg, fname].join('/');\n\n      log.debug({ sessionKey, workspaceRelativePath, bytes: buf.length }, 'Inbound file persisted');\n\n      out.push({\n        ...att,\n        workspaceRelativePath,\n        size: att.size ?? buf.length,\n      });\n    } catch (err) {\n      log.warn({ err, sessionKey, name: att.name }, 'Failed to persist inbound attachment');\n      out.push({ ...att });\n    }\n  }\n\n  return out;\n}\n\n/**\n * Build transcript text for a non-image file for the LLM (includes machine-readable path lines).\n */\nexport function formatInboundFileTextBlock(\n  att: InboundAttachmentInput,\n  storageRootAbs: string,\n): string {\n  const name = att.name || 'unknown';\n  const mime = att.mimeType || 'unknown type';\n  const size = att.size ?? 0;\n  const head = `[File: ${name} (${mime}, ${size} bytes)]`;\n  if (!att.workspaceRelativePath) {\n    return head;\n  }\n  const rel = att.workspaceRelativePath.replace(/\\\\/g, '/');\n  const abs = resolve(storageRootAbs, ...rel.split('/').filter(Boolean));\n  return `${head}\\nxopc-path:rel:${rel}\\nxopc-path:abs:${abs}`;\n}\n\n/**\n * Remove inbound file transcript blocks from a string (e.g. auto session titles).\n * Matches Web UI `stripInboundFileMachineText`, plus bare `[File: …]` lines when paths are absent.\n */\nexport function stripInboundFileMetadataFromText(text: string): string {\n  if (!text.includes('[File:') && !text.includes('xopc-path:')) return text;\n  let out = text;\n  out = out.replace(\n    /\\s*\\[File:[^\\]]+\\]\\s*\\r?\\nxopc-path:rel:[^\\r\\n]+\\r?\\n\\s*xopc-path:abs:[^\\r\\n]+/g,\n    '',\n  );\n  out = out.replace(/\\s*\\[File:[^\\]]+\\]\\s+xopc-path:rel:\\S+\\s+xopc-path:abs:\\S+/g, '');\n  out = out.replace(/\\s*\\[File:[^\\]]+\\]\\s*xopc-path:rel:\\S+\\s*xopc-path:abs:\\S+/g, '');\n  out = out.replace(/\\s*\\[File:[^\\]]+\\]\\s*/g, ' ');\n  return out.replace(/\\n{3,}/g, '\\n\\n').replace(/\\s{2,}/g, ' ').trim();\n}\n\n/**\n * Resolve a stored relative path under `inbound/`.\n */\nexport function resolveSafeInboundFilePath(\n  roots: InternalAttachmentRoots,\n  relRaw: string,\n): string | null {\n  const rel = relRaw.replace(/\\\\/g, '/').replace(/^\\/+/, '');\n  if (rel.includes('..')) {\n    return null;\n  }\n\n  if (rel.startsWith(`${INBOUND_REL_ROOT}/`)) {\n    return resolveUnderRoot(roots.agentHome, rel, `${INBOUND_REL_ROOT}/`);\n  }\n\n  return null;\n}\n"],"mappings":";;;;;;;;;;aAQqD;AACrD,MAAM,MAAM,aAAa,iBAAiB;;AAG1C,MAAa,mBAAmB;AAiBhC,SAAS,uBAAuB,YAA4B;AAC1D,QAAO,WAAW,QAAQ,qBAAqB,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI;;AAGvE,SAAS,iBAAiB,MAAsB;AAE9C,SADa,KAAK,QAAQ,kBAAkB,IAAI,CAAC,MAAM,IAAI,QAC/C,MAAM,GAAG,IAAI;;AAG3B,SAAS,kBAAkB,KAAsC;AAC/D,QAAO,IAAI,SAAS,WAAW,IAAI,SAAS,WAAW,IAAI,UAAU,WAAW,SAAS,KAAK;;;AAIhG,SAAgB,8BAA8B,MAAsB;CAClE,MAAM,UAAU,KAAK,MAAM;CAC3B,MAAM,MAAM,QAAQ,WAAW,QAAQ,GAAI,QAAQ,MAAM,UAAU,CAAC,MAAM,UAAW;AACrF,QAAO,OAAO,KAAK,IAAI,QAAQ,OAAO,GAAG,EAAE,SAAS;;AAGtD,SAAS,iBAAiB,MAAc,KAAa,gBAAuC;CAC1F,MAAM,aAAa,IAAI,QAAQ,OAAO,IAAI,CAAC,QAAQ,QAAQ,GAAG;AAC9D,KAAI,WAAW,SAAS,KAAK,IAAI,CAAC,WAAW,WAAW,eAAe,CACrE,QAAO;CAET,MAAM,MAAM,QAAQ,MAAM,GAAG,WAAW,MAAM,IAAI,CAAC;CACnD,MAAM,eAAe,QAAQ,KAAK;AAClC,KAAI,CAAC,IAAI,WAAW,aAAa,CAC/B,QAAO;AAET,QAAO;;;;;;AAOT,eAAsB,qCACpB,eACA,YACA,aAC+C;AAC/C,KAAI,CAAC,aAAa,OAAQ,QAAO;CAEjC,MAAM,aAAa,uBAAuB,WAAW;CACrD,MAAM,aAAa,QAAQ,eAAe,kBAAkB,WAAW;AACvE,OAAM,MAAM,YAAY,EAAE,WAAW,MAAM,CAAC;CAE5C,MAAM,MAAgC,EAAE;AAExC,MAAK,MAAM,OAAO,aAAa;AAC7B,MAAI,IAAI,uBAAuB;AAC7B,OAAI,KAAK,EAAE,GAAG,KAAK,CAAC;AACpB;;AAEF,MAAI,kBAAkB,IAAI,EAAE;AAC1B,OAAI,KAAK,EAAE,GAAG,KAAK,CAAC;AACpB;;AAEF,MAAI,CAAC,IAAI,QAAQ,IAAI,KAAK,WAAW,GAAG;AACtC,OAAI,KAAK,EAAE,GAAG,KAAK,CAAC;AACpB;;AAGF,MAAI;GACF,MAAM,MAAM,8BAA8B,IAAI,KAAK;GAEnD,MAAM,QAAQ,GADH,YAAY,EAAE,CAAC,SAAS,MAChB,CAAC,GAAG,iBAAiB,IAAI,QAAQ,OAAO;AAE3D,SAAM,UADU,KAAK,YAAY,MACV,EAAE,IAAI;GAE7B,MAAM,wBAAwB;IAAC;IAAkB;IAAY;IAAM,CAAC,KAAK,IAAI;AAE7E,OAAI,MAAM;IAAE;IAAY;IAAuB,OAAO,IAAI;IAAQ,EAAE,yBAAyB;AAE7F,OAAI,KAAK;IACP,GAAG;IACH;IACA,MAAM,IAAI,QAAQ,IAAI;IACvB,CAAC;WACK,KAAK;AACZ,OAAI,KAAK;IAAE;IAAK;IAAY,MAAM,IAAI;IAAM,EAAE,uCAAuC;AACrF,OAAI,KAAK,EAAE,GAAG,KAAK,CAAC;;;AAIxB,QAAO;;;;;AAMT,SAAgB,2BACd,KACA,gBACQ;CAIR,MAAM,OAAO,UAHA,IAAI,QAAQ,UAGG,IAFf,IAAI,YAAY,eAEQ,IADxB,IAAI,QAAQ,EACqB;AAC9C,KAAI,CAAC,IAAI,sBACP,QAAO;CAET,MAAM,MAAM,IAAI,sBAAsB,QAAQ,OAAO,IAAI;AAEzD,QAAO,GAAG,KAAK,kBAAkB,IAAI,kBADzB,QAAQ,gBAAgB,GAAG,IAAI,MAAM,IAAI,CAAC,OAAO,QAAQ,CACX;;;;;;AAO5D,SAAgB,iCAAiC,MAAsB;AACrE,KAAI,CAAC,KAAK,SAAS,SAAS,IAAI,CAAC,KAAK,SAAS,aAAa,CAAE,QAAO;CACrE,IAAI,MAAM;AACV,OAAM,IAAI,QACR,mFACA,GACD;AACD,OAAM,IAAI,QAAQ,+DAA+D,GAAG;AACpF,OAAM,IAAI,QAAQ,+DAA+D,GAAG;AACpF,OAAM,IAAI,QAAQ,0BAA0B,IAAI;AAChD,QAAO,IAAI,QAAQ,WAAW,OAAO,CAAC,QAAQ,WAAW,IAAI,CAAC,MAAM;;;;;AAMtE,SAAgB,2BACd,OACA,QACe;CACf,MAAM,MAAM,OAAO,QAAQ,OAAO,IAAI,CAAC,QAAQ,QAAQ,GAAG;AAC1D,KAAI,IAAI,SAAS,KAAK,CACpB,QAAO;AAGT,KAAI,IAAI,WAAW,WAAuB,CACxC,QAAO,iBAAiB,MAAM,WAAW,KAAK,GAAG,iBAAiB,GAAG;AAGvE,QAAO"}
+{"version":3,"file":"inbound-persist.js","names":[],"sources":["../../../../src/channels/attachments/inbound-persist.ts"],"sourcesContent":["/**\n * Persist inbound uploads to the global media store (`{stateDir}/media/inbound/`).\n */\n\nimport { createLogger } from '../../utils/logger.js';\nimport {\n  MEDIA_MAX_BYTES,\n  parseMediaUri,\n  readMediaReference,\n  resolveMediaReference,\n  saveMediaBuffer,\n} from '../../media/index.js';\nimport type { InboundAttachmentInput, MediaRef } from '../../media/types.js';\nimport { mediaRefFromUri, toMediaRef } from './inbound-types.js';\n\nconst log = createLogger('InboundPersist');\n\nexport type { InboundAttachmentInput, MediaRef } from '../../media/types.js';\nexport { isImageInboundAttachment, isVoiceInboundAttachment } from './attachment-classifiers.js';\nexport { toMediaRef, mediaRefFromUri } from './inbound-types.js';\n\n/** Decode base64 or data-URL payload (composer wire + voice STT). */\nexport function decodeInboundAttachmentBase64(data: string): Buffer {\n  const trimmed = data.trim();\n  const b64 = trimmed.startsWith('data:') ? (trimmed.split(/base64,/)[1] ?? trimmed) : trimmed;\n  return Buffer.from(b64.replace(/\\s/g, ''), 'base64');\n}\n\n/**\n * Write attachments with binary `data` to the media store; returns metadata-only refs.\n */\nexport async function persistInboundAttachments(\n  attachments: InboundAttachmentInput[] | undefined,\n  opts?: { maxBytes?: number },\n): Promise<MediaRef[] | undefined> {\n  if (!attachments?.length) return undefined;\n\n  const maxBytes = opts?.maxBytes ?? MEDIA_MAX_BYTES;\n  const out: MediaRef[] = [];\n\n  for (const att of attachments) {\n    if (att.uri?.trim()) {\n      const resolved = await resolveMediaReference(att.uri.trim());\n      out.push(\n        mediaRefFromUri(att, resolved.uri, resolved.path, resolved.bucket, resolved.id),\n      );\n      continue;\n    }\n\n    if (!att.data || att.data.length === 0) {\n      throw new Error(`Inbound attachment \"${att.name ?? 'file'}\" is missing data and uri`);\n    }\n\n    const buf = decodeInboundAttachmentBase64(att.data);\n    const saved = await saveMediaBuffer(buf, {\n      contentType: att.mimeType,\n      bucket: 'inbound',\n      maxBytes,\n      originalFilename: att.name,\n    });\n\n    log.debug({ uri: saved.uri, bytes: saved.size, name: att.name }, 'Inbound attachment persisted');\n\n    out.push(toMediaRef(att, saved));\n  }\n\n  return out.length ? out : undefined;\n}\n\n/** Read attachment bytes by media URI (voice STT, tools). */\nexport async function readInboundAttachmentBuffer(uri: string): Promise<Buffer> {\n  const { buffer } = await readMediaReference(uri);\n  return buffer;\n}\n\nexport function assertMediaUri(uri: string): void {\n  parseMediaUri(uri);\n}\n"],"mappings":";;;;;;;;aAIqD;AAWrD,MAAM,MAAM,aAAa,iBAAiB;;AAO1C,SAAgB,8BAA8B,MAAsB;CAClE,MAAM,UAAU,KAAK,MAAM;CAC3B,MAAM,MAAM,QAAQ,WAAW,QAAQ,GAAI,QAAQ,MAAM,UAAU,CAAC,MAAM,UAAW;AACrF,QAAO,OAAO,KAAK,IAAI,QAAQ,OAAO,GAAG,EAAE,SAAS;;;;;AAMtD,eAAsB,0BACpB,aACA,MACiC;AACjC,KAAI,CAAC,aAAa,OAAQ,QAAO,KAAA;CAEjC,MAAM,WAAW,MAAM,YAAA;CACvB,MAAM,MAAkB,EAAE;AAE1B,MAAK,MAAM,OAAO,aAAa;AAC7B,MAAI,IAAI,KAAK,MAAM,EAAE;GACnB,MAAM,WAAW,MAAM,sBAAsB,IAAI,IAAI,MAAM,CAAC;AAC5D,OAAI,KACF,gBAAgB,KAAK,SAAS,KAAK,SAAS,MAAM,SAAS,QAAQ,SAAS,GAAG,CAChF;AACD;;AAGF,MAAI,CAAC,IAAI,QAAQ,IAAI,KAAK,WAAW,EACnC,OAAM,IAAI,MAAM,uBAAuB,IAAI,QAAQ,OAAO,2BAA2B;EAIvF,MAAM,QAAQ,MAAM,gBADR,8BAA8B,IAAI,KACP,EAAE;GACvC,aAAa,IAAI;GACjB,QAAQ;GACR;GACA,kBAAkB,IAAI;GACvB,CAAC;AAEF,MAAI,MAAM;GAAE,KAAK,MAAM;GAAK,OAAO,MAAM;GAAM,MAAM,IAAI;GAAM,EAAE,+BAA+B;AAEhG,MAAI,KAAK,WAAW,KAAK,MAAM,CAAC;;AAGlC,QAAO,IAAI,SAAS,MAAM,KAAA;;;AAI5B,eAAsB,4BAA4B,KAA8B;CAC9E,MAAM,EAAE,WAAW,MAAM,mBAAmB,IAAI;AAChD,QAAO;;AAGT,SAAgB,eAAe,KAAmB;AAChD,eAAc,IAAI"}

package/dist/src/channels/attachments/inbound-types.d.ts

@@ -0,0 +1,13 @@
+import type { InboundAttachmentInput, MediaRef } from '../../media/types.js';
+import { isImageInboundAttachment, isVoiceInboundAttachment } from './attachment-classifiers.js';
+export type { InboundAttachmentInput, MediaRef } from '../../media/types.js';
+export { isImageInboundAttachment, isVoiceInboundAttachment };
+export declare function toMediaRef(att: InboundAttachmentInput, saved: {
+    id: string;
+    bucket: MediaRef['bucket'];
+    uri: string;
+    path: string;
+    size: number;
+    contentType: string;
+}): MediaRef;
+export declare function mediaRefFromUri(att: InboundAttachmentInput, uri: string, path: string, bucket: MediaRef['bucket'], id: string): MediaRef;

package/dist/src/channels/attachments/inbound-types.js

@@ -0,0 +1,30 @@
+import { isImageInboundAttachment, isVoiceInboundAttachment } from "./attachment-classifiers.js";
+//#region src/channels/attachments/inbound-types.ts
+function toMediaRef(att, saved) {
+	return {
+		id: saved.id,
+		bucket: saved.bucket,
+		type: att.type,
+		mimeType: att.mimeType?.trim() || saved.contentType,
+		name: att.name?.trim() || "file",
+		size: att.size ?? saved.size,
+		uri: saved.uri,
+		path: saved.path
+	};
+}
+function mediaRefFromUri(att, uri, path, bucket, id) {
+	return {
+		id,
+		bucket,
+		type: att.type,
+		mimeType: att.mimeType?.trim() || "application/octet-stream",
+		name: att.name?.trim() || "file",
+		size: att.size ?? 0,
+		uri,
+		path
+	};
+}
+//#endregion
+export { isImageInboundAttachment, isVoiceInboundAttachment, mediaRefFromUri, toMediaRef };
+
+//# sourceMappingURL=inbound-types.js.map

package/dist/src/channels/attachments/inbound-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-types.js","names":[],"sources":["../../../../src/channels/attachments/inbound-types.ts"],"sourcesContent":["import type { InboundAttachmentInput, MediaRef } from '../../media/types.js';\nimport {\n  isImageInboundAttachment,\n  isVoiceInboundAttachment,\n} from './attachment-classifiers.js';\n\nexport type { InboundAttachmentInput, MediaRef } from '../../media/types.js';\nexport { isImageInboundAttachment, isVoiceInboundAttachment };\n\nexport function toMediaRef(\n  att: InboundAttachmentInput,\n  saved: { id: string; bucket: MediaRef['bucket']; uri: string; path: string; size: number; contentType: string },\n): MediaRef {\n  return {\n    id: saved.id,\n    bucket: saved.bucket,\n    type: att.type,\n    mimeType: att.mimeType?.trim() || saved.contentType,\n    name: att.name?.trim() || 'file',\n    size: att.size ?? saved.size,\n    uri: saved.uri,\n    path: saved.path,\n  };\n}\n\nexport function mediaRefFromUri(\n  att: InboundAttachmentInput,\n  uri: string,\n  path: string,\n  bucket: MediaRef['bucket'],\n  id: string,\n): MediaRef {\n  return {\n    id,\n    bucket,\n    type: att.type,\n    mimeType: att.mimeType?.trim() || 'application/octet-stream',\n    name: att.name?.trim() || 'file',\n    size: att.size ?? 0,\n    uri,\n    path,\n  };\n}\n"],"mappings":";;AASA,SAAgB,WACd,KACA,OACU;AACV,QAAO;EACL,IAAI,MAAM;EACV,QAAQ,MAAM;EACd,MAAM,IAAI;EACV,UAAU,IAAI,UAAU,MAAM,IAAI,MAAM;EACxC,MAAM,IAAI,MAAM,MAAM,IAAI;EAC1B,MAAM,IAAI,QAAQ,MAAM;EACxB,KAAK,MAAM;EACX,MAAM,MAAM;EACb;;AAGH,SAAgB,gBACd,KACA,KACA,MACA,QACA,IACU;AACV,QAAO;EACL;EACA;EACA,MAAM,IAAI;EACV,UAAU,IAAI,UAAU,MAAM,IAAI;EAClC,MAAM,IAAI,MAAM,MAAM,IAAI;EAC1B,MAAM,IAAI,QAAQ;EAClB;EACA;EACD"}

package/dist/src/channels/attachments/outbound-tts-persist.d.ts

@@ -1,14 +1,5 @@
 /**
- * Persist outbound TTS audio under `<agentHome>/tts/<session>/`.
+ * Persist outbound TTS audio to `{stateDir}/media/tts/`.
  */
-import type { InternalAttachmentRoots } from './inbound-persist.js';
-export declare const TTS_REL_ROOT = "tts";
-export declare function persistOutboundTtsAudio(agentHomeRoot: string, sessionKey: string, audioBuffer: Buffer, format: string): Promise<{
-    workspaceRelativePath: string;
-    name: string;
-    size: number;
-}>;
-/**
- * Resolve a stored relative path under `tts/`.
- */
-export declare function resolveSafeTtsFilePath(roots: InternalAttachmentRoots, relRaw: string): string | null;
+import type { MediaRef } from '../../media/types.js';
+export declare function persistOutboundTtsAudio(audioBuffer: Buffer, format: string): Promise<MediaRef>;

package/dist/src/channels/attachments/outbound-tts-persist.js

@@ -1,66 +1,46 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { join, resolve } from "path";
-import { mkdir, writeFile } from "fs/promises";
-import { randomBytes } from "crypto";
+import { saveMediaBuffer } from "../../media/store.js";
 //#region src/channels/attachments/outbound-tts-persist.ts
-/**
-* Persist outbound TTS audio under `<agentHome>/tts/<session>/`.
-*/
 init_logger();
 const log = createLogger("OutboundTtsPersist");
-const TTS_REL_ROOT = "tts";
-function sanitizeSessionSegment(sessionKey) {
-	return sessionKey.replace(/[^a-zA-Z0-9_.-]+/g, "_").slice(0, 180) || "session";
-}
 function extForFormat(format) {
 	const f = format.toLowerCase();
-	if (f === "opus" || f === "ogg") return "ogg";
-	if (f === "mp3" || f === "mpeg") return "mp3";
-	if (f === "wav") return "wav";
-	return "bin";
+	if (f === "opus" || f === "ogg") return ".ogg";
+	if (f === "mp3" || f === "mpeg") return ".mp3";
+	if (f === "wav") return ".wav";
+	return ".bin";
 }
-function resolveUnderRoot(root, rel, requiredPrefix) {
-	const normalized = rel.replace(/\\/g, "/").replace(/^\/+/, "");
-	if (normalized.includes("..") || !normalized.startsWith(requiredPrefix)) return null;
-	const abs = resolve(root, ...normalized.split("/"));
-	const rootResolved = resolve(root);
-	if (!abs.startsWith(rootResolved)) return null;
-	return abs;
+function mimeForFormat(format) {
+	const f = format.toLowerCase();
+	if (f === "opus" || f === "ogg") return "audio/ogg";
+	if (f === "mp3" || f === "mpeg") return "audio/mpeg";
+	if (f === "wav") return "audio/wav";
+	return "application/octet-stream";
 }
-async function persistOutboundTtsAudio(agentHomeRoot, sessionKey, audioBuffer, format) {
-	const sessionSeg = sanitizeSessionSegment(sessionKey);
-	const dirAbs = resolve(agentHomeRoot, "tts", sessionSeg);
-	await mkdir(dirAbs, { recursive: true });
+async function persistOutboundTtsAudio(audioBuffer, format) {
 	const ext = extForFormat(format);
-	const fname = `assist_${Date.now()}_${randomBytes(4).toString("hex")}.${ext}`;
-	await writeFile(join(dirAbs, fname), audioBuffer);
-	const workspaceRelativePath = [
-		"tts",
-		sessionSeg,
-		fname
-	].join("/");
+	const saved = await saveMediaBuffer(audioBuffer, {
+		contentType: mimeForFormat(format),
+		bucket: "tts",
+		originalFilename: `assist${ext}`
+	});
 	log.debug({
-		sessionKey,
-		workspaceRelativePath,
-		bytes: audioBuffer.length
+		uri: saved.uri,
+		bytes: saved.size
 	}, "TTS audio persisted");
 	return {
-		workspaceRelativePath,
-		name: fname,
-		size: audioBuffer.length
+		id: saved.id,
+		bucket: "tts",
+		type: "voice",
+		mimeType: saved.contentType,
+		name: saved.id,
+		size: saved.size,
+		uri: saved.uri,
+		path: saved.path
 	};
 }
-/**
-* Resolve a stored relative path under `tts/`.
-*/
-function resolveSafeTtsFilePath(roots, relRaw) {
-	const rel = relRaw.replace(/\\/g, "/").replace(/^\/+/, "");
-	if (rel.includes("..")) return null;
-	if (rel.startsWith(`tts/`)) return resolveUnderRoot(roots.agentHome, rel, `tts/`);
-	return null;
-}
 //#endregion
-export { TTS_REL_ROOT, persistOutboundTtsAudio, resolveSafeTtsFilePath };
+export { persistOutboundTtsAudio };
 
 //# sourceMappingURL=outbound-tts-persist.js.map

package/dist/src/channels/attachments/outbound-tts-persist.js.map

@@ -1 +1 @@
-{"version":3,"file":"outbound-tts-persist.js","names":[],"sources":["../../../../src/channels/attachments/outbound-tts-persist.ts"],"sourcesContent":["/**\n * Persist outbound TTS audio under `<agentHome>/tts/<session>/`.\n */\n\nimport { mkdir, writeFile } from 'fs/promises';\nimport { join, resolve } from 'path';\nimport { randomBytes } from 'crypto';\nimport { createLogger } from '../../utils/logger.js';\nimport type { InternalAttachmentRoots } from './inbound-persist.js';\n\nconst log = createLogger('OutboundTtsPersist');\n\nexport const TTS_REL_ROOT = 'tts';\n\nfunction sanitizeSessionSegment(sessionKey: string): string {\n  return sessionKey.replace(/[^a-zA-Z0-9_.-]+/g, '_').slice(0, 180) || 'session';\n}\n\nfunction extForFormat(format: string): string {\n  const f = format.toLowerCase();\n  if (f === 'opus' || f === 'ogg') return 'ogg';\n  if (f === 'mp3' || f === 'mpeg') return 'mp3';\n  if (f === 'wav') return 'wav';\n  return 'bin';\n}\n\nfunction resolveUnderRoot(root: string, rel: string, requiredPrefix: string): string | null {\n  const normalized = rel.replace(/\\\\/g, '/').replace(/^\\/+/, '');\n  if (normalized.includes('..') || !normalized.startsWith(requiredPrefix)) {\n    return null;\n  }\n  const abs = resolve(root, ...normalized.split('/'));\n  const rootResolved = resolve(root);\n  if (!abs.startsWith(rootResolved)) {\n    return null;\n  }\n  return abs;\n}\n\nexport async function persistOutboundTtsAudio(\n  agentHomeRoot: string,\n  sessionKey: string,\n  audioBuffer: Buffer,\n  format: string,\n): Promise<{\n  workspaceRelativePath: string;\n  name: string;\n  size: number;\n}> {\n  const sessionSeg = sanitizeSessionSegment(sessionKey);\n  const dirAbs = resolve(agentHomeRoot, TTS_REL_ROOT, sessionSeg);\n  await mkdir(dirAbs, { recursive: true });\n  const ext = extForFormat(format);\n  const fname = `assist_${Date.now()}_${randomBytes(4).toString('hex')}.${ext}`;\n  const absFile = join(dirAbs, fname);\n  await writeFile(absFile, audioBuffer);\n  const workspaceRelativePath = [TTS_REL_ROOT, sessionSeg, fname].join('/');\n  log.debug({ sessionKey, workspaceRelativePath, bytes: audioBuffer.length }, 'TTS audio persisted');\n  return {\n    workspaceRelativePath,\n    name: fname,\n    size: audioBuffer.length,\n  };\n}\n\n/**\n * Resolve a stored relative path under `tts/`.\n */\nexport function resolveSafeTtsFilePath(roots: InternalAttachmentRoots, relRaw: string): string | null {\n  const rel = relRaw.replace(/\\\\/g, '/').replace(/^\\/+/, '');\n  if (rel.includes('..')) {\n    return null;\n  }\n\n  if (rel.startsWith(`${TTS_REL_ROOT}/`)) {\n    return resolveUnderRoot(roots.agentHome, rel, `${TTS_REL_ROOT}/`);\n  }\n\n  return null;\n}\n"],"mappings":";;;;;;;;;aAOqD;AAGrD,MAAM,MAAM,aAAa,qBAAqB;AAE9C,MAAa,eAAe;AAE5B,SAAS,uBAAuB,YAA4B;AAC1D,QAAO,WAAW,QAAQ,qBAAqB,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI;;AAGvE,SAAS,aAAa,QAAwB;CAC5C,MAAM,IAAI,OAAO,aAAa;AAC9B,KAAI,MAAM,UAAU,MAAM,MAAO,QAAO;AACxC,KAAI,MAAM,SAAS,MAAM,OAAQ,QAAO;AACxC,KAAI,MAAM,MAAO,QAAO;AACxB,QAAO;;AAGT,SAAS,iBAAiB,MAAc,KAAa,gBAAuC;CAC1F,MAAM,aAAa,IAAI,QAAQ,OAAO,IAAI,CAAC,QAAQ,QAAQ,GAAG;AAC9D,KAAI,WAAW,SAAS,KAAK,IAAI,CAAC,WAAW,WAAW,eAAe,CACrE,QAAO;CAET,MAAM,MAAM,QAAQ,MAAM,GAAG,WAAW,MAAM,IAAI,CAAC;CACnD,MAAM,eAAe,QAAQ,KAAK;AAClC,KAAI,CAAC,IAAI,WAAW,aAAa,CAC/B,QAAO;AAET,QAAO;;AAGT,eAAsB,wBACpB,eACA,YACA,aACA,QAKC;CACD,MAAM,aAAa,uBAAuB,WAAW;CACrD,MAAM,SAAS,QAAQ,eAAA,OAA6B,WAAW;AAC/D,OAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;CACxC,MAAM,MAAM,aAAa,OAAO;CAChC,MAAM,QAAQ,UAAU,KAAK,KAAK,CAAC,GAAG,YAAY,EAAE,CAAC,SAAS,MAAM,CAAC,GAAG;AAExE,OAAM,UADU,KAAK,QAAQ,MACN,EAAE,YAAY;CACrC,MAAM,wBAAwB;;EAAe;EAAY;EAAM,CAAC,KAAK,IAAI;AACzE,KAAI,MAAM;EAAE;EAAY;EAAuB,OAAO,YAAY;EAAQ,EAAE,sBAAsB;AAClG,QAAO;EACL;EACA,MAAM;EACN,MAAM,YAAY;EACnB;;;;;AAMH,SAAgB,uBAAuB,OAAgC,QAA+B;CACpG,MAAM,MAAM,OAAO,QAAQ,OAAO,IAAI,CAAC,QAAQ,QAAQ,GAAG;AAC1D,KAAI,IAAI,SAAS,KAAK,CACpB,QAAO;AAGT,KAAI,IAAI,WAAW,OAAmB,CACpC,QAAO,iBAAiB,MAAM,WAAW,KAAK,OAAmB;AAGnE,QAAO"}
+{"version":3,"file":"outbound-tts-persist.js","names":[],"sources":["../../../../src/channels/attachments/outbound-tts-persist.ts"],"sourcesContent":["/**\n * Persist outbound TTS audio to `{stateDir}/media/tts/`.\n */\n\nimport { createLogger } from '../../utils/logger.js';\nimport { saveMediaBuffer } from '../../media/index.js';\nimport type { MediaRef } from '../../media/types.js';\n\nconst log = createLogger('OutboundTtsPersist');\n\nfunction extForFormat(format: string): string {\n  const f = format.toLowerCase();\n  if (f === 'opus' || f === 'ogg') return '.ogg';\n  if (f === 'mp3' || f === 'mpeg') return '.mp3';\n  if (f === 'wav') return '.wav';\n  return '.bin';\n}\n\nfunction mimeForFormat(format: string): string {\n  const f = format.toLowerCase();\n  if (f === 'opus' || f === 'ogg') return 'audio/ogg';\n  if (f === 'mp3' || f === 'mpeg') return 'audio/mpeg';\n  if (f === 'wav') return 'audio/wav';\n  return 'application/octet-stream';\n}\n\nexport async function persistOutboundTtsAudio(\n  audioBuffer: Buffer,\n  format: string,\n): Promise<MediaRef> {\n  const ext = extForFormat(format);\n  const saved = await saveMediaBuffer(audioBuffer, {\n    contentType: mimeForFormat(format),\n    bucket: 'tts',\n    originalFilename: `assist${ext}`,\n  });\n\n  log.debug({ uri: saved.uri, bytes: saved.size }, 'TTS audio persisted');\n\n  return {\n    id: saved.id,\n    bucket: 'tts',\n    type: 'voice',\n    mimeType: saved.contentType,\n    name: saved.id,\n    size: saved.size,\n    uri: saved.uri,\n    path: saved.path,\n  };\n}\n"],"mappings":";;;;aAIqD;AAIrD,MAAM,MAAM,aAAa,qBAAqB;AAE9C,SAAS,aAAa,QAAwB;CAC5C,MAAM,IAAI,OAAO,aAAa;AAC9B,KAAI,MAAM,UAAU,MAAM,MAAO,QAAO;AACxC,KAAI,MAAM,SAAS,MAAM,OAAQ,QAAO;AACxC,KAAI,MAAM,MAAO,QAAO;AACxB,QAAO;;AAGT,SAAS,cAAc,QAAwB;CAC7C,MAAM,IAAI,OAAO,aAAa;AAC9B,KAAI,MAAM,UAAU,MAAM,MAAO,QAAO;AACxC,KAAI,MAAM,SAAS,MAAM,OAAQ,QAAO;AACxC,KAAI,MAAM,MAAO,QAAO;AACxB,QAAO;;AAGT,eAAsB,wBACpB,aACA,QACmB;CACnB,MAAM,MAAM,aAAa,OAAO;CAChC,MAAM,QAAQ,MAAM,gBAAgB,aAAa;EAC/C,aAAa,cAAc,OAAO;EAClC,QAAQ;EACR,kBAAkB,SAAS;EAC5B,CAAC;AAEF,KAAI,MAAM;EAAE,KAAK,MAAM;EAAK,OAAO,MAAM;EAAM,EAAE,sBAAsB;AAEvE,QAAO;EACL,IAAI,MAAM;EACV,QAAQ;EACR,MAAM;EACN,UAAU,MAAM;EAChB,MAAM,MAAM;EACZ,MAAM,MAAM;EACZ,KAAK,MAAM;EACX,MAAM,MAAM;EACb"}