@ynhcj/xiaoyi-channel 0.0.30-beta → 0.0.30-next

package/dist/index.d.ts

@@ -1,5 +1,4 @@
 import type { OpenClawPluginApi } from "openclaw/plugin-sdk";
-import { xyPlugin } from "./src/channel.js";
 /**
  * Xiaoyi Channel Plugin Entry Point.
  * Exports the plugin for OpenClaw to load.
@@ -13,4 +12,3 @@ declare const plugin: {
     register(api: OpenClawPluginApi): void;
 };
 export default plugin;
-export { xyPlugin };

package/dist/index.js

@@ -1,6 +1,10 @@
 import { emptyPluginConfigSchema } from "openclaw/plugin-sdk";
 import { xyPlugin } from "./src/channel.js";
 import { setXYRuntime } from "./src/runtime.js";
+import { tryInjectSteer } from "./src/steer-injector.js";
+import { callCsplApi } from "./src/cspl/call-api.js";
+import { extractResultText, processText, parseSecurityResult, validateAndTruncateText } from "./src/cspl/utils.js";
+import { ALLOWED_TOOLS, MIN_TEXT_LENGTH, MAX_TOTAL_LENGTH, MAX_TEXT_LENGTH, STEER_ABORT_MESSAGE, } from "./src/cspl/constants.js";
 /**
  * Xiaoyi Channel Plugin Entry Point.
  * Exports the plugin for OpenClaw to load.
@@ -14,8 +18,44 @@ const plugin = {
     register(api) {
         setXYRuntime(api.runtime);
         api.registerChannel({ plugin: xyPlugin });
+        // CSPL after_tool_call hook: 监听工具结果，发送至 CSPL API 进行安全检测
+        // 如果响应为 REJECT，注入 steer 消息中止当前对话
+        api.on("after_tool_call", async (event, ctx) => {
+            if (!ALLOWED_TOOLS.includes(event.toolName)) {
+                return;
+            }
+            console.log(`[CSPL] after_tool_call triggered: toolName=${event.toolName}, sessionKey=${ctx.sessionKey ?? "none"}`);
+            try {
+                const resultText = extractResultText(event, event.toolName);
+                const resultLength = resultText.length;
+                if (resultLength <= MIN_TEXT_LENGTH || resultLength > MAX_TOTAL_LENGTH) {
+                    return;
+                }
+                // 构造 sentinel_hook 格式的 payload: { tool, output: [{ content }] }
+                const questionText = {
+                    tool: event.toolName,
+                    output: [{ content: "" }],
+                };
+                const originText = processText(resultText);
+                questionText.output[0].content = originText;
+                let finalJson = JSON.stringify(questionText);
+                if (finalJson.length > MAX_TEXT_LENGTH) {
+                    const diff = finalJson.length - MAX_TEXT_LENGTH;
+                    const { text: trimmed } = validateAndTruncateText(originText, MAX_TEXT_LENGTH - diff);
+                    questionText.output[0].content = trimmed;
+                    finalJson = JSON.stringify(questionText);
+                }
+                const response = await callCsplApi(finalJson, api.config);
+                const result = parseSecurityResult(response);
+                console.log(`[CSPL] Security result: status=${result.status}`);
+                if (result.status === "REJECT") {
+                    await tryInjectSteer(ctx.sessionKey, STEER_ABORT_MESSAGE);
+                }
+            }
+            catch (err) {
+                api.logger.error(`[CSPL] after_tool_call error: ${err}`);
+            }
+        });
     },
 };
 export default plugin;
-// Also export the plugin directly for testing
-export { xyPlugin };

package/dist/src/bot.js

@@ -1,11 +1,14 @@
 import { getXYRuntime } from "./runtime.js";
+import { setCachedContext } from "./steer-injector.js";
 import { createXYReplyDispatcher } from "./reply-dispatcher.js";
-import { parseA2AMessage, extractTextFromParts, extractFileParts, extractPushId } from "./parser.js";
+import { parseA2AMessage, extractTextFromParts, extractFileParts, extractPushId, extractTriggerData } from "./parser.js";
 import { downloadFilesFromParts } from "./file-download.js";
 import { resolveXYConfig } from "./config.js";
-import { sendStatusUpdate, sendClearContextResponse, sendTasksCancelResponse } from "./formatter.js";
+import { sendStatusUpdate, sendClearContextResponse, sendTasksCancelResponse, sendA2AResponse } from "./formatter.js";
 import { registerSession, unregisterSession, runWithSessionContext } from "./tools/session-manager.js";
 import { configManager } from "./utils/config-manager.js";
+import { addPushId } from "./utils/pushid-manager.js";
+import { getPushDataById } from "./utils/pushdata-manager.js";
 import { registerTaskId, decrementTaskIdRef, lockTaskId, unlockTaskId, hasActiveTask, } from "./task-manager.js";
 /**
  * Handle an incoming A2A message.
@@ -16,6 +19,8 @@ export async function handleXYMessage(params) {
     const { cfg, runtime, message, accountId } = params;
     const log = runtime?.log ?? console.log;
     const error = runtime?.error ?? console.error;
+    // 每次收到消息时更新缓存，供 steer 注入使用
+    setCachedContext(cfg, runtime, accountId);
     // Get runtime (already validated in monitor.ts, but get reference for use)
     const core = getXYRuntime();
     try {
@@ -57,6 +62,44 @@ export async function handleXYMessage(params) {
         }
         // Parse the A2A message (for regular messages)
         const parsed = parseA2AMessage(message);
+        // ========== 检测 Trigger 消息 ==========
+        // 如果消息中包含 Trigger 事件数据，直接返回 pushData 内容，不走正常流程
+        const triggerData = extractTriggerData(parsed.parts);
+        if (triggerData) {
+            log(`[BOT] 📌 Detected Trigger message with pushDataId: ${triggerData.pushDataId}`);
+            log(`[BOT]   - Session ID: ${parsed.sessionId}`);
+            log(`[BOT]   - Task ID: ${parsed.taskId}`);
+            try {
+                // 读取 pushData
+                const pushDataItem = await getPushDataById(triggerData.pushDataId);
+                if (!pushDataItem) {
+                    error(`[BOT] ❌ pushData not found for ID: ${triggerData.pushDataId}`);
+                    return;
+                }
+                log(`[BOT] ✅ Found pushData, sending direct response`);
+                log(`[BOT]   - pushDataId: ${pushDataItem.pushDataId}`);
+                log(`[BOT]   - time: ${pushDataItem.time}`);
+                log(`[BOT]   - content length: ${pushDataItem.dataDetail.length} chars`);
+                const config = resolveXYConfig(cfg);
+                // 直接发送响应（final=true，不走 openclaw 流程）
+                await sendA2AResponse({
+                    config,
+                    sessionId: parsed.sessionId,
+                    taskId: parsed.taskId,
+                    messageId: parsed.messageId,
+                    text: pushDataItem.dataDetail,
+                    append: false,
+                    final: true,
+                });
+                log(`[BOT] ✅ Trigger response sent successfully, exiting early`);
+                return; // 提前返回，不继续处理
+            }
+            catch (err) {
+                error(`[BOT] ❌ Failed to handle Trigger message:`, err);
+                return;
+            }
+        }
+        // ========================================
         // 🔑 检测steer模式和是否是第二条消息
         const isSteerMode = cfg.messages?.queue?.mode === "steer";
         const isSecondMessage = isSteerMode && hasActiveTask(parsed.sessionId);
@@ -81,6 +124,10 @@ export async function handleXYMessage(params) {
             log(`[BOT]   - Push ID preview: ${pushId.substring(0, 20)}...`);
             log(`[BOT]   - Full push_id: ${pushId}`);
             configManager.updatePushId(parsed.sessionId, pushId);
+            // 持久化 pushId 到本地文件（异步，不阻塞主流程）
+            addPushId(pushId).catch((err) => {
+                error(`[BOT] Failed to persist pushId:`, err);
+            });
         }
         else {
             log(`[BOT] ℹ️  No push_id found in message, will use config default`);
@@ -121,7 +168,7 @@ export async function handleXYMessage(params) {
             sessionId: parsed.sessionId,
             taskId: parsed.taskId,
             messageId: parsed.messageId,
-            text: isSecondMessage ? "新消息已接收，正在处理..." : "任务正在处理中，请稍后~",
+            text: isSecondMessage ? "新消息已接收，正在处理..." : "任务正在处理中，请稍候~",
             state: "working",
         }).catch((err) => {
             error(`Failed to send initial status update:`, err);
@@ -129,10 +176,9 @@ export async function handleXYMessage(params) {
         // Extract text and files from parts
         const text = extractTextFromParts(parsed.parts);
         const fileParts = extractFileParts(parsed.parts);
-        // Download files if present (using core's media download)
-        const mediaList = await downloadFilesFromParts(fileParts);
-        // Build media payload for inbound context (following feishu pattern)
-        const mediaPayload = buildXYMediaPayload(mediaList);
+        // Download files to local disk
+        const downloadedFiles = await downloadFilesFromParts(fileParts);
+        const mediaPayload = buildXYMediaPayload(downloadedFiles);
         // Resolve envelope format options (following feishu pattern)
         const envelopeOptions = core.channel.reply.resolveEnvelopeFormatOptions(cfg);
         // Build message body with speaker prefix (following feishu pattern)
@@ -276,6 +322,8 @@ export async function handleXYMessage(params) {
 /**
  * Build media payload for inbound context.
  * Following feishu pattern: buildFeishuMediaPayload().
+ *
+ * @param mediaList - Downloaded files with local paths
  */
 function buildXYMediaPayload(mediaList) {
     const first = mediaList[0];
@@ -284,25 +332,7 @@ function buildXYMediaPayload(mediaList) {
     return {
         MediaPath: first?.path,
         MediaType: first?.mimeType,
-        MediaUrl: first?.path,
         MediaPaths: mediaPaths.length > 0 ? mediaPaths : undefined,
-        MediaUrls: mediaPaths.length > 0 ? mediaPaths : undefined,
         MediaTypes: mediaTypes.length > 0 ? mediaTypes : undefined,
     };
 }
-/**
- * Infer OpenClaw media type from file type string.
- */
-function inferMediaType(fileType) {
-    const lower = fileType.toLowerCase();
-    if (lower.includes("image") || /\.(jpg|jpeg|png|gif|bmp|webp)$/i.test(lower)) {
-        return "image";
-    }
-    if (lower.includes("video") || /\.(mp4|avi|mov|mkv|webm)$/i.test(lower)) {
-        return "video";
-    }
-    if (lower.includes("audio") || /\.(mp3|wav|ogg|m4a)$/i.test(lower)) {
-        return "audio";
-    }
-    return "file";
-}

package/dist/src/channel.js

@@ -1,27 +1,29 @@
 import { resolveXYConfig, listXYAccountIds, getDefaultXYAccountId } from "./config.js";
 import { xyConfigSchema } from "./config-schema.js";
 import { xyOutbound } from "./outbound.js";
-import { xyOnboardingAdapter } from "./onboarding.js";
 import { locationTool } from "./tools/location-tool.js";
 import { noteTool } from "./tools/note-tool.js";
 import { searchNoteTool } from "./tools/search-note-tool.js";
 import { modifyNoteTool } from "./tools/modify-note-tool.js";
 import { calendarTool } from "./tools/calendar-tool.js";
 import { searchCalendarTool } from "./tools/search-calendar-tool.js";
-// import { searchContactTool } from "./tools/search-contact-tool.js"; // 暂时禁用
+import { searchContactTool } from "./tools/search-contact-tool.js";
 import { searchPhotoGalleryTool } from "./tools/search-photo-gallery-tool.js";
 import { uploadPhotoTool } from "./tools/upload-photo-tool.js";
 import { xiaoyiGuiTool } from "./tools/xiaoyi-gui-tool.js";
 import { callPhoneTool } from "./tools/call-phone-tool.js";
 import { searchMessageTool } from "./tools/search-message-tool.js";
+import { sendMessageTool } from "./tools/send-message-tool.js";
 import { searchFileTool } from "./tools/search-file-tool.js";
 import { uploadFileTool } from "./tools/upload-file-tool.js";
 import { createAlarmTool } from "./tools/create-alarm-tool.js";
 import { searchAlarmTool } from "./tools/search-alarm-tool.js";
 import { modifyAlarmTool } from "./tools/modify-alarm-tool.js";
 import { deleteAlarmTool } from "./tools/delete-alarm-tool.js";
-import { sendMessageTool } from "./tools/send-message-tool.js";
 import { sendFileToUserTool } from "./tools/send-file-to-user-tool.js";
+import { xiaoyiCollectionTool } from "./tools/xiaoyi-collection-tool.js";
+import { viewPushResultTool } from "./tools/view-push-result-tool.js";
+import { imageReadingTool } from "./tools/image-reading-tool.js";
 /**
  * Xiaoyi Channel Plugin for OpenClaw.
  * Implements Xiaoyi A2A protocol with dual WebSocket connections.
@@ -60,8 +62,7 @@ export const xyPlugin = {
         schema: xyConfigSchema,
     },
     outbound: xyOutbound,
-    onboarding: xyOnboardingAdapter,
-    agentTools: [locationTool, noteTool, searchNoteTool, modifyNoteTool, calendarTool, searchCalendarTool, searchPhotoGalleryTool, uploadPhotoTool, xiaoyiGuiTool, callPhoneTool, searchMessageTool, searchFileTool, uploadFileTool, createAlarmTool, searchAlarmTool, modifyAlarmTool, deleteAlarmTool, sendMessageTool, sendFileToUserTool], // searchContactTool 已暂时禁用
+    agentTools: [locationTool, noteTool, searchNoteTool, modifyNoteTool, calendarTool, searchCalendarTool, searchContactTool, searchPhotoGalleryTool, uploadPhotoTool, xiaoyiGuiTool, xiaoyiCollectionTool, callPhoneTool, searchMessageTool, sendMessageTool, searchFileTool, uploadFileTool, createAlarmTool, searchAlarmTool, modifyAlarmTool, deleteAlarmTool, sendFileToUserTool, viewPushResultTool, imageReadingTool],
     messaging: {
         normalizeTarget: (raw) => {
             const trimmed = raw.trim();
@@ -78,6 +79,22 @@ export const xyPlugin = {
             hint: "<sessionId>",
         },
     },
+    bindings: {
+        compileConfiguredBinding: ({ conversationId }) => {
+            const sessionId = conversationId.trim();
+            if (!sessionId)
+                return null;
+            return {
+                conversationId: sessionId,
+                parentConversationId: undefined,
+            };
+        },
+        matchInboundConversation: ({ compiledBinding, conversationId }) => {
+            return compiledBinding.conversationId === conversationId
+                ? { conversationId, matchPriority: 2 }
+                : null;
+        },
+    },
     reload: {
         configPrefixes: ["channels.xiaoyi-channel"],
     },
@@ -88,10 +105,9 @@ export const xyPlugin = {
             const account = resolveXYConfig(context.cfg);
             context.setStatus?.({
                 accountId: context.accountId,
-                wsUrl1: account.wsUrl1,
-                wsUrl2: account.wsUrl2,
+                wsUrl: account.wsUrl,
             });
-            context.log?.info(`[${context.accountId}] starting xiaoyi channel (wsUrl1: ${account.wsUrl1}, wsUrl2: ${account.wsUrl2})`);
+            context.log?.info(`[${context.accountId}] starting xiaoyi channel (wsUrl: ${account.wsUrl})`);
             return monitorXYProvider({
                 config: context.cfg,
                 runtime: context.runtime,

package/dist/src/client.js

@@ -23,7 +23,6 @@ export function getXYWebSocketManager(config) {
     let cached = wsManagerCache.get(cacheKey);
     if (cached && cached.isConfigMatch(config)) {
         const log = runtime?.log ?? console.log;
-        log(`[WS-MANAGER-CACHE] ✅ Reusing cached WebSocket manager: ${cacheKey}, total managers: ${wsManagerCache.size}`);
         return cached;
     }
     // Create new manager
@@ -86,32 +85,17 @@ export function diagnoseAllManagers() {
     let orphanCount = 0;
     wsManagerCache.forEach((manager, key) => {
         const diag = manager.getConnectionDiagnostics();
-        console.log(`📌 Manager: ${key}`);
-        console.log(`   Shutting down: ${diag.isShuttingDown}`);
         console.log(`   Total event listeners on manager: ${diag.totalEventListeners}`);
-        // Server 1
-        console.log(`   🔌 Server1:`);
-        console.log(`      - Exists: ${diag.server1.exists}`);
-        console.log(`      - ReadyState: ${diag.server1.readyState}`);
-        console.log(`      - State connected/ready: ${diag.server1.stateConnected}/${diag.server1.stateReady}`);
-        console.log(`      - Reconnect attempts: ${diag.server1.reconnectAttempts}`);
-        console.log(`      - Listeners on WebSocket: ${diag.server1.listenerCount}`);
-        console.log(`      - Heartbeat active: ${diag.server1.heartbeatActive}`);
-        console.log(`      - Has reconnect timer: ${diag.server1.hasReconnectTimer}`);
-        if (diag.server1.isOrphan) {
-            console.log(`      ⚠️  ORPHAN CONNECTION DETECTED!`);
-            orphanCount++;
-        }
-        // Server 2
-        console.log(`   🔌 Server2:`);
-        console.log(`      - Exists: ${diag.server2.exists}`);
-        console.log(`      - ReadyState: ${diag.server2.readyState}`);
-        console.log(`      - State connected/ready: ${diag.server2.stateConnected}/${diag.server2.stateReady}`);
-        console.log(`      - Reconnect attempts: ${diag.server2.reconnectAttempts}`);
-        console.log(`      - Listeners on WebSocket: ${diag.server2.listenerCount}`);
-        console.log(`      - Heartbeat active: ${diag.server2.heartbeatActive}`);
-        console.log(`      - Has reconnect timer: ${diag.server2.hasReconnectTimer}`);
-        if (diag.server2.isOrphan) {
+        // Connection
+        console.log(`   🔌 Connection:`);
+        console.log(`      - Exists: ${diag.connection.exists}`);
+        console.log(`      - ReadyState: ${diag.connection.readyState}`);
+        console.log(`      - State connected/ready: ${diag.connection.stateConnected}/${diag.connection.stateReady}`);
+        console.log(`      - Reconnect attempts: ${diag.connection.reconnectAttempts}`);
+        console.log(`      - Listeners on WebSocket: ${diag.connection.listenerCount}`);
+        console.log(`      - Heartbeat active: ${diag.connection.heartbeatActive}`);
+        console.log(`      - Has reconnect timer: ${diag.connection.hasReconnectTimer}`);
+        if (diag.connection.isOrphan) {
             console.log(`      ⚠️  ORPHAN CONNECTION DETECTED!`);
             orphanCount++;
         }
@@ -134,7 +118,7 @@ export function cleanupOrphanConnections() {
     let cleanedCount = 0;
     wsManagerCache.forEach((manager, key) => {
         const diag = manager.getConnectionDiagnostics();
-        if (diag.server1.isOrphan || diag.server2.isOrphan) {
+        if (diag.connection.isOrphan) {
             console.log(`🧹 Cleaning up orphan connections in manager: ${key}`);
             manager.disconnect();
             cleanedCount++;

package/dist/src/config.js

@@ -17,8 +17,8 @@ export function resolveXYConfig(cfg) {
     // Return configuration with defaults
     return {
         enabled: xyConfig.enabled ?? false,
-        wsUrl1: xyConfig.wsUrl1 ?? "ws://localhost:8765/ws/link",
-        wsUrl2: xyConfig.wsUrl2 ?? "ws://localhost:8768/ws/link",
+        // ✅ 兼容旧配置：优先使用 wsUrl，然后 wsUrl2（wsUrl1 被忽略）
+        wsUrl: xyConfig.wsUrl ?? xyConfig.wsUrl2 ?? "ws://localhost:8768/ws/link",
         apiKey: xyConfig.apiKey,
         uid: xyConfig.uid,
         agentId: xyConfig.agentId,

package/dist/src/cspl/call-api.d.ts

@@ -0,0 +1,3 @@
+import type { ClawdbotConfig } from "openclaw/plugin-sdk";
+import type { ApiResponse } from "./constants.js";
+export declare function callCsplApi(questionText: string, cfg: ClawdbotConfig): Promise<ApiResponse>;

package/dist/src/cspl/call-api.js

@@ -0,0 +1,107 @@
+// CSPL API 请求模块
+import https from "node:https";
+import { URL } from "node:url";
+import { randomBytes } from "node:crypto";
+import { getCsplConfig } from "./config.js";
+import { DEFAULT_HTTP_PORT, HTTP_STATUS_BAD_REQUEST } from "./constants.js";
+function generateTraceId() {
+    return randomBytes(16).toString("hex");
+}
+function buildHeaders(config) {
+    return {
+        "x-hag-trace-id": generateTraceId(),
+        "x-uid": config.uid,
+        "x-api-key": config.apiKey,
+        "x-request-from": config.requestFrom,
+        "x-skill-id": config.skillId,
+        "content-type": "application/json",
+    };
+}
+function buildRequestOptions(url, headers, timeout) {
+    const urlObj = new URL(url);
+    return {
+        hostname: urlObj.hostname,
+        port: urlObj.port || DEFAULT_HTTP_PORT,
+        path: urlObj.pathname,
+        method: "POST",
+        headers: headers,
+        timeout,
+    };
+}
+function parseResponse(data) {
+    if (!data?.trim())
+        throw new Error("[CSPL] API response is empty");
+    const json = JSON.parse(data);
+    if (json.retCode && json.retCode !== "0") {
+        throw new Error(`[CSPL] API error: ${json.retMsg || "unknown"}`);
+    }
+    if (!json.retCode && json.code) {
+        throw new Error(`[CSPL] Backend error: ${json.desc || "unknown"}`);
+    }
+    return json;
+}
+export async function callCsplApi(questionText, cfg) {
+    const config = getCsplConfig(cfg);
+    const headers = buildHeaders(config);
+    const payload = {
+        questionText,
+        textSource: config.textSource,
+        action: config.action,
+    };
+    // 打印请求信息
+    console.log(`[CSPL API] ==================== 发起请求 ====================`);
+    console.log(`[CSPL API] URL: ${config.api.url}`);
+    console.log(`[CSPL API] Method: POST`);
+    console.log(`[CSPL API] Headers:`);
+    console.log(`[CSPL API]   - x-hag-trace-id: ${headers["x-hag-trace-id"]}`);
+    console.log(`[CSPL API]   - x-uid: ${headers["x-uid"]}`);
+    console.log(`[CSPL API]   - x-api-key: ${headers["x-api-key"] ? "***" + headers["x-api-key"].slice(-8) : "undefined"}`);
+    console.log(`[CSPL API]   - x-request-from: ${headers["x-request-from"]}`);
+    console.log(`[CSPL API]   - x-skill-id: ${headers["x-skill-id"]}`);
+    console.log(`[CSPL API]   - content-type: ${headers["content-type"]}`);
+    console.log(`[CSPL API] Body:`);
+    console.log(`[CSPL API]   - questionText: ${questionText.substring(0, 100)}${questionText.length > 100 ? "..." : ""}`);
+    console.log(`[CSPL API]   - textSource: ${payload.textSource}`);
+    console.log(`[CSPL API]   - action: ${payload.action}`);
+    console.log(`[CSPL API] =================================================`);
+    return new Promise((resolve, reject) => {
+        const options = buildRequestOptions(config.api.url, headers, config.api.timeout);
+        const req = https.request(options, (res) => {
+            console.log(`[CSPL API] Response Status: ${res.statusCode}`);
+            console.log(`[CSPL API] Response Headers: ${JSON.stringify(res.headers)}`);
+            if (res.statusCode && res.statusCode >= HTTP_STATUS_BAD_REQUEST) {
+                reject(new Error(`[CSPL] HTTP error: ${res.statusCode}`));
+                return;
+            }
+            let data = "";
+            res.on("data", (chunk) => {
+                data += chunk;
+            });
+            res.on("end", () => {
+                try {
+                    const result = parseResponse(data);
+                    console.log(`[CSPL API] ✅ 请求成功`);
+                    console.log(`[CSPL API] Response Body: ${data.substring(0, 200)}${data.length > 200 ? "..." : ""}`);
+                    console.log(`[CSPL API] =================================================`);
+                    resolve(result);
+                }
+                catch (e) {
+                    console.error(`[CSPL API] ❌ 请求失败: ${e instanceof Error ? e.message : String(e)}`);
+                    console.error(`[CSPL API] Response Body: ${data}`);
+                    reject(e);
+                }
+            });
+        });
+        req.on("error", (error) => {
+            console.error(`[CSPL API] ❌ 请求错误: ${error instanceof Error ? error.message : String(error)}`);
+            reject(error);
+        });
+        req.on("timeout", () => {
+            console.error(`[CSPL API] ⏰ 请求超时 (${config.api.timeout}ms)`);
+            req.destroy();
+            reject(new Error("[CSPL] Request timeout"));
+        });
+        req.write(JSON.stringify(payload));
+        req.end();
+    });
+}

package/dist/src/cspl/config.d.ts

@@ -0,0 +1,19 @@
+import type { ClawdbotConfig } from "openclaw/plugin-sdk";
+export interface ApiConfig {
+    url: string;
+    timeout: number;
+}
+export interface CsplConfig {
+    api: ApiConfig;
+    uid: string;
+    apiKey: string;
+    skillId: string;
+    requestFrom: string;
+    textSource: string;
+    action: string;
+}
+/**
+ * 构建 CSPL 配置。uid 和 apiKey 复用 XYChannelConfig，避免重复配置。
+ * serviceUrl 从 .xiaoyienv 文件读取，skillId 写死在常量中。
+ */
+export declare function getCsplConfig(cfg: ClawdbotConfig): CsplConfig;

package/dist/src/cspl/config.js

@@ -0,0 +1,50 @@
+// CSPL Hook 配置管理
+// uid 和 apiKey 复用 XYChannelConfig，skillId 写死在常量中
+import { resolveXYConfig } from "../config.js";
+import { CSPL_STATIC_CONFIG, API_URL_SUFFIX, ENV_FILE_PATH } from "./constants.js";
+import fs from "node:fs";
+import { logger } from "../utils/logger.js";
+let cachedConfig = null;
+function readServiceUrl() {
+    if (!fs.existsSync(ENV_FILE_PATH)) {
+        throw new Error(`[CSPL] Environment file not found: ${ENV_FILE_PATH}`);
+    }
+    const envData = fs.readFileSync(ENV_FILE_PATH, "utf-8");
+    for (const line of envData.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith("#"))
+            continue;
+        const eqIdx = trimmed.indexOf("=");
+        if (eqIdx === -1)
+            continue;
+        const key = trimmed.substring(0, eqIdx).trim();
+        const value = trimmed.substring(eqIdx + 1).trim();
+        if (key === "SERVICE_URL" && value)
+            return value;
+    }
+    throw new Error("[CSPL] Missing SERVICE_URL in env file");
+}
+/**
+ * 构建 CSPL 配置。uid 和 apiKey 复用 XYChannelConfig，避免重复配置。
+ * serviceUrl 从 .xiaoyienv 文件读取，skillId 写死在常量中。
+ */
+export function getCsplConfig(cfg) {
+    if (cachedConfig)
+        return cachedConfig;
+    const xyConfig = resolveXYConfig(cfg);
+    const serviceUrl = readServiceUrl();
+    cachedConfig = {
+        api: {
+            url: `${serviceUrl}${API_URL_SUFFIX}`,
+            timeout: CSPL_STATIC_CONFIG.api.timeout,
+        },
+        uid: xyConfig.uid,
+        apiKey: xyConfig.apiKey,
+        skillId: CSPL_STATIC_CONFIG.skillId,
+        requestFrom: CSPL_STATIC_CONFIG.requestFrom,
+        textSource: CSPL_STATIC_CONFIG.textSource,
+        action: CSPL_STATIC_CONFIG.action,
+    };
+    logger.log("[CSPL] Config loaded (uid/apiKey from XYChannelConfig)");
+    return cachedConfig;
+}

package/dist/src/cspl/constants.d.ts

@@ -0,0 +1,43 @@
+export interface HttpHeaders {
+    "x-hag-trace-id": string;
+    "x-uid": string;
+    "x-api-key": string;
+    "x-request-from": string;
+    "x-skill-id": string;
+    "content-type": string;
+}
+export interface ApiPayload {
+    questionText: string;
+    textSource: string;
+    action: string;
+}
+export interface ApiResponse {
+    data?: {
+        securityResult?: string;
+    };
+    retCode?: string;
+    retMsg?: string;
+    code?: string;
+    desc?: string;
+    [key: string]: any;
+}
+export declare const MIN_TEXT_LENGTH = 0;
+export declare const MAX_TEXT_LENGTH = 4096;
+export declare const MAX_TOTAL_LENGTH = 40960;
+export declare const regex: RegExp;
+export declare const DEFAULT_HTTP_PORT = 443;
+export declare const HTTP_STATUS_BAD_REQUEST = 400;
+export declare const ENV_FILE_PATH = "/home/sandbox/.openclaw/.xiaoyienv";
+export declare const API_URL_SUFFIX = "/celia-claw/v1/rest-api/skill/execute";
+export declare const REQUIRED_ENV_VARS: string[];
+export declare const ALLOWED_TOOLS: string[];
+export declare const CSPL_STATIC_CONFIG: {
+    readonly api: {
+        readonly timeout: 5000;
+    };
+    readonly skillId: "skill-scope";
+    readonly requestFrom: "openclaw";
+    readonly textSource: "question";
+    readonly action: "TOOL_OUTPUT_SCAN";
+};
+export declare const STEER_ABORT_MESSAGE = "\u5F53\u524D\u884C\u4E3A\u5B58\u5728\u5B89\u5168\u9690\u60A3\uFF0C\u7EC8\u6B62\u6240\u6709\u64CD\u4F5C\uFF0C\u5E76\u4E14\u5728\u6700\u7EC8\u56DE\u590D\u4E2D\u8BF4\u660E\uFF0C\u8BC6\u522B\u5230\u5F53\u524D\u6D41\u7A0B\u4E2D\u5B58\u5728\u6F5C\u5728\u5B89\u5168\u98CE\u9669\uFF0C\u5DF2\u5E2E\u60A8\u4E2D\u6B62\u5F53\u524D\u6D41\u7A0B\uFF0C\u8BF7\u6E05\u7A7A\u4E0A\u4E0B\u6587\u540E\u91CD\u8BD5";

package/dist/src/cspl/constants.js

@@ -0,0 +1,22 @@
+// CSPL Hook 常量与类型定义
+export const MIN_TEXT_LENGTH = 0;
+export const MAX_TEXT_LENGTH = 4096;
+export const MAX_TOTAL_LENGTH = 40960;
+export const regex = /[^\u4e00-\u9fa5a-zA-Z0-9\s\.,!?;:，。！？；：""\'\'（）()\[\]【】]/;
+export const DEFAULT_HTTP_PORT = 443;
+export const HTTP_STATUS_BAD_REQUEST = 400;
+export const ENV_FILE_PATH = "/home/sandbox/.openclaw/.xiaoyienv";
+export const API_URL_SUFFIX = "/celia-claw/v1/rest-api/skill/execute";
+export const REQUIRED_ENV_VARS = ["PERSONAL-API-KEY", "PERSONAL-UID", "SERVICE_URL"];
+// 工具白名单
+export const ALLOWED_TOOLS = ["web_fetch", "read", "pdf"];
+// 静态配置（非敏感，敏感值从 ENV 文件读取）
+export const CSPL_STATIC_CONFIG = {
+    api: { timeout: 5000 },
+    skillId: "skill-scope",
+    requestFrom: "openclaw",
+    textSource: "question",
+    action: "TOOL_OUTPUT_SCAN",
+};
+// Steer 注入常量
+export const STEER_ABORT_MESSAGE = "当前行为存在安全隐患，终止所有操作，并且在最终回复中说明，识别到当前流程中存在潜在安全风险，已帮您中止当前流程，请清空上下文后重试";

package/dist/src/cspl/utils.d.ts

@@ -0,0 +1,10 @@
+export declare function filterText(text: string): string;
+export declare function validateAndTruncateText(text: string, maxLength: number): {
+    text: string;
+    truncated: boolean;
+};
+export declare function extractResultText(event: any, toolName: string): string;
+export declare function processText(resultText: string): string;
+export declare function parseSecurityResult(response: any): {
+    status: "ACCEPT" | "REJECT";
+};