clawgram 2.29.1 → 2.29.2

package/dist/actions-read.js

@@ -132,6 +132,7 @@ async function handleReadAction(ctx) {
             ? node_path_1.default.join((0, state_dir_1.resolveStateDir)(), "tmp")
             : node_path_1.default.join(node_os_1.default.tmpdir(), `clawgram-${typeof process.getuid === "function" ? process.getuid() : "user"}`);
         await (0, media_1.ensurePrivateDir)(mediaRoot);
+        await (0, media_1.sweepOrphanMediaDirs)(mediaRoot, Date.now());
         const sharedFetchDir = node_path_1.default.join(mediaRoot, "clawgram-fetched");
         const described = (0, media_1.describeMedia)(found.message?.media);
         // A PDF is not read here: the agent is handed the path for its PDF tool,

package/dist/attachments.js

@@ -81,6 +81,7 @@ async function readInboundAttachment(params) {
     if (!media || !message) {
         return undefined;
     }
+    await (0, media_1.sweepOrphanMediaDirs)(node_os_1.default.tmpdir(), Date.now());
     let downloaded;
     try {
         downloaded = await (0, media_1.downloadInboundMediaToTempFile)({

package/dist/media.js

@@ -15,6 +15,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.ORPHAN_MEDIA_DIR_TTL_MS = void 0;
 exports.describeMedia = describeMedia;
 exports.inboundMediaUnderstanding = inboundMediaUnderstanding;
 exports.fetchMediaUnderstanding = fetchMediaUnderstanding;
@@ -23,6 +24,8 @@ exports.describePrivateDirProblem = describePrivateDirProblem;
 exports.ensurePrivateDir = ensurePrivateDir;
 exports.downloadMessageMediaToFile = downloadMessageMediaToFile;
 exports.pruneFetchedMedia = pruneFetchedMedia;
+exports.pruneOrphanMediaDirs = pruneOrphanMediaDirs;
+exports.sweepOrphanMediaDirs = sweepOrphanMediaDirs;
 exports.isLocalMediaPath = isLocalMediaPath;
 exports.assertLocalMediaWithinRoots = assertLocalMediaWithinRoots;
 exports.loadOutboundMedia = loadOutboundMedia;
@@ -167,17 +170,32 @@ async function downloadInboundMediaToTempFile(params) {
         return undefined;
     }
     const dir = await mkdtemp(join(params.tmpDir, "clawgram-media-"));
-    const downloaded = await downloadMessageMediaToFile({
-        client: params.client,
-        message: params.message,
-        maxBytes: params.maxBytes,
-        dir,
-        fileNameFor: ({ extension }) => `attachment.${extension}`,
-    });
+    // The caller removes only a path it was handed. Every other way out — an
+    // empty download, a document, a throw — removes the directory here, or it
+    // stays in the temp directory for good (audit r3 V1-10, the inbound path).
+    const discard = async () => {
+        const { rm } = await import("node:fs/promises");
+        await rm(dir, { recursive: true, force: true }).catch(() => undefined);
+    };
+    let downloaded;
+    try {
+        downloaded = await downloadMessageMediaToFile({
+            client: params.client,
+            message: params.message,
+            maxBytes: params.maxBytes,
+            dir,
+            fileNameFor: ({ extension }) => `attachment.${extension}`,
+        });
+    }
+    catch (err) {
+        await discard();
+        throw err;
+    }
     // This path asks only for `inboundMediaUnderstanding`, so a document cannot
     // get here. Keep the runtime guard as the public downloader also serves the
     // explicit `fetch-media` action, which is allowed to request DOCX files.
     if (!downloaded || downloaded.understanding === "document" || downloaded.understanding === "pdf") {
+        await discard();
         return undefined;
     }
     return {
@@ -335,6 +353,57 @@ async function pruneFetchedMedia(dir, maxAgeMs, now) {
     }
     return removed;
 }
+/**
+ * A private `clawgram-media-*` directory lives for one call: the inbound
+ * reader and `fetch-media mode=read` remove it when they are done. One that is
+ * an hour old was left by a crash, or by a version before 2.29.1, which kept a
+ * directory on every error branch and every PDF read (audit r3 C2-02, V1-10).
+ */
+exports.ORPHAN_MEDIA_DIR_TTL_MS = 60 * 60 * 1000;
+const ORPHAN_SWEEP_EVERY_MS = 10 * 60 * 1000;
+const lastOrphanSweep = new Map();
+/** Removes `clawgram-media-*` directories in `root` older than `maxAgeMs`. */
+async function pruneOrphanMediaDirs(root, maxAgeMs, now) {
+    const { readdir, stat, rm } = await import("node:fs/promises");
+    const { join } = await import("node:path");
+    let entries;
+    try {
+        entries = await readdir(root);
+    }
+    catch {
+        return 0;
+    }
+    let removed = 0;
+    for (const entry of entries) {
+        if (!entry.startsWith("clawgram-media-"))
+            continue;
+        const path = join(root, entry);
+        try {
+            const info = await stat(path);
+            // In a shared /tmp another account's directory fails `rm` on the
+            // sticky bit and is skipped; only our own leftovers go.
+            if (info.isDirectory() && now - info.mtimeMs > maxAgeMs) {
+                await rm(path, { recursive: true, force: true });
+                removed += 1;
+            }
+        }
+        catch {
+            // Gone already, or not ours.
+        }
+    }
+    return removed;
+}
+/**
+ * `pruneOrphanMediaDirs` at most once per ten minutes per root: it reads the
+ * whole temp directory, and it runs on the path of every inbound attachment.
+ */
+async function sweepOrphanMediaDirs(root, now) {
+    const last = lastOrphanSweep.get(root);
+    if (last !== undefined && now - last < ORPHAN_SWEEP_EVERY_MS)
+        return 0;
+    lastOrphanSweep.set(root, now);
+    return pruneOrphanMediaDirs(root, exports.ORPHAN_MEDIA_DIR_TTL_MS, now).catch(() => 0);
+}
 function extensionFor(media, understanding) {
     if (understanding === "description") {
         if (media.mimeType === "image/png")

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "clawgram",
-  "version": "2.29.1",
+  "version": "2.29.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "clawgram",
-      "version": "2.29.1",
+      "version": "2.29.2",
       "license": "MIT",
       "dependencies": {
         "json5": "2.2.3",

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "clawgram",
   "name": "Clawgram",
   "description": "Clawgram — personal Telegram (MTProto userbot) channel for OpenClaw. Your AI assistant reads and responds as you.",
-  "version": "2.29.1",
+  "version": "2.29.2",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clawgram",
-  "version": "2.29.1",
+  "version": "2.29.2",
   "description": "Clawgram — personal Telegram (MTProto userbot) channel for OpenClaw. Your AI assistant reads and responds as you.",
   "main": "./dist/index.js",
   "scripts": {