grix-connector 3.33.2 → 3.34.0

package/openclaw-plugin/index.js

@@ -2489,7 +2489,10 @@ var IpcAuditProducer = class {
     try {
       child = fork(this.workerPath, [], {
         stdio: ["ignore", "ignore", "ignore", "ipc"],
-        serialization: "json"
+        serialization: "json",
+        // ForkOptions 类型定义缺 windowsHide（Node 运行时实际支持），无控制台父进程
+        // 下缺省会新建可见控制台窗口，故加类型断言补上。
+        windowsHide: true
       });
     } catch (error) {
       this.diagnostic({
@@ -3834,7 +3837,7 @@ function isTailnetIPv4(addr) {
 }
 function detectViaCLI() {
   return new Promise((resolve4) => {
-    execFile2("tailscale", ["ip", "-4"], { timeout: 3e3 }, (err2, stdout) => {
+    execFile2("tailscale", ["ip", "-4"], { timeout: 3e3, windowsHide: true }, (err2, stdout) => {
       if (err2) {
         resolve4(void 0);
         return;
@@ -7383,7 +7386,7 @@ function createAppendOnlyReplyStream(params) {
 
 // src/openclaw/audit-runtime.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { stat as stat2, readFile as readFile4 } from "node:fs/promises";
+import { open as open2, readFile as readFile4 } from "node:fs/promises";
 import { dirname as dirname8, join as join11 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 
@@ -7803,6 +7806,7 @@ var TURN_SCOPE_SUPPORTED_PROVIDERS = /* @__PURE__ */ new Set([
   "cursor",
   "opencode",
   "deepseek-harness",
+  "agy",
   "openclaw"
 ]);
 var AuditTurnScopeUnsupportedError = class extends Error {
@@ -8258,6 +8262,41 @@ function outcomeForStatus(status) {
   return status === "canceled" ? "cancelled" : "failed";
 }
 
+// src/audit/core/transcript-fingerprint.ts
+import { createHash as createHash2 } from "node:crypto";
+var READ_CHUNK_BYTES = 64 * 1024;
+async function hashFilePrefixes(handle, lengths) {
+  const uniqueLengths = [...new Set(lengths)].sort((left, right) => left - right);
+  if (uniqueLengths.some((length) => !Number.isSafeInteger(length) || length < 0)) {
+    throw new Error("Transcript prefix lengths must be non-negative safe integers");
+  }
+  const digests = new Map(uniqueLengths.map((length) => [
+    length,
+    createHash2("sha256").update(String(length)).update("\0")
+  ]));
+  const maxLength = uniqueLengths.at(-1) ?? 0;
+  const chunk = Buffer.allocUnsafe(
+    Math.min(READ_CHUNK_BYTES, Math.max(1, maxLength))
+  );
+  let position = 0;
+  while (position < maxLength) {
+    const requested = Math.min(chunk.length, maxLength - position);
+    const { bytesRead } = await handle.read(chunk, 0, requested, position);
+    if (bytesRead === 0) {
+      throw new Error(`Transcript ended before prefix offset ${maxLength}`);
+    }
+    for (const [length, digest] of digests) {
+      if (position >= length) continue;
+      digest.update(chunk.subarray(0, Math.min(bytesRead, length - position)));
+    }
+    position += bytesRead;
+  }
+  return new Map([...digests].map(([length, digest]) => [
+    length,
+    digest.digest("hex")
+  ]));
+}
+
 // src/openclaw/audit-runtime.ts
 function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -8273,12 +8312,29 @@ async function resolveTranscriptPath(storePath, sessionKey) {
     return void 0;
   }
 }
-async function fileSize(path7) {
+async function fileSnapshot(path7, comparisonLength) {
   if (!path7) return void 0;
+  const handle = await open2(path7, "r").catch(() => void 0);
+  if (!handle) return void 0;
   try {
-    return (await stat2(path7)).size;
+    const source = await handle.stat();
+    const lengths = [source.size];
+    if (comparisonLength !== void 0 && Number.isSafeInteger(comparisonLength) && comparisonLength >= 0 && comparisonLength <= source.size) {
+      lengths.push(comparisonLength);
+    }
+    const fingerprints = await hashFilePrefixes(handle, lengths);
+    const prefixFingerprint = fingerprints.get(source.size);
+    if (!prefixFingerprint) return void 0;
+    return {
+      ...comparisonLength === void 0 ? {} : { comparisonFingerprint: fingerprints.get(comparisonLength) },
+      identity: `${source.dev}:${source.ino}`,
+      prefixFingerprint,
+      size: source.size
+    };
   } catch {
     return void 0;
+  } finally {
+    await handle.close();
   }
 }
 async function captureOpenClawAuditBoundary(input) {
@@ -8286,23 +8342,42 @@ async function captureOpenClawAuditBoundary(input) {
     input.sessionStorePath,
     input.routeSessionKey
   );
-  const transcriptStartOffset = await fileSize(transcriptPath);
+  const transcriptSnapshot = await fileSnapshot(transcriptPath);
   return {
     adapterType: "openclaw",
     ...input,
     ...transcriptPath ? { transcriptPath } : {},
-    ...transcriptStartOffset === void 0 ? {} : { transcriptStartOffset }
+    ...transcriptSnapshot === void 0 ? {} : {
+      transcriptFileIdentity: transcriptSnapshot.identity,
+      transcriptPrefixFingerprint: transcriptSnapshot.prefixFingerprint,
+      transcriptStartOffset: transcriptSnapshot.size
+    }
   };
 }
 async function closeOpenClawAuditBoundary(boundary) {
-  const transcriptPath = typeof boundary.transcriptPath === "string" ? boundary.transcriptPath : await resolveTranscriptPath(
+  const capturedTranscriptPath = typeof boundary.transcriptPath === "string" ? boundary.transcriptPath : void 0;
+  const currentTranscriptPath = await resolveTranscriptPath(
     boundary.sessionStorePath,
     boundary.routeSessionKey
   );
-  const transcriptEndOffset = await fileSize(transcriptPath);
+  const transcriptPath = currentTranscriptPath ?? capturedTranscriptPath;
+  const capturedIdentity = typeof boundary.transcriptFileIdentity === "string" ? boundary.transcriptFileIdentity : void 0;
+  const capturedPrefixFingerprint = typeof boundary.transcriptPrefixFingerprint === "string" ? boundary.transcriptPrefixFingerprint : void 0;
+  const capturedStartOffset = typeof boundary.transcriptStartOffset === "number" ? boundary.transcriptStartOffset : void 0;
+  const transcriptSnapshot = await fileSnapshot(
+    transcriptPath,
+    capturedStartOffset
+  );
+  const currentPrefixFingerprint = transcriptSnapshot?.comparisonFingerprint;
+  const transcriptReset = currentTranscriptPath !== void 0 && currentTranscriptPath !== capturedTranscriptPath || capturedIdentity !== void 0 && transcriptSnapshot !== void 0 && transcriptSnapshot.identity !== capturedIdentity || capturedStartOffset !== void 0 && transcriptSnapshot !== void 0 && transcriptSnapshot.size < capturedStartOffset || capturedPrefixFingerprint !== void 0 && transcriptSnapshot !== void 0 && currentPrefixFingerprint !== capturedPrefixFingerprint;
   return {
     ...transcriptPath ? { transcriptPath } : {},
-    ...transcriptEndOffset === void 0 ? {} : { transcriptEndOffset }
+    ...transcriptReset ? { transcriptStartOffset: 0 } : {},
+    ...transcriptSnapshot === void 0 ? {} : {
+      transcriptFileIdentity: transcriptSnapshot.identity,
+      transcriptPrefixFingerprint: transcriptSnapshot.prefixFingerprint,
+      transcriptEndOffset: transcriptSnapshot.size
+    }
   };
 }
 function openClawAuditConfigurationError(error) {
@@ -11602,7 +11677,7 @@ function registerGrixAdminCli(params) {
 }
 
 // src/openclaw/skill-tools/delegated-skill-tool.ts
-import { createHash as createHash2 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 var DelegatedSkillToolSchema = {
   type: "object",
   additionalProperties: false,
@@ -11648,7 +11723,7 @@ function buildSkillTaskMessage(params) {
   ].join("\n");
 }
 function buildInternalIdempotencyKey(params) {
-  const digest = createHash2("sha256").update(params.spec.name).update("\n").update(params.toolCallId).update("\n").update(params.subagentSessionKey).update("\n").update(params.task).digest("hex");
+  const digest = createHash3("sha256").update(params.spec.name).update("\n").update(params.toolCallId).update("\n").update(params.subagentSessionKey).update("\n").update(params.task).digest("hex");
   return `plugin:${params.spec.name}:subagent:${digest}`;
 }
 function createDelegatedSkillTool(params) {
@@ -12100,7 +12175,7 @@ function buildConversationCard(params) {
 }
 
 // src/openclaw/egg/package-downloader.ts
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 var PackageDownloadError = class extends Error {
   constructor(message) {
     super(`[egg:download] ${message}`);
@@ -12119,7 +12194,7 @@ async function downloadPackage(params) {
     const arrayBuffer = await response.arrayBuffer();
     const buffer = Buffer.from(arrayBuffer);
     if (expectedHash) {
-      const actualHash = createHash3(hashAlgorithm).update(buffer).digest("hex");
+      const actualHash = createHash4(hashAlgorithm).update(buffer).digest("hex");
       if (actualHash !== expectedHash.toLowerCase()) {
         throw new PackageDownloadError(
           `hash mismatch: expected ${expectedHash}, got ${actualHash}`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "grix-connector",
-  "version": "3.33.2",
+  "version": "3.34.0",
   "description": "Connect local AI coding agents (Claude, Codex, Gemini, Qwen, DeepSeek, Cursor, OpenCode, Pi, OpenHuman, Reasonix) to the Grix scheduling platform. Also serves as an OpenClaw plugin for Grix channel transport.",
   "type": "module",
   "main": "dist/index.js",