linco-connect 1.1.2 → 1.1.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "linco-connect",
-  "version": "1.1.2",
+  "version": "1.1.4",
   "description": "自研 IM 桥接多 Agent 服务",
   "main": "server.js",
   "bin": {

package/src/agents/codex.js

@@ -232,6 +232,7 @@ function ensureThread(session) {
       threadId: session.agentSessionId,
       cwd: session.workspace,
       approvalPolicy: 'untrusted',
+      ...buildCodexThreadSandbox(session),
     }).then(result => {
       return session.agentSessionId;
     }).catch(err => {
@@ -250,6 +251,7 @@ function startNewThread(session, agentConfig) {
     cwd: session.workspace,
     model: agentConfig.model || null,
     approvalPolicy: 'untrusted',
+    ...buildCodexThreadSandbox(session),
   }).then(result => {
     const threadId = result?.thread?.id || result?.id || result?.threadId;
     if (threadId) {
@@ -359,6 +361,37 @@ function sendJsonRpc(child, message) {
   }
 }
 
+function buildCodexThreadSandbox(session) {
+  const writableRoots = [session.workspace, session.outboxDir].filter(Boolean);
+  return {
+    sandbox: 'workspace-write',
+    config: {
+      sandbox_mode: 'workspace-write',
+      sandbox_workspace_write: {
+        writable_roots: [...new Set(writableRoots)],
+        network_access: false,
+        exclude_tmpdir_env_var: false,
+        exclude_slash_tmp: false,
+      },
+    },
+  };
+}
+
+function buildCodexPermissionGrant(session) {
+  const writableRoots = [session.outboxDir].filter(Boolean);
+  return {
+    fileSystem: {
+      read: null,
+      write: writableRoots,
+      entries: writableRoots.map(root => ({
+        path: { type: 'path', path: root },
+        access: 'write',
+      })),
+    },
+    network: { enabled: false },
+  };
+}
+
 function handleServerRequest(message, session) {
   const method = message.method || '';
   const params = message.params || {};
@@ -434,7 +467,7 @@ function handleServerRequest(message, session) {
     sendJsonRpc(session.codexAppServer, {
       jsonrpc: '2.0',
       id: message.id,
-      result: { permissions: { fileSystem: { entries: [] }, network: { enabled: false } }, scope: 'session' },
+      result: { permissions: buildCodexPermissionGrant(session), scope: 'session' },
     });
     return;
   }

package/src/agents/openclaw.js

@@ -395,7 +395,7 @@ function createOpenClawProcessHandle(session, client) {
 }
 
 function resolveOpenClawAgentId(input, session, agentConfig) {
-  const messageAgentId = readInputMeta(input, 'openclawAgentId') || readInputMeta(input, 'agentId');
+  const messageAgentId = readInputMeta(input, 'openclawAgentId');
   return String(
     messageAgentId ||
     session.openclawAgentId ||
@@ -517,7 +517,10 @@ function readInputMeta(input, key) {
     }
     return '';
   }
-  return input && typeof input === 'object' ? input[key] : '';
+  if (input && typeof input === 'object') {
+    return input[key] || input._lincoMeta?.[key] || '';
+  }
+  return '';
 }
 
 function extractMessageText(message) {
@@ -609,4 +612,7 @@ module.exports = {
   resolvePendingDanger,
   resolvePendingPermission,
   stop,
+  _internal: {
+    resolveOpenClawAgentId,
+  },
 };

package/src/imConnector.js

@@ -517,7 +517,6 @@ function isDuplicateInbound(msg) {
 function resolveOpenClawAgentIdFromMessage(msg, session, agentConfig, config) {
   return String(
     msg.openclawAgentId ||
-    msg.agentId ||
     session.openclawAgentId ||
     agentConfig.openclawAgentId ||
     config.agents?.openclaw?.openclawAgentId ||
@@ -564,4 +563,7 @@ function safeUrlForLog(value) {
 module.exports = {
   startImConnector,
   startImConnectors,
+  _internal: {
+    resolveOpenClawAgentIdFromMessage,
+  },
 };