arkclaw-webchat-cli 0.6.2__tar.gz → 0.9.0__tar.gz

{arkclaw_webchat_cli-0.6.2 → arkclaw_webchat_cli-0.9.0}/.gitignore

@@ -5,3 +5,7 @@ dist/
 build/
 .pytest_cache/
 .ruff_cache/
+
+# macOS / local agent state
+.DS_Store
+.agentkit/

{arkclaw_webchat_cli-0.6.2 → arkclaw_webchat_cli-0.9.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: arkclaw-webchat-cli
-Version: 0.6.2
+Version: 0.9.0
 Summary: CLI to chat with an ArkClaw EE space's Claw over enterprise SSO — zero permanent AK/SK.
 Author: ArkClaw Team
 Keywords: arkclaw,cli,ee,openclaw,sso,sts
@@ -14,6 +14,7 @@ Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Requires-Python: >=3.10
 Requires-Dist: keyring>=24.0
+Requires-Dist: msgpack>=1.0
 Requires-Dist: typer>=0.12.0
 Requires-Dist: websockets>=12.0
 Provides-Extra: dev
@@ -45,6 +46,9 @@ arkclaw chat ci-xxxxxxxx
 - **Chat** — interactive REPL or one-shot `-m`, streaming token-by-token, with a live "what's it doing" spinner and tool-event trace.
 - **Talk to a specific claw** — by id (`chat ci-...`) or by name (`chat 答疑助手`).
 - **Manage a claw's files** — read/write its managed workspace files (`AGENTS.md`, `SOUL.md`, `MEMORY.md`, …) with `ls` / `pull` / `push`.
+- **Upload & download any file** — push arbitrary files into the claw's *real* workspace filesystem and pull results back (a whole directory comes as a `.tar`) with `upload` / `download` / `mkdir` / `ls <path>`, over the Silk file service (needs a Silk-enabled claw).
+- **Large-product storage** — a separate IDS *netdisk* plane for big artifacts/videos: `netdisk create-space` / `ls` / `upload` / `download` / `mkdir` / `rm`.
+- **Read past conversations** — list an agent's sessions, then pull a full transcript with `arkclaw history <会话ID>` (over the `chat.history` ws RPC; `--json` to export, `-o` to a file).
 - **Fan out** — send one message to many claws in parallel.
 - **Be scripted** — every command takes `--json` (one clean `{ok,data,error}` envelope on stdout) and returns a typed exit code.
 
@@ -65,6 +69,9 @@ git clone <repo> && cd ee-claw
 uv venv && uv pip install -e .
 ```
 
+> **Contributing / hacking on the CLI?** Start with [`AGENTS.md`](./AGENTS.md) —
+> dev setup, the three gates, code map, invariants, and how to add a command/provider/transport.
+
 ---
 
 ## Quick start
@@ -105,11 +112,16 @@ straight to `arkclaw login https://your-space...`. See **[Configuration](#config
 | `arkclaw agents delete <agent>` | Delete a named agent by agentId (`a-...`) or display name. Asks for confirmation unless `--yes`; the `main` agent is protected. |
 | `arkclaw chat [TARGET] [MSG]` | Chat. `TARGET` = a claw id (`ci-...`), an agent name (from `agents`), or a profile. With `MSG` → one-shot; without → interactive REPL. `-f` attach files, `-o` write the reply, `--session NAME` name the conversation, `--approve-all` auto-approve tool runs. |
 | `arkclaw <name>` | Shortcut: `arkclaw 答疑助手` ≡ `arkclaw chat 答疑助手`. |
-| `arkclaw ls` | List the claw's managed workspace files. |
-| `arkclaw pull <name> [local]` | Download a managed file to local disk. |
-| `arkclaw push <local> [name]` | Write a local text file into a managed file. |
+| `arkclaw ls [path]` | No `path` → the claw's managed brain files. With `path` → that workspace directory over Silk (the real filesystem). |
+| `arkclaw pull <name> [local]` | Download a **managed** file to local disk. |
+| `arkclaw push <local> [name]` | Write a local text file into a **managed** file. |
+| `arkclaw upload <local> [remote]` | Upload **any** file into the claw's workspace filesystem (Silk). Defaults to the basename at the workspace root. |
+| `arkclaw download <remote> [local]` | Download a workspace file from the claw (Silk); a directory comes as `<name>.tar`. |
+| `arkclaw mkdir <path>` | Create a directory in the claw workspace (Silk; parent must exist). |
+| `arkclaw netdisk <cmd>` | IDS netdisk (large products/videos), a separate storage plane: `create-space` / `ls` / `upload` / `download` / `mkdir` / `rm`. Configured via `IDS_*` env. |
 | `arkclaw fanout "<msg>" --clawid ci-a --clawid ci-b` | Same message to many claws in parallel. |
-| `arkclaw sessions [claw]` | An agent's conversations from the server (`--agent` to pick one), newest first — resume with `chat --session <会话ID>`, fork with `--new`. Falls back to the local record when offline / a2a. |
+| `arkclaw sessions [claw]` | An agent's conversations from the server (`--agent` to pick one), newest first — resume with `chat --session <会话ID>`, read with `history <会话ID>`, fork with `--new`. Falls back to the local record when offline / a2a. |
+| `arkclaw history <session>` | Print a past conversation's full transcript (ws `chat.history`). `<session>` = a 会话ID from `sessions`, a label, or a full `agent:…` key. Tool steps hidden unless `--show-tools`; `--json` dumps every message; `-o` writes a plain-text log. openclaw only. |
 | `arkclaw profile save/use/list` | Named snapshots of the session config (multi-space / multi-claw). |
 | `arkclaw doctor` | Self-check: login freshness, keychain, pool/STS/endpoint reachability. |
 | `arkclaw schema --json` | Machine-readable command surface (for agents/tooling). |
@@ -135,12 +147,21 @@ arkclaw chat ci-xxxx -f notes.md -m "review" -o out.md   # attach context, save
 
 ---
 
-## Files
+## Files & storage
+
+The CLI moves files across **three distinct planes** — pick by what you're carrying:
+
+| Plane | Commands | What lives there |
+|---|---|---|
+| **Managed brain** | `ls` · `pull` · `push` | The claw's own config files (`AGENTS.md`, `SOUL.md`, …). A fixed allow-list, not a general store. |
+| **Workspace (Silk)** | `ls <path>` · `upload` · `download` · `mkdir` | The claw's *real* working filesystem — arbitrary files, uploads, agent outputs, subdirectories. |
+| **Netdisk (IDS)** | `netdisk …` | A separate large-object store for big products/videos, on a dedicated storage account. |
 
-`ls` / `pull` / `push` operate on a claw's **managed workspace files** — its
-"brain": `AGENTS.md`, `SOUL.md`, `MEMORY.md`, `TOOLS.md`, `IDENTITY.md`,
-`USER.md`, `HEARTBEAT.md`. (This is not a general file store — arbitrary
-filenames are rejected.)
+### 1. Managed brain files — `ls` / `pull` / `push`
+
+The claw's "brain": `AGENTS.md`, `SOUL.md`, `MEMORY.md`, `TOOLS.md`,
+`IDENTITY.md`, `USER.md`, `HEARTBEAT.md`. A fixed allow-list — arbitrary
+filenames are rejected; `push` only writes text.
 
 ```bash
 arkclaw ls                          # list them (defaults to your default claw)
@@ -150,6 +171,51 @@ arkclaw push ./agents.md AGENTS.md  # write a managed file
 arkclaw ls --clawid ci-other        # a different claw
 ```
 
+### 2. Workspace filesystem — `upload` / `download` / `mkdir` / `ls <path>`
+
+The claw's **real** working filesystem (`/root/.openclaw/workspace`), over the
+Silk file service. Paths are workspace-relative. Use it to feed an agent input
+files and to retrieve whatever it produces.
+
+```bash
+arkclaw upload ./input.png             # → workspace root (basename)
+arkclaw upload ./data.csv runs/data.csv  # → a subpath
+arkclaw mkdir runs                     # parent must exist (non-recursive)
+arkclaw ls runs                        # list a workspace directory
+arkclaw download runs/output.mp4 ./out.mp4   # pull a result back
+arkclaw download runs ./runs.tar       # a directory downloads as a .tar
+```
+
+- **Requires a Silk-enabled claw.** A claw you can chat but that isn't
+  provisioned into Silk is rejected with a clear "未启用文件服务(Silk)" error
+  (`ErrClawInstanceNotFound`); Silk runs the *same* per-user gate as chat.
+- **Upload cap** is server-side (~25 MB per file); larger uploads return a clear
+  "文件超出上传上限" error.
+- There is **no `rm`** here — workspace deletes aren't exposed as a command.
+
+### 3. Netdisk (IDS) — `netdisk …`
+
+A separate storage plane for large products/videos, on a **dedicated IDS
+account** (not your SSO identity). Configured entirely from `IDS_*` env vars
+(provisioned by the storage team). Create a space once, then pass its `SpaceID`:
+
+```bash
+arkclaw netdisk create-space my-space            # → prints the SpaceID
+arkclaw netdisk mkdir outputs --space spc-...
+arkclaw netdisk upload ./final.mp4 outputs/final.mp4 --space spc-...
+arkclaw netdisk ls outputs/ --space spc-...
+arkclaw netdisk download outputs/final.mp4 ./final.mp4 --space spc-...
+arkclaw netdisk rm outputs/final.mp4 --space spc-...   # asks unless --yes
+```
+
+`create-space` also takes `--description`; `ls` takes `--limit N` to cap entries.
+
+| Env | Purpose |
+|---|---|
+| `IDS_BASE_URL` / `IDS_REGION` / `IDS_SERVICE` / `IDS_INSTANCE_ID` | Endpoint + routing for the IDS instance. |
+| `IDS_AK` / `IDS_SK` (+ `IDS_ACCOUNT_ID`) | Static credentials for the storage account… |
+| `IDS_ROLE_TRN` | …or assume a role via SSO instead of static AK/SK. |
+
 ---
 
 ## For agents / automation
@@ -186,15 +252,18 @@ values via env:
 | `ARKCLAW_CLIENT_ID` | The CLI's public OAuth client id for the pool. |
 | `ARKCLAW_ROLE_TRN` | STS role that mints the ChatToken (openclaw). |
 | `ARKCLAW_REGION` / `ARKCLAW_SPACE_ID` | Override region / space (usually auto). |
+| `ARKCLAW_API_HOST` / `ARKCLAW_API_SERVICE` | **Advanced/testing.** Point the control-plane calls at a non-production plane (host + SigV4 service). See the note below. |
 
 Other config: `~/.arkclaw/defaults.json` (`init` answers, 0600), `~/.arkclaw/session.json` (routing, 0600), `~/.arkclaw/cmdpolicy.json` (tool-approval allow/deny), OS keychain (tokens).
 
 > **Escape hatch (admin/test):** `arkclaw login <url> --transport openclaw --static-creds` uses `VOLCENGINE_ACCESS_KEY`/`SECRET_KEY` from the env instead of SSO — convenient for CI, but it's account-level keys, not identity-through.
 
+> **Control-plane override (advanced/testing):** by default every control-plane call (chat/terminal token mints, file/fleet actions, `doctor`) targets `arkclaw.<region>.volcengineapi.com` with SigV4 service `arkclaw`. Setting `ARKCLAW_API_HOST` + `ARKCLAW_API_SERVICE` retargets them — e.g. a non-production plane. The service is also the IAM action prefix, so a non-default service needs the matching role permissions. The host receives the **signed request including live temporary credentials**, so it must be a host you trust — only `*.volcengineapi.com` is accepted.
+
 ---
 
 ## Notes
 
-- `ls`/`pull`/`push` and a bare `chat` use your **default claw** (set at login, or the last one you opened in the browser); override with `--clawid` (or `chat ci-...`).
-- File commands cover the claw's **managed** files only; arbitrary file drop isn't exposed by the API.
+- `ls`/`pull`/`push`, `upload`/`download`/`mkdir`, and a bare `chat` use your **default claw** (set at login, or the last one you opened in the browser); override with `--clawid` (or `chat ci-...`).
+- `pull`/`push` reach the claw's **managed** files; `upload`/`download` reach its **workspace filesystem** (Silk, arbitrary files); `netdisk …` is a **separate** storage plane on its own account.
 - Nothing is hardcoded per space — the CLI reads what the space serves.

{arkclaw_webchat_cli-0.6.2 → arkclaw_webchat_cli-0.9.0}/README.md

@@ -21,6 +21,9 @@ arkclaw chat ci-xxxxxxxx
 - **Chat** — interactive REPL or one-shot `-m`, streaming token-by-token, with a live "what's it doing" spinner and tool-event trace.
 - **Talk to a specific claw** — by id (`chat ci-...`) or by name (`chat 答疑助手`).
 - **Manage a claw's files** — read/write its managed workspace files (`AGENTS.md`, `SOUL.md`, `MEMORY.md`, …) with `ls` / `pull` / `push`.
+- **Upload & download any file** — push arbitrary files into the claw's *real* workspace filesystem and pull results back (a whole directory comes as a `.tar`) with `upload` / `download` / `mkdir` / `ls <path>`, over the Silk file service (needs a Silk-enabled claw).
+- **Large-product storage** — a separate IDS *netdisk* plane for big artifacts/videos: `netdisk create-space` / `ls` / `upload` / `download` / `mkdir` / `rm`.
+- **Read past conversations** — list an agent's sessions, then pull a full transcript with `arkclaw history <会话ID>` (over the `chat.history` ws RPC; `--json` to export, `-o` to a file).
 - **Fan out** — send one message to many claws in parallel.
 - **Be scripted** — every command takes `--json` (one clean `{ok,data,error}` envelope on stdout) and returns a typed exit code.
 
@@ -41,6 +44,9 @@ git clone <repo> && cd ee-claw
 uv venv && uv pip install -e .
 ```
 
+> **Contributing / hacking on the CLI?** Start with [`AGENTS.md`](./AGENTS.md) —
+> dev setup, the three gates, code map, invariants, and how to add a command/provider/transport.
+
 ---
 
 ## Quick start
@@ -81,11 +87,16 @@ straight to `arkclaw login https://your-space...`. See **[Configuration](#config
 | `arkclaw agents delete <agent>` | Delete a named agent by agentId (`a-...`) or display name. Asks for confirmation unless `--yes`; the `main` agent is protected. |
 | `arkclaw chat [TARGET] [MSG]` | Chat. `TARGET` = a claw id (`ci-...`), an agent name (from `agents`), or a profile. With `MSG` → one-shot; without → interactive REPL. `-f` attach files, `-o` write the reply, `--session NAME` name the conversation, `--approve-all` auto-approve tool runs. |
 | `arkclaw <name>` | Shortcut: `arkclaw 答疑助手` ≡ `arkclaw chat 答疑助手`. |
-| `arkclaw ls` | List the claw's managed workspace files. |
-| `arkclaw pull <name> [local]` | Download a managed file to local disk. |
-| `arkclaw push <local> [name]` | Write a local text file into a managed file. |
+| `arkclaw ls [path]` | No `path` → the claw's managed brain files. With `path` → that workspace directory over Silk (the real filesystem). |
+| `arkclaw pull <name> [local]` | Download a **managed** file to local disk. |
+| `arkclaw push <local> [name]` | Write a local text file into a **managed** file. |
+| `arkclaw upload <local> [remote]` | Upload **any** file into the claw's workspace filesystem (Silk). Defaults to the basename at the workspace root. |
+| `arkclaw download <remote> [local]` | Download a workspace file from the claw (Silk); a directory comes as `<name>.tar`. |
+| `arkclaw mkdir <path>` | Create a directory in the claw workspace (Silk; parent must exist). |
+| `arkclaw netdisk <cmd>` | IDS netdisk (large products/videos), a separate storage plane: `create-space` / `ls` / `upload` / `download` / `mkdir` / `rm`. Configured via `IDS_*` env. |
 | `arkclaw fanout "<msg>" --clawid ci-a --clawid ci-b` | Same message to many claws in parallel. |
-| `arkclaw sessions [claw]` | An agent's conversations from the server (`--agent` to pick one), newest first — resume with `chat --session <会话ID>`, fork with `--new`. Falls back to the local record when offline / a2a. |
+| `arkclaw sessions [claw]` | An agent's conversations from the server (`--agent` to pick one), newest first — resume with `chat --session <会话ID>`, read with `history <会话ID>`, fork with `--new`. Falls back to the local record when offline / a2a. |
+| `arkclaw history <session>` | Print a past conversation's full transcript (ws `chat.history`). `<session>` = a 会话ID from `sessions`, a label, or a full `agent:…` key. Tool steps hidden unless `--show-tools`; `--json` dumps every message; `-o` writes a plain-text log. openclaw only. |
 | `arkclaw profile save/use/list` | Named snapshots of the session config (multi-space / multi-claw). |
 | `arkclaw doctor` | Self-check: login freshness, keychain, pool/STS/endpoint reachability. |
 | `arkclaw schema --json` | Machine-readable command surface (for agents/tooling). |
@@ -111,12 +122,21 @@ arkclaw chat ci-xxxx -f notes.md -m "review" -o out.md   # attach context, save
 
 ---
 
-## Files
+## Files & storage
+
+The CLI moves files across **three distinct planes** — pick by what you're carrying:
+
+| Plane | Commands | What lives there |
+|---|---|---|
+| **Managed brain** | `ls` · `pull` · `push` | The claw's own config files (`AGENTS.md`, `SOUL.md`, …). A fixed allow-list, not a general store. |
+| **Workspace (Silk)** | `ls <path>` · `upload` · `download` · `mkdir` | The claw's *real* working filesystem — arbitrary files, uploads, agent outputs, subdirectories. |
+| **Netdisk (IDS)** | `netdisk …` | A separate large-object store for big products/videos, on a dedicated storage account. |
 
-`ls` / `pull` / `push` operate on a claw's **managed workspace files** — its
-"brain": `AGENTS.md`, `SOUL.md`, `MEMORY.md`, `TOOLS.md`, `IDENTITY.md`,
-`USER.md`, `HEARTBEAT.md`. (This is not a general file store — arbitrary
-filenames are rejected.)
+### 1. Managed brain files — `ls` / `pull` / `push`
+
+The claw's "brain": `AGENTS.md`, `SOUL.md`, `MEMORY.md`, `TOOLS.md`,
+`IDENTITY.md`, `USER.md`, `HEARTBEAT.md`. A fixed allow-list — arbitrary
+filenames are rejected; `push` only writes text.
 
 ```bash
 arkclaw ls                          # list them (defaults to your default claw)
@@ -126,6 +146,51 @@ arkclaw push ./agents.md AGENTS.md  # write a managed file
 arkclaw ls --clawid ci-other        # a different claw
 ```
 
+### 2. Workspace filesystem — `upload` / `download` / `mkdir` / `ls <path>`
+
+The claw's **real** working filesystem (`/root/.openclaw/workspace`), over the
+Silk file service. Paths are workspace-relative. Use it to feed an agent input
+files and to retrieve whatever it produces.
+
+```bash
+arkclaw upload ./input.png             # → workspace root (basename)
+arkclaw upload ./data.csv runs/data.csv  # → a subpath
+arkclaw mkdir runs                     # parent must exist (non-recursive)
+arkclaw ls runs                        # list a workspace directory
+arkclaw download runs/output.mp4 ./out.mp4   # pull a result back
+arkclaw download runs ./runs.tar       # a directory downloads as a .tar
+```
+
+- **Requires a Silk-enabled claw.** A claw you can chat but that isn't
+  provisioned into Silk is rejected with a clear "未启用文件服务(Silk)" error
+  (`ErrClawInstanceNotFound`); Silk runs the *same* per-user gate as chat.
+- **Upload cap** is server-side (~25 MB per file); larger uploads return a clear
+  "文件超出上传上限" error.
+- There is **no `rm`** here — workspace deletes aren't exposed as a command.
+
+### 3. Netdisk (IDS) — `netdisk …`
+
+A separate storage plane for large products/videos, on a **dedicated IDS
+account** (not your SSO identity). Configured entirely from `IDS_*` env vars
+(provisioned by the storage team). Create a space once, then pass its `SpaceID`:
+
+```bash
+arkclaw netdisk create-space my-space            # → prints the SpaceID
+arkclaw netdisk mkdir outputs --space spc-...
+arkclaw netdisk upload ./final.mp4 outputs/final.mp4 --space spc-...
+arkclaw netdisk ls outputs/ --space spc-...
+arkclaw netdisk download outputs/final.mp4 ./final.mp4 --space spc-...
+arkclaw netdisk rm outputs/final.mp4 --space spc-...   # asks unless --yes
+```
+
+`create-space` also takes `--description`; `ls` takes `--limit N` to cap entries.
+
+| Env | Purpose |
+|---|---|
+| `IDS_BASE_URL` / `IDS_REGION` / `IDS_SERVICE` / `IDS_INSTANCE_ID` | Endpoint + routing for the IDS instance. |
+| `IDS_AK` / `IDS_SK` (+ `IDS_ACCOUNT_ID`) | Static credentials for the storage account… |
+| `IDS_ROLE_TRN` | …or assume a role via SSO instead of static AK/SK. |
+
 ---
 
 ## For agents / automation
@@ -162,15 +227,18 @@ values via env:
 | `ARKCLAW_CLIENT_ID` | The CLI's public OAuth client id for the pool. |
 | `ARKCLAW_ROLE_TRN` | STS role that mints the ChatToken (openclaw). |
 | `ARKCLAW_REGION` / `ARKCLAW_SPACE_ID` | Override region / space (usually auto). |
+| `ARKCLAW_API_HOST` / `ARKCLAW_API_SERVICE` | **Advanced/testing.** Point the control-plane calls at a non-production plane (host + SigV4 service). See the note below. |
 
 Other config: `~/.arkclaw/defaults.json` (`init` answers, 0600), `~/.arkclaw/session.json` (routing, 0600), `~/.arkclaw/cmdpolicy.json` (tool-approval allow/deny), OS keychain (tokens).
 
 > **Escape hatch (admin/test):** `arkclaw login <url> --transport openclaw --static-creds` uses `VOLCENGINE_ACCESS_KEY`/`SECRET_KEY` from the env instead of SSO — convenient for CI, but it's account-level keys, not identity-through.
 
+> **Control-plane override (advanced/testing):** by default every control-plane call (chat/terminal token mints, file/fleet actions, `doctor`) targets `arkclaw.<region>.volcengineapi.com` with SigV4 service `arkclaw`. Setting `ARKCLAW_API_HOST` + `ARKCLAW_API_SERVICE` retargets them — e.g. a non-production plane. The service is also the IAM action prefix, so a non-default service needs the matching role permissions. The host receives the **signed request including live temporary credentials**, so it must be a host you trust — only `*.volcengineapi.com` is accepted.
+
 ---
 
 ## Notes
 
-- `ls`/`pull`/`push` and a bare `chat` use your **default claw** (set at login, or the last one you opened in the browser); override with `--clawid` (or `chat ci-...`).
-- File commands cover the claw's **managed** files only; arbitrary file drop isn't exposed by the API.
+- `ls`/`pull`/`push`, `upload`/`download`/`mkdir`, and a bare `chat` use your **default claw** (set at login, or the last one you opened in the browser); override with `--clawid` (or `chat ci-...`).
+- `pull`/`push` reach the claw's **managed** files; `upload`/`download` reach its **workspace filesystem** (Silk, arbitrary files); `netdisk …` is a **separate** storage plane on its own account.
 - Nothing is hardcoded per space — the CLI reads what the space serves.

{arkclaw_webchat_cli-0.6.2 → arkclaw_webchat_cli-0.9.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "arkclaw-webchat-cli"
-version = "0.6.2"
+version = "0.9.0"
 description = "CLI to chat with an ArkClaw EE space's Claw over enterprise SSO — zero permanent AK/SK."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -24,6 +24,7 @@ dependencies = [
     "typer>=0.12.0",
     "websockets>=12.0",
     "keyring>=24.0",
+    "msgpack>=1.0",
 ]
 
 [project.optional-dependencies]

{arkclaw_webchat_cli-0.6.2 → arkclaw_webchat_cli-0.9.0}/src/ee_claw/attachments.py

@@ -11,11 +11,25 @@ import pathlib
 from ee_claw.errors import ValidationError
 from ee_claw.transport.base import Attachment
 
-MAX_FILE_BYTES = 64 * 1024
-MAX_TOTAL_BYTES = 256 * 1024
+# Text attachments inline into the prompt, so they stay tight; binary ones
+# (images, pdf, …) ride the native chat.send `attachments` field and only need
+# to fit under the server's ws payload cap (~25MB; base64 inflates ×4/3).
+MAX_FILE_BYTES = 64 * 1024                 # per text file (inlined into the prompt)
+MAX_BINARY_FILE_BYTES = 10 * 1024 * 1024   # per binary file (native attachment)
+MAX_TOTAL_BYTES = 12 * 1024 * 1024         # across all attachments in one turn
 MAX_FILES = 32
 
 
+def _is_text(content: bytes) -> bool:
+    """UTF-8-decodable → treat as text (inline-able); otherwise binary (rides
+    the native attachment field as raw bytes)."""
+    try:
+        content.decode("utf-8")
+        return True
+    except UnicodeDecodeError:
+        return False
+
+
 def collect_files(paths: list[str]) -> tuple[list[Attachment], list[str]]:
     """Read files (and directories, shallow-recursively) into attachments.
     Returns ``(attachments, notices)`` — notices describe everything that was
@@ -54,11 +68,20 @@ def collect_files(paths: list[str]) -> tuple[list[Attachment], list[str]]:
         except OSError as e:
             notices.append(f"读不了 {f}: {e.__class__.__name__}")
             continue
-        if len(content) > MAX_FILE_BYTES:
-            notices.append(f"{f.name} 截断到 {MAX_FILE_BYTES // 1024}KB(原 {len(content)} 字节)")
-            content = content[:MAX_FILE_BYTES]
+        if _is_text(content):
+            # text inlines into the prompt — truncating just shortens context
+            if len(content) > MAX_FILE_BYTES:
+                notices.append(f"{f.name} 截断到 {MAX_FILE_BYTES // 1024}KB(原 {len(content)} 字节)")
+                content = content[:MAX_FILE_BYTES]
+        elif len(content) > MAX_BINARY_FILE_BYTES:
+            # NEVER truncate binary — half an image is corrupt; skip it, loudly
+            notices.append(
+                f"{f.name} 超出 {MAX_BINARY_FILE_BYTES // 1024 // 1024}MB 二进制上限,已跳过"
+                f"(原 {len(content)} 字节)"
+            )
+            continue
         if total + len(content) > MAX_TOTAL_BYTES:
-            notices.append(f"总量超出 {MAX_TOTAL_BYTES // 1024}KB,从 {f.name} 起丢弃")
+            notices.append(f"总量超出 {MAX_TOTAL_BYTES // 1024 // 1024}MB,从 {f.name} 起丢弃")
             break
         total += len(content)
         mime = mimetypes.guess_type(f.name)[0] or "application/octet-stream"

{arkclaw_webchat_cli-0.6.2 → arkclaw_webchat_cli-0.9.0}/src/ee_claw/cli.py

@@ -15,7 +15,7 @@ from typing import Any
 import typer
 
 from ee_claw import flows
-from ee_claw.errors import ArkclawError
+from ee_claw.errors import ArkclawError, ValidationError
 from ee_claw.output import Emitter
 
 app = typer.Typer(
@@ -219,19 +219,90 @@ def sessions(
     json_mode: bool = _json_opt(),
 ) -> None:
     """List an agent's conversations from the server (newest first). Resume one
-    with `arkclaw chat <claw> --session <会话ID>`, or start fresh with `--new`."""
+    with `arkclaw chat <claw> --session <会话ID>`, read one with
+    `arkclaw history <会话ID>`, or start fresh with `--new`."""
     emitter = Emitter(json_mode=json_mode)
     _run(emitter, lambda: flows.do_sessions(emitter, clawid=claw, agent=agent))
 
 
+@app.command()
+def history(
+    session: str = typer.Argument(
+        ..., help="A 会话ID from `arkclaw sessions`, a session label, or a full agent:… key."
+    ),
+    clawid: str | None = typer.Option(None, "--clawid", help="Claw instance id (ci-...)."),
+    agent: str = typer.Option("main", "--agent", help="Which agent the conversation belongs to."),
+    output: str | None = typer.Option(
+        None, "--output", "-o", help="Write the whole transcript to a file (plain text)."
+    ),
+    show_tools: bool = typer.Option(
+        False, "--show-tools", help="Also show tool calls/results (default: conversation only)."
+    ),
+    json_mode: bool = _json_opt(),
+) -> None:
+    """Read a past conversation's full transcript (ws `chat.history`). Get the
+    会话ID from `arkclaw sessions`, then `arkclaw history <会话ID>`. `--json`
+    returns every message (incl. tool steps); `-o` writes a plain-text log."""
+    emitter = Emitter(json_mode=json_mode)
+    _run(
+        emitter,
+        lambda: flows.do_history(
+            emitter, session, clawid=clawid, agent=agent, output=output, show_tools=show_tools
+        ),
+    )
+
+
 @app.command(name="ls")
 def ls_files(
+    path: str | None = typer.Argument(
+        None, help="Workspace dir to list over Silk (e.g. '.', 'sub/dir'). Omit for the claw's managed brain files."
+    ),
+    clawid: str | None = typer.Option(None, "--clawid", help="Claw instance id (ci-...)."),
+    json_mode: bool = _json_opt(),
+) -> None:
+    """List files. No PATH → the claw's managed brain files (AGENTS.md/SOUL.md/…).
+    With a PATH → that workspace directory over Silk (the real filesystem: your
+    uploads, subdirs, everything; needs a Silk-enabled claw)."""
+    emitter = Emitter(json_mode=json_mode)
+    if path is None:
+        _run(emitter, lambda: flows.do_ls(emitter, clawid=clawid))
+    else:
+        _run(emitter, lambda: flows.do_files_ls(emitter, path, clawid=clawid))
+
+
+@app.command()
+def upload(
+    local: str = typer.Argument(..., help="Local file to upload."),
+    remote: str | None = typer.Argument(None, help="Workspace path (default: basename at the workspace root)."),
     clawid: str | None = typer.Option(None, "--clawid", help="Claw instance id (ci-...)."),
     json_mode: bool = _json_opt(),
 ) -> None:
-    """List the claw's managed workspace files (AGENTS.md/SOUL.md/MEMORY.md/…)."""
+    """Upload any file into the claw workspace (Silk). Needs a Silk-enabled claw."""
     emitter = Emitter(json_mode=json_mode)
-    _run(emitter, lambda: flows.do_ls(emitter, clawid=clawid))
+    _run(emitter, lambda: flows.do_upload(emitter, local, remote, clawid=clawid))
+
+
+@app.command()
+def download(
+    remote: str = typer.Argument(..., help="Workspace path to download (a dir comes as <name>.tar)."),
+    local: str | None = typer.Argument(None, help="Local path (default: same name here)."),
+    clawid: str | None = typer.Option(None, "--clawid", help="Claw instance id (ci-...)."),
+    json_mode: bool = _json_opt(),
+) -> None:
+    """Download a workspace file (or directory as a .tar) from the claw (Silk)."""
+    emitter = Emitter(json_mode=json_mode)
+    _run(emitter, lambda: flows.do_download(emitter, remote, local, clawid=clawid))
+
+
+@app.command()
+def mkdir(
+    path: str = typer.Argument(..., help="Workspace directory to create (parent must exist)."),
+    clawid: str | None = typer.Option(None, "--clawid", help="Claw instance id (ci-...)."),
+    json_mode: bool = _json_opt(),
+) -> None:
+    """Create a directory in the claw workspace (Silk)."""
+    emitter = Emitter(json_mode=json_mode)
+    _run(emitter, lambda: flows.do_mkdir(emitter, path, clawid=clawid))
 
 
 @app.command()
@@ -346,6 +417,88 @@ def fanout(
     )
 
 
+def _space_opt() -> str:
+    return typer.Option(..., "--space", help="Netdisk SpaceID (from `netdisk create-space`).")
+
+
+netdisk_app = typer.Typer(
+    no_args_is_help=True,
+    help="IDS 网盘 (large products / videos): a separate storage plane. Configure "
+    "via IDS_* env vars (base_url/account/ak/sk/region/service/instance, from the storage team).",
+)
+app.add_typer(netdisk_app, name="netdisk")
+
+
+@netdisk_app.command("create-space")
+def netdisk_create_space(
+    name: str = typer.Argument(..., help="Space name (unique within the instance)."),
+    description: str | None = typer.Option(None, "--description"),
+    json_mode: bool = _json_opt(),
+) -> None:
+    """Create a netdisk space (returns the SpaceID for later file ops)."""
+    emitter = Emitter(json_mode=json_mode)
+    _run(emitter, lambda: flows.do_netdisk_create_space(emitter, name, description=description))
+
+
+@netdisk_app.command("ls")
+def netdisk_ls(
+    prefix: str = typer.Argument("", help="Dir prefix to list (e.g. 'outputs/'). Omit for root."),
+    space: str = _space_opt(),
+    limit: int | None = typer.Option(None, "--limit", help="Max entries to return."),
+    json_mode: bool = _json_opt(),
+) -> None:
+    """List a netdisk directory."""
+    emitter = Emitter(json_mode=json_mode)
+    _run(emitter, lambda: flows.do_netdisk_ls(emitter, space, prefix, limit=limit))
+
+
+@netdisk_app.command("upload")
+def netdisk_upload(
+    local: str = typer.Argument(..., help="Local file to upload."),
+    remote: str | None = typer.Argument(None, help="Netdisk path (default: basename)."),
+    space: str = _space_opt(),
+    json_mode: bool = _json_opt(),
+) -> None:
+    """Upload a file into a netdisk space."""
+    emitter = Emitter(json_mode=json_mode)
+    _run(emitter, lambda: flows.do_netdisk_upload(emitter, space, local, remote))
+
+
+@netdisk_app.command("download")
+def netdisk_download(
+    remote: str = typer.Argument(..., help="Netdisk file path to download."),
+    local: str | None = typer.Argument(None, help="Local path (default: same name here)."),
+    space: str = _space_opt(),
+    json_mode: bool = _json_opt(),
+) -> None:
+    """Download a netdisk file (streamed to disk)."""
+    emitter = Emitter(json_mode=json_mode)
+    _run(emitter, lambda: flows.do_netdisk_download(emitter, space, remote, local))
+
+
+@netdisk_app.command("mkdir")
+def netdisk_mkdir(
+    path: str = typer.Argument(..., help="Netdisk folder path to create."),
+    space: str = _space_opt(),
+    json_mode: bool = _json_opt(),
+) -> None:
+    """Create a folder in a netdisk space."""
+    emitter = Emitter(json_mode=json_mode)
+    _run(emitter, lambda: flows.do_netdisk_mkdir(emitter, space, path))
+
+
+@netdisk_app.command("rm")
+def netdisk_rm(
+    remote: str = typer.Argument(..., help="Netdisk file path to delete."),
+    space: str = _space_opt(),
+    yes: bool = typer.Option(False, "--yes", help="Skip the confirmation prompt."),
+    json_mode: bool = _json_opt(),
+) -> None:
+    """Delete a netdisk file (asks for confirmation unless --yes)."""
+    emitter = Emitter(json_mode=json_mode)
+    _run(emitter, lambda: flows.do_netdisk_rm(emitter, space, remote, yes=yes))
+
+
 claw_app = typer.Typer(
     no_args_is_help=True,
     help="Fleet: manage claw instances on the control plane.",
@@ -406,6 +559,61 @@ def doctor(json_mode: bool = _json_opt()) -> None:
     raise typer.Exit(code if data["healthy"] else 1)
 
 
+@app.command()
+def terminal(
+    ci_id: str | None = typer.Argument(
+        None,
+        metavar="[CI_ID]",
+        help="Claw instance id (ci-...) to open a terminal in — the runtime of the "
+        "claw you chat with. Omit to use the logged-in claw.",
+    ),
+    cmd: str | None = typer.Option(
+        None,
+        "--command",
+        "--cmd",
+        help="Command to run on attach (e.g. codex). Omit for the default shell.",
+    ),
+    detach_keys: str | None = typer.Option(
+        None,
+        "--detach-keys",
+        help="Detach key sequence as `ctrl-<letter>,…` (default: ctrl-p,ctrl-q).",
+    ),
+    no_pty: bool = typer.Option(
+        False,
+        "--no-pty",
+        help="(reserved) Non-interactive one-shot exec — not implemented yet.",
+    ),
+    json_mode: bool = _json_opt(),
+) -> None:
+    """Attach an interactive PTY in the runtime of the claw you chat with
+    (`docker exec -it` style) — run codex / any TUI in your agent's own
+    environment, using the SAME login as `arkclaw chat`. A normal exit returns 0
+    — the interactive ws can't carry the remote shell's numeric exit code."""
+    emitter = Emitter(json_mode=json_mode)
+    # Custom exit (like `doctor`): do_terminal returns a process exit code that is
+    # NOT the ExitCode taxonomy.
+    try:
+        if no_pty:
+            raise ValidationError(
+                "--no-pty(非交互一次性 exec)暂未实现。",
+                hint="去掉 --no-pty 以交互式 attach 终端。",
+            )
+        code = flows.do_terminal(
+            emitter,
+            clawid=ci_id,
+            cmd=cmd,
+            detach_keys=detach_keys,
+            json_mode=json_mode,
+        )
+    except ArkclawError as exc:
+        raise typer.Exit(emitter.fail(exc)) from exc
+    except typer.Exit:
+        raise
+    except Exception as exc:  # noqa: BLE001 — last-resort guard, still redacted
+        raise typer.Exit(emitter.fail(exc)) from exc
+    raise typer.Exit(code)
+
+
 profile_app = typer.Typer(
     no_args_is_help=True,
     help="Profiles: named snapshots of the session config (multi-pool / multi-claw).",

{arkclaw_webchat_cli-0.6.2 → arkclaw_webchat_cli-0.9.0}/src/ee_claw/config.py

@@ -268,7 +268,17 @@ def read_profile(name: str) -> SessionConfig:
     path = _profile_path(name)
     if not path.exists():
         raise ValidationError(f"profile 不存在: {name}", hint="arkclaw profile list 查看。")
-    raw = json.loads(path.read_text())
+    try:  # a corrupt profile is a recoverable "rebuild it" condition, not a crash
+        raw = json.loads(path.read_text())
+        if not isinstance(raw, dict):
+            raise ValueError("profile is not a JSON object")
+    except (ValueError, OSError) as exc:
+        # TokenError ⊂ ValidationError → callers' graceful-fallback paths catch it.
+        # No file contents in the message (no secret leak), mirroring load_config.
+        raise TokenError(
+            f"profile 文件已损坏: {name}",
+            hint="删除后重建:arkclaw profile remove <name>,再 arkclaw login。",
+        ) from exc
     fields = SessionConfig.__dataclass_fields__
     return SessionConfig(**{k: v for k, v in raw.items() if k in fields})