mirror of
https://github.com/openclaw/openclaw.git
synced 2026-05-08 05:10:41 +00:00
538605ff44
* refactor: extract filesystem safety primitives * refactor: use fs-safe for file access helpers * refactor: reuse fs-safe for media reads * refactor: use fs-safe for image reads * refactor: reuse fs-safe in qqbot media opener * refactor: reuse fs-safe for local media checks * refactor: consume cleaner fs-safe api * refactor: align fs-safe json option names * fix: preserve fs-safe migration contracts * refactor: use fs-safe primitive subpaths * refactor: use grouped fs-safe subpaths * refactor: align fs-safe api usage * refactor: adapt private state store api * chore: refresh proof gate * refactor: follow fs-safe json api split * refactor: follow reduced fs-safe surface * build: default fs-safe python helper off * fix: preserve fs-safe plugin sdk aliases * refactor: consolidate fs-safe usage * refactor: unify fs-safe store usage * refactor: trim fs-safe temp workspace usage * refactor: hide low-level fs-safe primitives * build: use published fs-safe package * fix: preserve outbound recovery durability after rebase * chore: refresh pr checks
71 lines
2.4 KiB
TypeScript
71 lines
2.4 KiB
TypeScript
import fs from "node:fs";
|
|
import path from "node:path";
|
|
import { resolveHomeRelativePath } from "../infra/home-dir.js";
|
|
import { isPathInside } from "../infra/path-guards.js";
|
|
|
|
export const TRAJECTORY_RUNTIME_CAPTURE_MAX_BYTES = 10 * 1024 * 1024;
|
|
export const TRAJECTORY_RUNTIME_FILE_MAX_BYTES = 50 * 1024 * 1024;
|
|
export const TRAJECTORY_RUNTIME_EVENT_MAX_BYTES = 256 * 1024;
|
|
|
|
type TrajectoryPointerOpenFlagConstants = Pick<
|
|
typeof fs.constants,
|
|
"O_CREAT" | "O_TRUNC" | "O_WRONLY"
|
|
> &
|
|
Partial<Pick<typeof fs.constants, "O_NOFOLLOW">>;
|
|
|
|
export function safeTrajectorySessionFileName(sessionId: string): string {
|
|
const safe = sessionId.replaceAll(/[^A-Za-z0-9_-]/g, "_").slice(0, 120);
|
|
return /[A-Za-z0-9]/u.test(safe) ? safe : "session";
|
|
}
|
|
|
|
export function resolveTrajectoryPointerOpenFlags(
|
|
constants: TrajectoryPointerOpenFlagConstants = fs.constants,
|
|
): number {
|
|
const noFollow = constants.O_NOFOLLOW;
|
|
return (
|
|
constants.O_CREAT |
|
|
constants.O_TRUNC |
|
|
constants.O_WRONLY |
|
|
(typeof noFollow === "number" ? noFollow : 0)
|
|
);
|
|
}
|
|
|
|
function resolveContainedPath(baseDir: string, fileName: string): string {
|
|
const resolvedBase = path.resolve(baseDir);
|
|
const resolvedFile = path.resolve(resolvedBase, fileName);
|
|
if (resolvedFile === resolvedBase || !isPathInside(resolvedBase, resolvedFile)) {
|
|
throw new Error("Trajectory file path escaped its configured directory");
|
|
}
|
|
return resolvedFile;
|
|
}
|
|
|
|
export function resolveTrajectoryFilePath(params: {
|
|
env?: NodeJS.ProcessEnv;
|
|
sessionFile?: string;
|
|
sessionId: string;
|
|
}): string {
|
|
const env = params.env ?? process.env;
|
|
const dirOverride = env.OPENCLAW_TRAJECTORY_DIR?.trim();
|
|
if (dirOverride) {
|
|
return resolveContainedPath(
|
|
resolveHomeRelativePath(dirOverride),
|
|
`${safeTrajectorySessionFileName(params.sessionId)}.jsonl`,
|
|
);
|
|
}
|
|
if (!params.sessionFile) {
|
|
return path.join(
|
|
process.cwd(),
|
|
`${safeTrajectorySessionFileName(params.sessionId)}.trajectory.jsonl`,
|
|
);
|
|
}
|
|
return params.sessionFile.endsWith(".jsonl")
|
|
? `${params.sessionFile.slice(0, -".jsonl".length)}.trajectory.jsonl`
|
|
: `${params.sessionFile}.trajectory.jsonl`;
|
|
}
|
|
|
|
export function resolveTrajectoryPointerFilePath(sessionFile: string): string {
|
|
return sessionFile.endsWith(".jsonl")
|
|
? `${sessionFile.slice(0, -".jsonl".length)}.trajectory-path.json`
|
|
: `${sessionFile}.trajectory-path.json`;
|
|
}
|