| |
| |
| |
| |
| |
| |
|
|
| import { isAbsolute } from 'node:path' |
| import type { Context } from '@deepseek-ai/cordis' |
| import type {} from '@deepseek-ai/dsh-client-connection' |
| import type {} from '@deepseek-ai/dsh-attachment' |
| import { FsError, type FileSystem } from '@deepseek-ai/dsh-fs' |
| import mime from 'mime-types' |
|
|
| const BASE_HEADERS = { |
| 'Cache-Control': 'private, no-store', |
| 'X-Content-Type-Options': 'nosniff', |
| |
| 'Content-Security-Policy': "sandbox; default-src 'none'", |
| } |
|
|
| async function serveFile(request: Request, fs: FileSystem, maxBytes: number): Promise<Response> { |
| const fail = (status: number, text: string): Response => |
| new Response(request.method === 'HEAD' ? null : text, { status, headers: BASE_HEADERS }) |
| const path = new URL(request.url).searchParams.get('path') |
| if (path === null || path.length === 0) return fail(400, 'missing path') |
| if (path.includes('\0') || !isAbsolute(path)) return fail(400, 'absolute path required') |
| try { |
| const target = await fs.resolve(path, { signal: request.signal }) |
| const mediaType = mime.lookup(target.displayPath) || 'application/octet-stream' |
| const headers: Record<string, string> = { |
| ...BASE_HEADERS, |
| 'Content-Type': mediaType, |
| } |
| if (request.method === 'HEAD') { |
| const info = await fs.stat(target, request.signal) |
| if (info === undefined) return fail(404, 'not found') |
| if (info.type !== 'file') return fail(403, 'not a regular file') |
| if (info.size !== undefined) { |
| if (info.size > maxBytes) return fail(413, 'file exceeds byte limit') |
| headers['Content-Length'] = String(info.size) |
| } |
| return new Response(null, { headers }) |
| } |
| const bytes = await fs.readBytes(target, request.signal, maxBytes) |
| headers['Content-Length'] = String(bytes.byteLength) |
| return new Response(bytes.slice(), { headers }) |
| } catch (error: unknown) { |
| if (!(error instanceof FsError)) throw error |
| const statuses: Partial<Record<FsError['code'], number>> = { |
| FS_NOT_FOUND: 404, |
| FS_NOT_REGULAR_FILE: 403, |
| FS_PERMISSION_DENIED: 403, |
| FS_SANDBOX_DENIED: 403, |
| FS_TOO_LARGE: 413, |
| FS_ABORTED: 499, |
| } |
| return fail(statuses[error.code] ?? 500, error.code) |
| } |
| } |
|
|
| |
| |
| |
| |
| export const SessionMediaReferences = { |
| inject: ['connection', 'fs', 'attachments'], |
| apply(ctx: Context): void { |
| const maxBytes = ctx.attachments.imageLimits.maxImageBytes |
| ctx.effect(() => ctx.connection.fetch.register({ |
| path: '/api/file', |
| methods: ['GET', 'HEAD'], |
| requestBody: 'buffered', |
| fetch: request => serveFile(request, ctx.fs, maxBytes), |
| }), 'session-controller: /api/file') |
| }, |
| } |
|
|
