@agimon-ai/po-core 0.0.0-alpha.0

package/dist/src/services/publicFileShares/index.cjs

@@ -0,0 +1,192 @@
+const require_runtime = require("../../../_virtual/_rolldown/runtime.cjs");
+const require_packageApi = require("../../schemas/packageApi.cjs");
+const require_sessionFiles = require("../../constants/sessionFiles.cjs");
+const require_index = require("../sessionAttachments/index.cjs");
+let node_crypto = require("node:crypto");
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+let node_stream = require("node:stream");
+//#region src/services/publicFileShares/index.ts
+/**
+* Short-lived public links to one session file, so a remote MCP server can fetch
+* what the model was asked to hand it.
+*
+* The link is the only credential, so only its hash is kept, and every way a
+* link can fail answers the same 404. A file is pinned by identity when the
+* link is minted and reopened when it is served: a path that now names another
+* file, or reaches it through a new symlink, is refused rather than followed.
+*/
+/** Public tunnel path prefix; the token is the only segment after it. */
+const PUBLIC_FILE_SHARE_PREFIX = "/mcp-file/";
+const TOKEN_BYTES = 32;
+const TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/u;
+const SHARE_TTL_MS = 6e5;
+const SHARE_DOWNLOADS = 3;
+const MAX_LIVE_SHARES_PER_SESSION = 16;
+const OPEN_FLAGS = node_fs.default.constants.O_RDONLY | node_fs.default.constants.O_NOFOLLOW;
+function tokenDigest(token) {
+	return (0, node_crypto.createHash)("sha256").update(token).digest("base64url");
+}
+function notFound() {
+	return Response.json({ error: "Not found." }, { status: 404 });
+}
+/** RFC 8187 value for `filename*`: encodeURIComponent leaves a few characters the grammar forbids. */
+function contentDispositionName(fileName) {
+	return encodeURIComponent(fileName).replace(/['()*]/gu, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`);
+}
+/** True when filePath sits strictly below the real root with no segment that starts with a dot. */
+async function containedIn(root, filePath) {
+	let realRoot;
+	try {
+		realRoot = await node_fs.default.promises.realpath(root);
+	} catch {
+		return false;
+	}
+	const relative = node_path.default.relative(realRoot, filePath);
+	return relative !== "" && !node_path.default.isAbsolute(relative) && relative.split(node_path.default.sep).every((segment) => !segment.startsWith("."));
+}
+/** The real path of a shareable file: inside the session cwd or its attachment root, never through a dot segment. */
+async function resolveShareable(request, environment) {
+	const refused = /* @__PURE__ */ new Error(`"${request.path}" is not a file in this session's working directory or attachments.`);
+	if (request.path === "" || request.path.includes("\0") || request.path.split(/[\\/]/u).some((segment) => segment === "." || segment === "..")) throw refused;
+	let filePath;
+	try {
+		filePath = await node_fs.default.promises.realpath(node_path.default.resolve(request.cwd, request.path));
+	} catch {
+		throw refused;
+	}
+	const roots = [request.cwd];
+	try {
+		roots.push(require_index.sessionAttachmentRoot(request.sessionId, environment));
+	} catch {}
+	for (const root of roots) if (await containedIn(root, filePath)) return filePath;
+	throw refused;
+}
+/**
+* Opens a regular file without following a final symlink, then proves the handle is
+* still the file at that real path: a parent swapped for a symlink changes the real
+* path, and a replaced file changes the identity. Resolves undefined, with nothing
+* left open, when either check fails.
+*/
+async function openPinned(filePath) {
+	let handle;
+	try {
+		handle = await node_fs.default.promises.open(filePath, OPEN_FLAGS);
+	} catch {
+		return;
+	}
+	try {
+		const stat = await handle.stat();
+		const named = await node_fs.default.promises.lstat(filePath);
+		if (stat.isFile() && named.dev === stat.dev && named.ino === stat.ino && await node_fs.default.promises.realpath(filePath) === filePath) return {
+			handle,
+			stat
+		};
+	} catch {}
+	await handle.close();
+}
+function createPublicFileShares(options) {
+	const environment = options.environment ?? process.env;
+	const shares = /* @__PURE__ */ new Map();
+	const authorized = (share) => !share.revoked && Date.now() < share.expiresAt && share.revision === options.publicOriginRevision() && options.publicOrigin() !== void 0;
+	const live = (share) => authorized(share) && share.downloadsLeft > 0;
+	return {
+		async mint(request) {
+			const origin = options.publicOrigin();
+			const revision = options.publicOriginRevision();
+			if (origin === void 0) throw new Error(require_packageApi.DOOM_SHARE_FILE_REMOTE_OFF_MESSAGE);
+			const filePath = await resolveShareable(request, environment);
+			const opened = await openPinned(filePath);
+			if (opened === void 0) throw new Error(`"${request.path}" is not a regular file Po can share.`);
+			const { stat } = opened;
+			await opened.handle.close();
+			if (stat.size > 26214400) throw new Error(`"${request.path}" is larger than the 25 MB file sharing limit.`);
+			for (const [key, share] of shares) if (!live(share)) shares.delete(key);
+			if ([...shares.values()].filter((share) => share.sessionId === request.sessionId).length >= MAX_LIVE_SHARES_PER_SESSION) throw new Error(`This session already shares ${String(MAX_LIVE_SHARES_PER_SESSION)} files. Retry after a tool call finishes.`);
+			const token = (0, node_crypto.randomBytes)(TOKEN_BYTES).toString("base64url");
+			const key = tokenDigest(token);
+			const fileName = node_path.default.basename(filePath);
+			const share = {
+				sessionId: request.sessionId,
+				filePath,
+				fileName,
+				dev: stat.dev,
+				ino: stat.ino,
+				size: stat.size,
+				mtimeMs: stat.mtimeMs,
+				revision,
+				expiresAt: Date.now() + SHARE_TTL_MS,
+				downloadsLeft: SHARE_DOWNLOADS,
+				revoked: false
+			};
+			shares.set(key, share);
+			options.onNotice(`file share: published "${fileName}" for ${request.label} on the remote-access tunnel.`);
+			return {
+				url: `${origin}${PUBLIC_FILE_SHARE_PREFIX}${token}`,
+				fileName,
+				mimeType: require_sessionFiles.SESSION_FILE_CONTENT_TYPES[node_path.default.extname(fileName).toLowerCase()] ?? "application/octet-stream",
+				size: stat.size,
+				expiresAt: share.expiresAt,
+				maxDownloads: SHARE_DOWNLOADS,
+				revoke: () => {
+					share.revoked = true;
+					shares.delete(key);
+				}
+			};
+		},
+		async serve(token, method) {
+			if (method !== "GET" && method !== "HEAD" || !TOKEN_PATTERN.test(token)) return notFound();
+			const key = tokenDigest(token);
+			const share = shares.get(key);
+			if (share === void 0) return notFound();
+			if (!live(share)) {
+				shares.delete(key);
+				return notFound();
+			}
+			if (method === "GET") {
+				share.downloadsLeft -= 1;
+				if (share.downloadsLeft === 0) shares.delete(key);
+			}
+			const opened = await openPinned(share.filePath);
+			if (opened === void 0 || opened.stat.dev !== share.dev || opened.stat.ino !== share.ino || opened.stat.size !== share.size || opened.stat.mtimeMs !== share.mtimeMs) {
+				await opened?.handle.close();
+				shares.delete(key);
+				options.onNotice(`file share: refused "${share.fileName}" because the file changed after it was shared.`);
+				return notFound();
+			}
+			if (!authorized(share)) {
+				await opened.handle.close();
+				shares.delete(key);
+				return notFound();
+			}
+			const headers = {
+				"content-type": "application/octet-stream",
+				"content-length": String(share.size),
+				"content-disposition": `attachment; filename*=UTF-8''${contentDispositionName(share.fileName)}`,
+				"x-content-type-options": "nosniff",
+				"content-security-policy": "sandbox; default-src 'none'",
+				"cross-origin-resource-policy": "same-origin",
+				"cache-control": "no-store, private",
+				"referrer-policy": "no-referrer",
+				"accept-ranges": "none",
+				"x-robots-tag": "noindex"
+			};
+			if (method === "HEAD" || share.size === 0) {
+				await opened.handle.close();
+				return new Response(method === "HEAD" ? null : /* @__PURE__ */ new Uint8Array(), { headers });
+			}
+			const body = node_stream.Readable.toWeb(opened.handle.createReadStream({
+				start: 0,
+				end: share.size - 1
+			}));
+			return new Response(body, { headers });
+		}
+	};
+}
+//#endregion
+exports.PUBLIC_FILE_SHARE_PREFIX = PUBLIC_FILE_SHARE_PREFIX;
+exports.createPublicFileShares = createPublicFileShares;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/publicFileShares/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["fs","createHash","path","sessionAttachmentRoot","DOOM_SHARE_FILE_REMOTE_OFF_MESSAGE","randomBytes","SESSION_FILE_CONTENT_TYPES","Readable"],"sources":["../../../../src/services/publicFileShares/index.ts"],"sourcesContent":["import { createHash, randomBytes } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { Readable } from 'node:stream';\n\nimport {\n  MAX_SESSION_FILE_BYTES,\n  SESSION_FILE_CONTENT_TYPES,\n  SESSION_FILE_DEFAULT_CONTENT_TYPE,\n} from '../../constants/sessionFiles';\nimport { DOOM_SHARE_FILE_REMOTE_OFF_MESSAGE, type DoomSharedFile } from '../../schemas/packageApi';\nimport { sessionAttachmentRoot } from '../sessionAttachments';\n\n/**\n * Short-lived public links to one session file, so a remote MCP server can fetch\n * what the model was asked to hand it.\n *\n * The link is the only credential, so only its hash is kept, and every way a\n * link can fail answers the same 404. A file is pinned by identity when the\n * link is minted and reopened when it is served: a path that now names another\n * file, or reaches it through a new symlink, is refused rather than followed.\n */\n\n/** Public tunnel path prefix; the token is the only segment after it. */\nexport const PUBLIC_FILE_SHARE_PREFIX = '/mcp-file/';\n\nconst TOKEN_BYTES = 32;\nconst TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/u;\nconst SHARE_TTL_MS = 10 * 60 * 1000;\nconst SHARE_DOWNLOADS = 3;\nconst MAX_LIVE_SHARES_PER_SESSION = 16;\nconst OPEN_FLAGS = fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW;\n\nexport interface PublicFileShareRequest {\n  sessionId: string;\n  cwd: string;\n  /** Relative to cwd, or absolute. */\n  path: string;\n  /** Who the file is for, for the host's notice. */\n  label: string;\n}\n\nexport interface PublicFileShares {\n  mint(request: PublicFileShareRequest): Promise<DoomSharedFile>;\n  serve(token: string, method: string): Promise<Response>;\n}\n\nexport interface PublicFileSharesOptions {\n  publicOrigin(): string | undefined;\n  /** Bumped whenever the tunnel goes away; a link minted under another revision is dead. */\n  publicOriginRevision(): number;\n  /** Never receives a token or a link. */\n  onNotice(message: string): void;\n  /** Locates the attachment root; defaults to the process environment, as the upload route does. */\n  environment?: Readonly<Record<string, string | undefined>>;\n}\n\ninterface Share {\n  sessionId: string;\n  filePath: string;\n  fileName: string;\n  dev: number;\n  ino: number;\n  size: number;\n  mtimeMs: number;\n  revision: number;\n  expiresAt: number;\n  downloadsLeft: number;\n  revoked: boolean;\n}\n\nfunction tokenDigest(token: string): string {\n  return createHash('sha256').update(token).digest('base64url');\n}\n\nfunction notFound(): Response {\n  return Response.json({ error: 'Not found.' }, { status: 404 });\n}\n\n/** RFC 8187 value for `filename*`: encodeURIComponent leaves a few characters the grammar forbids. */\nfunction contentDispositionName(fileName: string): string {\n  return encodeURIComponent(fileName).replace(\n    /['()*]/gu,\n    (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`,\n  );\n}\n\n/** True when filePath sits strictly below the real root with no segment that starts with a dot. */\nasync function containedIn(root: string, filePath: string): Promise<boolean> {\n  let realRoot: string;\n  try {\n    realRoot = await fs.promises.realpath(root);\n  } catch {\n    return false;\n  }\n  const relative = path.relative(realRoot, filePath);\n  return (\n    relative !== '' &&\n    !path.isAbsolute(relative) &&\n    relative.split(path.sep).every((segment) => !segment.startsWith('.'))\n  );\n}\n\n/** The real path of a shareable file: inside the session cwd or its attachment root, never through a dot segment. */\nasync function resolveShareable(\n  request: PublicFileShareRequest,\n  environment: Readonly<Record<string, string | undefined>>,\n): Promise<string> {\n  const refused = new Error(`\"${request.path}\" is not a file in this session's working directory or attachments.`);\n  if (\n    request.path === '' ||\n    request.path.includes('\\0') ||\n    request.path.split(/[\\\\/]/u).some((segment) => segment === '.' || segment === '..')\n  )\n    throw refused;\n  let filePath: string;\n  try {\n    filePath = await fs.promises.realpath(path.resolve(request.cwd, request.path));\n  } catch {\n    throw refused;\n  }\n  const roots = [request.cwd];\n  try {\n    roots.push(sessionAttachmentRoot(request.sessionId, environment));\n  } catch {\n    // An id that cannot hold attachments only has its working directory.\n  }\n  for (const root of roots) if (await containedIn(root, filePath)) return filePath;\n  throw refused;\n}\n\n/**\n * Opens a regular file without following a final symlink, then proves the handle is\n * still the file at that real path: a parent swapped for a symlink changes the real\n * path, and a replaced file changes the identity. Resolves undefined, with nothing\n * left open, when either check fails.\n */\nasync function openPinned(filePath: string): Promise<{ handle: fs.promises.FileHandle; stat: fs.Stats } | undefined> {\n  let handle: fs.promises.FileHandle;\n  try {\n    handle = await fs.promises.open(filePath, OPEN_FLAGS);\n  } catch {\n    return undefined;\n  }\n  try {\n    const stat = await handle.stat();\n    const named = await fs.promises.lstat(filePath);\n    if (\n      stat.isFile() &&\n      named.dev === stat.dev &&\n      named.ino === stat.ino &&\n      (await fs.promises.realpath(filePath)) === filePath\n    )\n      return { handle, stat };\n  } catch {\n    // Treated like a mismatch below.\n  }\n  await handle.close();\n  return undefined;\n}\n\nexport function createPublicFileShares(options: PublicFileSharesOptions): PublicFileShares {\n  const environment = options.environment ?? process.env;\n  const shares = new Map<string, Share>();\n\n  const authorized = (share: Share): boolean =>\n    !share.revoked &&\n    Date.now() < share.expiresAt &&\n    share.revision === options.publicOriginRevision() &&\n    options.publicOrigin() !== undefined;\n  const live = (share: Share): boolean => authorized(share) && share.downloadsLeft > 0;\n\n  return {\n    async mint(request) {\n      const origin = options.publicOrigin();\n      const revision = options.publicOriginRevision();\n      if (origin === undefined) throw new Error(DOOM_SHARE_FILE_REMOTE_OFF_MESSAGE);\n      const filePath = await resolveShareable(request, environment);\n      const opened = await openPinned(filePath);\n      if (opened === undefined) throw new Error(`\"${request.path}\" is not a regular file Po can share.`);\n      const { stat } = opened;\n      await opened.handle.close();\n      if (stat.size > MAX_SESSION_FILE_BYTES)\n        throw new Error(`\"${request.path}\" is larger than the 25 MB file sharing limit.`);\n      for (const [key, share] of shares) if (!live(share)) shares.delete(key);\n      if (\n        [...shares.values()].filter((share) => share.sessionId === request.sessionId).length >=\n        MAX_LIVE_SHARES_PER_SESSION\n      )\n        throw new Error(\n          `This session already shares ${String(MAX_LIVE_SHARES_PER_SESSION)} files. Retry after a tool call finishes.`,\n        );\n      const token = randomBytes(TOKEN_BYTES).toString('base64url');\n      const key = tokenDigest(token);\n      const fileName = path.basename(filePath);\n      const share: Share = {\n        sessionId: request.sessionId,\n        filePath,\n        fileName,\n        dev: stat.dev,\n        ino: stat.ino,\n        size: stat.size,\n        mtimeMs: stat.mtimeMs,\n        revision,\n        expiresAt: Date.now() + SHARE_TTL_MS,\n        downloadsLeft: SHARE_DOWNLOADS,\n        revoked: false,\n      };\n      shares.set(key, share);\n      options.onNotice(`file share: published \"${fileName}\" for ${request.label} on the remote-access tunnel.`);\n      return {\n        url: `${origin}${PUBLIC_FILE_SHARE_PREFIX}${token}`,\n        fileName,\n        mimeType: SESSION_FILE_CONTENT_TYPES[path.extname(fileName).toLowerCase()] ?? SESSION_FILE_DEFAULT_CONTENT_TYPE,\n        size: stat.size,\n        expiresAt: share.expiresAt,\n        maxDownloads: SHARE_DOWNLOADS,\n        revoke: () => {\n          share.revoked = true;\n          shares.delete(key);\n        },\n      };\n    },\n\n    async serve(token, method) {\n      if ((method !== 'GET' && method !== 'HEAD') || !TOKEN_PATTERN.test(token)) return notFound();\n      const key = tokenDigest(token);\n      const share = shares.get(key);\n      if (share === undefined) return notFound();\n      if (!live(share)) {\n        shares.delete(key);\n        return notFound();\n      }\n      // Counted before the first await, so concurrent downloads cannot outrun the limit.\n      if (method === 'GET') {\n        share.downloadsLeft -= 1;\n        if (share.downloadsLeft === 0) shares.delete(key);\n      }\n      const opened = await openPinned(share.filePath);\n      if (\n        opened === undefined ||\n        opened.stat.dev !== share.dev ||\n        opened.stat.ino !== share.ino ||\n        opened.stat.size !== share.size ||\n        opened.stat.mtimeMs !== share.mtimeMs\n      ) {\n        await opened?.handle.close();\n        shares.delete(key);\n        options.onNotice(`file share: refused \"${share.fileName}\" because the file changed after it was shared.`);\n        return notFound();\n      }\n      // Opening a file yields to revocation and tunnel changes. The download already\n      // reserved its allowance, so this check must not reject the final permitted GET.\n      if (!authorized(share)) {\n        await opened.handle.close();\n        shares.delete(key);\n        return notFound();\n      }\n      const headers = {\n        'content-type': 'application/octet-stream',\n        'content-length': String(share.size),\n        'content-disposition': `attachment; filename*=UTF-8''${contentDispositionName(share.fileName)}`,\n        'x-content-type-options': 'nosniff',\n        'content-security-policy': \"sandbox; default-src 'none'\",\n        'cross-origin-resource-policy': 'same-origin',\n        'cache-control': 'no-store, private',\n        'referrer-policy': 'no-referrer',\n        'accept-ranges': 'none',\n        'x-robots-tag': 'noindex',\n      };\n      if (method === 'HEAD' || share.size === 0) {\n        await opened.handle.close();\n        return new Response(method === 'HEAD' ? null : new Uint8Array(), { headers });\n      }\n      // The stream closes the handle when it ends, fails, or is cancelled. Bounded to the\n      // pinned size, so bytes appended after the identity check are never sent.\n      const body = Readable.toWeb(opened.handle.createReadStream({ start: 0, end: share.size - 1 }));\n      return new Response(body as ReadableStream<Uint8Array>, { headers });\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwBA,MAAa,2BAA2B;AAExC,MAAM,cAAc;AACpB,MAAM,gBAAgB;AACtB,MAAM,eAAe;AACrB,MAAM,kBAAkB;AACxB,MAAM,8BAA8B;AACpC,MAAM,aAAaA,QAAAA,QAAG,UAAU,WAAWA,QAAAA,QAAG,UAAU;AAwCxD,SAAS,YAAY,OAAuB;CAC1C,QAAA,GAAOC,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,WAAW;AAC9D;AAEA,SAAS,WAAqB;CAC5B,OAAO,SAAS,KAAK,EAAE,OAAO,aAAa,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC/D;;AAGA,SAAS,uBAAuB,UAA0B;CACxD,OAAO,mBAAmB,QAAQ,CAAC,CAAC,QAClC,aACC,cAAc,IAAI,UAAU,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,YAAY,GACtE;AACF;;AAGA,eAAe,YAAY,MAAc,UAAoC;CAC3E,IAAI;CACJ,IAAI;EACF,WAAW,MAAMD,QAAAA,QAAG,SAAS,SAAS,IAAI;CAC5C,QAAQ;EACN,OAAO;CACT;CACA,MAAM,WAAWE,UAAAA,QAAK,SAAS,UAAU,QAAQ;CACjD,OACE,aAAa,MACb,CAACA,UAAAA,QAAK,WAAW,QAAQ,KACzB,SAAS,MAAMA,UAAAA,QAAK,GAAG,CAAC,CAAC,OAAO,YAAY,CAAC,QAAQ,WAAW,GAAG,CAAC;AAExE;;AAGA,eAAe,iBACb,SACA,aACiB;CACjB,MAAM,0BAAU,IAAI,MAAM,IAAI,QAAQ,KAAK,oEAAoE;CAC/G,IACE,QAAQ,SAAS,MACjB,QAAQ,KAAK,SAAS,IAAI,KAC1B,QAAQ,KAAK,MAAM,QAAQ,CAAC,CAAC,MAAM,YAAY,YAAY,OAAO,YAAY,IAAI,GAElF,MAAM;CACR,IAAI;CACJ,IAAI;EACF,WAAW,MAAMF,QAAAA,QAAG,SAAS,SAASE,UAAAA,QAAK,QAAQ,QAAQ,KAAK,QAAQ,IAAI,CAAC;CAC/E,QAAQ;EACN,MAAM;CACR;CACA,MAAM,QAAQ,CAAC,QAAQ,GAAG;CAC1B,IAAI;EACF,MAAM,KAAKC,cAAAA,sBAAsB,QAAQ,WAAW,WAAW,CAAC;CAClE,QAAQ,CAER;CACA,KAAK,MAAM,QAAQ,OAAO,IAAI,MAAM,YAAY,MAAM,QAAQ,GAAG,OAAO;CACxE,MAAM;AACR;;;;;;;AAQA,eAAe,WAAW,UAA2F;CACnH,IAAI;CACJ,IAAI;EACF,SAAS,MAAMH,QAAAA,QAAG,SAAS,KAAK,UAAU,UAAU;CACtD,QAAQ;EACN;CACF;CACA,IAAI;EACF,MAAM,OAAO,MAAM,OAAO,KAAK;EAC/B,MAAM,QAAQ,MAAMA,QAAAA,QAAG,SAAS,MAAM,QAAQ;EAC9C,IACE,KAAK,OAAO,KACZ,MAAM,QAAQ,KAAK,OACnB,MAAM,QAAQ,KAAK,OAClB,MAAMA,QAAAA,QAAG,SAAS,SAAS,QAAQ,MAAO,UAE3C,OAAO;GAAE;GAAQ;EAAK;CAC1B,QAAQ,CAER;CACA,MAAM,OAAO,MAAM;AAErB;AAEA,SAAgB,uBAAuB,SAAoD;CACzF,MAAM,cAAc,QAAQ,eAAe,QAAQ;CACnD,MAAM,yBAAS,IAAI,IAAmB;CAEtC,MAAM,cAAc,UAClB,CAAC,MAAM,WACP,KAAK,IAAI,IAAI,MAAM,aACnB,MAAM,aAAa,QAAQ,qBAAqB,KAChD,QAAQ,aAAa,MAAM,KAAA;CAC7B,MAAM,QAAQ,UAA0B,WAAW,KAAK,KAAK,MAAM,gBAAgB;CAEnF,OAAO;EACL,MAAM,KAAK,SAAS;GAClB,MAAM,SAAS,QAAQ,aAAa;GACpC,MAAM,WAAW,QAAQ,qBAAqB;GAC9C,IAAI,WAAW,KAAA,GAAW,MAAM,IAAI,MAAMI,mBAAAA,kCAAkC;GAC5E,MAAM,WAAW,MAAM,iBAAiB,SAAS,WAAW;GAC5D,MAAM,SAAS,MAAM,WAAW,QAAQ;GACxC,IAAI,WAAW,KAAA,GAAW,MAAM,IAAI,MAAM,IAAI,QAAQ,KAAK,sCAAsC;GACjG,MAAM,EAAE,SAAS;GACjB,MAAM,OAAO,OAAO,MAAM;GAC1B,IAAI,KAAK,OAAA,UACP,MAAM,IAAI,MAAM,IAAI,QAAQ,KAAK,+CAA+C;GAClF,KAAK,MAAM,CAAC,KAAK,UAAU,QAAQ,IAAI,CAAC,KAAK,KAAK,GAAG,OAAO,OAAO,GAAG;GACtE,IACE,CAAC,GAAG,OAAO,OAAO,CAAC,CAAC,CAAC,QAAQ,UAAU,MAAM,cAAc,QAAQ,SAAS,CAAC,CAAC,UAC9E,6BAEA,MAAM,IAAI,MACR,+BAA+B,OAAO,2BAA2B,EAAE,0CACrE;GACF,MAAM,SAAA,GAAQC,YAAAA,YAAAA,CAAY,WAAW,CAAC,CAAC,SAAS,WAAW;GAC3D,MAAM,MAAM,YAAY,KAAK;GAC7B,MAAM,WAAWH,UAAAA,QAAK,SAAS,QAAQ;GACvC,MAAM,QAAe;IACnB,WAAW,QAAQ;IACnB;IACA;IACA,KAAK,KAAK;IACV,KAAK,KAAK;IACV,MAAM,KAAK;IACX,SAAS,KAAK;IACd;IACA,WAAW,KAAK,IAAI,IAAI;IACxB,eAAe;IACf,SAAS;GACX;GACA,OAAO,IAAI,KAAK,KAAK;GACrB,QAAQ,SAAS,0BAA0B,SAAS,QAAQ,QAAQ,MAAM,8BAA8B;GACxG,OAAO;IACL,KAAK,GAAG,SAAS,2BAA2B;IAC5C;IACA,UAAUI,qBAAAA,2BAA2BJ,UAAAA,QAAK,QAAQ,QAAQ,CAAC,CAAC,YAAY,MAAA;IACxE,MAAM,KAAK;IACX,WAAW,MAAM;IACjB,cAAc;IACd,cAAc;KACZ,MAAM,UAAU;KAChB,OAAO,OAAO,GAAG;IACnB;GACF;EACF;EAEA,MAAM,MAAM,OAAO,QAAQ;GACzB,IAAK,WAAW,SAAS,WAAW,UAAW,CAAC,cAAc,KAAK,KAAK,GAAG,OAAO,SAAS;GAC3F,MAAM,MAAM,YAAY,KAAK;GAC7B,MAAM,QAAQ,OAAO,IAAI,GAAG;GAC5B,IAAI,UAAU,KAAA,GAAW,OAAO,SAAS;GACzC,IAAI,CAAC,KAAK,KAAK,GAAG;IAChB,OAAO,OAAO,GAAG;IACjB,OAAO,SAAS;GAClB;GAEA,IAAI,WAAW,OAAO;IACpB,MAAM,iBAAiB;IACvB,IAAI,MAAM,kBAAkB,GAAG,OAAO,OAAO,GAAG;GAClD;GACA,MAAM,SAAS,MAAM,WAAW,MAAM,QAAQ;GAC9C,IACE,WAAW,KAAA,KACX,OAAO,KAAK,QAAQ,MAAM,OAC1B,OAAO,KAAK,QAAQ,MAAM,OAC1B,OAAO,KAAK,SAAS,MAAM,QAC3B,OAAO,KAAK,YAAY,MAAM,SAC9B;IACA,MAAM,QAAQ,OAAO,MAAM;IAC3B,OAAO,OAAO,GAAG;IACjB,QAAQ,SAAS,wBAAwB,MAAM,SAAS,gDAAgD;IACxG,OAAO,SAAS;GAClB;GAGA,IAAI,CAAC,WAAW,KAAK,GAAG;IACtB,MAAM,OAAO,OAAO,MAAM;IAC1B,OAAO,OAAO,GAAG;IACjB,OAAO,SAAS;GAClB;GACA,MAAM,UAAU;IACd,gBAAgB;IAChB,kBAAkB,OAAO,MAAM,IAAI;IACnC,uBAAuB,gCAAgC,uBAAuB,MAAM,QAAQ;IAC5F,0BAA0B;IAC1B,2BAA2B;IAC3B,gCAAgC;IAChC,iBAAiB;IACjB,mBAAmB;IACnB,iBAAiB;IACjB,gBAAgB;GAClB;GACA,IAAI,WAAW,UAAU,MAAM,SAAS,GAAG;IACzC,MAAM,OAAO,OAAO,MAAM;IAC1B,OAAO,IAAI,SAAS,WAAW,SAAS,uBAAO,IAAI,WAAW,GAAG,EAAE,QAAQ,CAAC;GAC9E;GAGA,MAAM,OAAOK,YAAAA,SAAS,MAAM,OAAO,OAAO,iBAAiB;IAAE,OAAO;IAAG,KAAK,MAAM,OAAO;GAAE,CAAC,CAAC;GAC7F,OAAO,IAAI,SAAS,MAAoC,EAAE,QAAQ,CAAC;EACrE;CACF;AACF"}

package/dist/src/services/publicFileShares/index.d.mts

@@ -0,0 +1,16 @@
+import { DoomSharedFile } from "../../schemas/packageApi.mjs";
+//#region src/services/publicFileShares/index.d.ts
+export interface PublicFileShareRequest {
+  sessionId: string;
+  cwd: string;
+  /** Relative to cwd, or absolute. */
+  path: string;
+  /** Who the file is for, for the host's notice. */
+  label: string;
+}
+export interface PublicFileShares {
+  mint(request: PublicFileShareRequest): Promise<DoomSharedFile>;
+  serve(token: string, method: string): Promise<Response>;
+}
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/src/services/publicFileShares/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/services/publicFileShares/index.ts"],"mappings":";;iBAiCiB;EACf;EACA;;EAEA;;EAEA;;iBAGe;EACf,KAAK,SAAS,yBAAyB,QAAQ;EAC/C,MAAM,eAAe,iBAAiB,QAAQ"}

package/dist/src/services/publicFileShares/index.mjs

@@ -0,0 +1,188 @@
+import { DOOM_SHARE_FILE_REMOTE_OFF_MESSAGE } from "../../schemas/packageApi.mjs";
+import { SESSION_FILE_CONTENT_TYPES } from "../../constants/sessionFiles.mjs";
+import { sessionAttachmentRoot } from "../sessionAttachments/index.mjs";
+import { createHash, randomBytes } from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { Readable } from "node:stream";
+//#region src/services/publicFileShares/index.ts
+/**
+* Short-lived public links to one session file, so a remote MCP server can fetch
+* what the model was asked to hand it.
+*
+* The link is the only credential, so only its hash is kept, and every way a
+* link can fail answers the same 404. A file is pinned by identity when the
+* link is minted and reopened when it is served: a path that now names another
+* file, or reaches it through a new symlink, is refused rather than followed.
+*/
+/** Public tunnel path prefix; the token is the only segment after it. */
+const PUBLIC_FILE_SHARE_PREFIX = "/mcp-file/";
+const TOKEN_BYTES = 32;
+const TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/u;
+const SHARE_TTL_MS = 6e5;
+const SHARE_DOWNLOADS = 3;
+const MAX_LIVE_SHARES_PER_SESSION = 16;
+const OPEN_FLAGS = fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW;
+function tokenDigest(token) {
+	return createHash("sha256").update(token).digest("base64url");
+}
+function notFound() {
+	return Response.json({ error: "Not found." }, { status: 404 });
+}
+/** RFC 8187 value for `filename*`: encodeURIComponent leaves a few characters the grammar forbids. */
+function contentDispositionName(fileName) {
+	return encodeURIComponent(fileName).replace(/['()*]/gu, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`);
+}
+/** True when filePath sits strictly below the real root with no segment that starts with a dot. */
+async function containedIn(root, filePath) {
+	let realRoot;
+	try {
+		realRoot = await fs.promises.realpath(root);
+	} catch {
+		return false;
+	}
+	const relative = path.relative(realRoot, filePath);
+	return relative !== "" && !path.isAbsolute(relative) && relative.split(path.sep).every((segment) => !segment.startsWith("."));
+}
+/** The real path of a shareable file: inside the session cwd or its attachment root, never through a dot segment. */
+async function resolveShareable(request, environment) {
+	const refused = /* @__PURE__ */ new Error(`"${request.path}" is not a file in this session's working directory or attachments.`);
+	if (request.path === "" || request.path.includes("\0") || request.path.split(/[\\/]/u).some((segment) => segment === "." || segment === "..")) throw refused;
+	let filePath;
+	try {
+		filePath = await fs.promises.realpath(path.resolve(request.cwd, request.path));
+	} catch {
+		throw refused;
+	}
+	const roots = [request.cwd];
+	try {
+		roots.push(sessionAttachmentRoot(request.sessionId, environment));
+	} catch {}
+	for (const root of roots) if (await containedIn(root, filePath)) return filePath;
+	throw refused;
+}
+/**
+* Opens a regular file without following a final symlink, then proves the handle is
+* still the file at that real path: a parent swapped for a symlink changes the real
+* path, and a replaced file changes the identity. Resolves undefined, with nothing
+* left open, when either check fails.
+*/
+async function openPinned(filePath) {
+	let handle;
+	try {
+		handle = await fs.promises.open(filePath, OPEN_FLAGS);
+	} catch {
+		return;
+	}
+	try {
+		const stat = await handle.stat();
+		const named = await fs.promises.lstat(filePath);
+		if (stat.isFile() && named.dev === stat.dev && named.ino === stat.ino && await fs.promises.realpath(filePath) === filePath) return {
+			handle,
+			stat
+		};
+	} catch {}
+	await handle.close();
+}
+function createPublicFileShares(options) {
+	const environment = options.environment ?? process.env;
+	const shares = /* @__PURE__ */ new Map();
+	const authorized = (share) => !share.revoked && Date.now() < share.expiresAt && share.revision === options.publicOriginRevision() && options.publicOrigin() !== void 0;
+	const live = (share) => authorized(share) && share.downloadsLeft > 0;
+	return {
+		async mint(request) {
+			const origin = options.publicOrigin();
+			const revision = options.publicOriginRevision();
+			if (origin === void 0) throw new Error(DOOM_SHARE_FILE_REMOTE_OFF_MESSAGE);
+			const filePath = await resolveShareable(request, environment);
+			const opened = await openPinned(filePath);
+			if (opened === void 0) throw new Error(`"${request.path}" is not a regular file Po can share.`);
+			const { stat } = opened;
+			await opened.handle.close();
+			if (stat.size > 26214400) throw new Error(`"${request.path}" is larger than the 25 MB file sharing limit.`);
+			for (const [key, share] of shares) if (!live(share)) shares.delete(key);
+			if ([...shares.values()].filter((share) => share.sessionId === request.sessionId).length >= MAX_LIVE_SHARES_PER_SESSION) throw new Error(`This session already shares ${String(MAX_LIVE_SHARES_PER_SESSION)} files. Retry after a tool call finishes.`);
+			const token = randomBytes(TOKEN_BYTES).toString("base64url");
+			const key = tokenDigest(token);
+			const fileName = path.basename(filePath);
+			const share = {
+				sessionId: request.sessionId,
+				filePath,
+				fileName,
+				dev: stat.dev,
+				ino: stat.ino,
+				size: stat.size,
+				mtimeMs: stat.mtimeMs,
+				revision,
+				expiresAt: Date.now() + SHARE_TTL_MS,
+				downloadsLeft: SHARE_DOWNLOADS,
+				revoked: false
+			};
+			shares.set(key, share);
+			options.onNotice(`file share: published "${fileName}" for ${request.label} on the remote-access tunnel.`);
+			return {
+				url: `${origin}${PUBLIC_FILE_SHARE_PREFIX}${token}`,
+				fileName,
+				mimeType: SESSION_FILE_CONTENT_TYPES[path.extname(fileName).toLowerCase()] ?? "application/octet-stream",
+				size: stat.size,
+				expiresAt: share.expiresAt,
+				maxDownloads: SHARE_DOWNLOADS,
+				revoke: () => {
+					share.revoked = true;
+					shares.delete(key);
+				}
+			};
+		},
+		async serve(token, method) {
+			if (method !== "GET" && method !== "HEAD" || !TOKEN_PATTERN.test(token)) return notFound();
+			const key = tokenDigest(token);
+			const share = shares.get(key);
+			if (share === void 0) return notFound();
+			if (!live(share)) {
+				shares.delete(key);
+				return notFound();
+			}
+			if (method === "GET") {
+				share.downloadsLeft -= 1;
+				if (share.downloadsLeft === 0) shares.delete(key);
+			}
+			const opened = await openPinned(share.filePath);
+			if (opened === void 0 || opened.stat.dev !== share.dev || opened.stat.ino !== share.ino || opened.stat.size !== share.size || opened.stat.mtimeMs !== share.mtimeMs) {
+				await opened?.handle.close();
+				shares.delete(key);
+				options.onNotice(`file share: refused "${share.fileName}" because the file changed after it was shared.`);
+				return notFound();
+			}
+			if (!authorized(share)) {
+				await opened.handle.close();
+				shares.delete(key);
+				return notFound();
+			}
+			const headers = {
+				"content-type": "application/octet-stream",
+				"content-length": String(share.size),
+				"content-disposition": `attachment; filename*=UTF-8''${contentDispositionName(share.fileName)}`,
+				"x-content-type-options": "nosniff",
+				"content-security-policy": "sandbox; default-src 'none'",
+				"cross-origin-resource-policy": "same-origin",
+				"cache-control": "no-store, private",
+				"referrer-policy": "no-referrer",
+				"accept-ranges": "none",
+				"x-robots-tag": "noindex"
+			};
+			if (method === "HEAD" || share.size === 0) {
+				await opened.handle.close();
+				return new Response(method === "HEAD" ? null : /* @__PURE__ */ new Uint8Array(), { headers });
+			}
+			const body = Readable.toWeb(opened.handle.createReadStream({
+				start: 0,
+				end: share.size - 1
+			}));
+			return new Response(body, { headers });
+		}
+	};
+}
+//#endregion
+export { PUBLIC_FILE_SHARE_PREFIX, createPublicFileShares };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/services/publicFileShares/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/publicFileShares/index.ts"],"sourcesContent":["import { createHash, randomBytes } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { Readable } from 'node:stream';\n\nimport {\n  MAX_SESSION_FILE_BYTES,\n  SESSION_FILE_CONTENT_TYPES,\n  SESSION_FILE_DEFAULT_CONTENT_TYPE,\n} from '../../constants/sessionFiles';\nimport { DOOM_SHARE_FILE_REMOTE_OFF_MESSAGE, type DoomSharedFile } from '../../schemas/packageApi';\nimport { sessionAttachmentRoot } from '../sessionAttachments';\n\n/**\n * Short-lived public links to one session file, so a remote MCP server can fetch\n * what the model was asked to hand it.\n *\n * The link is the only credential, so only its hash is kept, and every way a\n * link can fail answers the same 404. A file is pinned by identity when the\n * link is minted and reopened when it is served: a path that now names another\n * file, or reaches it through a new symlink, is refused rather than followed.\n */\n\n/** Public tunnel path prefix; the token is the only segment after it. */\nexport const PUBLIC_FILE_SHARE_PREFIX = '/mcp-file/';\n\nconst TOKEN_BYTES = 32;\nconst TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/u;\nconst SHARE_TTL_MS = 10 * 60 * 1000;\nconst SHARE_DOWNLOADS = 3;\nconst MAX_LIVE_SHARES_PER_SESSION = 16;\nconst OPEN_FLAGS = fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW;\n\nexport interface PublicFileShareRequest {\n  sessionId: string;\n  cwd: string;\n  /** Relative to cwd, or absolute. */\n  path: string;\n  /** Who the file is for, for the host's notice. */\n  label: string;\n}\n\nexport interface PublicFileShares {\n  mint(request: PublicFileShareRequest): Promise<DoomSharedFile>;\n  serve(token: string, method: string): Promise<Response>;\n}\n\nexport interface PublicFileSharesOptions {\n  publicOrigin(): string | undefined;\n  /** Bumped whenever the tunnel goes away; a link minted under another revision is dead. */\n  publicOriginRevision(): number;\n  /** Never receives a token or a link. */\n  onNotice(message: string): void;\n  /** Locates the attachment root; defaults to the process environment, as the upload route does. */\n  environment?: Readonly<Record<string, string | undefined>>;\n}\n\ninterface Share {\n  sessionId: string;\n  filePath: string;\n  fileName: string;\n  dev: number;\n  ino: number;\n  size: number;\n  mtimeMs: number;\n  revision: number;\n  expiresAt: number;\n  downloadsLeft: number;\n  revoked: boolean;\n}\n\nfunction tokenDigest(token: string): string {\n  return createHash('sha256').update(token).digest('base64url');\n}\n\nfunction notFound(): Response {\n  return Response.json({ error: 'Not found.' }, { status: 404 });\n}\n\n/** RFC 8187 value for `filename*`: encodeURIComponent leaves a few characters the grammar forbids. */\nfunction contentDispositionName(fileName: string): string {\n  return encodeURIComponent(fileName).replace(\n    /['()*]/gu,\n    (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`,\n  );\n}\n\n/** True when filePath sits strictly below the real root with no segment that starts with a dot. */\nasync function containedIn(root: string, filePath: string): Promise<boolean> {\n  let realRoot: string;\n  try {\n    realRoot = await fs.promises.realpath(root);\n  } catch {\n    return false;\n  }\n  const relative = path.relative(realRoot, filePath);\n  return (\n    relative !== '' &&\n    !path.isAbsolute(relative) &&\n    relative.split(path.sep).every((segment) => !segment.startsWith('.'))\n  );\n}\n\n/** The real path of a shareable file: inside the session cwd or its attachment root, never through a dot segment. */\nasync function resolveShareable(\n  request: PublicFileShareRequest,\n  environment: Readonly<Record<string, string | undefined>>,\n): Promise<string> {\n  const refused = new Error(`\"${request.path}\" is not a file in this session's working directory or attachments.`);\n  if (\n    request.path === '' ||\n    request.path.includes('\\0') ||\n    request.path.split(/[\\\\/]/u).some((segment) => segment === '.' || segment === '..')\n  )\n    throw refused;\n  let filePath: string;\n  try {\n    filePath = await fs.promises.realpath(path.resolve(request.cwd, request.path));\n  } catch {\n    throw refused;\n  }\n  const roots = [request.cwd];\n  try {\n    roots.push(sessionAttachmentRoot(request.sessionId, environment));\n  } catch {\n    // An id that cannot hold attachments only has its working directory.\n  }\n  for (const root of roots) if (await containedIn(root, filePath)) return filePath;\n  throw refused;\n}\n\n/**\n * Opens a regular file without following a final symlink, then proves the handle is\n * still the file at that real path: a parent swapped for a symlink changes the real\n * path, and a replaced file changes the identity. Resolves undefined, with nothing\n * left open, when either check fails.\n */\nasync function openPinned(filePath: string): Promise<{ handle: fs.promises.FileHandle; stat: fs.Stats } | undefined> {\n  let handle: fs.promises.FileHandle;\n  try {\n    handle = await fs.promises.open(filePath, OPEN_FLAGS);\n  } catch {\n    return undefined;\n  }\n  try {\n    const stat = await handle.stat();\n    const named = await fs.promises.lstat(filePath);\n    if (\n      stat.isFile() &&\n      named.dev === stat.dev &&\n      named.ino === stat.ino &&\n      (await fs.promises.realpath(filePath)) === filePath\n    )\n      return { handle, stat };\n  } catch {\n    // Treated like a mismatch below.\n  }\n  await handle.close();\n  return undefined;\n}\n\nexport function createPublicFileShares(options: PublicFileSharesOptions): PublicFileShares {\n  const environment = options.environment ?? process.env;\n  const shares = new Map<string, Share>();\n\n  const authorized = (share: Share): boolean =>\n    !share.revoked &&\n    Date.now() < share.expiresAt &&\n    share.revision === options.publicOriginRevision() &&\n    options.publicOrigin() !== undefined;\n  const live = (share: Share): boolean => authorized(share) && share.downloadsLeft > 0;\n\n  return {\n    async mint(request) {\n      const origin = options.publicOrigin();\n      const revision = options.publicOriginRevision();\n      if (origin === undefined) throw new Error(DOOM_SHARE_FILE_REMOTE_OFF_MESSAGE);\n      const filePath = await resolveShareable(request, environment);\n      const opened = await openPinned(filePath);\n      if (opened === undefined) throw new Error(`\"${request.path}\" is not a regular file Po can share.`);\n      const { stat } = opened;\n      await opened.handle.close();\n      if (stat.size > MAX_SESSION_FILE_BYTES)\n        throw new Error(`\"${request.path}\" is larger than the 25 MB file sharing limit.`);\n      for (const [key, share] of shares) if (!live(share)) shares.delete(key);\n      if (\n        [...shares.values()].filter((share) => share.sessionId === request.sessionId).length >=\n        MAX_LIVE_SHARES_PER_SESSION\n      )\n        throw new Error(\n          `This session already shares ${String(MAX_LIVE_SHARES_PER_SESSION)} files. Retry after a tool call finishes.`,\n        );\n      const token = randomBytes(TOKEN_BYTES).toString('base64url');\n      const key = tokenDigest(token);\n      const fileName = path.basename(filePath);\n      const share: Share = {\n        sessionId: request.sessionId,\n        filePath,\n        fileName,\n        dev: stat.dev,\n        ino: stat.ino,\n        size: stat.size,\n        mtimeMs: stat.mtimeMs,\n        revision,\n        expiresAt: Date.now() + SHARE_TTL_MS,\n        downloadsLeft: SHARE_DOWNLOADS,\n        revoked: false,\n      };\n      shares.set(key, share);\n      options.onNotice(`file share: published \"${fileName}\" for ${request.label} on the remote-access tunnel.`);\n      return {\n        url: `${origin}${PUBLIC_FILE_SHARE_PREFIX}${token}`,\n        fileName,\n        mimeType: SESSION_FILE_CONTENT_TYPES[path.extname(fileName).toLowerCase()] ?? SESSION_FILE_DEFAULT_CONTENT_TYPE,\n        size: stat.size,\n        expiresAt: share.expiresAt,\n        maxDownloads: SHARE_DOWNLOADS,\n        revoke: () => {\n          share.revoked = true;\n          shares.delete(key);\n        },\n      };\n    },\n\n    async serve(token, method) {\n      if ((method !== 'GET' && method !== 'HEAD') || !TOKEN_PATTERN.test(token)) return notFound();\n      const key = tokenDigest(token);\n      const share = shares.get(key);\n      if (share === undefined) return notFound();\n      if (!live(share)) {\n        shares.delete(key);\n        return notFound();\n      }\n      // Counted before the first await, so concurrent downloads cannot outrun the limit.\n      if (method === 'GET') {\n        share.downloadsLeft -= 1;\n        if (share.downloadsLeft === 0) shares.delete(key);\n      }\n      const opened = await openPinned(share.filePath);\n      if (\n        opened === undefined ||\n        opened.stat.dev !== share.dev ||\n        opened.stat.ino !== share.ino ||\n        opened.stat.size !== share.size ||\n        opened.stat.mtimeMs !== share.mtimeMs\n      ) {\n        await opened?.handle.close();\n        shares.delete(key);\n        options.onNotice(`file share: refused \"${share.fileName}\" because the file changed after it was shared.`);\n        return notFound();\n      }\n      // Opening a file yields to revocation and tunnel changes. The download already\n      // reserved its allowance, so this check must not reject the final permitted GET.\n      if (!authorized(share)) {\n        await opened.handle.close();\n        shares.delete(key);\n        return notFound();\n      }\n      const headers = {\n        'content-type': 'application/octet-stream',\n        'content-length': String(share.size),\n        'content-disposition': `attachment; filename*=UTF-8''${contentDispositionName(share.fileName)}`,\n        'x-content-type-options': 'nosniff',\n        'content-security-policy': \"sandbox; default-src 'none'\",\n        'cross-origin-resource-policy': 'same-origin',\n        'cache-control': 'no-store, private',\n        'referrer-policy': 'no-referrer',\n        'accept-ranges': 'none',\n        'x-robots-tag': 'noindex',\n      };\n      if (method === 'HEAD' || share.size === 0) {\n        await opened.handle.close();\n        return new Response(method === 'HEAD' ? null : new Uint8Array(), { headers });\n      }\n      // The stream closes the handle when it ends, fails, or is cancelled. Bounded to the\n      // pinned size, so bytes appended after the identity check are never sent.\n      const body = Readable.toWeb(opened.handle.createReadStream({ start: 0, end: share.size - 1 }));\n      return new Response(body as ReadableStream<Uint8Array>, { headers });\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAwBA,MAAa,2BAA2B;AAExC,MAAM,cAAc;AACpB,MAAM,gBAAgB;AACtB,MAAM,eAAe;AACrB,MAAM,kBAAkB;AACxB,MAAM,8BAA8B;AACpC,MAAM,aAAa,GAAG,UAAU,WAAW,GAAG,UAAU;AAwCxD,SAAS,YAAY,OAAuB;CAC1C,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,WAAW;AAC9D;AAEA,SAAS,WAAqB;CAC5B,OAAO,SAAS,KAAK,EAAE,OAAO,aAAa,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC/D;;AAGA,SAAS,uBAAuB,UAA0B;CACxD,OAAO,mBAAmB,QAAQ,CAAC,CAAC,QAClC,aACC,cAAc,IAAI,UAAU,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,YAAY,GACtE;AACF;;AAGA,eAAe,YAAY,MAAc,UAAoC;CAC3E,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,GAAG,SAAS,SAAS,IAAI;CAC5C,QAAQ;EACN,OAAO;CACT;CACA,MAAM,WAAW,KAAK,SAAS,UAAU,QAAQ;CACjD,OACE,aAAa,MACb,CAAC,KAAK,WAAW,QAAQ,KACzB,SAAS,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,YAAY,CAAC,QAAQ,WAAW,GAAG,CAAC;AAExE;;AAGA,eAAe,iBACb,SACA,aACiB;CACjB,MAAM,0BAAU,IAAI,MAAM,IAAI,QAAQ,KAAK,oEAAoE;CAC/G,IACE,QAAQ,SAAS,MACjB,QAAQ,KAAK,SAAS,IAAI,KAC1B,QAAQ,KAAK,MAAM,QAAQ,CAAC,CAAC,MAAM,YAAY,YAAY,OAAO,YAAY,IAAI,GAElF,MAAM;CACR,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,GAAG,SAAS,SAAS,KAAK,QAAQ,QAAQ,KAAK,QAAQ,IAAI,CAAC;CAC/E,QAAQ;EACN,MAAM;CACR;CACA,MAAM,QAAQ,CAAC,QAAQ,GAAG;CAC1B,IAAI;EACF,MAAM,KAAK,sBAAsB,QAAQ,WAAW,WAAW,CAAC;CAClE,QAAQ,CAER;CACA,KAAK,MAAM,QAAQ,OAAO,IAAI,MAAM,YAAY,MAAM,QAAQ,GAAG,OAAO;CACxE,MAAM;AACR;;;;;;;AAQA,eAAe,WAAW,UAA2F;CACnH,IAAI;CACJ,IAAI;EACF,SAAS,MAAM,GAAG,SAAS,KAAK,UAAU,UAAU;CACtD,QAAQ;EACN;CACF;CACA,IAAI;EACF,MAAM,OAAO,MAAM,OAAO,KAAK;EAC/B,MAAM,QAAQ,MAAM,GAAG,SAAS,MAAM,QAAQ;EAC9C,IACE,KAAK,OAAO,KACZ,MAAM,QAAQ,KAAK,OACnB,MAAM,QAAQ,KAAK,OAClB,MAAM,GAAG,SAAS,SAAS,QAAQ,MAAO,UAE3C,OAAO;GAAE;GAAQ;EAAK;CAC1B,QAAQ,CAER;CACA,MAAM,OAAO,MAAM;AAErB;AAEA,SAAgB,uBAAuB,SAAoD;CACzF,MAAM,cAAc,QAAQ,eAAe,QAAQ;CACnD,MAAM,yBAAS,IAAI,IAAmB;CAEtC,MAAM,cAAc,UAClB,CAAC,MAAM,WACP,KAAK,IAAI,IAAI,MAAM,aACnB,MAAM,aAAa,QAAQ,qBAAqB,KAChD,QAAQ,aAAa,MAAM,KAAA;CAC7B,MAAM,QAAQ,UAA0B,WAAW,KAAK,KAAK,MAAM,gBAAgB;CAEnF,OAAO;EACL,MAAM,KAAK,SAAS;GAClB,MAAM,SAAS,QAAQ,aAAa;GACpC,MAAM,WAAW,QAAQ,qBAAqB;GAC9C,IAAI,WAAW,KAAA,GAAW,MAAM,IAAI,MAAM,kCAAkC;GAC5E,MAAM,WAAW,MAAM,iBAAiB,SAAS,WAAW;GAC5D,MAAM,SAAS,MAAM,WAAW,QAAQ;GACxC,IAAI,WAAW,KAAA,GAAW,MAAM,IAAI,MAAM,IAAI,QAAQ,KAAK,sCAAsC;GACjG,MAAM,EAAE,SAAS;GACjB,MAAM,OAAO,OAAO,MAAM;GAC1B,IAAI,KAAK,OAAA,UACP,MAAM,IAAI,MAAM,IAAI,QAAQ,KAAK,+CAA+C;GAClF,KAAK,MAAM,CAAC,KAAK,UAAU,QAAQ,IAAI,CAAC,KAAK,KAAK,GAAG,OAAO,OAAO,GAAG;GACtE,IACE,CAAC,GAAG,OAAO,OAAO,CAAC,CAAC,CAAC,QAAQ,UAAU,MAAM,cAAc,QAAQ,SAAS,CAAC,CAAC,UAC9E,6BAEA,MAAM,IAAI,MACR,+BAA+B,OAAO,2BAA2B,EAAE,0CACrE;GACF,MAAM,QAAQ,YAAY,WAAW,CAAC,CAAC,SAAS,WAAW;GAC3D,MAAM,MAAM,YAAY,KAAK;GAC7B,MAAM,WAAW,KAAK,SAAS,QAAQ;GACvC,MAAM,QAAe;IACnB,WAAW,QAAQ;IACnB;IACA;IACA,KAAK,KAAK;IACV,KAAK,KAAK;IACV,MAAM,KAAK;IACX,SAAS,KAAK;IACd;IACA,WAAW,KAAK,IAAI,IAAI;IACxB,eAAe;IACf,SAAS;GACX;GACA,OAAO,IAAI,KAAK,KAAK;GACrB,QAAQ,SAAS,0BAA0B,SAAS,QAAQ,QAAQ,MAAM,8BAA8B;GACxG,OAAO;IACL,KAAK,GAAG,SAAS,2BAA2B;IAC5C;IACA,UAAU,2BAA2B,KAAK,QAAQ,QAAQ,CAAC,CAAC,YAAY,MAAA;IACxE,MAAM,KAAK;IACX,WAAW,MAAM;IACjB,cAAc;IACd,cAAc;KACZ,MAAM,UAAU;KAChB,OAAO,OAAO,GAAG;IACnB;GACF;EACF;EAEA,MAAM,MAAM,OAAO,QAAQ;GACzB,IAAK,WAAW,SAAS,WAAW,UAAW,CAAC,cAAc,KAAK,KAAK,GAAG,OAAO,SAAS;GAC3F,MAAM,MAAM,YAAY,KAAK;GAC7B,MAAM,QAAQ,OAAO,IAAI,GAAG;GAC5B,IAAI,UAAU,KAAA,GAAW,OAAO,SAAS;GACzC,IAAI,CAAC,KAAK,KAAK,GAAG;IAChB,OAAO,OAAO,GAAG;IACjB,OAAO,SAAS;GAClB;GAEA,IAAI,WAAW,OAAO;IACpB,MAAM,iBAAiB;IACvB,IAAI,MAAM,kBAAkB,GAAG,OAAO,OAAO,GAAG;GAClD;GACA,MAAM,SAAS,MAAM,WAAW,MAAM,QAAQ;GAC9C,IACE,WAAW,KAAA,KACX,OAAO,KAAK,QAAQ,MAAM,OAC1B,OAAO,KAAK,QAAQ,MAAM,OAC1B,OAAO,KAAK,SAAS,MAAM,QAC3B,OAAO,KAAK,YAAY,MAAM,SAC9B;IACA,MAAM,QAAQ,OAAO,MAAM;IAC3B,OAAO,OAAO,GAAG;IACjB,QAAQ,SAAS,wBAAwB,MAAM,SAAS,gDAAgD;IACxG,OAAO,SAAS;GAClB;GAGA,IAAI,CAAC,WAAW,KAAK,GAAG;IACtB,MAAM,OAAO,OAAO,MAAM;IAC1B,OAAO,OAAO,GAAG;IACjB,OAAO,SAAS;GAClB;GACA,MAAM,UAAU;IACd,gBAAgB;IAChB,kBAAkB,OAAO,MAAM,IAAI;IACnC,uBAAuB,gCAAgC,uBAAuB,MAAM,QAAQ;IAC5F,0BAA0B;IAC1B,2BAA2B;IAC3B,gCAAgC;IAChC,iBAAiB;IACjB,mBAAmB;IACnB,iBAAiB;IACjB,gBAAgB;GAClB;GACA,IAAI,WAAW,UAAU,MAAM,SAAS,GAAG;IACzC,MAAM,OAAO,OAAO,MAAM;IAC1B,OAAO,IAAI,SAAS,WAAW,SAAS,uBAAO,IAAI,WAAW,GAAG,EAAE,QAAQ,CAAC;GAC9E;GAGA,MAAM,OAAO,SAAS,MAAM,OAAO,OAAO,iBAAiB;IAAE,OAAO;IAAG,KAAK,MAAM,OAAO;GAAE,CAAC,CAAC;GAC7F,OAAO,IAAI,SAAS,MAAoC,EAAE,QAAQ,CAAC;EACrE;CACF;AACF"}