@ccpocket/bridge 1.75.0 → 1.76.0

package/dist/websocket.js

@@ -11,6 +11,7 @@ import { codexErrorMessage, CodexRpcError, CodexProcess, } from "./codex-process
 import { stopManagedCodexAppServers } from "./codex-transport.js";
 import { parseClientMessage, } from "./parser.js";
 import { getAllRecentSessions, getCodexSessionHistory, getSessionHistory, codexUserTurnUuid, codexThreadToSessionHistory, findSessionsByClaudeIds, extractMessageImages, getClaudeSessionName, getCodexSessionIndexMetadata, loadCodexSessionNames, renameClaudeSession, renameCodexSession, saveCodexSessionProfile, } from "./sessions-index.js";
+import { isSafeUploadFileName, UploadStoreError, } from "./upload-store.js";
 import { formatResumePerformanceLog, summarizeResumeHistory, } from "./resume-metrics.js";
 import { ArchiveStore } from "./archive-store.js";
 import { WorktreeStore } from "./worktree-store.js";
@@ -483,6 +484,7 @@ export class BridgeWebSocketServer {
     static DEFAULT_FILE_LIST_MAX_ENTRIES = 5000;
     static DEFAULT_FILE_LIST_MAX_BYTES = 512 * 1024;
     static DEFAULT_FILE_DOWNLOAD_MAX_BYTES = 512 * 1024 * 1024;
+    static DEFAULT_FILE_UPLOAD_MAX_BYTES = 512 * 1024 * 1024;
     static DEFAULT_DELTA_BATCH_MS = 100;
     static DEFAULT_DELTA_BATCH_MAX_CHARS = 4096;
     wss;
@@ -491,6 +493,7 @@ export class BridgeWebSocketServer {
     allowedDirs;
     imageStore;
     mediaStore;
+    uploadStore;
     galleryStore;
     projectHistory;
     debugTraceStore;
@@ -535,6 +538,7 @@ export class BridgeWebSocketServer {
     fileListMaxEntries;
     fileListMaxBytes;
     fileDownloadMaxBytes;
+    fileUploadMaxBytes;
     deltaBatchMs;
     deltaBatchMaxChars;
     deltaBatches = new Map();
@@ -543,11 +547,12 @@ export class BridgeWebSocketServer {
     pendingClaudeResumeInputs = new WeakMap();
     resumeOperations = new Map();
     constructor(options) {
-        const { server, apiKey, allowedDirs, imageStore, mediaStore, galleryStore, projectHistory, debugTraceStore, recordingStore, firebaseAuth, promptHistoryBackup, promptHistoryStore, platform, fileListMaxEntries, fileListMaxBytes, fileDownloadMaxBytes, deltaBatchMs, deltaBatchMaxChars, } = options;
+        const { server, apiKey, allowedDirs, imageStore, mediaStore, uploadStore, galleryStore, projectHistory, debugTraceStore, recordingStore, firebaseAuth, promptHistoryBackup, promptHistoryStore, platform, fileListMaxEntries, fileListMaxBytes, fileDownloadMaxBytes, fileUploadMaxBytes, deltaBatchMs, deltaBatchMaxChars, } = options;
         this.apiKey = apiKey ?? null;
         this.allowedDirs = allowedDirs ?? [];
         this.imageStore = imageStore ?? null;
         this.mediaStore = mediaStore ?? null;
+        this.uploadStore = uploadStore ?? null;
         this.galleryStore = galleryStore ?? null;
         this.projectHistory = projectHistory ?? null;
         this.debugTraceStore = debugTraceStore ?? new DebugTraceStore();
@@ -560,6 +565,7 @@ export class BridgeWebSocketServer {
         this.fileListMaxEntries = normalizePositiveLimit(fileListMaxEntries, positiveEnvInt("BRIDGE_FILE_LIST_MAX_ENTRIES", BridgeWebSocketServer.DEFAULT_FILE_LIST_MAX_ENTRIES));
         this.fileListMaxBytes = normalizePositiveLimit(fileListMaxBytes, positiveEnvInt("BRIDGE_FILE_LIST_MAX_BYTES", BridgeWebSocketServer.DEFAULT_FILE_LIST_MAX_BYTES));
         this.fileDownloadMaxBytes = normalizePositiveLimit(fileDownloadMaxBytes, positiveEnvInt("BRIDGE_FILE_DOWNLOAD_MAX_SIZE_MB", BridgeWebSocketServer.DEFAULT_FILE_DOWNLOAD_MAX_BYTES / 1024 / 1024) * 1024 * 1024);
+        this.fileUploadMaxBytes = normalizePositiveLimit(fileUploadMaxBytes, positiveEnvInt("BRIDGE_FILE_UPLOAD_MAX_SIZE_MB", BridgeWebSocketServer.DEFAULT_FILE_UPLOAD_MAX_BYTES / 1024 / 1024) * 1024 * 1024);
         this.deltaBatchMs = normalizeNonNegativeLimit(deltaBatchMs, nonNegativeEnvInt("BRIDGE_DELTA_BATCH_MS", BridgeWebSocketServer.DEFAULT_DELTA_BATCH_MS));
         this.deltaBatchMaxChars = normalizePositiveLimit(deltaBatchMaxChars, positiveEnvInt("BRIDGE_DELTA_BATCH_MAX_CHARS", BridgeWebSocketServer.DEFAULT_DELTA_BATCH_MAX_CHARS));
         this.archiveStore = new ArchiveStore();
@@ -714,6 +720,77 @@ export class BridgeWebSocketServer {
             this.sendFileDownloadError(ws, request, "file_download_failed", "Unable to prepare the file download.");
         }
     }
+    sendFileUploadError(ws, requestId, errorCode, message, path) {
+        this.send(ws, { type: "error", errorCode, message, requestId, path });
+    }
+    async prepareFileUpload(ws, request) {
+        const pathApi = this.platform === "win32" ? win32 : posix;
+        const projectPath = pathApi.resolve(request.projectPath);
+        if (!this.uploadStore ||
+            pathApi.isAbsolute(request.directoryPath) ||
+            !isSafeUploadFileName(request.fileName)) {
+            this.sendFileUploadError(ws, request.requestId, !this.uploadStore ? "file_upload_unavailable" : "file_upload_not_allowed", !this.uploadStore
+                ? "File uploads are unavailable on this Bridge."
+                : "The upload destination or file name is not allowed.", request.directoryPath);
+            return;
+        }
+        if (request.sizeBytes > this.fileUploadMaxBytes) {
+            this.sendFileUploadError(ws, request.requestId, "file_upload_too_large", `File is too large to upload. Maximum size is ${Math.ceil(this.fileUploadMaxBytes / 1024 / 1024)} MB.`, request.fileName);
+            return;
+        }
+        const requestedDirectory = pathApi.resolve(projectPath, request.directoryPath || ".");
+        if (!this.isPathAllowed(projectPath) ||
+            !isPathWithinAllowedDirectory(requestedDirectory, projectPath, this.platform)) {
+            this.sendFileUploadError(ws, request.requestId, "file_upload_not_allowed", "The upload destination is outside the current project.", request.directoryPath);
+            return;
+        }
+        try {
+            const canonicalProject = await realpath(projectPath);
+            const canonicalDirectory = await realpath(requestedDirectory);
+            const directoryStat = await stat(canonicalDirectory);
+            if (!directoryStat.isDirectory() ||
+                !isPathWithinAllowedDirectory(canonicalDirectory, canonicalProject, this.platform) ||
+                !(await this.isCanonicalPathAllowed(canonicalDirectory))) {
+                throw new UploadStoreError("file_upload_directory_changed", "The upload destination is not allowed.");
+            }
+            const ref = await this.uploadStore.register({
+                directoryPath: canonicalDirectory,
+                relativeDirectoryPath: pathApi
+                    .relative(projectPath, requestedDirectory)
+                    .split(pathApi.sep)
+                    .join("/"),
+                fileName: request.fileName,
+                sizeBytes: request.sizeBytes,
+                conflictPolicy: request.conflictPolicy,
+            });
+            this.send(ws, {
+                type: "file_upload_ready",
+                requestId: request.requestId,
+                fileName: request.fileName,
+                sizeBytes: request.sizeBytes,
+                uploadUrl: ref.url,
+                uploadToken: ref.token,
+            });
+        }
+        catch (error) {
+            const known = error instanceof UploadStoreError ? error : null;
+            this.sendFileUploadError(ws, request.requestId, known?.code ?? "file_upload_directory_not_found", known?.message ?? "The upload destination was not found or is not allowed.", request.directoryPath);
+        }
+    }
+    async finalizeFileUpload(ws, request) {
+        if (!this.uploadStore) {
+            this.sendFileUploadError(ws, request.requestId, "file_upload_unavailable", "File uploads are unavailable on this Bridge.");
+            return;
+        }
+        try {
+            const result = await this.uploadStore.finalize(request.uploadToken, request.sha256);
+            this.send(ws, { type: "file_upload_complete", requestId: request.requestId, ...result });
+        }
+        catch (error) {
+            const known = error instanceof UploadStoreError ? error : null;
+            this.sendFileUploadError(ws, request.requestId, known?.code ?? "file_upload_failed", known?.message ?? "Unable to finish the file upload.");
+        }
+    }
     /** Build a user-friendly error for disallowed project paths. */
     buildPathNotAllowedError(projectPath) {
         return {
@@ -4136,6 +4213,19 @@ export class BridgeWebSocketServer {
                 void this.prepareFileDownload(ws, msg);
                 break;
             }
+            case "prepare_file_upload": {
+                void this.prepareFileUpload(ws, msg);
+                break;
+            }
+            case "finalize_file_upload": {
+                void this.finalizeFileUpload(ws, msg);
+                break;
+            }
+            case "cancel_file_upload": {
+                if (this.uploadStore)
+                    void this.uploadStore.cancel(msg.uploadToken);
+                break;
+            }
             case "read_file":
             case "read_media_file": {
                 const absPath = resolve(msg.projectPath, msg.filePath);