@dev-anywhere/proxy 0.1.2 → 0.1.3

package/dist/serve.js

@@ -5,7 +5,7 @@ import {
   KnownContentBlockSchema,
   SeqCounter,
   StreamJsonEventSchema
-} from "./chunk-QXOARRC2.js";
+} from "./chunk-ODK6N2NP.js";
 import {
   createFSM,
   defineFSM,
@@ -14,7 +14,7 @@ import {
   serviceLogger,
   shouldReleaseApprovalWait,
   stateAfterApprovalRelease
-} from "./chunk-TG7JPHE5.js";
+} from "./chunk-JGGDVMY5.js";
 import {
   spawnScript
 } from "./chunk-ZUWAB67J.js";
@@ -46,7 +46,7 @@ import {
   serializeWorkerMsg,
   sessionPaths,
   tildify
-} from "./chunk-DFLQ3TFT.js";
+} from "./chunk-RFBTVZ2X.js";
 
 // src/serve.ts
 import { createServer as createServer2 } from "net";
@@ -702,6 +702,7 @@ function loadConfig(options) {
     hookPort: parsePort(process.env.DEV_ANYWHERE_HOOK_PORT, "DEV_ANYWHERE_HOOK_PORT") ?? defaultHookPortForProfile(PROFILE_NAME),
     claudeBin,
     codexBin,
+    previewRoots: uniqueAbsolutePaths(fromFile.previewRoots ?? []),
     agentCliSuggestions: {
       claude: uniqueAbsolutePaths([
         process.env.CLAUDE_BIN,
@@ -1083,7 +1084,7 @@ function extractConversationText(msg) {
   return null;
 }
 async function extractTitleAndCwd(filePath) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     const rl = createInterface({
       input: createReadStream(filePath, { encoding: "utf-8" }),
       crlfDelay: Infinity
@@ -1111,10 +1112,10 @@ async function extractTitleAndCwd(filePath) {
       }
     });
     rl.on("close", () => {
-      if (!resolved) resolve2({ title, cwd });
-      else resolve2({ title, cwd });
+      if (!resolved) resolve3({ title, cwd });
+      else resolve3({ title, cwd });
     });
-    rl.on("error", () => resolve2({ title, cwd }));
+    rl.on("error", () => resolve3({ title, cwd }));
   });
 }
 async function collectJsonlFiles(root) {
@@ -1136,7 +1137,7 @@ async function collectJsonlFiles(root) {
   return files;
 }
 async function extractCodexTitleAndCwd(filePath) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     const rl = createInterface({
       input: createReadStream(filePath, { encoding: "utf-8" }),
       crlfDelay: Infinity
@@ -1160,8 +1161,8 @@ async function extractCodexTitleAndCwd(filePath) {
       } catch {
       }
     });
-    rl.on("close", () => resolve2({ id, title, cwd }));
-    rl.on("error", () => resolve2({ id, title, cwd }));
+    rl.on("close", () => resolve3({ id, title, cwd }));
+    rl.on("error", () => resolve3({ id, title, cwd }));
   });
 }
 function extractCodexUserText(payload) {
@@ -1726,16 +1727,16 @@ var WorkerRegistry = class {
     return workerPid;
   }
   connect(sessionId, sockPath) {
-    return new Promise((resolve2) => {
+    return new Promise((resolve3) => {
       const sock = connect(sockPath);
       sock.on("connect", () => {
         this.sockets.set(sessionId, sock);
         createWorkerReader(sock, (msg) => this.handleWorkerMessage(sessionId, msg));
         sock.on("close", () => this.onDisconnect(sessionId));
         sock.on("error", () => this.onDisconnect(sessionId));
-        resolve2(sock);
+        resolve3(sock);
       });
-      sock.on("error", () => resolve2(null));
+      sock.on("error", () => resolve3(null));
     });
   }
   // 枚举 DATA_DIR 下所有 session 目录，尝试连接存活的 worker.sock；失败则清理 stale socket。
@@ -2175,6 +2176,108 @@ function saveClipboardImageUpload(request, options = {}) {
   }
 }
 
+// src/serve/image-preview.ts
+import { readFileSync as readFileSync6, realpathSync, statSync as statSync2 } from "fs";
+import { tmpdir } from "os";
+import { isAbsolute as isAbsolute4, relative as relative2, resolve as resolve2 } from "path";
+var MAX_IMAGE_PREVIEW_BYTES = 10 * 1024 * 1024;
+function isInsideRoot(realFilePath, realRootPath) {
+  const rel = relative2(realRootPath, realFilePath);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute4(rel);
+}
+function allowedRoots(options) {
+  return [options.cwd, options.tmpDir ?? tmpdir(), ...options.previewRoots ?? []].map((root) => root.trim()).filter(Boolean).flatMap((root) => {
+    try {
+      return [realpathSync(root)];
+    } catch {
+      return [];
+    }
+  });
+}
+function resolvePreviewPath(rawPath, options) {
+  const candidate = isAbsolute4(rawPath) ? resolve2(rawPath) : resolve2(options.cwd, rawPath);
+  const realCandidate = realpathSync(candidate);
+  if (!allowedRoots(options).some((root) => isInsideRoot(realCandidate, root))) {
+    throw Object.assign(new Error("\u56FE\u7247\u8DEF\u5F84\u4E0D\u5728\u5141\u8BB8\u9884\u89C8\u7684\u76EE\u5F55\u5185"), {
+      errorCode: ControlErrorCode.INVALID_PATH
+    });
+  }
+  return realCandidate;
+}
+function detectImageMime(buffer) {
+  if (buffer.length >= 8 && buffer[0] === 137 && buffer[1] === 80 && buffer[2] === 78 && buffer[3] === 71 && buffer[4] === 13 && buffer[5] === 10 && buffer[6] === 26 && buffer[7] === 10) {
+    return "image/png";
+  }
+  if (buffer.length >= 3 && buffer[0] === 255 && buffer[1] === 216 && buffer[2] === 255) {
+    return "image/jpeg";
+  }
+  if (buffer.length >= 12 && buffer.subarray(0, 4).toString("ascii") === "RIFF" && buffer.subarray(8, 12).toString("ascii") === "WEBP") {
+    return "image/webp";
+  }
+  if (buffer.length >= 6 && (buffer.subarray(0, 6).toString("ascii") === "GIF87a" || buffer.subarray(0, 6).toString("ascii") === "GIF89a")) {
+    return "image/gif";
+  }
+  return void 0;
+}
+function errorCode(err) {
+  if (err instanceof Error && "errorCode" in err && typeof err.errorCode === "string") {
+    return err.errorCode;
+  }
+  return classifyPathError(err);
+}
+function loadImagePreview(request, options) {
+  try {
+    const resolvedPath = resolvePreviewPath(request.path, options);
+    const stat2 = statSync2(resolvedPath);
+    if (!stat2.isFile()) {
+      return {
+        success: false,
+        sessionId: request.sessionId,
+        path: request.path,
+        error: "\u8DEF\u5F84\u4E0D\u662F\u56FE\u7247\u6587\u4EF6",
+        errorCode: ControlErrorCode.INVALID_PATH
+      };
+    }
+    const maxBytes = options.maxBytes ?? MAX_IMAGE_PREVIEW_BYTES;
+    if (stat2.size > maxBytes) {
+      return {
+        success: false,
+        sessionId: request.sessionId,
+        path: request.path,
+        error: "\u56FE\u7247\u8D85\u8FC7 10MB \u9650\u5236",
+        errorCode: ControlErrorCode.UNKNOWN
+      };
+    }
+    const buffer = readFileSync6(resolvedPath);
+    const mimeType = detectImageMime(buffer);
+    if (!mimeType) {
+      return {
+        success: false,
+        sessionId: request.sessionId,
+        path: request.path,
+        error: "\u4E0D\u652F\u6301\u8FD9\u79CD\u56FE\u7247\u683C\u5F0F",
+        errorCode: ControlErrorCode.UNKNOWN
+      };
+    }
+    return {
+      success: true,
+      sessionId: request.sessionId,
+      path: request.path,
+      mimeType,
+      dataBase64: buffer.toString("base64"),
+      size: buffer.length
+    };
+  } catch (err) {
+    return {
+      success: false,
+      sessionId: request.sessionId,
+      path: request.path,
+      error: err instanceof Error ? err.message : String(err),
+      errorCode: errorCode(err)
+    };
+  }
+}
+
 // src/serve/pty-input.ts
 function serializeRawPtyInput(sessionId, data) {
   return serializeIpc({ type: "pty_input", sessionId, data });
@@ -2289,6 +2392,43 @@ var RelayInputHandlers = class {
     );
     serviceLogger.info({ sessionId, success: result.success }, "Clipboard image upload handled");
   }
+  onImagePreviewRequest(msg) {
+    const sessionId = msg.sessionId;
+    const requestId = msg.requestId;
+    const path = msg.path;
+    if (!sessionId || !path) return;
+    const session = this.deps.sessionManager.getSession(sessionId);
+    if (!session) {
+      this.deps.relayConnection.sendRaw(
+        JSON.stringify({
+          type: "image_preview_response",
+          requestId,
+          sessionId,
+          success: false,
+          path,
+          error: "\u4F1A\u8BDD\u4E0D\u5B58\u5728",
+          errorCode: ControlErrorCode.SESSION_NOT_FOUND
+        })
+      );
+      serviceLogger.warn({ sessionId }, "Image preview rejected: session not found");
+      return;
+    }
+    const result = loadImagePreview(
+      { sessionId, path },
+      {
+        cwd: session.cwd,
+        previewRoots: this.deps.previewRoots
+      }
+    );
+    this.deps.relayConnection.sendRaw(
+      JSON.stringify({
+        type: "image_preview_response",
+        requestId,
+        ...result
+      })
+    );
+    serviceLogger.info({ sessionId, success: result.success }, "Image preview handled");
+  }
 };
 
 // src/serve/relay-history-handlers.ts
@@ -2488,14 +2628,14 @@ var RelayPermissionHandlers = class {
 
 // src/serve/relay-resource-handlers.ts
 import { homedir as homedir4 } from "os";
-import { accessSync, constants, statSync as statSync2 } from "fs";
+import { accessSync, constants, statSync as statSync3 } from "fs";
 function errorMessage(err) {
   return err instanceof Error ? err.message : String(err);
 }
 function validateExecutablePath(path) {
   const normalized = path.trim();
   if (!normalized.startsWith("/")) throw new Error("CLI \u8DEF\u5F84\u5FC5\u987B\u662F\u7EDD\u5BF9\u8DEF\u5F84");
-  const stat2 = statSync2(normalized);
+  const stat2 = statSync3(normalized);
   if (!stat2.isFile()) throw new Error("CLI \u8DEF\u5F84\u4E0D\u662F\u53EF\u6267\u884C\u6587\u4EF6");
   accessSync(normalized, constants.X_OK);
   return normalized;
@@ -2604,8 +2744,8 @@ var RelayResourceHandlers = class {
 };
 
 // src/serve/relay-session-create-handler.ts
-import { rmSync, statSync as statSync3 } from "fs";
-import { isAbsolute as isAbsolute4 } from "path";
+import { rmSync, statSync as statSync4 } from "fs";
+import { isAbsolute as isAbsolute5 } from "path";
 import { nanoid as nanoid4 } from "nanoid";
 
 // src/serve/hosted-pty-registry.ts
@@ -2895,11 +3035,11 @@ function validateSessionCwd(cwd) {
     return { message: "\u8BF7\u8F93\u5165\u5DE5\u4F5C\u76EE\u5F55", code: ControlErrorCode.INVALID_PATH };
   }
   const trimmed = cwd.trim();
-  if (!isAbsolute4(trimmed)) {
+  if (!isAbsolute5(trimmed)) {
     return { message: "\u5DE5\u4F5C\u76EE\u5F55\u5FC5\u987B\u662F\u7EDD\u5BF9\u8DEF\u5F84", code: ControlErrorCode.INVALID_PATH };
   }
   try {
-    const stat2 = statSync3(trimmed);
+    const stat2 = statSync4(trimmed);
     return stat2.isDirectory() ? null : { message: "\u5DE5\u4F5C\u76EE\u5F55\u4E0D\u662F\u76EE\u5F55", code: ControlErrorCode.PATH_NOT_DIRECTORY };
   } catch (err) {
     return {
@@ -3148,7 +3288,8 @@ var RelayRouter = class {
       relayConnection: deps.relayConnection,
       terminalSockets: deps.terminalSockets,
       hostedPtyRegistry: deps.hostedPtyRegistry,
-      jsonObserver: deps.jsonObserver
+      jsonObserver: deps.jsonObserver,
+      previewRoots: deps.getPreviewRoots?.()
     });
     this.resourceHandlers = new RelayResourceHandlers({
       relaySend: deps.relaySend,
@@ -3206,6 +3347,7 @@ var RelayRouter = class {
     user_input: (msg) => this.inputHandlers.onUserInput(msg),
     remote_input_raw: (msg) => this.inputHandlers.onRemoteInputRaw(msg),
     clipboard_image_upload: (msg) => this.inputHandlers.onClipboardImageUpload(msg),
+    image_preview_request: (msg) => this.inputHandlers.onImagePreviewRequest(msg),
     tool_approve: (msg) => this.permissionHandlers.onToolApprove(msg),
     tool_deny: (msg) => this.permissionHandlers.onToolDeny(msg),
     proxy_info_request: (msg) => this.resourceHandlers.onProxyInfoRequest(msg),
@@ -3396,11 +3538,11 @@ var PermissionBroker = class {
         message: "Duplicate permission request id."
       });
     }
-    return new Promise((resolve2) => {
+    return new Promise((resolve3) => {
       this.pending.set(request.requestId, {
         ...request,
         source: "hook",
-        resolve: resolve2,
+        resolve: resolve3,
         createdAt: Date.now()
       });
     });
@@ -3695,14 +3837,14 @@ function touchSessionActivity(sessionManager, relay, sessionId, now = Date.now()
 
 // src/serve/service-files.ts
 import { execSync } from "child_process";
-import { existsSync as existsSync6, readFileSync as readFileSync6, unlinkSync as unlinkSync2 } from "fs";
+import { existsSync as existsSync6, readFileSync as readFileSync7, unlinkSync as unlinkSync2 } from "fs";
 import { hostname } from "os";
 import { connect as connect2 } from "net";
 function tryConnectSocket(sockPath) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     const s = connect2(sockPath);
-    s.on("connect", () => resolve2(s));
-    s.on("error", () => resolve2(null));
+    s.on("connect", () => resolve3(s));
+    s.on("error", () => resolve3(null));
   });
 }
 function isProcessAlive(pid) {
@@ -3727,7 +3869,7 @@ async function cleanupStaleResources() {
     serviceLogger.info("Removed stale socket file");
   }
   if (existsSync6(PID_PATH)) {
-    const pidStr = readFileSync6(PID_PATH, "utf-8").trim();
+    const pidStr = readFileSync7(PID_PATH, "utf-8").trim();
     const pid = parseInt(pidStr, 10);
     if (!isNaN(pid) && isProcessAlive(pid)) {
       const msg = `Another service is already running with PID ${pid}`;
@@ -4102,7 +4244,7 @@ function handleTerminalConnection(socket, deps) {
 
 // src/serve/hook-registry.ts
 import { createHash, randomBytes } from "crypto";
-import { existsSync as existsSync7, mkdirSync as mkdirSync5, readFileSync as readFileSync7, renameSync as renameSync2, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync5, readFileSync as readFileSync8, renameSync as renameSync2, writeFileSync as writeFileSync5 } from "fs";
 import { dirname as dirname4 } from "path";
 import { z } from "zod";
 var PersistedHookSessionBindingSchema = z.object({
@@ -4166,7 +4308,7 @@ var HookRegistry = class {
     if (!this.persistPath || !existsSync7(this.persistPath)) return;
     try {
       const parsed = PersistedHookRegistrySchema.parse(
-        JSON.parse(readFileSync7(this.persistPath, "utf8"))
+        JSON.parse(readFileSync8(this.persistPath, "utf8"))
       );
       this.bindingsBySession.clear();
       for (const binding of parsed.bindings) {
@@ -4236,7 +4378,7 @@ var HookServer = class {
         this.writeJson(res, 500, { error: "internal_error" });
       });
     });
-    return new Promise((resolve2, reject) => {
+    return new Promise((resolve3, reject) => {
       const onError = (err) => {
         this.server?.off("listening", onListening);
         reject(err);
@@ -4244,7 +4386,7 @@ var HookServer = class {
       const onListening = () => {
         this.server?.off("error", onError);
         serviceLogger.info({ host: this.host, port: this.options.port }, "Hook server listening");
-        resolve2();
+        resolve3();
       };
       this.server.once("error", onError);
       this.server.once("listening", onListening);
@@ -4255,8 +4397,8 @@ var HookServer = class {
     if (!this.server) return Promise.resolve();
     const server = this.server;
     this.server = null;
-    return new Promise((resolve2, reject) => {
-      server.close((err) => err ? reject(err) : resolve2());
+    return new Promise((resolve3, reject) => {
+      server.close((err) => err ? reject(err) : resolve3());
     });
   }
   getListeningPort() {
@@ -4370,7 +4512,7 @@ var HookServer = class {
     this.writeJson(res, 200, payload);
   }
   readBody(req) {
-    return new Promise((resolve2, reject) => {
+    return new Promise((resolve3, reject) => {
       let body = "";
       let size = 0;
       req.setEncoding("utf8");
@@ -4383,7 +4525,7 @@ var HookServer = class {
         }
         body += chunk;
       });
-      req.on("end", () => resolve2(body));
+      req.on("end", () => resolve3(body));
       req.on("error", reject);
     });
   }
@@ -4531,6 +4673,7 @@ async function startService(options) {
   let proxyConfig = loadConfig({ relayName: options?.relayName });
   const getProviderEnv = () => buildProviderEnv(proxyConfig, process.env);
   const getAgentCliSuggestions = () => proxyConfig.agentCliSuggestions;
+  const getPreviewRoots = () => proxyConfig.previewRoots;
   const setAgentCliPath = (provider, path) => {
     const field = provider === "claude" ? "claudeBin" : "codexBin";
     const existing = proxyConfig.agentCliSuggestions[provider] ?? [];
@@ -4658,7 +4801,8 @@ async function startService(options) {
     agentStatusRegistry,
     getProviderEnv,
     getAgentCliSuggestions,
-    setAgentCliPath
+    setAgentCliPath,
+    getPreviewRoots
   });
   relayConnection.on("message", (msg) => relayRouter.handle(msg));
   relayConnection.on("connected", () => {