@livedesk/client 0.1.5 → 0.1.7

package/README.md

@@ -25,20 +25,11 @@ http://127.0.0.1:5198/callback
 If you use a custom port, run `npx @livedesk/client --auth-port 5200` and add
 the matching callback URL to Supabase Auth redirect URLs.
 
-For manual LAN fallback, start `@livedesk/hub` with an externally reachable
-RemoteHub host and pass the address/token explicitly:
-
-```powershell
-$env:REMOTE_HUB_HOST="0.0.0.0"
-$env:REMOTE_HUB_PORT="5197"
-npm run dev:hub
-
-npx @livedesk/client --no-login --manager 192.168.0.10:5197 --pair <strong-token> --slot 2
-```
-
 The client registers the device, sends status heartbeats, can return
 manager-requested thumbnails, can stream a focused view-only live screen, and
-can receive safe task-only instructions.
+can receive safe task-only instructions. When file transfer is enabled by the
+manager, received files are saved to `Desktop/LiveDeskFiles` unless the manager
+sets another destination folder.
 
 By default, the launcher uses the packaged C# RemoteFast engine when supported.
 It falls back to the Node engine for AI assist or when a compatible .NET runtime

package/bin/livedesk-client-node.js

@@ -14,6 +14,8 @@ const DEFAULT_LIVE_FPS = 20;
 const MAX_LIVE_FPS = 24;
 const MAX_FRAME_BASE64_CHARS = 3 * 1024 * 1024;
 const MAX_AI_OUTPUT_CHARS = 6000;
+const MAX_FILE_TRANSFER_FILES = 24;
+const MAX_FILE_TRANSFER_BYTES = 24 * 1024 * 1024;
 
 function printHelp() {
     console.log(`
@@ -35,6 +37,7 @@ Options:
   --no-live              Disable focused live screen streaming.
   --tasks                Enable safe remote task inbox. Default on.
   --no-tasks             Disable remote task dispatch capability.
+  --files-dir <path>     Default folder for received files. Default: ~/Desktop/LiveDeskFiles.
   --ai                   Enable OpenAI-backed remote AI assist tasks.
   --no-ai                Disable OpenAI-backed remote AI assist tasks.
   --ai-model <model>     OpenAI model for AI assist. Default: ${DEFAULT_AI_MODEL}
@@ -68,6 +71,7 @@ function parseArgs(argv) {
         thumbnailEnabled: defaultDesktopCaptureEnabled && !isFalsy(process.env.LIVEDESK_CLIENT_THUMBNAIL ?? process.env.MINDEXEC_REMOTE_THUMBNAIL),
         liveEnabled: defaultDesktopCaptureEnabled && !isFalsy(process.env.LIVEDESK_CLIENT_LIVE ?? process.env.MINDEXEC_REMOTE_LIVE),
         taskEnabled: !isFalsy(process.env.LIVEDESK_CLIENT_TASKS ?? process.env.MINDEXEC_REMOTE_TASKS),
+        filesDir: process.env.LIVEDESK_CLIENT_FILES_DIR || process.env.MINDEXEC_REMOTE_FILES_DIR || '',
         aiEnabled: isTruthy(process.env.LIVEDESK_CLIENT_AI || process.env.MINDEXEC_REMOTE_AI),
         aiModel: process.env.LIVEDESK_CLIENT_AI_MODEL || process.env.MINDEXEC_REMOTE_AI_MODEL || process.env.OPENAI_MODEL || DEFAULT_AI_MODEL,
         openAiApiKey: process.env.OPENAI_API_KEY || '',
@@ -123,6 +127,9 @@ function parseArgs(argv) {
             case '--no-tasks':
                 result.taskEnabled = false;
                 break;
+            case '--files-dir':
+                result.filesDir = args[++index] || result.filesDir;
+                break;
             case '--ai':
                 result.aiEnabled = true;
                 result.taskEnabled = true;
@@ -255,6 +262,95 @@ function wait(ms) {
     return new Promise(resolve => setTimeout(resolve, ms));
 }
 
+function getDefaultFilesDir() {
+    return path.join(os.homedir(), 'Desktop', 'LiveDeskFiles');
+}
+
+function normalizeDirectoryPath(value, fallback = getDefaultFilesDir()) {
+    const text = String(value || '').replace(/\0/g, '').trim();
+    if (!text) {
+        return fallback;
+    }
+    if (path.isAbsolute(text)) {
+        return path.resolve(text);
+    }
+    return path.resolve(fallback, text);
+}
+
+function sanitizePathSegment(value, fallback = 'file') {
+    const text = String(value || '')
+        .replace(/\0/g, '')
+        .replace(/[<>:"|?*\x00-\x1f]/g, '_')
+        .replace(/[\\/]+/g, '_')
+        .trim();
+    const normalized = text && text !== '.' && text !== '..' ? text : fallback;
+    return normalized.slice(0, 160);
+}
+
+function sanitizeRelativeFilePath(value, fallbackName = 'file') {
+    const parts = String(value || '')
+        .replace(/\0/g, '')
+        .split(/[\\/]+/)
+        .map(part => sanitizePathSegment(part, ''))
+        .filter(Boolean)
+        .filter(part => part !== '.' && part !== '..');
+    if (parts.length === 0) {
+        return sanitizePathSegment(fallbackName, 'file');
+    }
+    return path.join(...parts.slice(-8));
+}
+
+async function handleFileTransferCommand(options, payload = {}) {
+    const files = Array.isArray(payload.files) ? payload.files.slice(0, MAX_FILE_TRANSFER_FILES) : [];
+    if (files.length === 0) {
+        throw new Error('No files were included in the transfer.');
+    }
+
+    const baseDir = normalizeDirectoryPath(payload.remoteDirectory || options.filesDir);
+    await fs.mkdir(baseDir, { recursive: true });
+
+    let totalBytes = 0;
+    const saved = [];
+    for (const file of files) {
+        const name = sanitizePathSegment(file?.name, 'file');
+        const relativePath = sanitizeRelativeFilePath(file?.relativePath || name, name);
+        const targetPath = path.resolve(baseDir, relativePath);
+        const relativeFromBase = path.relative(baseDir, targetPath);
+        if (relativeFromBase.startsWith('..') || path.isAbsolute(relativeFromBase)) {
+            throw new Error(`Unsafe file path: ${relativePath}`);
+        }
+
+        const dataBase64 = String(file?.dataBase64 || '').replace(/^data:[^,]*,/i, '').trim();
+        if (!dataBase64) {
+            throw new Error(`Missing file data: ${name}`);
+        }
+        const buffer = Buffer.from(dataBase64, 'base64');
+        totalBytes += buffer.length;
+        if (totalBytes > MAX_FILE_TRANSFER_BYTES) {
+            throw new Error('File transfer exceeded the local size limit.');
+        }
+
+        await fs.mkdir(path.dirname(targetPath), { recursive: true });
+        await fs.writeFile(targetPath, buffer);
+        saved.push({
+            name,
+            relativePath,
+            path: targetPath,
+            bytes: buffer.length
+        });
+    }
+
+    return {
+        kind: 'file.transfer',
+        transferId: String(payload.transferId || '').slice(0, 128),
+        status: 'completed',
+        directory: baseDir,
+        files: saved,
+        totalBytes,
+        completedAt: new Date().toISOString()
+    };
+}
+
 function clampNumber(value, min, max, fallback) {
     const number = Number(value);
     if (!Number.isFinite(number)) {
@@ -747,6 +843,24 @@ async function handleRemoteCommand(socket, options, message, nextFrameSeq, activ
         return;
     }
 
+    if (command === 'file.transfer') {
+        try {
+            const result = await handleFileTransferCommand(options, message.payload || {});
+            writeJsonLine(socket, {
+                type: 'command.result',
+                commandId: message.commandId,
+                result
+            });
+        } catch (error) {
+            writeJsonLine(socket, {
+                type: 'command.result',
+                commandId: message.commandId,
+                error: error?.message || String(error)
+            });
+        }
+        return;
+    }
+
     if (command === 'input.control') {
         writeJsonLine(socket, {
             type: 'command.result',
@@ -822,6 +936,9 @@ function connectOnce(options, deviceId) {
                     thumbnail: options.thumbnailEnabled,
                     liveStream: options.liveEnabled,
                     control: false,
+                    fileTransfer: true,
+                    remoteFiles: true,
+                    fileTransferMaxBytes: MAX_FILE_TRANSFER_BYTES,
                     computerAgent: options.taskEnabled,
                     taskDispatch: options.taskEnabled,
                     aiAssist: options.taskEnabled && options.aiEnabled && (options.fakeAi || !!options.openAiApiKey),

package/bin/livedesk-client.js

@@ -53,9 +53,6 @@ Options:
   --version                       Show the agent version.
   --help                          Show this help.
 
-Manual fallback:
-  npx @livedesk/client --no-login --manager 192.168.0.10:5197 --pair <token> --slot 2
-
 Auto uses C# RemoteFast when supported and falls back to Node for AI assist or
 when a packaged RemoteFast runtime is unavailable.
 `.trimStart());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livedesk/client",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "LiveDesk local remote client",
   "type": "module",
   "bin": {