@sema-agent/server 7.43.0 → 7.44.0

package/dist/http/routes/attachments.js

@@ -1,9 +1,3 @@
-/**
- * design/158 A9 域模块 —— D-1 通用文件附件面(`/v1/attachments`:上传/取回/删除三动词)。
- *
- * owner 门无 oracle(未知与他人同答 404,与 notify 门同姿);上限=server 权威(reject-not-OOM);
- * mime 白名单是部署策略旋钮不是安全开关。本域零可变状态。
- */
 import { createHash } from "node:crypto";
 import { uuidv7, sanitizePathComponent } from "@sema-agent/core";
 import { HttpError } from "../../security.js";
@@ -14,19 +8,11 @@ export async function handleAttachments(req, res, url, ctx) {
     await handleAttachmentsBody(req, res, url, ctx, miss);
     return !miss.fell;
 }
-/** 路由体 = 从 `server.ts` 的 `handle()` 里**整段剪切**过来的原文(唯一改动:统一去缩进两格)。裸 `return;`
- *  的语义原样 =「本域已应答」;走到函数尾才是「没匹配上」,置 `miss.fell` 交回装配器继续下一个域。
- *  跨域的东西(deps / 助手 / 单域状态 / 每请求量)一律在首行解构出来,于是下面每一行都逐字不变。 */
 async function handleAttachmentsBody(req, res, url, ctx, miss) {
     const { deps } = ctx;
     const { rateLimited, quotaExceeded, safeDecode, readRawBody } = ctx.helpers;
-    // D-1 通用文件上传(clay 拍 2026-07-27:独立附件 store)——上传/取回/删除三动词。
-    // 语义:上传先行拿句柄 → TaskRequest.attachments 引用绑定(main.ts resolveSpec 半场)→ env 建立
-    // 时物化到执行环境(远程 lane factory 包装 / host lane 提交时直写)。owner 门无 oracle(未知与
-    // 他人同答 404,notify 门同姿);上限=server 权威(reject-not-OOM,sync-blob 同姿);
-    // mime 白名单是部署策略旋钮非安全开关(声明 mime 不可验证;真防线=尺寸上限+沙箱内消费)。
     {
-        const am = /^\/v1\/attachments(?:\/([^/?]+))?$/.exec(url); // NB: `url` 已剥 query(:1017),参数读 req.url
+        const am = /^\/v1\/attachments(?:\/([^/?]+))?$/.exec(url);
         if (am) {
             if (rateLimited(req, res) || quotaExceeded(req, res))
                 return;
@@ -43,17 +29,14 @@ async function handleAttachmentsBody(req, res, url, ctx, miss) {
             const owner = principal ?? "default";
             const attId = am[1] !== undefined ? safeDecode(am[1]) : undefined;
             if (attId === undefined && req.method === "POST") {
-                // ── 上传:POST /v1/attachments?name=<urlencoded>,raw body,content-type=声明 mime ──
-                const q = new URL(req.url ?? "", "http://x").searchParams; // `url` 已剥 query
+                const q = new URL(req.url ?? "", "http://x").searchParams;
                 const rawName = q.get("name");
-                // 消毒:剥路径段(两种分隔符)取 basename,截长,再过 core 的组件验证器(throw 形——不合法
-                // 即拒;此处先自检同一规则把「用户给了个烂名」按 400 答而不是 500)。
                 const base = ((rawName ?? "").split(/[/\\]/).filter(Boolean).pop() ?? "").slice(0, 128);
                 if (!rawName || base === "" || base === "." || base === ".." || !/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(base)) {
                     sendError(res, 400, "request.query_invalid", "query param `name` is required and must reduce to a safe basename ([A-Za-z0-9._-], not starting with a dot)");
                     return;
                 }
-                const name = sanitizePathComponent(base); // 双保险:与 core 文件店同一验证器(不合法=上面已 400,这里恒过)
+                const name = sanitizePathComponent(base);
                 const mime = String(req.headers["content-type"] ?? "").split(";")[0].trim().toLowerCase();
                 if (!/^[a-z0-9!#$&^_.+-]+\/[a-z0-9!#$&^_.+-]+$/.test(mime) || mime.length > 128) {
                     sendError(res, 400, "request.query_invalid", "content-type must be a well-formed mime type (type/subtype)");
@@ -67,7 +50,7 @@ async function handleAttachmentsBody(req, res, url, ctx, miss) {
                 const max = deps.config.attachmentMaxBytes ?? 32 * 1024 * 1024;
                 let body;
                 try {
-                    body = await readRawBody(req, max); // 413s mid-stream(reject-not-OOM)
+                    body = await readRawBody(req, max);
                 }
                 catch (err) {
                     if (err instanceof HttpError && err.status === 413) {
@@ -100,7 +83,6 @@ async function handleAttachmentsBody(req, res, url, ctx, miss) {
                 res.writeHead(200, {
                     "content-type": meta.mime,
                     "content-length": String(bytes.byteLength),
-                    // RFC 5987 编码名(name 已消毒为安全 basename,URL 编码后恒 header-safe)
                     "content-disposition": `attachment; filename*=UTF-8''${encodeURIComponent(meta.name)}`,
                 });
                 res.end(Buffer.from(bytes));