@walkhi/code-relax 0.1.0-beta.26 → 0.1.0-beta.27

package/dist/shared/file-citations.cjs

@@ -0,0 +1,82 @@
+(function (root, factory) {
+  const api = factory();
+  if (typeof module === 'object' && module.exports) module.exports = api;
+  else root.CodexFileCitations = api;
+})(globalThis, function () {
+  const prefix = ':codex-file-citation{';
+
+  function parse(source, start) {
+    if (!source.startsWith(prefix, start)) return null;
+    const attributes = Object.create(null);
+    let position = start + prefix.length;
+    while (position < source.length) {
+      while (/[ \t]/.test(source[position] || '')) position++;
+      if (source[position] === '}') return { attributes, end: position + 1 };
+      const key = /^[A-Za-z_][\w-]*/.exec(source.slice(position));
+      if (!key) return null;
+      position += key[0].length;
+      const afterKey = position;
+      while (/[ \t]/.test(source[position] || '')) position++;
+      let value = '';
+      const assigned = source[position] === '=';
+      if (assigned) {
+        position++;
+        while (/[ \t]/.test(source[position] || '')) position++;
+        const quote = source[position];
+        if (quote === '"' || quote === "'") {
+          position++;
+          while (position < source.length && source[position] !== quote) {
+            if (/[\r\n]/.test(source[position])) return null;
+            if (source[position] === '\\' && source[position + 1] === quote) position++;
+            value += source[position++];
+          }
+          if (source[position++] !== quote) return null;
+        } else {
+          const match = /^[^\s{}"']+/.exec(source.slice(position));
+          if (!match) return null;
+          value = match[0];
+          position += value.length;
+        }
+      }
+      attributes[key[0]] = value;
+      if ((assigned || position === afterKey) && source[position] !== '}' && !/[ \t]/.test(source[position] || '')) return null;
+    }
+    return null;
+  }
+
+  function positiveLine(value) {
+    const line = /^\d+$/.test(value || '') ? Number(value) : 0;
+    return Number.isSafeInteger(line) && line > 0 ? line : null;
+  }
+
+  function install(markdown) {
+    markdown.inline.ruler.before('text', 'codex_file_citation', (state, silent) => {
+      if (!state.env?.allowFileCitations || state.linkLevel > 0) return false;
+      const result = parse(state.src, state.pos);
+      const attributes = result?.attributes;
+      const path = attributes?.path?.trim();
+      if (!path || /[\0\r\n]/.test(path)) return false;
+      const local = /^(?:[a-z]:[\\/]|\/(?!\/))/i.test(path);
+      if (!local && !/^https?:\/\//i.test(path)) return false;
+      const line = local ? positiveLine(attributes.lineRangeStart ?? attributes.line_range_start) : null;
+      const end = local ? positiveLine(attributes.lineRangeEnd ?? attributes.line_range_end) : null;
+      const reference = local ? encodeURI(path) + (line ? `:${line}` : '') : path;
+      const href = markdown.normalizeLink(reference);
+      if (!markdown.validateLink(href)) return false;
+      if (!silent) {
+        const link = state.push('link_open', 'a', 1);
+        link.attrSet('href', href);
+        link.attrSet('title', path);
+        link.meta = { fileCitation: { path, line, end: line && end >= line ? end : null, purpose: attributes.purpose } };
+        const label = state.push('text', '', 0);
+        label.content = local ? path.split(/[\\/]/).filter(Boolean).at(-1) || path
+          : attributes.label || attributes.title || path;
+        state.push('link_close', 'a', -1);
+      }
+      state.pos = result.end;
+      return true;
+    });
+  }
+
+  return Object.freeze({ install });
+});

package/dist/src/server.mjs

@@ -7,7 +7,8 @@ import { fileURLToPath } from 'node:url';
 import vm from 'node:vm';
 import sharp from 'sharp';
 import { attachLanSocket } from './lan-socket-server.mjs';
-import fileMentions from '../shared/file-mentions.cjs';
+import fileMentions from '../shared/file-mentions.cjs';
+import fileCitations from '../shared/file-citations.cjs';
 import { validateInlineImage } from './message-images.mjs';
 import { ThreadWriterConflictError } from './shared-app-server.mjs';
 import { ManagedAppServer, managedAppServerUrl } from './managed-app-server.mjs';
@@ -29,7 +30,10 @@ import { TurnModelHistory } from './turn-model-history.mjs';
 
 const turnModelHistory = new TurnModelHistory();
 
-const MAX_ATTACHMENT_BYTES = 16 * 1024 * 1024;
+const MAX_ATTACHMENT_BYTES = 16 * 1024 * 1024;
+const MAX_FILE_DOWNLOAD_BYTES = 16 * 1024 * 1024;
+// Each Base64 response fits the 8 MiB relay limit; full chunks have no padding.
+const FILE_DOWNLOAD_CHUNK_BYTES = 3 * 1024 * 1024;
 const MAX_CACHED_ATTACHMENTS = 32;
 const MAX_CACHED_FILES = 64;
 const MAX_CONTEXT_TAIL_BYTES = 4 * 1024 * 1024;
@@ -48,16 +52,25 @@ const ALLOWED_MODELS = new Set([
 ]);
 const ALLOWED_THINKING = new Set(['low', 'medium', 'high', 'xhigh', 'max', 'ultra']);
 
-class RequestError extends Error {
+class RequestError extends Error {
   constructor(statusCode, message, details) {
     super(message);
     this.statusCode = statusCode;
     this.details = details;
     this.code = details?.code;
   }
-}
-
-function readRuntimeVersion() {
+}
+
+function downloadOffset(rawOffset, size) {
+  const offset = Number(rawOffset);
+  if (!/^(0|[1-9]\d*)$/.test(rawOffset || '') || !Number.isSafeInteger(offset) ||
+      offset > size || offset % FILE_DOWNLOAD_CHUNK_BYTES !== 0) {
+    throw new RequestError(400, '无效的文件下载位置。');
+  }
+  return offset;
+}
+
+function readRuntimeVersion() {
   let directory = path.dirname(fileURLToPath(import.meta.url));
   while (true) {
     const manifest = readRecord(path.join(directory, 'package.json'));
@@ -77,7 +90,8 @@ const { codexDataRoot, stateRoot, sessionsRoot, uploadsRoot } = runtimePaths();
 const markdownItScript = fs.readFileSync(path.join(webRoot, 'vendor', 'markdown-it.umd.min.js'));
 const markdownSandbox = { atob };
 vm.runInNewContext(markdownItScript.toString(), markdownSandbox);
-const imageMarkdown = markdownSandbox.markdownit({ html: false });
+const imageMarkdown = markdownSandbox.markdownit({ html: false });
+fileCitations.install(imageMarkdown);
 const attachmentCache = new Map();
 const fileCache = new Map();
 const fileCapabilitySecret = crypto.randomBytes(32);
@@ -229,9 +243,18 @@ async function handleRequest(request, response) {
         } catch {}
       }
       if (!image) throw new RequestError(404, '这张图片已失效，无法从工作站重新读取。');
-      const thumbnail = url.searchParams.get('variant') === 'thumbnail';
-      const asset = thumbnail ? await attachmentThumbnail(image) : { buffer: image.buffer, mimeType: image.mimeType };
-      sendJson(response, 200, { url: `data:${asset.mimeType};base64,${asset.buffer.toString('base64')}` });
+      if (url.searchParams.get('variant') === 'thumbnail') {
+        const asset = await attachmentThumbnail(image);
+        sendJson(response, 200, { url: `data:${asset.mimeType};base64,${asset.buffer.toString('base64')}` });
+        return;
+      }
+      const size = image.buffer.length;
+      if (size > MAX_ATTACHMENT_BYTES) throw new RequestError(413, '图片超过下载上限（16 MiB），无法下载。');
+      if (!size) throw new RequestError(400, '图片为空，无法下载。');
+      const offset = downloadOffset(url.searchParams.get('offset'), size);
+      const data = image.buffer.subarray(offset, Math.min(size, offset + FILE_DOWNLOAD_CHUNK_BYTES));
+      sendJson(response, 200, { name: image.name || '图片', size, offset, mimeType: image.mimeType,
+        dataBase64: data.toString('base64') });
       return;
     }
 
@@ -239,14 +262,34 @@ async function handleRequest(request, response) {
     if (request.method === 'GET' && fileMatch) {
       const file = fileCache.get(fileMatch[1]);
       if (!file) throw new RequestError(404, '文件授权已失效，请重新读取对话。');
-      let stat;
-      try { stat = fs.statSync(file.path); } catch { throw new RequestError(404, '电脑上的文件已不存在。'); }
-      if (!stat.isFile() || stat.size !== file.size || stat.mtimeMs !== file.mtimeMs) {
-        fileCache.delete(fileMatch[1]);
-        throw new RequestError(409, '电脑上的文件已发生变化，请重新读取对话。');
-      }
-      if (stat.size > MAX_ATTACHMENT_BYTES) throw new RequestError(413, '暂只支持下载不超过 16 MiB 的文件。');
-      sendJson(response, 200, { name: file.name, size: file.size, dataBase64: fs.readFileSync(file.path).toString('base64') });
+      const offset = downloadOffset(url.searchParams.get('offset'), file.size);
+      let handle;
+      try { handle = fs.openSync(file.path, 'r'); }
+      catch (error) {
+        if (error.code === 'ENOENT') throw new RequestError(404, '电脑上的文件已不存在。');
+        throw error;
+      }
+      try {
+        const validate = () => {
+          const stat = fs.fstatSync(handle);
+          if (!stat.isFile() || stat.size !== file.size || stat.mtimeMs !== file.mtimeMs) {
+            fileCache.delete(fileMatch[1]);
+            throw new RequestError(409, '电脑上的文件已发生变化，请重新读取对话。');
+          }
+          if (stat.size > MAX_FILE_DOWNLOAD_BYTES) throw new RequestError(413, '文件超过下载上限（16 MiB），无法下载。');
+          if (!stat.size) throw new RequestError(400, '文件为空，无法下载。');
+        };
+        validate();
+        const data = Buffer.alloc(Math.min(FILE_DOWNLOAD_CHUNK_BYTES, file.size - offset));
+        let bytesRead = 0;
+        while (bytesRead < data.length) {
+          const count = fs.readSync(handle, data, bytesRead, data.length - bytesRead, offset + bytesRead);
+          if (!count) throw new RequestError(409, '电脑上的文件读取不完整，请重新读取对话。');
+          bytesRead += count;
+        }
+        validate();
+        sendJson(response, 200, { name: file.name, size: file.size, offset, dataBase64: data.toString('base64') });
+      } finally { fs.closeSync(handle); }
       return;
     }
 
@@ -1056,8 +1099,8 @@ function markdownImageAssets(text) {
   const assets = Object.create(null);
   function visit(tokens) {
     for (const token of tokens) {
-      const value = token.type === 'image' ? token.attrGet('src')
-        : token.type === 'link_open' ? token.attrGet('href') : null;
+      const value = token.type === 'image' ? token.attrGet('src')
+        : token.type === 'link_open' && !token.meta?.fileCitation ? token.attrGet('href') : null;
       if (value && !Object.hasOwn(assets, value)) {
         let localPath;
         try { localPath = decodeURIComponent(value); } catch { continue; }
@@ -1069,10 +1112,10 @@ function markdownImageAssets(text) {
           if (asset.available) assets[value] = asset;
         }
       }
-      if (token.children) visit(token.children);
+      if (token.children && token.type !== 'image') visit(token.children);
     }
   }
-  visit(imageMarkdown.parse(text, {}));
+  visit(imageMarkdown.parse(text, { allowFileCitations: true }));
   return assets;
 }
 
@@ -1093,10 +1136,10 @@ function markdownFileAssets(text) {
           }
         }
       }
-      if (token.children) visit(token.children);
+      if (token.children && token.type !== 'image') visit(token.children);
     }
   }
-  visit(imageMarkdown.parse(text, {}));
+  visit(imageMarkdown.parse(text, { allowFileCitations: true }));
   return assets;
 }
 
@@ -1104,7 +1147,7 @@ function rememberLocalFile(filePath) {
   try {
     const resolved = path.resolve(filePath);
     const stat = fs.statSync(resolved);
-    if (!stat.isFile() || stat.size > MAX_ATTACHMENT_BYTES) return null;
+    if (!stat.isFile()) return null;
     const id = crypto.createHmac('sha256', fileCapabilitySecret)
       .update(resolved).update('\0').update(String(stat.size)).update('\0').update(String(stat.mtimeMs)).digest('hex');
     if (!fileCache.has(id)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@walkhi/code-relax",
-  "version": "0.1.0-beta.26",
+  "version": "0.1.0-beta.27",
   "license": "UNLICENSED",
   "type": "module",
   "scripts": {