@waterplus-ai/waterbuddy 0.2.9 → 0.2.37

package/lib/host/index.js

@@ -568,6 +568,33 @@ function expertRoutes(snapshot, store) {
         res.end(bytes)
       }),
     },
+    {
+      kind: 'exact',
+      path: '/api/waterbuddy/recommendations/image',
+      handler: guard(async (req, res) => {
+        if (req.method !== 'GET') return json(res, 405, { error: 'method-not-allowed' })
+        const query = new URL(req.url, 'http://127.0.0.1').searchParams
+        // name 取卡片对应的 slug（专家或专家团）；严格模式校验，杜绝目录穿越
+        const name = String(query.get('name') || query.get('division') || '').toLowerCase()
+        if (!/^[a-z0-9][a-z0-9-]{0,63}$/.test(name)) return json(res, 404, { error: 'image-not-found' })
+        const base = path.join(import.meta.dirname, '..', '..', 'assets', 'recommendations', name)
+        const candidates = [base + '.jpg', base + '.svg']
+        let file
+        let bytes
+        for (const candidate of candidates) {
+          try {
+            bytes = await fs.promises.readFile(candidate)
+            file = candidate
+            break
+          } catch {}
+        }
+        if (!file) return json(res, 404, { error: 'image-not-found' })
+        const extension = path.extname(file).toLowerCase()
+        const type = extension === '.svg' ? 'image/svg+xml' : 'image/jpeg'
+        res.writeHead(200, { 'content-type': type, 'cache-control': 'public, max-age=86400' })
+        res.end(bytes)
+      }),
+    },
     {
       kind: 'exact',
       path: '/api/waterbuddy/experts/enabled',

package/package.json

@@ -1,10 +1,9 @@
 {
   "name": "@waterplus-ai/waterbuddy",
-  "version": "0.2.9",
+  "version": "0.2.37",
   "description": "WaterPlusAI branding and Web profile bundle for DeepSeek Harness",
   "license": "UNLICENSED",
   "type": "module",
-  "packageManager": "pnpm@11.7.0",
   "main": "lib/host/index.js",
   "exports": {
     ".": "./lib/host/index.js",
@@ -20,6 +19,7 @@
     "lib/host/expert-store.js",
     "lib/client/index.js",
     "lib/shared/persona.js",
+    "assets/recommendations",
     "assets/experts",
     "patches/cordis.patch.yml",
     "README.md"
@@ -43,4 +43,4 @@
     "release:cdn": "pnpm run build:client && node scripts/build-cdn-release.mjs",
     "build:client": "node scripts/build-client.mjs"
   }
-}
+}