@yeaft/webchat-agent 0.1.821 → 0.1.822

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yeaft/webchat-agent",
-  "version": "0.1.821",
+  "version": "0.1.822",
   "description": "Remote agent for Yeaft WebChat — connects worker machines to the central server",
   "main": "index.js",
   "type": "module",

package/unify/attachments.js

@@ -40,8 +40,8 @@
  *     than swallowing it in a console.warn.
  */
 
-import { existsSync, mkdirSync, writeFileSync } from 'node:fs';
-import { basename, extname, join } from 'node:path';
+import { existsSync, mkdirSync, writeFileSync, readFileSync, statSync } from 'node:fs';
+import { basename, extname, join, resolve, relative, isAbsolute } from 'node:path';
 import { randomBytes } from 'node:crypto';
 
 // Same dir name Chat mode uses, so ".gitignore" rules and tool-side
@@ -54,6 +54,7 @@ const TEMP_UPLOAD_DIR = '.claude-tmp-attachments';
 //   - MAX_TOTAL_BYTES:    50 MiB across all files in one turn.
 export const MAX_FILES_PER_TURN = 16;
 export const MAX_TOTAL_BYTES = 50 * 1024 * 1024;
+export const MAX_PREVIEW_BYTES = 10 * 1024 * 1024;
 
 /**
  * Sanitize a user-supplied filename's basename for use as an on-disk
@@ -228,3 +229,49 @@ export function attachmentsForPersistence(promptAttachments) {
     isImage: !!f.isImage,
   }));
 }
+
+/**
+ * Resolve a persisted Unify attachment path to an on-disk file. The persisted
+ * path is intentionally relative (for tool use), so preview hydration must
+ * keep it inside the upload root instead of serving arbitrary files.
+ *
+ * @param {string} attachmentPath
+ * @param {{ cwd?: string }} [opts]
+ * @returns {string|null}
+ */
+export function resolvePersistedAttachmentPath(attachmentPath, opts = {}) {
+  if (!attachmentPath || typeof attachmentPath !== 'string') return null;
+  if (isAbsolute(attachmentPath)) return null;
+  const cwd = resolve(opts.cwd || process.cwd());
+  const uploadRoot = resolve(cwd, TEMP_UPLOAD_DIR);
+  const absPath = resolve(cwd, attachmentPath);
+  const rel = relative(uploadRoot, absPath);
+  if (rel === '' || rel.startsWith('..') || isAbsolute(rel)) return null;
+  return absPath;
+}
+
+/**
+ * Read a persisted image attachment into a short-lived preview payload for the
+ * web server. Returns null for non-images, bad paths, missing files, or files
+ * too large to cache as previews.
+ *
+ * @param {{name?:string, path?:string, mimeType?:string, isImage?:boolean}} att
+ * @param {{ cwd?: string }} [opts]
+ * @returns {{data:string,mimeType:string,filename:string}|null}
+ */
+export function persistedAttachmentPreviewPayload(att, opts = {}) {
+  if (!att || !att.isImage || !att.path) return null;
+  const absPath = resolvePersistedAttachmentPath(att.path, opts);
+  if (!absPath) return null;
+  try {
+    const st = statSync(absPath);
+    if (!st.isFile() || st.size > MAX_PREVIEW_BYTES) return null;
+    return {
+      data: readFileSync(absPath).toString('base64'),
+      mimeType: att.mimeType || 'application/octet-stream',
+      filename: att.name || basename(absPath),
+    };
+  } catch {
+    return null;
+  }
+}

package/unify/web-bridge.js

@@ -52,7 +52,7 @@ import { seedDefaultGroup } from './groups/seed-default.js';
 import {
   trimSnapshotForBudget,
 } from './history-compact.js';
-import { persistUnifyAttachments, attachmentsForPersistence } from './attachments.js';
+import { persistUnifyAttachments, attachmentsForPersistence, persistedAttachmentPreviewPayload } from './attachments.js';
 import { parseSeqFromId } from './conversation/persist.js';
 import { sliceLastNTurns } from './turn-utils.js';
 import { createVpStatusBroker } from './vp-status-broker.js';
@@ -584,6 +584,16 @@ function projectPersistedToVisibleHistoryEntry(m) {
   return entry && (entry.role === 'user' || entry.role === 'assistant') ? entry : null;
 }
 
+function hydrateHistoryAttachmentPreviews(attachments) {
+  if (!Array.isArray(attachments) || attachments.length === 0) return [];
+  return attachments.map((att) => {
+    if (!att || typeof att !== 'object') return att;
+    if (!att.isImage || att.preview || att.previewData) return att;
+    const payload = persistedAttachmentPreviewPayload(att);
+    return payload ? { ...att, previewData: payload } : att;
+  });
+}
+
 function loadVisibleGroupHistoryPage(store, groupId, limit, beforeSeq = null) {
   if (!store || !groupId || !(limit > 0)) return { messages: [], oldestSeq: null, hasMore: false };
 
@@ -3561,7 +3571,7 @@ export async function handleUnifyLoadHistory(msg) {
         message: {
           content: entry.content,
           id: entry.id || null,
-          ...(Array.isArray(entry.attachments) && entry.attachments.length > 0 ? { attachments: entry.attachments } : {}),
+          ...(Array.isArray(entry.attachments) && entry.attachments.length > 0 ? { attachments: hydrateHistoryAttachmentPreviews(entry.attachments) } : {}),
         },
         ts: entry.ts || null,
       }, { groupId: entry.groupId || null });
@@ -3655,7 +3665,7 @@ export async function handleUnifyLoadMoreHistory(msg) {
       role: m.role,
       content: m.content,
       groupId: m.groupId || null,
-      ...(Array.isArray(m.attachments) && m.attachments.length > 0 ? { attachments: m.attachments } : {}),
+      ...(Array.isArray(m.attachments) && m.attachments.length > 0 ? { attachments: hydrateHistoryAttachmentPreviews(m.attachments) } : {}),
       ...(m.speakerVpId ? { speakerVpId: m.speakerVpId } : {}),
     }));