@zlooks.cn/images-server 1.0.1

package/dist/storage/inspect-image.js

@@ -0,0 +1,36 @@
+import { createHash } from 'node:crypto';
+import sharp from 'sharp';
+import { IMAGE_MAX_BYTES } from '../domain/schema.js';
+import { ImageError } from '../domain/image-error.js';
+const formats = {
+    jpeg: ['image/jpeg', 'jpg'], png: ['image/png', 'png'], webp: ['image/webp', 'webp'],
+    gif: ['image/gif', 'gif'], heif: ['image/avif', 'avif'],
+};
+export async function inspectImage(bytes) {
+    if (!bytes.length || bytes.length > IMAGE_MAX_BYTES) {
+        throw new ImageError('IMAGE_TOO_LARGE', '图片为空或超过大小限制');
+    }
+    try {
+        const options = { animated: true, limitInputPixels: 40_000_000, failOn: 'warning' };
+        const metadata = await sharp(bytes, options).metadata();
+        if (!Object.hasOwn(formats, metadata.format))
+            throw new Error('Unsupported format');
+        const format = formats[metadata.format];
+        const width = metadata.width;
+        const height = metadata.pageHeight ?? metadata.height;
+        if (!width || !height || width * height * (metadata.pages ?? 1) > 40_000_000) {
+            throw new Error('Pixel limit exceeded');
+        }
+        if (metadata.format === 'heif' && metadata.compression !== 'av1')
+            throw new Error('Not AVIF');
+        await sharp(bytes, options).timeout({ seconds: 10 }).stats();
+        return {
+            mediaType: format[0], extension: format[1], width, height, byteSize: bytes.length,
+            sha256: createHash('sha256').update(bytes).digest('hex'),
+        };
+    }
+    catch {
+        throw new ImageError('INVALID_IMAGE', '不支持的图片、损坏的内容或超过像素限制');
+    }
+}
+//# sourceMappingURL=inspect-image.js.map

package/dist/storage/inspect-image.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect-image.js","sourceRoot":"","sources":["../../src/storage/inspect-image.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,MAAM,OAAO,GAAG;IACd,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC;IACpF,GAAG,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/C,CAAC;AAEX,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa;IAC9C,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACpD,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC;QAC7F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAA8B,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,CAAC;QACtD,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,KAAK,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,UAAU,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,WAAW,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9F,MAAM,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC7D,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM;YACjF,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SACzD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC"}

package/dist/storage/local-storage.d.ts

@@ -0,0 +1,10 @@
+export declare class LocalImageStorage {
+    private readonly root;
+    constructor(root?: string);
+    initialize(): Promise<void>;
+    private path;
+    publish(relative: string, bytes: Buffer): Promise<void>;
+    open(relative: string): Promise<import("node:fs/promises").FileHandle>;
+    remove(relative: string): Promise<void>;
+}
+//# sourceMappingURL=local-storage.d.ts.map

package/dist/storage/local-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-storage.d.ts","sourceRoot":"","sources":["../../src/storage/local-storage.ts"],"names":[],"mappings":"AAOA,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,YAAY,IAAI,SAA0C,EAAgC;IACpF,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAOhC;IACD,OAAO,CAAC,IAAI;IAGN,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB5D;IACK,IAAI,CAAC,QAAQ,EAAE,MAAM,kDAAkF;IACvG,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK5C;CACF"}

package/dist/storage/local-storage.js

@@ -0,0 +1,65 @@
+import { constants } from 'node:fs';
+import { link, mkdir, open, opendir, unlink } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { z } from 'zod';
+import { validateImagePath } from './image-path.js';
+export class LocalImageStorage {
+    root;
+    constructor(root = join(homedir(), '.zlooks.cn', 'images')) { this.root = resolve(root); }
+    async initialize() {
+        const staging = join(this.root, '.staging');
+        await mkdir(staging, { recursive: true, mode: 0o700 });
+        // Single-instance startup, before accepting any request.
+        for await (const entry of await opendir(staging)) {
+            if (z.uuid().safeParse(entry.name).success)
+                await unlink(join(staging, entry.name)).catch(ignoreMissing);
+        }
+    }
+    path(relative) {
+        return join(this.root, validateImagePath(relative));
+    }
+    async publish(relative, bytes) {
+        const target = this.path(relative);
+        await mkdir(dirname(target), { recursive: true, mode: 0o700 });
+        const stage = join(this.root, '.staging', randomUUID());
+        const handle = await open(stage, 'wx', 0o600);
+        try {
+            await handle.writeFile(bytes);
+            await handle.sync();
+            // link is atomic and fails on EEXIST; rename would silently replace an original.
+            await link(stage, target);
+            // Persist the entire newly-created date hierarchy, not only the leaf.
+            for (let directory = dirname(target);; directory = dirname(directory)) {
+                await syncDirectory(directory);
+                if (directory === this.root)
+                    break;
+            }
+        }
+        finally {
+            await handle.close();
+            await unlink(stage).catch(ignoreMissing);
+        }
+    }
+    async open(relative) { return open(this.path(relative), constants.O_RDONLY | constants.O_NOFOLLOW); }
+    async remove(relative) {
+        const target = this.path(relative);
+        await unlink(target).catch(ignoreMissing);
+        // Commit the unlink before the database can acknowledge a durable deletion.
+        await syncDirectory(dirname(target)).catch(ignoreMissing);
+    }
+}
+async function syncDirectory(path) {
+    const directory = await open(path, 'r');
+    try {
+        await directory.sync();
+    }
+    finally {
+        await directory.close();
+    }
+}
+function hasCode(error, code) { return typeof error === 'object' && error !== null && 'code' in error && error.code === code; }
+function ignoreMissing(error) { if (!hasCode(error, 'ENOENT'))
+    throw error; }
+//# sourceMappingURL=local-storage.js.map

package/dist/storage/local-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-storage.js","sourceRoot":"","sources":["../../src/storage/local-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,MAAM,OAAO,iBAAiB;IACX,IAAI,CAAS;IAC9B,YAAY,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1F,KAAK,CAAC,UAAU;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,yDAAyD;QACzD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACO,IAAI,CAAC,QAAgB;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,KAAa;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,iFAAiF;YACjF,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC1B,sEAAsE;YACtE,KAAK,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,GAAI,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvE,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC/B,IAAI,SAAS,KAAK,IAAI,CAAC,IAAI;oBAAE,MAAM;YACrC,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,QAAgB,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7G,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC1C,4EAA4E;QAC5E,MAAM,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC5D,CAAC;CACF;AACD,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC;QAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACtE,CAAC;AACD,SAAS,OAAO,CAAC,KAAc,EAAE,IAAY,IAAa,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;AACzJ,SAAS,aAAa,CAAC,KAAc,IAAU,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAE,MAAM,KAAK,CAAC,CAAC,CAAC"}

package/dist/storage/read-upload-bytes.d.ts

@@ -0,0 +1,3 @@
+import { type UploadImageInput } from '../domain/schema.js';
+export declare function readUploadBytes(input: UploadImageInput, signal: AbortSignal): Promise<Buffer>;
+//# sourceMappingURL=read-upload-bytes.d.ts.map

package/dist/storage/read-upload-bytes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-upload-bytes.d.ts","sourceRoot":"","sources":["../../src/storage/read-upload-bytes.ts"],"names":[],"mappings":"AACA,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE9E,wBAAsB,eAAe,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAOnG"}

package/dist/storage/read-upload-bytes.js

@@ -0,0 +1,11 @@
+import { ImageError } from '../domain/image-error.js';
+import { BASE64_MAX_BYTES } from '../domain/schema.js';
+export async function readUploadBytes(input, signal) {
+    signal.throwIfAborted();
+    const bytes = Buffer.from(input.base64, 'base64');
+    if (bytes.length > BASE64_MAX_BYTES || bytes.toString('base64') !== input.base64) {
+        throw new ImageError('INVALID_BASE64', 'Base64 内容无效或超过 6 MiB');
+    }
+    return bytes;
+}
+//# sourceMappingURL=read-upload-bytes.js.map

package/dist/storage/read-upload-bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-upload-bytes.js","sourceRoot":"","sources":["../../src/storage/read-upload-bytes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAyB,MAAM,qBAAqB,CAAC;AAE9E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAuB,EAAE,MAAmB;IAChF,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACjF,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -0,0 +1,69 @@
+{
+  "name": "@zlooks.cn/images-server",
+  "version": "1.0.1",
+  "private": false,
+  "type": "module",
+  "engines": {
+    "node": ">=24.0.0"
+  },
+  "bin": {
+    "zlooks-images-server": "dist/command/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "zlooks": {
+    "kind": "service",
+    "description": "独立 MCP 图床服务",
+    "dependsOn": [],
+    "commands": {
+      "db": [
+        "migrate"
+      ]
+    }
+  },
+  "dependencies": {
+    "@hile/cache": "4.0.1",
+    "@hile/context": "4.0.2",
+    "@hile/core": "4.0.1",
+    "@hile/ioredis": "4.0.1",
+    "@hile/logger": "4.0.1",
+    "@hile/mcp": "1.0.5",
+    "@hile/message-loader": "4.0.4",
+    "@hile/micro": "4.0.4",
+    "@hile/model": "4.0.3",
+    "@hile/redis-lock": "4.0.1",
+    "@hile/typeorm": "4.0.1",
+    "@zlooks.cn/database-command": "1.0.2",
+    "@zlooks.cn/infrastructure": "1.0.0",
+    "@zlooks.cn/public-asset": "1.0.1",
+    "@zlooks.cn/public-host-contract": "1.0.0",
+    "@zlooks.cn/registry-config": "1.0.0",
+    "@zlooks.cn/service-command": "1.0.0",
+    "detect-port": "2.1.0",
+    "ioredis": "5.11.1",
+    "pg": "8.23.0",
+    "range-parser": "1.3.0",
+    "sharp": "0.35.4",
+    "typeorm": "1.1.0",
+    "zod": "4.4.3"
+  },
+  "scripts": {
+    "build": "pnpm run clean && tsc -p tsconfig.json && fix-esm-import-path --preserve-import-type ./dist",
+    "clean": "node -e \"require('node:fs').rmSync('dist', { recursive: true, force: true })\"",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "dev": "hile start --dev --env-file ~/.zlooks.cn/.env",
+    "start": "hile start --env-file ~/.zlooks.cn/.env"
+  },
+  "devDependencies": {
+    "@hile/cli": "4.0.5",
+    "@types/node": "26.2.0",
+    "@types/range-parser": "1.2.7",
+    "fix-esm-import-path": "1.10.3",
+    "pg-mem": "3.0.14",
+    "typescript": "7.0.2",
+    "vitest": "4.1.11"
+  },
+  "gitHead": "0aaee21087cc402608c0f13836a0fa204e6a402a"
+}