boondmanager-mcp-server 2.17.0 → 2.19.0

package/dist/services/upload-relay.d.ts

@@ -0,0 +1,88 @@
+/** How long a slot stays usable after creation. */
+export declare const SLOT_TTL_MS: number;
+export interface SlotHandle {
+    /** Backend-private reference to the stored object (e.g. Graph folder id). */
+    ref: string;
+    /** Pre-authenticated URL the client PUTs the file to (single request). */
+    uploadUrl: string;
+    expiresAt: Date;
+}
+export interface StoredObject {
+    size: number;
+    /** Short-lived, pre-authenticated URL BoondManager can download. */
+    downloadUrl: string;
+}
+export interface RelayBackend {
+    readonly name: string;
+    createSlot(slotId: string, filename: string): Promise<SlotHandle>;
+    /** `undefined` when nothing was uploaded to the slot yet. */
+    stat(ref: string, filename: string): Promise<StoredObject | undefined>;
+    /** First bytes of the stored object, for type sniffing. */
+    head(downloadUrl: string, bytes: number): Promise<Buffer>;
+    purge(ref: string): Promise<void>;
+}
+export interface SharePointConfig {
+    tenantId: string;
+    clientId: string;
+    clientSecret: string;
+    /** `host:/sites/path` (Graph site key). */
+    site: string;
+    library: string;
+}
+/** Accept `https://host/sites/x`, `host/sites/x` or `host:/sites/x`. */
+export declare function normalizeSiteKey(raw: string): string;
+/** SharePoint forbids `" * : < > ? / \ |` and `#`/`%` cause URL trouble. */
+export declare function sanitizeSharePointName(filename: string): string;
+export declare class SharePointRelay implements RelayBackend {
+    private readonly cfg;
+    readonly name = "sharepoint";
+    private token?;
+    private driveId?;
+    constructor(cfg: SharePointConfig);
+    private accessToken;
+    private graph;
+    private graphOk;
+    private drive;
+    createSlot(slotId: string, filename: string): Promise<SlotHandle>;
+    stat(ref: string, filename: string): Promise<StoredObject | undefined>;
+    /** `/content` answers 302 to the same pre-authenticated URL; read it without following. */
+    private contentRedirect;
+    head(downloadUrl: string, bytes: number): Promise<Buffer>;
+    purge(ref: string): Promise<void>;
+}
+/** The configured backend, or a French explanation of why there is none. */
+export declare function relayFromEnv(env?: NodeJS.ProcessEnv): RelayBackend | string;
+export interface CreatedSlot {
+    uploadSlot: string;
+    uploadUrl: string;
+    expiresAt: string;
+    maxBytes: number;
+    filename: string;
+}
+export interface ClaimedUpload {
+    downloadUrl: string;
+    filename: string;
+    contentType: string;
+    size: number;
+    /** Purge the stored object; call once BoondManager has fetched it. */
+    release: () => Promise<void>;
+}
+/**
+ * In-memory registry of open slots. Single-use: a claimed slot is removed
+ * before BoondManager is called, so a retry needs a new slot. Expired slots
+ * are purged opportunistically whenever a new one is created.
+ */
+export declare class UploadRelay {
+    private readonly env;
+    private readonly slots;
+    private cachedBackend?;
+    constructor(env?: NodeJS.ProcessEnv);
+    private backend;
+    private maxBytes;
+    private sweep;
+    open(filename: string): Promise<CreatedSlot>;
+    claim(uploadSlot: string): Promise<ClaimedUpload>;
+}
+/** Process-wide registry (one server process = one set of slots). */
+export declare const uploadRelay: UploadRelay;
+//# sourceMappingURL=upload-relay.d.ts.map

package/dist/services/upload-relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-relay.d.ts","sourceRoot":"","sources":["../../src/services/upload-relay.ts"],"names":[],"mappings":"AA2BA,mDAAmD;AACnD,eAAO,MAAM,WAAW,QAAiB,CAAC;AAI1C,MAAM,WAAW,UAAU;IACzB,6EAA6E;IAC7E,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAClE,6DAA6D;IAC7D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;IACvE,2DAA2D;IAC3D,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAMD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQpD;AAED,4EAA4E;AAC5E,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAS/D;AAED,qBAAa,eAAgB,YAAW,YAAY;IAKtC,OAAO,CAAC,QAAQ,CAAC,GAAG;IAJhC,QAAQ,CAAC,IAAI,gBAAgB;IAC7B,OAAO,CAAC,KAAK,CAAC,CAAuC;IACrD,OAAO,CAAC,OAAO,CAAC,CAAS;gBAEI,GAAG,EAAE,gBAAgB;YAEpC,WAAW;YAyBX,KAAK;YAoBL,OAAO;YAWP,KAAK;IAqBb,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAuBjE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAoC5E,2FAA2F;YAC7E,eAAe;IAUvB,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IASzD,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAWxC;AAMD,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,YAAY,GAAG,MAAM,CAyBxF;AAQD,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED;;;;GAIG;AACH,qBAAa,WAAW;IAIV,OAAO,CAAC,QAAQ,CAAC,GAAG;IAHhC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2B;IACjD,OAAO,CAAC,aAAa,CAAC,CAAe;gBAER,GAAG,GAAE,MAAM,CAAC,UAAwB;IAEjE,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,QAAQ;YAIF,KAAK;IAUb,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAoB5C,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAiDxD;AAED,qEAAqE;AACrE,eAAO,MAAM,WAAW,aAAoB,CAAC"}

package/dist/services/upload-relay.js

@@ -0,0 +1,325 @@
+/**
+ * Upload relay for files that live neither at a public URL nor on the
+ * server's host — typically a conversation attachment, which sits in the MCP
+ * client's code-execution sandbox. The model cannot re-emit those bytes
+ * reliably (see `fileContent`), so they must travel outside its output:
+ *
+ *   1. `boond_documents_upload_slot` asks the relay for a single-use,
+ *      pre-authenticated upload URL on an object store the operator controls;
+ *   2. the client's sandbox PUTs the file there (`curl`), bytes never passing
+ *      through the model;
+ *   3. `boond_documents_create({ uploadSlot })` checks the stored file (size,
+ *      magic bytes), hands BoondManager a short-lived pre-authenticated
+ *      download URL through the existing `fileUrl` mechanism, then purges the
+ *      file — permanently, bypassing the recycle bin when the store allows.
+ *
+ * Store credentials stay on the server; the client only ever sees URLs scoped
+ * to one file and one slot. Off unless `BOOND_MCP_UPLOAD_RELAY` is set.
+ *
+ * Backends implement {@link RelayBackend}; `sharepoint` (Microsoft Graph,
+ * app-only `Sites.Selected`) is the first.
+ */
+import { randomUUID } from "node:crypto";
+import { extname } from "node:path";
+import { readPositiveInt, readString } from "../config/env.js";
+import { DEFAULT_UPLOAD_MAX_BYTES } from "../constants.js";
+import { sniffDocumentType, UploadRejectedError } from "./upload-source.js";
+/** How long a slot stays usable after creation. */
+export const SLOT_TTL_MS = 15 * 60 * 1000;
+const GRAPH = "https://graph.microsoft.com/v1.0";
+const REQUEST_TIMEOUT_MS = 30_000;
+/** Accept `https://host/sites/x`, `host/sites/x` or `host:/sites/x`. */
+export function normalizeSiteKey(raw) {
+    const s = raw
+        .trim()
+        .replace(/^https?:\/\//i, "")
+        .replace(/\/+$/, "");
+    if (s.includes(":/"))
+        return s;
+    const slash = s.indexOf("/");
+    return slash === -1 ? s : `${s.slice(0, slash)}:${s.slice(slash)}`;
+}
+/** SharePoint forbids `" * : < > ? / \ |` and `#`/`%` cause URL trouble. */
+export function sanitizeSharePointName(filename) {
+    const cleaned = filename
+        .replace(/["*:<>?/\\|#%]/g, "_")
+        .split("")
+        .filter((c) => c.charCodeAt(0) >= 0x20)
+        .join("")
+        .trim()
+        .replace(/^\.+|\.+$/g, "");
+    return (cleaned.length > 0 ? cleaned : "document").slice(0, 200);
+}
+export class SharePointRelay {
+    cfg;
+    name = "sharepoint";
+    token;
+    driveId;
+    constructor(cfg) {
+        this.cfg = cfg;
+    }
+    async accessToken() {
+        if (this.token && this.token.expiresAt > Date.now() + 60_000)
+            return this.token.value;
+        const body = new URLSearchParams({
+            grant_type: "client_credentials",
+            client_id: this.cfg.clientId,
+            client_secret: this.cfg.clientSecret,
+            scope: "https://graph.microsoft.com/.default",
+        });
+        const res = await fetch(`https://login.microsoftonline.com/${encodeURIComponent(this.cfg.tenantId)}/oauth2/v2.0/token`, { method: "POST", body, signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });
+        const json = (await res.json().catch(() => ({})));
+        if (!res.ok || !json.access_token) {
+            // Never echo the request (it carries the secret); the error code is enough.
+            throw new Error(`Relais SharePoint : authentification Entra ID refusée (${json.error ?? res.status}).`);
+        }
+        this.token = { value: json.access_token, expiresAt: Date.now() + (json.expires_in ?? 3600) * 1000 };
+        return this.token.value;
+    }
+    async graph(method, path, body) {
+        const res = await fetch(`${GRAPH}${path}`, {
+            method,
+            headers: {
+                Authorization: `Bearer ${await this.accessToken()}`,
+                ...(body === undefined ? {} : { "Content-Type": "application/json" }),
+            },
+            body: body === undefined ? null : JSON.stringify(body),
+            signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+        });
+        const text = await res.text();
+        let json = {};
+        try {
+            if (text)
+                json = JSON.parse(text);
+        }
+        catch {
+            // Non-JSON error page (proxy, throttling HTML): the status says enough.
+        }
+        return { status: res.status, json };
+    }
+    async graphOk(method, path, body) {
+        const { status, json } = await this.graph(method, path, body);
+        if (status >= 400) {
+            const e = json.error;
+            throw new Error(`Relais SharePoint : ${method} ${path.split("?")[0]} → ${status} ${e?.code ?? ""} ${e?.message ?? ""}`.trim());
+        }
+        return json;
+    }
+    async drive() {
+        if (this.driveId)
+            return this.driveId;
+        const site = await this.graphOk("GET", `/sites/${this.cfg.site}?$select=id`);
+        const drives = await this.graphOk("GET", `/sites/${site.id}/drives?$select=id,name,webUrl`);
+        const wanted = this.cfg.library.toLowerCase();
+        const match = drives.value.find((d) => d.name.toLowerCase() === wanted || (d.webUrl ?? "").toLowerCase().endsWith(`/${wanted}`));
+        if (!match) {
+            const names = drives.value.map((d) => d.name).join(", ");
+            throw new Error(`Relais SharePoint : bibliothèque « ${this.cfg.library} » introuvable sur le site (trouvées : ${names}).`);
+        }
+        this.driveId = match.id;
+        return match.id;
+    }
+    async createSlot(slotId, filename) {
+        const driveId = await this.drive();
+        // One folder per slot keeps the file's own name intact — BoondManager
+        // names the document after the download's Content-Disposition.
+        const folder = await this.graphOk("POST", `/drives/${driveId}/root/children`, {
+            name: `mcp-${slotId}`,
+            folder: {},
+            "@microsoft.graph.conflictBehavior": "fail",
+        });
+        const name = encodeURIComponent(sanitizeSharePointName(filename));
+        const session = await this.graphOk("POST", `/drives/${driveId}/items/${folder.id}:/${name}:/createUploadSession`, { item: { "@microsoft.graph.conflictBehavior": "fail" } });
+        const graphExpiry = session.expirationDateTime ? Date.parse(session.expirationDateTime) : Infinity;
+        return {
+            ref: folder.id,
+            uploadUrl: session.uploadUrl,
+            expiresAt: new Date(Math.min(Date.now() + SLOT_TTL_MS, graphExpiry)),
+        };
+    }
+    async stat(ref, filename) {
+        const driveId = await this.drive();
+        // List the slot's own folder instead of addressing the file by name: the
+        // folder is private to the slot, so whatever file it holds is the upload,
+        // and a name normalised differently by SharePoint cannot cause a miss.
+        // No $select: SharePoint does not reliably return the download-URL
+        // annotation under $select with app-only tokens.
+        const { status, json } = await this.graph("GET", `/drives/${driveId}/items/${ref}/children`);
+        if (status === 404) {
+            throw new UploadRejectedError("Dossier de transit du slot introuvable (supprimé à la main ?). Créer un nouveau slot avec `boond_documents_upload_slot`.");
+        }
+        if (status >= 400)
+            throw new Error(`Relais SharePoint : lecture du dossier de transit → ${status}.`);
+        const files = (json.value ?? []).filter((item) => item.file !== undefined);
+        if (files.length === 0)
+            return undefined;
+        const wanted = sanitizeSharePointName(filename).toLowerCase();
+        const item = files.find((f) => (f.name ?? "").toLowerCase() === wanted) ?? files[0];
+        if (item.size === undefined)
+            return undefined;
+        const downloadUrl = item["@microsoft.graph.downloadUrl"] ?? (await this.contentRedirect(driveId, item.id));
+        if (!downloadUrl) {
+            throw new Error(`Relais SharePoint : fichier déposé trouvé (${item.size} octets) mais Graph ne fournit pas d'URL de lecture temporaire.`);
+        }
+        return { size: item.size, downloadUrl };
+    }
+    /** `/content` answers 302 to the same pre-authenticated URL; read it without following. */
+    async contentRedirect(driveId, itemId) {
+        const res = await fetch(`${GRAPH}/drives/${driveId}/items/${itemId}/content`, {
+            headers: { Authorization: `Bearer ${await this.accessToken()}` },
+            redirect: "manual",
+            signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+        });
+        await res.body?.cancel().catch(() => undefined);
+        return res.status >= 300 && res.status < 400 ? (res.headers.get("location") ?? undefined) : undefined;
+    }
+    async head(downloadUrl, bytes) {
+        const res = await fetch(downloadUrl, {
+            headers: { Range: `bytes=0-${bytes - 1}` },
+            signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+        });
+        if (!res.ok)
+            throw new Error(`Relais SharePoint : lecture de l'en-tête du fichier → ${res.status}.`);
+        return Buffer.from(await res.arrayBuffer()).subarray(0, bytes);
+    }
+    async purge(ref) {
+        const driveId = await this.drive();
+        // permanentDelete skips the recycle bin (RGPD: CVs, payslips...). Fall
+        // back to a regular delete if the tenant refuses it.
+        const { status } = await this.graph("POST", `/drives/${driveId}/items/${ref}/permanentDelete`);
+        if (status < 400 || status === 404)
+            return;
+        const del = await this.graph("DELETE", `/drives/${driveId}/items/${ref}`);
+        if (del.status >= 400 && del.status !== 404) {
+            throw new Error(`Relais SharePoint : suppression du dossier de transit → ${del.status}.`);
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Configuration and slot registry
+// ---------------------------------------------------------------------------
+/** The configured backend, or a French explanation of why there is none. */
+export function relayFromEnv(env = process.env) {
+    const kind = (readString("BOOND_MCP_UPLOAD_RELAY", env) ?? "").toLowerCase();
+    if (kind === "") {
+        return "Relais d'upload désactivé : l'opérateur du serveur doit définir `BOOND_MCP_UPLOAD_RELAY` (valeur : `sharepoint`).";
+    }
+    if (kind !== "sharepoint") {
+        return `Relais d'upload inconnu : « ${kind} » (valeur acceptée : \`sharepoint\`).`;
+    }
+    const required = {
+        tenantId: "BOOND_MCP_SHAREPOINT_TENANT_ID",
+        clientId: "BOOND_MCP_SHAREPOINT_CLIENT_ID",
+        clientSecret: "BOOND_MCP_SHAREPOINT_CLIENT_SECRET",
+        site: "BOOND_MCP_SHAREPOINT_SITE",
+    };
+    const missing = Object.values(required).filter((name) => !readString(name, env));
+    if (missing.length > 0) {
+        return `Relais SharePoint incomplet : variable(s) manquante(s) ${missing.map((m) => `\`${m}\``).join(", ")}.`;
+    }
+    return new SharePointRelay({
+        tenantId: readString(required.tenantId, env),
+        clientId: readString(required.clientId, env),
+        clientSecret: readString(required.clientSecret, env),
+        site: normalizeSiteKey(readString(required.site, env)),
+        library: readString("BOOND_MCP_SHAREPOINT_LIBRARY", env) ?? "Documents",
+    });
+}
+/**
+ * In-memory registry of open slots. Single-use: a claimed slot is removed
+ * before BoondManager is called, so a retry needs a new slot. Expired slots
+ * are purged opportunistically whenever a new one is created.
+ */
+export class UploadRelay {
+    env;
+    slots = new Map();
+    cachedBackend;
+    constructor(env = process.env) {
+        this.env = env;
+    }
+    backend() {
+        if (this.cachedBackend)
+            return this.cachedBackend;
+        const resolved = relayFromEnv(this.env);
+        if (typeof resolved === "string")
+            throw new UploadRejectedError(resolved);
+        this.cachedBackend = resolved;
+        return resolved;
+    }
+    maxBytes() {
+        return readPositiveInt("BOOND_MCP_UPLOAD_MAX_BYTES", DEFAULT_UPLOAD_MAX_BYTES, this.env);
+    }
+    async sweep() {
+        const now = Date.now();
+        for (const [id, slot] of this.slots) {
+            if (slot.handle.expiresAt.getTime() <= now) {
+                this.slots.delete(id);
+                await slot.backend.purge(slot.handle.ref).catch(() => undefined);
+            }
+        }
+    }
+    async open(filename) {
+        const backend = this.backend();
+        const ext = extname(filename).toLowerCase();
+        if (ext === "") {
+            throw new UploadRejectedError("`fileName` doit comporter une extension (ex. « cv.pdf »).");
+        }
+        await this.sweep();
+        const uploadSlot = randomUUID();
+        const clean = sanitizeSharePointName(filename);
+        const handle = await backend.createSlot(uploadSlot, clean);
+        this.slots.set(uploadSlot, { backend, handle, filename: clean });
+        return {
+            uploadSlot,
+            uploadUrl: handle.uploadUrl,
+            expiresAt: handle.expiresAt.toISOString(),
+            maxBytes: this.maxBytes(),
+            filename: clean,
+        };
+    }
+    async claim(uploadSlot) {
+        const slot = this.slots.get(uploadSlot);
+        if (!slot) {
+            throw new UploadRejectedError(`\`uploadSlot\` inconnu ou déjà utilisé : « ${uploadSlot} ». Créer un nouveau slot avec \`boond_documents_upload_slot\`.`);
+        }
+        const purge = () => slot.backend.purge(slot.handle.ref);
+        if (slot.handle.expiresAt.getTime() <= Date.now()) {
+            this.slots.delete(uploadSlot);
+            await purge().catch(() => undefined);
+            throw new UploadRejectedError("Slot d'upload expiré. Créer un nouveau slot avec `boond_documents_upload_slot`.");
+        }
+        const stored = await slot.backend.stat(slot.handle.ref, slot.filename);
+        if (!stored) {
+            // Not consumed: the upload may still be in flight.
+            throw new UploadRejectedError("Aucun fichier dans le dossier de transit de ce slot : le dépôt n'est pas terminé ou n'a pas eu lieu. " +
+                "Exécuter la commande d'upload (réponse HTTP 200/201 attendue), puis réessayer.");
+        }
+        this.slots.delete(uploadSlot);
+        try {
+            const max = this.maxBytes();
+            if (stored.size > max) {
+                throw new UploadRejectedError(`Fichier trop volumineux : ${(stored.size / 1024 / 1024).toFixed(1)} Mo (max ${(max / 1024 / 1024).toFixed(1)} Mo).`);
+            }
+            const head = await slot.backend.head(stored.downloadUrl, 16);
+            const sniffed = sniffDocumentType(head, slot.filename);
+            if (!sniffed || !sniffed.extensions.includes(extname(slot.filename).toLowerCase())) {
+                throw new UploadRejectedError(`Format non accepté pour « ${slot.filename} » : le contenu déposé ne correspond pas à un format autorisé ` +
+                    "ou à son extension.");
+            }
+            return {
+                downloadUrl: stored.downloadUrl,
+                filename: slot.filename,
+                contentType: sniffed.contentType,
+                size: stored.size,
+                release: purge,
+            };
+        }
+        catch (error) {
+            await purge().catch(() => undefined);
+            throw error;
+        }
+    }
+}
+/** Process-wide registry (one server process = one set of slots). */
+export const uploadRelay = new UploadRelay();
+//# sourceMappingURL=upload-relay.js.map

package/dist/services/upload-relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-relay.js","sourceRoot":"","sources":["../../src/services/upload-relay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE5E,mDAAmD;AACnD,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,KAAK,GAAG,kCAAkC,CAAC;AACjD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAuClC,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,CAAC,GAAG,GAAG;SACV,IAAI,EAAE;SACN,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,MAAM,OAAO,GAAG,QAAQ;SACrB,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC;SAC/B,KAAK,CAAC,EAAE,CAAC;SACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;SACtC,IAAI,CAAC,EAAE,CAAC;SACR,IAAI,EAAE;SACN,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC7B,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,OAAO,eAAe;IAKG;IAJpB,IAAI,GAAG,YAAY,CAAC;IACrB,KAAK,CAAwC;IAC7C,OAAO,CAAU;IAEzB,YAA6B,GAAqB;QAArB,QAAG,GAAH,GAAG,CAAkB;IAAG,CAAC;IAE9C,KAAK,CAAC,WAAW;QACvB,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QACtF,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ;YAC5B,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY;YACpC,KAAK,EAAE,sCAAsC;SAC9C,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,qCAAqC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,EAC9F,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAC1E,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAI/C,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClC,4EAA4E;YAC5E,MAAM,IAAI,KAAK,CAAC,0DAA0D,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;QACpG,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,KAAK,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QACjE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,KAAK,GAAG,IAAI,EAAE,EAAE;YACzC,MAAM;YACN,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE;gBACnD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;aACtE;YACD,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YACtD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,GAAG,EAAO,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,IAAI;gBAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QACnE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAsD,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACnH,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,MAAM,CAAC,GAAI,IAAwD,CAAC,KAAK,CAAC;YAC1E,MAAM,IAAI,KAAK,CACb,uBAAuB,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAC9G,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAiB,KAAK,EAAE,UAAU,IAAI,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC/B,KAAK,EACL,UAAU,IAAI,CAAC,EAAE,gCAAgC,CAClD,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,CAChG,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,GAAG,CAAC,OAAO,0CAA0C,KAAK,IAAI,CAC1G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC,EAAE,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,QAAgB;QAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,sEAAsE;QACtE,+DAA+D;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAiB,MAAM,EAAE,WAAW,OAAO,gBAAgB,EAAE;YAC5F,IAAI,EAAE,OAAO,MAAM,EAAE;YACrB,MAAM,EAAE,EAAE;YACV,mCAAmC,EAAE,MAAM;SAC5C,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,kBAAkB,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAChC,MAAM,EACN,WAAW,OAAO,UAAU,MAAM,CAAC,EAAE,KAAK,IAAI,uBAAuB,EACrE,EAAE,IAAI,EAAE,EAAE,mCAAmC,EAAE,MAAM,EAAE,EAAE,CAC1D,CAAC;QACF,MAAM,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnG,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,EAAE;YACd,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,EAAE,WAAW,CAAC,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,QAAgB;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,yEAAyE;QACzE,0EAA0E;QAC1E,uEAAuE;QACvE,mEAAmE;QACnE,iDAAiD;QACjD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAQtC,KAAK,EAAE,WAAW,OAAO,UAAU,GAAG,WAAW,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,mBAAmB,CAC3B,0HAA0H,CAC3H,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,IAAI,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,MAAM,GAAG,CAAC,CAAC;QACrG,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC;QACrF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3G,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,CAAC,IAAI,iEAAiE,CACzH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;IAC1C,CAAC;IAED,2FAA2F;IACnF,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,MAAc;QAC3D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,KAAK,WAAW,OAAO,UAAU,MAAM,UAAU,EAAE;YAC5E,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE;YAChE,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChD,OAAO,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxG,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,KAAa;QAC3C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,KAAK,GAAG,CAAC,EAAE,EAAE;YAC1C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QACrG,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnC,uEAAuE;QACvE,qDAAqD;QACrD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO,UAAU,GAAG,kBAAkB,CAAC,CAAC;QAC/F,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,OAAO,UAAU,GAAG,EAAE,CAAC,CAAC;QAC1E,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,2DAA2D,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;CACF;AAED,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E,4EAA4E;AAC5E,MAAM,UAAU,YAAY,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC/D,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,wBAAwB,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7E,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,OAAO,mHAAmH,CAAC;IAC7H,CAAC;IACD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,OAAO,+BAA+B,IAAI,wCAAwC,CAAC;IACrF,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,QAAQ,EAAE,gCAAgC;QAC1C,QAAQ,EAAE,gCAAgC;QAC1C,YAAY,EAAE,oCAAoC;QAClD,IAAI,EAAE,2BAA2B;KACzB,CAAC;IACX,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACjF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,0DAA0D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAChH,CAAC;IACD,OAAO,IAAI,eAAe,CAAC;QACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAW;QACtD,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAW;QACtD,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAW;QAC9D,IAAI,EAAE,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAW,CAAC;QAChE,OAAO,EAAE,UAAU,CAAC,8BAA8B,EAAE,GAAG,CAAC,IAAI,WAAW;KACxE,CAAC,CAAC;AACL,CAAC;AAyBD;;;;GAIG;AACH,MAAM,OAAO,WAAW;IAIO;IAHZ,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;IACzC,aAAa,CAAgB;IAErC,YAA6B,MAAyB,OAAO,CAAC,GAAG;QAApC,QAAG,GAAH,GAAG,CAAiC;IAAG,CAAC;IAE7D,OAAO;QACb,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC;QAClD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,MAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC1E,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,QAAQ;QACd,OAAO,eAAe,CAAC,4BAA4B,EAAE,wBAAwB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3F,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC;gBAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACtB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,mBAAmB,CAAC,2DAA2D,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,OAAO;YACL,UAAU;YACV,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;YACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;YACzB,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,mBAAmB,CAC3B,8CAA8C,UAAU,iEAAiE,CAC1H,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9B,MAAM,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACrC,MAAM,IAAI,mBAAmB,CAAC,iFAAiF,CAAC,CAAC;QACnH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,mDAAmD;YACnD,MAAM,IAAI,mBAAmB,CAC3B,uGAAuG;gBACrG,gFAAgF,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,IAAI,MAAM,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC;gBACtB,MAAM,IAAI,mBAAmB,CAC3B,6BAA6B,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CACrH,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACnF,MAAM,IAAI,mBAAmB,CAC3B,6BAA6B,IAAI,CAAC,QAAQ,gEAAgE;oBACxG,qBAAqB,CACxB,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACrC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,qEAAqE;AACrE,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC"}

package/dist/services/upload-source.d.ts

@@ -0,0 +1,31 @@
+export interface UploadFile {
+    data: Buffer;
+    filename: string;
+    contentType: string;
+}
+/** A refusal whose message is meant for the caller, not a crash. */
+export declare class UploadRejectedError extends Error {
+    constructor(message: string);
+}
+interface SniffedType {
+    contentType: string;
+    /** Extensions a file of this family may carry (lower case, with dot). */
+    extensions: readonly string[];
+}
+/**
+ * The document type of `data`, from its leading bytes. ZIP and OLE containers
+ * are ambiguous by content alone (a .docx and a .xlsx share a signature), so
+ * for those two families the extension picks the member — but only among
+ * formats of that container: a ZIP named `.pdf` is still refused.
+ */
+export declare function sniffDocumentType(data: Buffer, filename: string): SniffedType | undefined;
+/**
+ * Read a local file for upload, enforcing the operator's policy: stdio
+ * transport, an allowed directory (after symlink resolution), a regular file,
+ * the size ceiling, and an accepted document format.
+ */
+export declare function readLocalUpload(filePath: string, env?: NodeJS.ProcessEnv): Promise<UploadFile>;
+/** Decode base64 content passed inline, with an optional `data:` URI prefix. */
+export declare function decodeInlineUpload(fileContent: string, fileName: string): UploadFile;
+export {};
+//# sourceMappingURL=upload-source.d.ts.map

package/dist/services/upload-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-source.d.ts","sourceRoot":"","sources":["../../src/services/upload-source.ts"],"names":[],"mappings":"AA0BA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,oEAAoE;AACpE,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAED,UAAU,WAAW;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B;AAqBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAmBzF;AA8CD;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,UAAU,CAAC,CA2CjH;AAID,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAkBpF"}

package/dist/services/upload-source.js

@@ -0,0 +1,180 @@
+/**
+ * File sources for `boond_documents_create` beyond `fileUrl`.
+ *
+ * Until this module, the only way to attach a document was a public https URL
+ * that BoondManager downloads itself, and the server never read a byte of file
+ * content. That posture stays the default: both sources below are bounded, and
+ * the one that touches the disk is **off unless the operator opts in**.
+ *
+ * - `filePath` (stdio only, opt-in): the server reads a local file, but only
+ *   under a directory listed in `BOOND_MCP_UPLOAD_DIRS`. The check runs on the
+ *   `realpath` of both sides, so `..` segments and symlinks pointing outside an
+ *   allowed directory are refused. Over HTTP the server does not run on the
+ *   user's machine, so a path would name a file on the *server* host — refused.
+ * - `fileContent` (base64, every transport, always on): no disk access at all,
+ *   capped at {@link INLINE_UPLOAD_MAX_BYTES} because every byte is paid ~1.33×
+ *   in the model's output tokens.
+ *
+ * Both sources are sniffed by magic bytes, not by extension, and must match a
+ * short allow-list of document formats: the declared name decides nothing.
+ */
+import { readFile, realpath, stat } from "node:fs/promises";
+import { basename, extname, isAbsolute, sep } from "node:path";
+import { readCsv, readPositiveInt } from "../config/env.js";
+import { resolveTransport } from "../config/transport-kind.js";
+import { DEFAULT_UPLOAD_MAX_BYTES, INLINE_UPLOAD_MAX_BYTES } from "../constants.js";
+/** A refusal whose message is meant for the caller, not a crash. */
+export class UploadRejectedError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "UploadRejectedError";
+    }
+}
+const OOXML = {
+    ".docx": "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+    ".xlsx": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+    ".pptx": "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+    ".odt": "application/vnd.oasis.opendocument.text",
+    ".ods": "application/vnd.oasis.opendocument.spreadsheet",
+};
+const LEGACY_OFFICE = {
+    ".doc": "application/msword",
+    ".xls": "application/vnd.ms-excel",
+    ".ppt": "application/vnd.ms-powerpoint",
+};
+function startsWith(data, bytes, offset = 0) {
+    if (data.length < offset + bytes.length)
+        return false;
+    return bytes.every((b, i) => data[offset + i] === b);
+}
+/**
+ * The document type of `data`, from its leading bytes. ZIP and OLE containers
+ * are ambiguous by content alone (a .docx and a .xlsx share a signature), so
+ * for those two families the extension picks the member — but only among
+ * formats of that container: a ZIP named `.pdf` is still refused.
+ */
+export function sniffDocumentType(data, filename) {
+    const ext = extname(filename).toLowerCase();
+    if (startsWith(data, [0x25, 0x50, 0x44, 0x46, 0x2d]))
+        return { contentType: "application/pdf", extensions: [".pdf"] };
+    if (startsWith(data, [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]))
+        return { contentType: "image/png", extensions: [".png"] };
+    if (startsWith(data, [0xff, 0xd8, 0xff]))
+        return { contentType: "image/jpeg", extensions: [".jpg", ".jpeg"] };
+    if (startsWith(data, [0x47, 0x49, 0x46, 0x38]))
+        return { contentType: "image/gif", extensions: [".gif"] };
+    if (startsWith(data, [0x52, 0x49, 0x46, 0x46]) && startsWith(data, [0x57, 0x45, 0x42, 0x50], 8))
+        return { contentType: "image/webp", extensions: [".webp"] };
+    if (startsWith(data, [0x7b, 0x5c, 0x72, 0x74, 0x66]))
+        return { contentType: "application/rtf", extensions: [".rtf"] };
+    if (startsWith(data, [0x50, 0x4b, 0x03, 0x04])) {
+        const contentType = OOXML[ext];
+        return contentType ? { contentType, extensions: [ext] } : undefined;
+    }
+    if (startsWith(data, [0xd0, 0xcf, 0x11, 0xe0, 0xa1, 0xb1, 0x1a, 0xe1])) {
+        const contentType = LEGACY_OFFICE[ext];
+        return contentType ? { contentType, extensions: [ext] } : undefined;
+    }
+    return undefined;
+}
+const ACCEPTED_FORMATS = "PDF, DOCX/XLSX/PPTX, ODT/ODS, DOC/XLS/PPT, RTF, PNG, JPEG, GIF, WebP";
+function typeOrReject(data, filename) {
+    const sniffed = sniffDocumentType(data, filename);
+    if (!sniffed) {
+        throw new UploadRejectedError(`Format non accepté pour « ${filename} » : le contenu ne correspond à aucun format autorisé (${ACCEPTED_FORMATS}). ` +
+            "Le type est déterminé par les premiers octets du fichier, pas par son extension.");
+    }
+    if (!sniffed.extensions.includes(extname(filename).toLowerCase())) {
+        throw new UploadRejectedError(`Extension incohérente pour « ${filename} » : le contenu est de type ${sniffed.contentType} ` +
+            `(extension attendue : ${sniffed.extensions.join(" ou ")}).`);
+    }
+    return sniffed.contentType;
+}
+function mb(bytes) {
+    return (bytes / 1024 / 1024).toFixed(1);
+}
+/** The allowed upload directories, resolved to real paths. Missing ones are skipped. */
+async function allowedDirs(env) {
+    const raw = readCsv("BOOND_MCP_UPLOAD_DIRS", env);
+    if (!raw)
+        return undefined;
+    const resolved = [];
+    for (const dir of raw) {
+        if (!isAbsolute(dir))
+            continue;
+        try {
+            resolved.push(await realpath(dir));
+        }
+        catch {
+            // A listed directory that does not exist allows nothing; not fatal.
+        }
+    }
+    return resolved;
+}
+function isInside(file, dir) {
+    const prefix = dir.endsWith(sep) ? dir : dir + sep;
+    return file.startsWith(prefix);
+}
+/**
+ * Read a local file for upload, enforcing the operator's policy: stdio
+ * transport, an allowed directory (after symlink resolution), a regular file,
+ * the size ceiling, and an accepted document format.
+ */
+export async function readLocalUpload(filePath, env = process.env) {
+    if (resolveTransport(env) === "http") {
+        throw new UploadRejectedError("`filePath` est indisponible en transport HTTP : le serveur ne tourne pas sur le poste de l'utilisateur. " +
+            "Utiliser `fileUrl`, ou `fileContent` (base64) pour un petit fichier.");
+    }
+    const dirs = await allowedDirs(env);
+    if (dirs === undefined) {
+        throw new UploadRejectedError("Téléversement de fichiers locaux désactivé. L'opérateur du serveur doit définir `BOOND_MCP_UPLOAD_DIRS` " +
+            "(répertoires autorisés, chemins absolus). En attendant : `fileUrl`, ou `fileContent` (base64) pour un petit fichier.");
+    }
+    if (!isAbsolute(filePath)) {
+        throw new UploadRejectedError(`\`filePath\` doit être un chemin absolu (reçu : « ${filePath} »).`);
+    }
+    let real;
+    try {
+        real = await realpath(filePath);
+    }
+    catch {
+        throw new UploadRejectedError(`Fichier introuvable : « ${filePath} ».`);
+    }
+    if (!dirs.some((dir) => isInside(real, dir))) {
+        throw new UploadRejectedError(`« ${filePath} » est hors des répertoires autorisés par \`BOOND_MCP_UPLOAD_DIRS\` (liens symboliques résolus).`);
+    }
+    const info = await stat(real);
+    if (!info.isFile())
+        throw new UploadRejectedError(`« ${filePath} » n'est pas un fichier.`);
+    const maxBytes = readPositiveInt("BOOND_MCP_UPLOAD_MAX_BYTES", DEFAULT_UPLOAD_MAX_BYTES, env);
+    if (info.size > maxBytes) {
+        throw new UploadRejectedError(`Fichier trop volumineux : ${mb(info.size)} Mo (max ${mb(maxBytes)} Mo, \`BOOND_MCP_UPLOAD_MAX_BYTES\`).`);
+    }
+    const data = await readFile(real);
+    // The file may have grown between stat() and readFile().
+    if (data.length > maxBytes) {
+        throw new UploadRejectedError(`Fichier trop volumineux : ${mb(data.length)} Mo (max ${mb(maxBytes)} Mo).`);
+    }
+    const filename = basename(real);
+    return { data, filename, contentType: typeOrReject(data, filename) };
+}
+const BASE64 = /^[A-Za-z0-9+/]*={0,2}$/;
+/** Decode base64 content passed inline, with an optional `data:` URI prefix. */
+export function decodeInlineUpload(fileContent, fileName) {
+    const filename = basename(fileName.replace(/\\/g, "/")).trim();
+    if (filename.length === 0 || filename === "." || filename === "..") {
+        throw new UploadRejectedError("`fileName` doit être un nom de fichier avec son extension (ex. « cv.pdf »).");
+    }
+    const payload = fileContent.replace(/^data:[^;,]*;base64,/, "").replace(/\s+/g, "");
+    if (payload.length === 0 || payload.length % 4 !== 0 || !BASE64.test(payload)) {
+        throw new UploadRejectedError("`fileContent` n'est pas du base64 valide.");
+    }
+    const decodedLength = (payload.length / 4) * 3 - (payload.endsWith("==") ? 2 : payload.endsWith("=") ? 1 : 0);
+    if (decodedLength > INLINE_UPLOAD_MAX_BYTES) {
+        throw new UploadRejectedError(`Contenu inline trop volumineux : ${mb(decodedLength)} Mo (max ${mb(INLINE_UPLOAD_MAX_BYTES)} Mo). ` +
+            "Pour un fichier plus gros : `filePath` (serveur local) ou `fileUrl`.");
+    }
+    const data = Buffer.from(payload, "base64");
+    return { data, filename, contentType: typeOrReject(data, filename) };
+}
+//# sourceMappingURL=upload-source.js.map