dsh-cindy-host 0.1.29 → 0.1.30

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.1.30 — 2026-10-29
+
+- Match Cindy native local media fetching: baseDir/workdir constraints are optional; absolute file references no longer fail with no-root. Explicit constraints, sensitive-path checks, regular-file checks and byte limits remain enforced.
+- Fix the shared parser/resolver for all file types and original, thumbnail, prepareOnly and file-peer reads; no PNG-specific workaround or controller changes.
+- Add contract regressions for 15 extensions, POSIX/Windows paths, both file/audio schemes, real filesystem preparation and rootless peer bytes/EOF.
+- Minimal patch on published 0.1.29; preserves its runtime and queue/input-delivery behavior. Requires the same DSH 0.2.1-rc.3 carrier and Node >=22.16. Linux handset end-to-end acceptance requires deployment and is not implied by publication.
+
 ## 0.1.29 — 2026-10-29
 
 - Publish from a clean, committed Git source tree; preserve the accepted 0.1.28 runtime behavior.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-cindy-host",
-  "version": "0.1.29",
+  "version": "0.1.30",
   "private": false,
   "description": "Cindy 手机客户端连接 DSH 的 Host 侧插件：会话/消息/审批/todo/goal 的手机通道，以及配套的设置卡片",
   "license": "MIT",

package/src/host-media-fetch.js

@@ -8,19 +8,14 @@
  * (`apps/desktop/src/main/device-link/mediaFetch.ts`: 解析本机媒体 → 上传 OSS → 返回引用):
  *
  * ```
- * request   { url: 'xdt-file://open?path=<abs>&workdir=<abs>&maxBytes=<n>', thumbnail?, skipCache?, prepareOnly? }
+ * request   { url: 'xdt-file://open?path=<abs>', thumbnail?, skipCache?, prepareOnly? }
  * response  { ossKey, mimeType, size }            // the controller presign-gets the key
  * ```
  *
- * Two things are deliberately **stricter** than the reference, because this Host is a
- * process on somebody's desktop rather than an app with its own cache directory:
- *
- * 1. **A containment root is mandatory.** The desktop treats a missing `baseDir` as "no
- *    constraint" for old controllers; here a request that names no root (neither `baseDir`
- *    nor the `workdir` a chat image carries) is refused. Without that, any absolute path
- *    on this machine would be servable by anyone who can reach the Host.
- * 2. **Realpath on both sides.** A symlink inside the workspace must not become a way out
- *    of it, and `/tmp` vs `/private/tmp` must not make a legitimate file look outside.
+ * Directory constraints are optional, matching Cindy's native media-fetch contract.
+ * A plain absolute `path` is accepted; when `baseDir` or `workdir` is supplied, both
+ * the file and the root are realpath'd before containment checks. This prevents a
+ * symlink from escaping a supplied root and handles `/tmp` vs `/private/tmp` aliases.
  *
  * Malformed constraint parameters are refused rather than ignored: silently degrading to
  * "unconstrained" is how a constraint gets removed by a typo.
@@ -266,7 +261,6 @@ export function parseMediaFetchRequest(url) {
     if (value.trim() === '' || !isAbsoluteMediaPath(value)) return { ok: false, reason: `invalid-${key}` };
     roots.push(value);
   }
-  if (roots.length === 0) return { ok: false, reason: 'no-root' };
 
   let maxBytes = null;
   const rawMaxBytes = parsed.searchParams.get('maxBytes');
@@ -316,7 +310,7 @@ export function createLocalFileResolver({
         // A root that does not resolve cannot authorise anything; the others still can.
       }
     }
-    if (allowedRoots.length === 0 || !allowedRoots.some((root) => isInsideDirectory(real, root))) {
+    if (request.roots.length > 0 && !allowedRoots.some((root) => isInsideDirectory(real, root))) {
       return { ok: false, code: 'FORBIDDEN', message: 'the requested file is outside the directory the controller named' };
     }
     if (isBlockedMediaPath(real, blocked)) {

package/src/host-version.js

@@ -4,4 +4,4 @@
  */
 export const HOST_APP_VERSION = '0.1.82';
 /** Actual npm release, separate from the Cindy compatibility identity. */
-export const HOST_PLUGIN_VERSION = '0.1.29';
+export const HOST_PLUGIN_VERSION = '0.1.30';

package/src/host.js

@@ -227,8 +227,8 @@ export async function startHost(initialSource, settings = DEFAULT_HOST_SETTINGS,
    *
    * The chat-image path: a picture the agent produced is referenced by path in the
    * transcript, and the controller resolves it through `device-link:media:fetch`. Same
-   * uploader as the file browser's export ops, stricter request handling
-   * (`host-media-fetch.js`): a containment root is mandatory and both sides are realpath'd.
+   * uploader as the file browser's export ops. Directory constraints are optional, as
+   * in Cindy; when supplied, both the file and the root are realpath'd before checking.
    */
   const fetchLocalMedia = createLocalMediaFetcher({ uploader: uploadMedia });
   const resolvePeerFile = createLocalFileResolver({ maxBytes: FILE_PEER_MAX_BYTES });