grix-connector 2.0.2 → 2.0.4

package/dist/mcp/stream-http/security.js

@@ -1 +1 @@
-function a(t){const o=new Set([`http://127.0.0.1:${t.serverPort}`,`http://localhost:${t.serverPort}`,...t.allowedOrigins]),e=new Set([`127.0.0.1:${t.serverPort}`,`localhost:${t.serverPort}`,...t.allowedHosts]);return{validateRequest(s){const r=i(s,o);if(!r.ok)return r;const n=l(s,e);return n.ok?{ok:!0}:n}}}function i(t,o){const e=t.headers.origin;return e?o.has(e)?{ok:!0}:{ok:!1,statusCode:403,message:`Origin not allowed: ${e}`}:{ok:!0}}function l(t,o){const e=t.headers.host;return e?o.has(e)?{ok:!0}:{ok:!1,statusCode:403,message:`Host not allowed: ${e}`}:{ok:!1,statusCode:403,message:"Missing Host header"}}export{a as createSecurityPolicy};
+function a(o){const e=new Set([`http://127.0.0.1:${o.serverPort}`,`http://localhost:${o.serverPort}`,...o.allowedOrigins]),t=new Set([`127.0.0.1:${o.serverPort}`,`localhost:${o.serverPort}`,...o.allowedHosts]);return{validateRequest(s){const r=i(s,e);if(!r.ok)return r;const n=l(s,t);return n.ok?{ok:!0}:n}}}function i(o,e){const t=o.headers.origin;return t?e.has(t)?{ok:!0}:{ok:!1,statusCode:403,message:`Origin not allowed: ${t}`}:{ok:!0}}function l(o,e){const t=o.headers.host;return t?e.has(t)?{ok:!0}:{ok:!1,statusCode:403,message:`Host not allowed: ${t}`}:{ok:!1,statusCode:403,message:"Missing Host header"}}export{a as createSecurityPolicy};

package/openclaw-plugin/index.js

@@ -9081,7 +9081,7 @@ var TOOLS = [
   },
   {
     name: "grix_session_send",
-    description: "Send a message into a session as the owner (not as yourself). Use this to speak on the owner's behalf in a session the owner is a member of. The owner must be a member of the target session.",
+    description: "Send a message into a session AS THE OWNER \u2014 it appears as if the owner sent it, NOT as you (the agent). Use ONLY to relay on the owner's behalf into one of the owner's OTHER sessions that you are not part of (e.g. you were dispatched to work and need to drop a note to the owner elsewhere). NEVER use this to send your own reply in a session you are conversing in \u2014 that would make your words show up as the owner's message. To answer in your current conversation, reply normally (or use grix_message_send to send as yourself). The owner must be a member of the target session, and you (the agent) must NOT be a member of it \u2014 sending into a session you belong to is rejected.",
     inputSchema: {
       type: "object",
       properties: {
@@ -9114,7 +9114,7 @@ var TOOLS = [
 var EVENT_TOOLS = [
   {
     name: "grix_reply",
-    description: "Send a reply message to the specified session. Supports streaming in chunks; the frontend will automatically aggregate them into one complete message.",
+    description: "Send a reply message to the specified session. Supports streaming in chunks; the frontend will automatically aggregate them into one complete message. Any content meant for the user \u2014 including your final conclusion at the end of a turn \u2014 MUST be sent through this tool; text written outside this tool is not delivered to the user.",
     inputSchema: {
       type: "object",
       properties: {
@@ -11699,6 +11699,32 @@ var IMAGE_MIME = {
 function imageMimeType(fileName) {
   return IMAGE_MIME[path5.extname(fileName).toLowerCase()];
 }
+var VIDEO_MIME = {
+  ".mp4": "video/mp4",
+  ".m4v": "video/mp4",
+  ".mov": "video/quicktime",
+  ".webm": "video/webm",
+  ".ogv": "video/ogg",
+  ".mkv": "video/x-matroska",
+  ".avi": "video/x-msvideo",
+  ".3gp": "video/3gpp",
+  ".ts": "video/mp2t"
+};
+var AUDIO_MIME = {
+  ".mp3": "audio/mpeg",
+  ".m4a": "audio/mp4",
+  ".aac": "audio/aac",
+  ".wav": "audio/wav",
+  ".ogg": "audio/ogg",
+  ".oga": "audio/ogg",
+  ".opus": "audio/opus",
+  ".flac": "audio/flac",
+  ".weba": "audio/webm"
+};
+function inlineMimeType(fileName) {
+  const ext = path5.extname(fileName).toLowerCase();
+  return IMAGE_MIME[ext] ?? VIDEO_MIME[ext] ?? AUDIO_MIME[ext];
+}
 var DEFAULT_TTL_MS = 10 * 60 * 1e3;
 var entries = /* @__PURE__ */ new Map();
 var server = null;
@@ -11723,15 +11749,49 @@ async function startServer(host) {
       res.end("not found");
       return;
     }
-    res.statusCode = 200;
-    const mime = imageMimeType(entry.fileName);
+    const mime = inlineMimeType(entry.fileName);
     res.setHeader("Content-Type", mime ?? "application/octet-stream");
-    res.setHeader("Content-Length", String(entry.size));
     res.setHeader(
       "Content-Disposition",
-      mime ? `inline; filename*=UTF-8''${encodeURIComponent(entry.fileName)}` : `attachment; filename*=UTF-8''${encodeURIComponent(entry.fileName)}`
+      `${mime ? "inline" : "attachment"}; filename*=UTF-8''${encodeURIComponent(entry.fileName)}`
     );
-    const stream = fs.createReadStream(entry.filePath);
+    res.setHeader("Accept-Ranges", "bytes");
+    const total = entry.size;
+    let start = 0;
+    let end = total - 1;
+    const rangeHeader = req.headers.range;
+    if (rangeHeader) {
+      const m = /^bytes=(\d*)-(\d*)$/.exec(String(rangeHeader).trim());
+      if (!m || m[1] === "" && m[2] === "") {
+        res.statusCode = 416;
+        res.setHeader("Content-Range", `bytes */${total}`);
+        res.end();
+        return;
+      }
+      if (m[1] === "") {
+        const suffix = Number(m[2]);
+        start = suffix >= total ? 0 : total - suffix;
+      } else {
+        start = Number(m[1]);
+        end = m[2] === "" ? total - 1 : Math.min(Number(m[2]), total - 1);
+      }
+      if (start > end || start >= total) {
+        res.statusCode = 416;
+        res.setHeader("Content-Range", `bytes */${total}`);
+        res.end();
+        return;
+      }
+      res.statusCode = 206;
+      res.setHeader("Content-Range", `bytes ${start}-${end}/${total}`);
+    } else {
+      res.statusCode = 200;
+    }
+    res.setHeader("Content-Length", String(end - start + 1));
+    if (req.method === "HEAD") {
+      res.end();
+      return;
+    }
+    const stream = fs.createReadStream(entry.filePath, { start, end });
     stream.on("error", () => {
       if (!res.headersSent) res.statusCode = 500;
       res.end();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "grix-connector",
-  "version": "2.0.2",
+  "version": "2.0.4",
   "description": "Connect local AI coding agents (Claude, Codex, Gemini, Qwen, DeepSeek, Cursor, OpenCode, Pi, OpenHuman, Reasonix) to the Grix scheduling platform. Also serves as an OpenClaw plugin for Grix channel transport.",
   "type": "module",
   "main": "dist/index.js",