neoctl-web 0.1.13 → 0.1.15

package/plugins/video-share/store.mjs

@@ -0,0 +1,76 @@
+import { workspaceFs, openWorkspaceRead, containerMode } from '../../execution-backend.mjs';
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { randomBytes } from 'node:crypto';
+
+export const VALID_ID = /^[a-f0-9]{48}$/;
+export const VIDEO_TYPES = Object.freeze({
+  '.mp4': 'video/mp4', '.m4v': 'video/mp4', '.mov': 'video/quicktime',
+  '.webm': 'video/webm', '.ogv': 'video/ogg',
+});
+
+// Each publication has its own atomic directory: no shared mutable index or host imports.
+export class VideoStore {
+  constructor(directory) { this.directory = path.resolve(directory); }
+
+  async publish(source) {
+    if (typeof source !== 'string' || !path.isAbsolute(source)) throw new Error('Video path must be absolute');
+    const type = VIDEO_TYPES[path.extname(source).toLowerCase()];
+    if (!type) throw new Error('Supported video extensions: .mp4, .m4v, .mov, .webm, .ogv');
+    const sourceStat = await workspaceFs.stat(source);
+    if (!sourceStat.isFile() || sourceStat.size === 0) throw new Error('Video must be a non-empty regular file');
+    await fs.mkdir(this.directory, { recursive: true, mode: 0o700 });
+    const id = randomBytes(24).toString('hex');
+    const staging = path.join(this.directory, `.pending-${id}`);
+    await fs.mkdir(staging, { mode: 0o700 });
+    try {
+      // Validate only a small header, then persist the original path, never a copy.
+      const header = Buffer.alloc(64);
+      if (containerMode) {
+        const handle = await openWorkspaceRead(source);
+        try { let offset = 0; for await (const chunk of handle.createReadStream({ start: 0, end: 63 })) { chunk.copy(header, offset); offset += chunk.length; } } finally { await handle.close(); }
+      } else {
+        const handle = await fs.open(source, 'r');
+        try { await handle.read(header, 0, header.length, 0); } finally { await handle.close(); }
+      }
+      const extension = path.extname(source).toLowerCase();
+      const valid = extension === '.webm' ? header.subarray(0, 4).equals(Buffer.from([0x1a, 0x45, 0xdf, 0xa3]))
+        : extension === '.ogv' ? header.toString('ascii', 0, 4) === 'OggS'
+          : ['ftyp', 'moov', 'mdat', 'wide', 'free', 'skip'].includes(header.toString('ascii', 4, 8));
+      if (!valid) throw new Error('File does not have a recognized video container signature');
+      const entry = { version: 2, id, absolutePath: path.resolve(source), filename: path.basename(source), contentType: type, sizeBytes: sourceStat.size, createdAt: new Date().toISOString() };
+      await fs.writeFile(path.join(staging, 'entry.json'), JSON.stringify(entry), { mode: 0o600 });
+      await fs.rename(staging, path.join(this.directory, id));
+      return entry;
+    } catch (error) {
+      await fs.rm(staging, { recursive: true, force: true });
+      throw error;
+    }
+  }
+
+  async get(id) {
+    if (!VALID_ID.test(id)) return undefined;
+    try {
+      const entry = JSON.parse(await fs.readFile(path.join(this.directory, id, 'entry.json'), 'utf8'));
+      // Old v1 snapshots have no source path; do not silently serve a copy.
+      if (entry.version === 1) return undefined;
+      if (entry.version !== 2 || typeof entry.absolutePath !== 'string' || !path.isAbsolute(entry.absolutePath)
+        || entry.id !== id || typeof entry.filename !== 'string'
+        || !Object.values(VIDEO_TYPES).includes(entry.contentType)) throw new Error('Invalid video metadata');
+      return { ...entry, mediaPath: entry.absolutePath };
+    } catch (error) {
+      if (error.code === 'ENOENT') return undefined;
+      throw error;
+    }
+  }
+
+  async revoke(id) {
+    if (!VALID_ID.test(id)) throw new Error('Invalid video id');
+    const tombstone = path.join(this.directory, `.revoked-${id}-${randomBytes(6).toString('hex')}`);
+    try { await fs.rename(path.join(this.directory, id), tombstone); }
+    catch (error) { if (error.code === 'ENOENT') return false; throw error; }
+    // Renaming removes the public mapping first; never reuse a revoked token.
+    await fs.rm(tombstone, { recursive: true, force: true });
+    return true;
+  }
+}

package/plugins/xhs-artifact/editor-page.mjs

@@ -55,16 +55,16 @@ export function renderXhsEditorPage(artifact, apiUrl) {
     </section>
   </main>
   <script>
-    const initial=${serialize(artifact)};const apiUrl=${serialize(apiUrl)};let draft=clone(initial.payload||{}),active=0,saveTimer=0;const $=id=>document.getElementById(id);
+    const initial=${serialize(artifact)};const appBase=${serialize((process.env.NEO_WEB_BASE_PATH || '').replace(/\/$/, ''))};const appUrl=value=>typeof value==='string'&&value.startsWith('/api/')?appBase+value:value;const apiUrl=appUrl(${serialize(apiUrl)});let draft=clone(initial.payload||{}),active=0,saveTimer=0;const $=id=>document.getElementById(id);
     const params=new URLSearchParams(location.search);const requestedTheme=params.get('theme');document.documentElement.dataset.theme=requestedTheme==='dark'?'dark':requestedTheme==='light'?'light':matchMedia('(prefers-color-scheme: dark)').matches?'dark':'light';
     function clone(v){return JSON.parse(JSON.stringify(v))}function esc(v){return String(v??'').replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]))}function tags(v){return [...new Set(String(v||'').split(/[\\s,，、]+/).filter(Boolean).map(x=>x.startsWith('#')?x:'#'+x))]}
     function field(id,key){$(id).value=key==='hashtags'?(draft[key]||[]).join(' '):draft[key]||'';$(id).addEventListener('input',e=>{draft[key]=key==='hashtags'?tags(e.target.value):e.target.value;renderPreview();scheduleSave()})}
     field('title','title');field('body','body');field('interactionInput','interaction');field('hashtags','hashtags');field('review','review');
-    function missingMedia(image){return '<div class="placeholder"><span class="placeholder-art">▧</span><strong>待添加配图</strong><small>'+esc(image?.caption||image?.note||'上传图片后将在这里预览')+'</small></div>'}function showMissingMedia(image){$('mediaStage').classList.add('image-missing');$('media').innerHTML=missingMedia(image);$('overlay').classList.add('hidden')}function renderPreview(){const images=draft.images||[];active=Math.max(0,Math.min(active,Math.max(0,images.length-1)));const image=images[active];$('previewTitle').textContent=draft.title||'未命名笔记';$('previewBody').textContent=draft.body||'';$('interaction').textContent=draft.interaction||'';$('tags').innerHTML=(draft.hashtags||[]).map(x=>'<span>'+esc(x)+'</span>').join('');$('mediaStage').classList.remove('image-missing');if(image?.url){$('media').innerHTML='<img src="'+esc(image.url)+'" alt="'+esc(image.caption||'配图')+'">';$('media').querySelector('img')?.addEventListener('error',()=>showMissingMedia(image),{once:true})}else{showMissingMedia(image)}$('overlay').textContent=image?.overlay||'';$('overlay').classList.toggle('hidden',!image?.overlay||$('mediaStage').classList.contains('image-missing'));$('prev').classList.toggle('hidden',images.length<2);$('next').classList.toggle('hidden',images.length<2);$('dots').textContent=images.length>1?(active+1)+' / '+images.length:''}
-    function renderImages(){const host=$('images'),images=draft.images||[];host.innerHTML=images.length?images.map((im,i)=>'<section class="image-row" data-index="'+i+'"><button class="thumb" type="button" data-pick="'+i+'">'+(im.url?'<img src="'+esc(im.url)+'" alt="">':'配图 '+(i+1))+'</button><div class="image-fields"><input data-key="url" value="'+esc(im.url)+'" placeholder="图片 URL"><input data-key="caption" value="'+esc(im.caption)+'" placeholder="图片说明"><input data-key="overlay" value="'+esc(im.overlay)+'" placeholder="画面文案"><textarea data-key="note" placeholder="备注">'+esc(im.note)+'</textarea><div class="row-actions"><button type="button" class="small" data-upload="'+i+'">上传替换</button><button type="button" class="small danger" data-remove="'+i+'">删除</button></div></div></section>').join(''):'<div class="empty">还没有配图</div>'}
+    function missingMedia(image){return '<div class="placeholder"><span class="placeholder-art">▧</span><strong>待添加配图</strong><small>'+esc(image?.caption||image?.note||'上传图片后将在这里预览')+'</small></div>'}function showMissingMedia(image){$('mediaStage').classList.add('image-missing');$('media').innerHTML=missingMedia(image);$('overlay').classList.add('hidden')}function renderPreview(){const images=draft.images||[];active=Math.max(0,Math.min(active,Math.max(0,images.length-1)));const image=images[active];$('previewTitle').textContent=draft.title||'未命名笔记';$('previewBody').textContent=draft.body||'';$('interaction').textContent=draft.interaction||'';$('tags').innerHTML=(draft.hashtags||[]).map(x=>'<span>'+esc(x)+'</span>').join('');$('mediaStage').classList.remove('image-missing');if(image?.url){$('media').innerHTML='<img src="'+esc(appUrl(image.url))+'" alt="'+esc(image.caption||'配图')+'">';$('media').querySelector('img')?.addEventListener('error',()=>showMissingMedia(image),{once:true})}else{showMissingMedia(image)}$('overlay').textContent=image?.overlay||'';$('overlay').classList.toggle('hidden',!image?.overlay||$('mediaStage').classList.contains('image-missing'));$('prev').classList.toggle('hidden',images.length<2);$('next').classList.toggle('hidden',images.length<2);$('dots').textContent=images.length>1?(active+1)+' / '+images.length:''}
+    function renderImages(){const host=$('images'),images=draft.images||[];host.innerHTML=images.length?images.map((im,i)=>'<section class="image-row" data-index="'+i+'"><button class="thumb" type="button" data-pick="'+i+'">'+(im.url?'<img src="'+esc(appUrl(im.url))+'" alt="">':'配图 '+(i+1))+'</button><div class="image-fields"><input data-key="url" value="'+esc(appUrl(im.url))+'" placeholder="图片 URL"><input data-key="caption" value="'+esc(im.caption)+'" placeholder="图片说明"><input data-key="overlay" value="'+esc(im.overlay)+'" placeholder="画面文案"><textarea data-key="note" placeholder="备注">'+esc(im.note)+'</textarea><div class="row-actions"><button type="button" class="small" data-upload="'+i+'">上传替换</button><button type="button" class="small danger" data-remove="'+i+'">删除</button></div></div></section>').join(''):'<div class="empty">还没有配图</div>'}
     $('images').addEventListener('input',e=>{const row=e.target.closest('[data-index]');if(!row||!e.target.dataset.key)return;draft.images[+row.dataset.index][e.target.dataset.key]=e.target.value;renderPreview();scheduleSave()});$('images').addEventListener('click',e=>{const pick=e.target.closest('[data-pick]');if(pick){active=+pick.dataset.pick;renderPreview()}const remove=e.target.closest('[data-remove]');if(remove){draft.images.splice(+remove.dataset.remove,1);renderImages();renderPreview();scheduleSave()}const upload=e.target.closest('[data-upload]');if(upload){$('files').dataset.target=upload.dataset.upload;$('files').click()}});
     $('prev').onclick=()=>{active=(active-1+(draft.images||[]).length)%(draft.images||[]).length;renderPreview()};$('next').onclick=()=>{active=(active+1)%(draft.images||[]).length;renderPreview()};let wheelLock=0;$('mediaStage').addEventListener('wheel',e=>{const images=draft.images||[];if(images.length<2)return;e.preventDefault();const now=Date.now();if(now<wheelLock)return;wheelLock=now+320;const delta=Math.abs(e.deltaY)>=Math.abs(e.deltaX)?e.deltaY:e.deltaX;active=(active+(delta>=0?1:-1)+images.length)%images.length;renderPreview()},{passive:false});$('add').onclick=()=>{(draft.images||(draft.images=[])).push({url:'',caption:'配图 '+((draft.images?.length||0)+1),overlay:'',note:''});renderImages();scheduleSave()};$('upload').onclick=()=>{$('files').dataset.target='';$('files').click()};
-    $('files').onchange=async e=>{const files=[...e.target.files];e.target.value='';if(!files.length)return;setStatus('上传中…');try{const uploaded=[];for(const file of files){const data=await new Promise((resolve,reject)=>{const r=new FileReader;r.onload=()=>resolve(String(r.result).replace(/^data:[^,]*,/,''));r.onerror=()=>reject(r.error);r.readAsDataURL(file)});const res=await fetch('/api/uploads',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({name:file.name,mimeType:file.type,data})});const body=await res.json();if(!res.ok||!body.file?.url)throw new Error(body.error||'上传失败');uploaded.push({url:body.file.url,caption:file.name.replace(/\\.[^.]+$/,''),overlay:'',note:file.name})}if(versioning.readonly()){setStatus('已过期，上传未应用；请加载最新版',true);return}const target=Number(e.target.dataset.target);if(e.target.dataset.target!==''&&draft.images[target]){draft.images[target]={...draft.images[target],...uploaded.shift()}}draft.images.push(...uploaded);renderImages();renderPreview();await save()}catch(err){setStatus(err.message||String(err),true)}};
+    $('files').onchange=async e=>{const files=[...e.target.files];e.target.value='';if(!files.length)return;setStatus('上传中…');try{const uploaded=[];for(const file of files){const data=await new Promise((resolve,reject)=>{const r=new FileReader;r.onload=()=>resolve(String(r.result).replace(/^data:[^,]*,/,''));r.onerror=()=>reject(r.error);r.readAsDataURL(file)});const res=await fetch(appUrl('/api/uploads')+new URL(apiUrl,location.href).search,{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({name:file.name,mimeType:file.type,data})});const body=await res.json();if(!res.ok||!body.file?.url)throw new Error(body.error||'上传失败');uploaded.push({url:body.file.url,caption:file.name.replace(/\\.[^.]+$/,''),overlay:'',note:file.name})}if(versioning.readonly()){setStatus('已过期，上传未应用；请加载最新版',true);return}const target=Number(e.target.dataset.target);if(e.target.dataset.target!==''&&draft.images[target]){draft.images[target]={...draft.images[target],...uploaded.shift()}}draft.images.push(...uploaded);renderImages();renderPreview();await save()}catch(err){setStatus(err.message||String(err),true)}};
     function setMode(mode){localStorage.setItem('neoctl.plugin.xhs.mode.v2',mode);document.querySelectorAll('[data-mode]').forEach(b=>b.classList.toggle('active',b.dataset.mode===mode));$('grid').className='grid '+mode;$('preview').classList.toggle('hidden',mode==='edit');$('form').classList.toggle('hidden',mode==='preview');resize()}document.querySelectorAll('[data-mode]').forEach(b=>b.onclick=()=>setMode(b.dataset.mode));
     $('fullscreen').onclick=async()=>{if(document.fullscreenElement)await document.exitFullscreen();else await document.documentElement.requestFullscreen()};document.addEventListener('fullscreenchange',()=>{$('fullscreen').textContent=document.fullscreenElement?'退出全屏':'全屏'});
     function payload(){return{title:draft.title||'',body:draft.body||'',interaction:draft.interaction||'',hashtags:draft.hashtags||[],images:draft.images||[],review:draft.review||''}}

package/runtime-workspaces.mjs

@@ -1,5 +1,7 @@
 import path from 'node:path';
-import { mkdir, readFile, readdir, rmdir, stat, writeFile } from 'node:fs/promises';
+import { mkdir as localMkdir, readFile, writeFile } from 'node:fs/promises';
+import { workspaceFs, workspaceHome, containerMode } from './execution-backend.mjs';
+const { mkdir, readdir, rmdir, stat } = workspaceFs;
 import os from 'node:os';
 import { QueryEngine, WebRepl } from './core-runtime.mjs';
 
@@ -370,7 +372,7 @@ export class SessionWorkspaceRegistry {
         : options.cwdNoticePending === true,
     };
     this.writeQueue = this.writeQueue.then(async () => {
-      await mkdir(path.dirname(this.file), { recursive: true });
+      await localMkdir(path.dirname(this.file), { recursive: true });
       await writeFile(this.file, `${JSON.stringify(items, null, 2)}\n`, 'utf8');
     });
     await this.writeQueue;
@@ -406,7 +408,7 @@ export async function browseWorkspace(value, currentCwd) {
     requested,
     fallback: path.resolve(current) !== path.resolve(requested),
     parent: current === path.parse(current).root ? undefined : path.dirname(current),
-    home: os.homedir(),
+    home: (workspaceHome() || os.homedir()),
     locations,
     entries: entries
       .filter((entry) => entry.isDirectory())
@@ -437,8 +439,9 @@ let workspaceLocationsCache;
 let workspaceLocationsCachedAt = 0;
 
 export async function discoverWorkspaceLocations() {
+  if (containerMode) return [{ id: "workspace", label: "workspace", path: "/workspace", kind: "favorite" }, { id: "root", label: "/", path: "/", kind: "root" }, { id: "home", label: "root", path: "/root", kind: "home" }];
   if (workspaceLocationsCache && Date.now() - workspaceLocationsCachedAt < 5000) return workspaceLocationsCache;
-  const home = os.homedir();
+  const home = (workspaceHome() || os.homedir());
   const candidates = [
     { id: 'home', label: '主目录', path: home, kind: 'home' },
     ...[
@@ -486,8 +489,8 @@ export async function discoverWorkspaceLocations() {
 export function resolveWorkspaceInput(value, currentCwd) {
   let input = String(value || '').trim().replace(/^["']|["']$/g, '');
   if (!input) return path.resolve(currentCwd || process.cwd());
-  if (input === '~') input = os.homedir();
-  else if (input.startsWith('~/') || input.startsWith('~\\')) input = path.join(os.homedir(), input.slice(2));
+  if (input === '~') input = (workspaceHome() || os.homedir());
+  else if (input.startsWith('~/') || input.startsWith('~\\')) input = path.join((workspaceHome() || os.homedir()), input.slice(2));
   input = input.replace(/[\\/]+/g, path.sep);
   if (process.platform === 'win32' && /^[a-zA-Z]:$/.test(input)) input += path.sep;
   return path.resolve(currentCwd || process.cwd(), input);

package/scripts/isolation-user.mjs

@@ -0,0 +1,68 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { hashPassword, usernameKey, validUsername } from '../isolation-auth.mjs';
+
+const [filename, username, role] = process.argv.slice(2);
+if (!filename || !validUsername(username) || (role !== undefined && !['user', 'admin'].includes(role))) {
+  console.error('用法: node scripts/isolation-user.mjs <配置文件> <用户名> [user|admin]');
+  process.exit(1);
+}
+
+async function readPassword() {
+  if (!process.stdin.isTTY) {
+    let text = '';
+    for await (const chunk of process.stdin) { text += chunk; if (text.length > 4096) throw new Error('输入过长'); }
+    return text.replace(/\r?\n$/, '');
+  }
+  process.stderr.write('密码: ');
+  process.stdin.setRawMode(true);
+  process.stdin.resume();
+  process.stdin.setEncoding('utf8');
+  return new Promise((resolve, reject) => {
+    let value = '';
+    const done = () => { process.stdin.off('data', onData); process.stdin.setRawMode(false); process.stdin.pause(); process.stderr.write('\n'); };
+    function onData(chunk) {
+      for (const c of chunk) {
+        if (c === '\u0003') { done(); reject(new Error('已取消')); return; }
+        if (c === '\r' || c === '\n') { done(); resolve(value); return; }
+        if (c === '\u007f' || c === '\b') value = value.slice(0, -1);
+        else if (value.length < 1024) value += c;
+      }
+    }
+    process.stdin.on('data', onData);
+  });
+}
+
+const file = path.resolve(filename);
+let config;
+try { config = JSON.parse(await fs.readFile(file, 'utf8')); }
+catch (error) {
+  if (error.code !== 'ENOENT') throw error;
+  config = { enabled: false, secureCookie: false, cookiePath: '/', sessionHours: 12, retiredUsernames: [], users: [] };
+}
+config.users ||= [];
+config.retiredUsernames ||= [];
+const key = usernameKey(username);
+if (config.users.some(user => user.id !== undefined && user.id !== user.username)) throw new Error('旧用户 ID 与用户名不同，请先迁移');
+if (config.retiredUserIds?.length) throw new Error('请先将 retiredUserIds 迁移为 retiredUsernames');
+if (config.retiredUsernames.some(value => usernameKey(value) === key)) throw new Error('已删除的用户名不可复用');
+const existing = config.users.find(user => usernameKey(user.username) === key);
+const nextRole = role || existing?.role || 'user';
+const next = { username, role: nextRole };
+if (nextRole === 'admin') next.passwordHash = await hashPassword(await readPassword());
+else if (existing?.passwordHash) next.passwordHash = existing.passwordHash;
+const users = config.users.map(user => {
+  const { id: _oldId, ...account } = user;
+  return account;
+});
+const index = users.findIndex(user => usernameKey(user.username) === key);
+if (index >= 0) users[index] = next; else users.push(next);
+const { retiredUserIds: _oldRetiredUserIds, ...stored } = config;
+stored.users = users;
+await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
+const pending = file + `.tmp-${process.pid}`;
+try {
+  await fs.writeFile(pending, JSON.stringify(stored, null, 2) + '\n', { mode: 0o600, flag: 'wx' });
+  await fs.rename(pending, file);
+} finally { await fs.rm(pending, { force: true }); }
+console.log(`用户已保存: ${username}。修改 enabled 后重启 Web 生效。`);

package/server.mjs

@@ -1,17 +1,11 @@
 import http from 'node:http';
+import { createChunkUploadHandler } from './chunk-uploads.mjs';
 import fs from 'node:fs';
 import fsp from 'node:fs/promises';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
-// Consume the private launcher secret before importing application/runtime modules.
-// Imports can initialize plugins or spawn children; none may inherit this value.
-let desktopControlConfig;
-{
-  const raw = process.env.NEO_DESKTOP_CONTROL_CONFIG;
-  delete process.env.NEO_DESKTOP_CONTROL_CONFIG;
-  try { desktopControlConfig = raw ? JSON.parse(raw) : undefined; } catch {}
-}
-
+const { containerMode, workspaceFs, deliverUpload, verifyExecutionBackend } = await import('./execution-backend.mjs');
+await verifyExecutionBackend();
 const { coreRuntimeInfo, createWebRuntime, loadNeoPlugins, runWebServer } = await import('./core-runtime.mjs');
 const { createWebPluginHost } = await import('./plugins.mjs');
 const { createWebPluginSettings } = await import('./plugin-settings.mjs');
@@ -21,12 +15,6 @@ const { installRuntimeRouterIdleCleanup } = await import('./runtime-router-clean
 const { createCpaQuotaMonitor } = await import('./cpa-quota.mjs');
 const { createMemoryMonitor } = await import('./memory-monitor.mjs');
 const { resolveWebStorage } = await import('./platform-paths.mjs');
-const { createControlSync, createLoginApplier, validateControlConfig } = await import('./control-sync.mjs');
-
-const controlConfig = validateControlConfig(desktopControlConfig);
-desktopControlConfig = undefined;
-const controlEnabled = Boolean(controlConfig);
-
 installRuntimeRouterIdleCleanup();
 console.log(`neo core: ${coreRuntimeInfo.source} ${coreRuntimeInfo.version} (${coreRuntimeInfo.location})`);
 process.env.NEO_CORE_VERSION = coreRuntimeInfo.version;
@@ -37,7 +25,9 @@ const root = path.resolve(process.env.DIST_DIR || path.join(__dirname, 'dist'));
 const host = process.env.APP_HOST || '0.0.0.0';
 const port = Number(process.env.APP_PORT || process.env.PORT || 5173);
 const runtimeTarget = new URL(process.env.NEO_RUNTIME_TARGET || 'http://127.0.0.1:3101');
-const { dataRoot, workspaceRoot } = resolveWebStorage();
+const storage = resolveWebStorage();
+const dataRoot = storage.dataRoot;
+const workspaceRoot = containerMode ? '/workspace' : storage.workspaceRoot;
 const promptLibraryFile = path.resolve(process.env.NEO_PROMPT_LIBRARY_FILE || path.join(dataRoot, 'prompt-library.json'));
 const uploadsDir = path.resolve(process.env.NEO_UPLOADS_DIR || path.join(dataRoot, 'uploads'));
 const pluginDir = path.resolve(process.env.NEO_WEB_PLUGIN_DIR || path.join(__dirname, 'plugins'));
@@ -46,7 +36,7 @@ const cpaConfigFile = path.resolve(process.env.NEO_CPA_CONFIG_FILE || path.join(
 const memoryMonitorFile = path.resolve(process.env.NEO_MEMORY_MONITOR_FILE || path.join(dataRoot, 'memory-monitor.json'));
 const pluginSettingsFile = path.resolve(process.env.NEO_WEB_PLUGIN_SETTINGS_FILE || path.join(dataRoot, 'plugins.json'));
 const toolSettingsFile = path.resolve(process.env.NEO_WEB_TOOL_SETTINGS_FILE || path.join(dataRoot, 'tools.json'));
-const maxUploadBytes = Number(process.env.NEO_UPLOAD_MAX_BYTES || 25 * 1024 * 1024);
+const chunkUploads = createChunkUploadHandler({ uploadsDir, baseDir: __dirname, finalize: containerMode ? (file, url) => deliverUpload(file, url, runtimeTarget) : undefined });
 const pluginSettings = await createWebPluginSettings(pluginSettingsFile);
 const toolSettings = await createWebToolSettings(toolSettingsFile);
 const pluginEnv = process.env.NEO_WEB_PLUGINS;
@@ -67,17 +57,6 @@ const memoryMonitor = createMemoryMonitor({
   maxPersistedSamples: process.env.NEO_MEMORY_MAX_PERSISTED_SAMPLES,
   maxPersistedBytes: process.env.NEO_MEMORY_MAX_PERSISTED_BYTES,
 });
-// Weak references do not defeat the existing router's idle-session cleanup.
-const controlRepls = new Set();
-function activeControlRepls() {
-  const active = [];
-  for (const reference of controlRepls) {
-    const repl = reference.deref();
-    if (repl) active.push(repl);
-    else controlRepls.delete(reference);
-  }
-  return active;
-}
 const workspaceRuntime = createWorkspaceRuntimeManager({
   projectRoot: process.cwd(),
   workspaceRoot,
@@ -94,6 +73,9 @@ const workspaceRuntime = createWorkspaceRuntimeManager({
   }),
 });
 
+const { createIsolationMode } = await import('./isolation.mjs');
+const isolation = await createIsolationMode({ dataRoot, workspaceRoot, pluginDir, pluginSettings, toolSettings, cpaQuotaMonitor, memoryState: () => memoryMonitor.getPublicState() });
+
 const DEFAULT_APP_PROMPT_LIBRARY = [];
 
 const mime = {
@@ -118,9 +100,10 @@ const server = http.createServer((req, res) => {
   void routeRequest(req, res);
 });
 
+server.once('close', () => isolation.close());
 server.keepAliveTimeout = 70_000;
 server.headersTimeout = 75_000;
-if (embedRuntime) await startEmbeddedRuntime();
+if (embedRuntime && !isolation.enabled) await startEmbeddedRuntime();
 await cpaQuotaMonitor.start();
 await memoryMonitor.start();
 await new Promise((resolve, reject) => {
@@ -132,32 +115,19 @@ await new Promise((resolve, reject) => {
   });
 });
 
-// Optional Desktop-only background work starts after HTTP listen and never delays UI.
-if (controlEnabled) {
-  const controlSync = createControlSync({
-    config: controlConfig,
-    dataDir: dataRoot,
-    applyProfile: embedRuntime ? createLoginApplier({ runtimeUrl: runtimeTarget, getActiveRepls: activeControlRepls }) : undefined,
-  }).start();
-  server.once('close', () => { void controlSync.stop(); });
-}
-
 async function startEmbeddedRuntime() {
   const runtimeHost = runtimeTarget.hostname || '127.0.0.1';
   const runtimePort = runtimeTarget.port || '3101';
   await runWebServer(['--host', runtimeHost, '--port', runtimePort], {
     createRuntime: workspaceRuntime.createRuntime,
-    createRepl(runtime) {
-      const repl = workspaceRuntime.createRepl(runtime);
-      if (controlEnabled) controlRepls.add(new WeakRef(repl));
-      return repl;
-    },
+    createRepl: workspaceRuntime.createRepl,
   });
 }
 
 async function routeRequest(req, res) {
   const url = new URL(req.url || '/', 'http://localhost');
   try {
+    if (await isolation.route(req, res, url)) return;
     if (await pluginHost.route(req, res, url, { readJsonBody, sendJson })) return;
     if (req.method === 'GET' && url.pathname === '/api/prompt-library') {
       return sendJson(res, { items: await readPromptLibrary() });
@@ -213,6 +183,7 @@ async function routeRequest(req, res) {
       await writePromptLibrary(ordered);
       return sendJson(res, { ok: true, items: ordered });
     }
+    if (await chunkUploads(req, res, url)) return;
     if (req.method === 'GET' && url.pathname.startsWith('/api/uploads/')) {
       const storedName = decodeURIComponent(url.pathname.slice('/api/uploads/'.length));
       return serveUploadedFile(res, storedName);
@@ -223,7 +194,7 @@ async function routeRequest(req, res) {
     }
     if (req.method === 'POST' && url.pathname === '/api/uploads') {
       const body = await readJsonBody(req);
-      const file = await storeUploadedFile(body);
+      const file = await deliverUpload(await storeUploadedFile(body), url, runtimeTarget);
       return sendJson(res, { ok: true, file });
     }
     if (shouldProxy(url.pathname)) {
@@ -385,7 +356,6 @@ async function storeUploadedFile(payload) {
   if (!data) throw new Error('missing upload data');
   const buffer = Buffer.from(data, 'base64');
   if (!buffer.length) throw new Error('empty upload data');
-  if (buffer.length > maxUploadBytes) throw new Error(`upload too large: max ${maxUploadBytes} bytes`);
   const stamp = new Date().toISOString().replace(/[:.]/g, '-');
   const random = Math.random().toString(36).slice(2, 8);
   const storedName = `${stamp}-${random}-${name}`;
@@ -419,12 +389,14 @@ async function serveUploadedFile(res, storedName) {
     return;
   }
   try {
-    const body = await fsp.readFile(filePath);
+    const stat = await fsp.stat(filePath);
+    if (!stat.isFile()) throw new Error('not a file');
     res.writeHead(200, {
+      'Content-Length': String(stat.size),
       'Content-Type': mime[path.extname(filePath).toLowerCase()] || 'application/octet-stream',
       'Cache-Control': 'public, max-age=31536000, immutable',
     });
-    res.end(body);
+    fs.createReadStream(filePath).on('error', () => res.destroy()).pipe(res);
   } catch {
     res.writeHead(404, { 'Content-Type': 'text/plain; charset=utf-8' });
     res.end('not found');
@@ -448,6 +420,12 @@ async function serveLocalImage(res, encodedPath) {
     return;
   }
   try {
+    if (containerMode) {
+      const body = await workspaceFs.readFile(absolutePath);
+      res.writeHead(200, { "Content-Type": contentType, "Content-Length": body.length, "Cache-Control": "no-store" });
+      res.end(body);
+      return;
+    }
     const fileStat = await fsp.stat(absolutePath);
     if (!fileStat.isFile()) throw new Error('not a file');
     res.writeHead(200, {

package/control-protocol.mjs

@@ -1,44 +0,0 @@
-// Browser + Node >=20 native Web Crypto; no Node-only imports.
-const encoder = new TextEncoder();
-const decoder = new TextDecoder('utf-8', { fatal: true });
-const directions = new Set(['up', 'down']);
-export function decodeBase64(value) {
-  if (typeof value !== 'string' || value.length % 4 !== 0 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value)) throw new Error('Invalid base64');
-  const binary = atob(value);
-  const bytes = Uint8Array.from(binary, c => c.charCodeAt(0));
-  if (encodeBase64(bytes) !== value) throw new Error('Invalid base64');
-  return bytes;
-}
-export function encodeBase64(bytes) {
-  let binary = '';
-  for (let i = 0; i < bytes.length; i += 8192) binary += String.fromCharCode(...bytes.subarray(i, i + 8192));
-  return btoa(binary);
-}
-function aad(deviceId, direction) {
-  if (typeof deviceId !== 'string' || !/^[A-Za-z0-9_-]{1,128}$/.test(deviceId) || !directions.has(direction)) throw new Error('Invalid context');
-  return encoder.encode(JSON.stringify([deviceId, direction]));
-}
-async function importKey(keyBase64, usage) {
-  const bytes = decodeBase64(keyBase64);
-  if (bytes.byteLength !== 32) throw new Error('Key must be 32 bytes');
-  return crypto.subtle.importKey('raw', bytes, 'AES-GCM', false, [usage]);
-}
-export async function seal(keyBase64, deviceId, direction, payload) {
-  const additionalData = aad(deviceId, direction);
-  const key = await importKey(keyBase64, 'encrypt');
-  const nonce = crypto.getRandomValues(new Uint8Array(12));
-  const plaintext = JSON.stringify(payload);
-  if (plaintext === undefined) throw new Error('Payload must be JSON');
-  const encrypted = await crypto.subtle.encrypt({ name: 'AES-GCM', iv: nonce, additionalData, tagLength: 128 }, key, encoder.encode(plaintext));
-  return { v: 1, nonce: encodeBase64(nonce), ciphertext: encodeBase64(new Uint8Array(encrypted)) };
-}
-export async function open(keyBase64, deviceId, direction, envelope) {
-  const additionalData = aad(deviceId, direction);
-  if (!envelope || envelope.v !== 1) throw new Error('Invalid envelope');
-  const nonce = decodeBase64(envelope.nonce);
-  const ciphertext = decodeBase64(envelope.ciphertext);
-  if (nonce.length !== 12 || ciphertext.length < 16) throw new Error('Invalid envelope');
-  const key = await importKey(keyBase64, 'decrypt');
-  const plaintext = await crypto.subtle.decrypt({ name: 'AES-GCM', iv: nonce, additionalData, tagLength: 128 }, key, ciphertext);
-  return JSON.parse(decoder.decode(plaintext));
-}