orbit-codex-bridge 0.1.2 → 0.1.6

package/relay-agent.mjs

@@ -69,7 +69,9 @@ export function createRelayAgent(options = {}) {
           requests.delete(request);
           resolve({statusCode:response.statusCode || 502,headers:{
             'content-type':response.headers['content-type'] || 'application/json',
-            ...(response.headers['set-cookie'] ? {'set-cookie':response.headers['set-cookie']} : {})
+            ...(response.headers['set-cookie'] ? {'set-cookie':response.headers['set-cookie']} : {}),
+            ...Object.fromEntries(['content-disposition','content-length','accept-ranges','content-range','etag']
+              .filter(name=>typeof response.headers[name]==='string').map(name=>[name,response.headers[name]]))
           },body:Buffer.concat(chunks)});
         });
       });
@@ -97,7 +99,7 @@ export function createRelayAgent(options = {}) {
     const body = Buffer.from(message.body || '', 'base64');
     if (body.length > maxBody) return;
     const headers = {};
-    for (const name of ['accept','content-type','cookie','user-agent']) {
+    for (const name of ['accept','content-type','cookie','user-agent','range','if-range','if-none-match']) {
       const value = message.headers?.[name];
       if (typeof value === 'string') headers[name] = value;
     }

package/relay-server.mjs

@@ -71,13 +71,24 @@ function responseHeaders(headers, deviceId, secureCookie) {
     const token = paired.split(';')[0].slice('orbit_session='.length);
     safe['Set-Cookie'] = `${deviceCookieName(deviceId)}=${token}; HttpOnly; SameSite=Strict; Path=/; Max-Age=${token ? 43200 : 0}${secureCookie ? '; Secure' : ''}`;
   }
+  const contentType=headers?.['content-type'];
+  if(typeof contentType==='string'&&/^(?:application\/(?:json|pdf|zip|octet-stream)|text\/[a-z0-9.+-]+(?:;\s*charset=utf-8)?|image\/(?:png|jpeg|gif|webp|svg\+xml))$/i.test(contentType))safe['Content-Type']=contentType;
+  const disposition=headers?.['content-disposition'];
+  if(typeof disposition==='string'&&disposition.length<=1000
+    &&/^attachment;\s*filename="[^"\r\n]{1,180}";\s*filename\*=UTF-8''[a-zA-Z0-9%._~-]{1,600}$/.test(disposition))safe['Content-Disposition']=disposition;
+  const length=headers?.['content-length'];
+  if(/^\d{1,8}$/.test(String(length||'')))safe['Content-Length']=length;
+  if(/^(?:bytes \d+-\d+\/\d+|bytes \*\/\d+)$/.test(headers?.['content-range']||''))safe['Content-Range']=headers['content-range'];
+  if(headers?.['accept-ranges']==='bytes')safe['Accept-Ranges']='bytes';
+  if(typeof headers?.etag==='string'&&/^"orbit-\d+-\d+"$/.test(headers.etag))safe.ETag=headers.etag;
   return safe;
 }
 
 function isLocalApi(pathname, method) {
   if (method === 'GET') return ['/api/status','/api/threads','/api/models'].includes(pathname)
-    || /^\/api\/threads\/[a-zA-Z0-9_-]{8,120}\/messages$/.test(pathname);
-  return method === 'POST' && ['/api/pair','/api/logout','/api/pair/qr'].includes(pathname);
+    || /^\/api\/threads\/[a-zA-Z0-9_-]{8,120}\/(?:messages|files|file)$/.test(pathname);
+  return method === 'POST' && (['/api/pair','/api/logout','/api/pair/qr'].includes(pathname)
+    || /^\/api\/threads\/[a-zA-Z0-9_-]{8,120}\/attachments(?:\/remove)?$/.test(pathname));
 }
 
 function json(response, status, body, headers = {}) {
@@ -261,14 +272,14 @@ export function createRelayServer(options = {}) {
     const agent=agents.get(device.id);
     if(!agent||agent.socket.readyState!==WebSocket.OPEN)return json(response,503,{error:`电脑“${device.name}”当前不在线。`});
     if(accountConnect&&!agent.accountConnect)return json(response,409,{
-      error:'请在电脑上更新 Orbit 连接器到 0.1.2 或更高版本后重试。',code:'connector_upgrade_required'
+      error:'请在电脑上更新 Orbit 连接器到 0.1.3 或更高版本后重试。',code:'connector_upgrade_required'
     });
     const body=await readBody(request);
     if (!store.hasSession(authenticated.tokenHash,authenticated.user.id)) return json(response,401,{error:'请先登录云端工作台。',code:'cloud_login_required'});
     chooseDevice(request, store.getUser(authenticated.user.id));
     const requestId=crypto.randomUUID();
     const headers={};
-    for(const name of ['accept','content-type','host','origin','user-agent'])if(request.headers[name])headers[name]=request.headers[name];
+    for(const name of ['accept','content-type','host','origin','user-agent','range','if-range','if-none-match'])if(request.headers[name])headers[name]=request.headers[name];
     headers.cookie = localCookie(request,device.id);
     if(pendingHttp.size>=500)return json(response,429,{error:'请求过多，请稍后重试。'});
     const promise=new Promise((resolve,reject)=>{