osborn 0.9.13 → 0.9.15

package/dist/index.js

@@ -15,6 +15,8 @@ import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { spawn } from 'node:child_process';
 import { homedir, tmpdir } from 'node:os';
+import { PassThrough } from 'node:stream';
+import { createGunzip } from 'node:zlib';
 // Resolve __dirname for this ESM module so we can find sibling files (e.g.
 // meeting-output.html) relative to the compiled JS location, NOT process.cwd().
 // In production cwd is the user's workspace; the static file lives next to dist/index.js.
@@ -376,8 +378,26 @@ function startApiServer(workingDir, port) {
             const targetWorkDir = url.searchParams.get('targetWorkDir');
             const tmpDir = mkdtempSync(join(tmpdir(), 'osborn-import-'));
             const tarProc = spawn('tar', ['-xf', '-', '-C', tmpDir]);
-            // Streaming: pipe request body directly to tar stdin — no buffering
-            req.pipe(tarProc.stdin);
+            // Stream-sniff the first chunk to detect gzip magic bytes (0x1f 0x8b).
+            // Then route through createGunzip() if gzip, otherwise pipe raw to tar.
+            // This avoids any reliance on Content-Type or Content-Encoding headers.
+            const passthrough = new PassThrough();
+            let sniffDone = false;
+            req.once('data', (firstChunk) => {
+                sniffDone = true;
+                const isGzip = firstChunk[0] === 0x1f && firstChunk[1] === 0x8b;
+                passthrough.write(firstChunk);
+                req.pipe(passthrough);
+                const source = isGzip ? passthrough.pipe(createGunzip()) : passthrough;
+                source.pipe(tarProc.stdin);
+            });
+            req.once('end', () => {
+                if (!sniffDone) {
+                    // Empty body — just end tar stdin
+                    passthrough.end();
+                    tarProc.stdin.end();
+                }
+            });
             tarProc.stdin.on('error', (err) => {
                 console.error('[import] tar stdin error', err);
                 tarProc.kill('SIGTERM');
@@ -522,22 +542,24 @@ function startApiServer(workingDir, port) {
             }
             const tmpExtractDir = mkdtempSync(join(tmpdir(), 'osborn-import-'));
             try {
-                // Reassemble chunks into a single stream and pipe to tar
+                // Reassemble all chunks into a combined buffer, then sniff first 2 bytes
+                // to detect gzip magic (0x1f 0x8b). Route through createGunzip() if gzip,
+                // otherwise pass raw bytes — always using tar -xf (no -z flag).
+                const chunkBuffers = [];
+                for (const chunkFile of expectedChunks) {
+                    chunkBuffers.push(readFileSync(join(uploadDir, chunkFile)));
+                }
+                const combined = Buffer.concat(chunkBuffers);
+                const isGzip = combined[0] === 0x1f && combined[1] === 0x8b;
                 const tarProc = spawn('tar', ['-xf', '-', '-C', tmpExtractDir]);
-                // Stream chunks in order to tar stdin
+                // Feed combined buffer through gunzip (if needed) then into tar stdin
+                const feedStream = new PassThrough();
+                const tarInput = isGzip ? feedStream.pipe(createGunzip()) : feedStream;
+                tarInput.pipe(tarProc.stdin);
+                feedStream.end(combined);
                 const streamChunks = async () => {
-                    for (const chunkFile of expectedChunks) {
-                        const chunkData = readFileSync(join(uploadDir, chunkFile));
-                        await new Promise((resolve, reject) => {
-                            tarProc.stdin.write(chunkData, (err) => {
-                                if (err)
-                                    reject(err);
-                                else
-                                    resolve();
-                            });
-                        });
-                    }
-                    tarProc.stdin.end();
+                    // feeding is already initiated above; just return a resolved promise
+                    await Promise.resolve();
                 };
                 streamChunks().catch(err => {
                     console.error('[import-finalize] chunk stream error', err);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "osborn",
-  "version": "0.9.13",
+  "version": "0.9.15",
   "description": "Voice AI coding assistant - local agent that connects to Osborn frontend",
   "type": "module",
   "bin": {