pi-web-ui 0.7.0 → 0.8.0

package/dist/server/index.js

@@ -12,12 +12,13 @@
  *   PI_WEB_DATA_DIR where per-client session dirs are stored (default: <cwd>/.pi-web)
  *   PI_CODING_AGENT_DIR  pi config dir (auth/models/skills) — passed to the SDK
  */
-import { existsSync } from "node:fs";
-import { stat } from "node:fs/promises";
+import { createWriteStream, existsSync } from "node:fs";
+import { mkdir, stat } from "node:fs/promises";
 import { createServer } from "node:http";
-import { basename, dirname, join, resolve } from "node:path";
+import { basename, dirname, extname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { randomUUID } from "node:crypto";
+import { pipeline } from "node:stream/promises";
 import express from "express";
 import { WebSocket, WebSocketServer } from "ws";
 import { VERSION } from "@earendil-works/pi-coding-agent";
@@ -32,10 +33,15 @@ app.get("/api/health", (_req, res) => {
     res.json({ ok: true, piVersion: VERSION, cwd: CWD, pid: process.pid });
 });
 /**
- * Stream a workspace file for the media preview (image/video). Path is
- * validated against the workspace root and only image/video kinds are served —
+ * Stream a workspace file over HTTP.
+ *
+ * Media preview (no download param): only image/video kinds are served —
  * text goes over the WebSocket, and exe/jar/etc. are never exposed here.
  * express's sendFile handles Range requests, so video seeking works.
+ *
+ * Download (?download=1): any file kind is served with
+ * Content-Disposition: attachment so the browser saves it instead of
+ * rendering. Path is validated against the workspace root either way.
  */
 app.get("/api/file", async (req, res) => {
     try {
@@ -54,7 +60,8 @@ app.get("/api/file", async (req, res) => {
         const abs = wp.abs;
         const name = basename(abs);
         const kind = previewKind(name);
-        if (kind !== "image" && kind !== "video") {
+        const isDownload = req.query.download === "1";
+        if (!isDownload && kind !== "image" && kind !== "video") {
             res.status(400).end("not a previewable media file");
             return;
         }
@@ -63,12 +70,96 @@ app.get("/api/file", async (req, res) => {
             res.status(400).end("not a file");
             return;
         }
-        res.sendFile(abs);
+        if (isDownload) {
+            // res.download sets Content-Disposition: attachment and RFC 5987
+            // filename* encoding for non-ASCII names.
+            res.download(abs, name);
+        }
+        else {
+            res.sendFile(abs);
+        }
     }
     catch {
         res.status(404).end("not found");
     }
 });
+/**
+ * Save an uploaded file into the client's workspace (drag & drop from the OS
+ * file manager). Query params:
+ *   clientId  client session — resolves the workspace root (falls back to CWD)
+ *   destDir   workspace-relative target directory ("" = workspace root)
+ * Request body is the raw file bytes (streamed to disk); headers:
+ *   X-File-Name       original file name (URI-encoded)
+ *   X-File-Rel-Path   optional path of the file within the drop (URI-encoded)
+ *                     — its directory part is recreated under destDir, so
+ *                     dropping a whole folder keeps its structure. The final
+ *                     segment is used as the file name.
+ * Paths are validated against the workspace root; existing files get a
+ * "name (1).ext" suffix instead of being overwritten.
+ */
+app.post("/api/upload", async (req, res) => {
+    const fail = (status, error) => res.status(status).json({ ok: false, error });
+    try {
+        const cid = typeof req.query.clientId === "string" ? req.query.clientId : "";
+        const rawDest = typeof req.query.destDir === "string" ? req.query.destDir : "";
+        const cs = cid ? service.get(cid) : undefined;
+        const wp = workspacePath(cs?.cwd ?? CWD, rawDest);
+        if (!wp) {
+            fail(400, "目标目录不在工作区内");
+            return;
+        }
+        const nameRaw = typeof req.headers["x-file-name"] === "string"
+            ? decodeURIComponent(req.headers["x-file-name"])
+            : "";
+        const relRaw = typeof req.headers["x-file-rel-path"] === "string"
+            ? decodeURIComponent(req.headers["x-file-rel-path"])
+            : "";
+        // Sanitize every path segment: strip separators/traversal, drop empties.
+        const clean = (s) => {
+            const seg = basename(s).replace(/[\\/]/g, "");
+            return seg && seg !== "." && seg !== ".." ? seg : null;
+        };
+        const relDirs = relRaw
+            .split("/")
+            .map(clean)
+            .filter((s) => s !== null);
+        const name = clean(relDirs.length > 0 ? relDirs[relDirs.length - 1] : nameRaw);
+        if (!name) {
+            fail(400, "无效文件名");
+            return;
+        }
+        // Ensure the destination directory exists (and is a directory).
+        const destAbs = join(wp.abs, ...relDirs.slice(0, -1));
+        const destSt = await stat(wp.abs).catch(() => null);
+        if (destSt && !destSt.isDirectory()) {
+            fail(400, "目标不是目录");
+            return;
+        }
+        await mkdir(destAbs, { recursive: true });
+        // Never overwrite: "name (1).ext", "name (2).ext", …
+        const ext = extname(name);
+        const stem = name.slice(0, name.length - ext.length);
+        let finalName = name;
+        for (let i = 1; existsSync(join(destAbs, finalName)); i++) {
+            finalName = `${stem} (${i})${ext}`;
+        }
+        const finalAbs = join(destAbs, finalName);
+        // Stream the request body straight to disk.
+        let size = 0;
+        const out = createWriteStream(finalAbs);
+        req.on("data", (chunk) => {
+            size += chunk.length;
+        });
+        await pipeline(req, out);
+        const relOut = [rawDest, ...relDirs.slice(0, -1), finalName]
+            .filter(Boolean)
+            .join("/");
+        res.json({ ok: true, path: relOut, name: finalName, size });
+    }
+    catch {
+        fail(500, "上传失败");
+    }
+});
 // Production: serve the built frontend from web/dist. Resolve relative to this
 // module so it works when installed as a package (global/npx/Docker), not just
 // from the repo root. In dev, Vite serves the UI on :5173 and proxies /ws.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-web-ui",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Web chat interface for the pi coding agent, powered by the pi SDK (@earendil-works/pi-coding-agent) — one-command run, Docker/systemd/launchd deployable",
   "license": "MIT",
   "type": "module",