shennian 0.3.85 → 0.3.86

package/dist/src/session/handlers/control.js

@@ -1 +1,61 @@
-import{SERVERS as r}from"../../region.js";import{loadConfig as i,saveConfig as p}from"../../config/index.js";async function f(o,t){const n=await Promise.all(Object.keys(r).map(async a=>{const{url:s,label:c}=r[a],d=performance.now();try{const l=new AbortController,u=setTimeout(()=>l.abort(),5e3);return await fetch(`${s}/health`,{signal:l.signal}),clearTimeout(u),{region:a,url:s,label:c,latencyMs:Math.round(performance.now()-d)}}catch{return{region:a,url:s,label:c,latencyMs:null}}}));o.client.sendRes({type:"res",id:t.id,ok:!0,payload:{current:"cn",servers:n}})}async function m(o,t){const e=t.params.region;if(e!=="cn"&&e!=="global"){o.client.sendRes({type:"res",id:t.id,ok:!1,error:'region must be "cn" or "global"'});return}const n=i();n.serverUrl=r[e].url,p(n),o.client.sendRes({type:"res",id:t.id,ok:!0,payload:{region:e,url:r[e].url}}),setTimeout(()=>process.exit(0),500)}async function h(o,t){const e=t.params.policy;if(e!=="none"&&e!=="patch"){o.client.sendRes({type:"res",id:t.id,ok:!1,error:'policy must be "none" or "patch"'});return}const n=i();n.autoUpgrade=e,p(n),o.upgradePolicyController?.setPolicy(e),o.client.sendEvent({type:"event",event:"machine.upgrade-policy",payload:{policy:e}}),o.client.sendRes({type:"res",id:t.id,ok:!0,payload:{autoUpgrade:e}})}export{f as handleRegionProbe,m as handleRegionSwitch,h as handleUpgradeSetPolicy};
+// @arch docs/architecture/cli/daemon.md#会话管理
+// @test src/__tests__/model-switching.test.ts
+import { SERVERS } from '../../region.js';
+import { loadConfig, saveConfig } from '../../config/index.js';
+export async function handleRegionProbe(runtime, req) {
+    const currentRegion = 'cn';
+    const results = await Promise.all(Object.keys(SERVERS).map(async (region) => {
+        const { url, label } = SERVERS[region];
+        const start = performance.now();
+        try {
+            const controller = new AbortController();
+            const timer = setTimeout(() => controller.abort(), 5000);
+            await fetch(`${url}/health`, { signal: controller.signal });
+            clearTimeout(timer);
+            return { region, url, label, latencyMs: Math.round(performance.now() - start) };
+        }
+        catch {
+            return { region, url, label, latencyMs: null };
+        }
+    }));
+    runtime.client.sendRes({
+        type: 'res',
+        id: req.id,
+        ok: true,
+        payload: { current: currentRegion, servers: results },
+    });
+}
+export async function handleRegionSwitch(runtime, req) {
+    const targetRegion = req.params.region;
+    if (targetRegion !== 'cn' && targetRegion !== 'global') {
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: 'region must be "cn" or "global"' });
+        return;
+    }
+    const config = loadConfig();
+    config.serverUrl = SERVERS[targetRegion].url;
+    saveConfig(config);
+    runtime.client.sendRes({
+        type: 'res',
+        id: req.id,
+        ok: true,
+        payload: { region: targetRegion, url: SERVERS[targetRegion].url },
+    });
+    setTimeout(() => process.exit(0), 500);
+}
+export async function handleUpgradeSetPolicy(runtime, req) {
+    const policy = req.params.policy;
+    if (policy !== 'none' && policy !== 'patch') {
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: 'policy must be "none" or "patch"' });
+        return;
+    }
+    const config = loadConfig();
+    config.autoUpgrade = policy;
+    saveConfig(config);
+    runtime.upgradePolicyController?.setPolicy(policy);
+    runtime.client.sendEvent({
+        type: 'event',
+        event: 'machine.upgrade-policy',
+        payload: { policy },
+    });
+    runtime.client.sendRes({ type: 'res', id: req.id, ok: true, payload: { autoUpgrade: policy } });
+}

package/dist/src/session/handlers/fs.js

@@ -1 +1,594 @@
-import l from"node:fs";import R from"node:os";import h from"node:path";import{convertMarkdownToPdf as F,defaultPdfOutputPath as E,findChromiumExecutable as T,installManagedChromium as b,managedChromiumBrowsersPath as I,MarkdownPdfBrowserMissingError as C}from"../../tools/markdown-to-pdf.js";import{createZipArchive as D}from"../archive-zip.js";import{BinaryTextPreviewError as M,decodeTextBufferAuto as N,isAutoTextEncoding as $}from"../../fs/text-decoder.js";import{abortAttachmentTransfer as _,appendAttachmentTransferChunk as O,finishAttachmentTransfer as j,startAttachmentTransfer as B}from"../attachment-transfer-store.js";import{assertPersonalSyncIdentity as k,getPersonalSyncIdentity as u}from"../../personal-sync/epoch.js";import{getDaemonInstallationId as P}from"../../personal-sync/identity.js";const x="__roots__",L=5e3,Z=1024*1024*1024;function v(e){return/^[A-Za-z]:([\\/]|$)/.test(e)||/^\\\\[^\\]+\\[^\\]+/.test(e)}function m(e){return v(e)?h.win32:h.posix}function g(e){const t=l.statSync(e);return{name:m(e).basename(e),path:e,isDir:t.isDirectory(),size:t.isFile()?t.size:void 0,modifiedAt:t.mtimeMs}}function H(){if(R.platform()==="win32"){const e=[];for(let t=65;t<=90;t+=1){const r=`${String.fromCharCode(t)}:\\`;l.existsSync(r)&&e.push({name:r,path:r,isDir:!0})}return e}return[{name:"/",path:"/",isDir:!0}]}function U(e,t){const r=typeof e=="object"&&e&&"code"in e?String(e.code):"";return r==="ENOENT"?`Directory not found: ${t}`:r==="EACCES"||r==="EPERM"?`Permission denied: ${t}`:e instanceof Error?e.message:String(e)}function W(e){const t=e.trim();if(!t||t!==e||e==="."||e===".."||X(e)||/[\\/:]/.test(e)||/[<>|"?*]/.test(e)||/[. ]$/.test(e))return!1;const r=e.split(".")[0]?.toUpperCase();return!(r&&/^(CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])$/.test(r))}function X(e){return Array.from(e).some(t=>{const r=t.charCodeAt(0);return r>=0&&r<=31})}async function se(e,t){const r=t.params.path||R.homedir(),s=t.params.rootPath||r;if(r===x){e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{path:x,entries:H()}});return}const o=await e.resolveAuthorizedPathAsync(r,s);if(!o.ok){e.client.sendRes({type:"res",id:t.id,ok:!1,error:o.error});return}const a=o.path;try{const n=await l.promises.readdir(a,{withFileTypes:!0}),c=v(a)?h.win32.join:h.join,d=n.map(p=>({name:p.name,path:c(a,p.name),isDir:p.isDirectory()})).sort((p,i)=>p.isDir!==i.isDir?p.isDir?-1:1:p.name.localeCompare(i.name));e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{path:a,entries:d}})}catch(n){e.client.sendRes({type:"res",id:t.id,ok:!1,error:U(n,a)})}}async function ae(e,t){const r=t.params.path,s=t.params.rootPath||r,o=e.resolveAuthorizedPath(r,s);if(!o.ok){e.client.sendRes({type:"res",id:t.id,ok:!1,error:o.error});return}const a=o.path,n=t.params.encoding,c=typeof n=="string"?n:"utf8",d=t.params.offset,p=t.params.length;try{const i=l.statSync(a);if(!i.isFile()){e.client.sendRes({type:"res",id:t.id,ok:!1,error:"Not a file"});return}if(d!=null&&p!=null){const f=Math.min(p,Math.max(0,i.size-d));if(f<=0){e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{data:"",offset:d,length:0,totalSize:i.size,path:a}});return}const y=l.openSync(a,"r");try{const A=Buffer.alloc(f),z=l.readSync(y,A,0,f,d);e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{data:A.subarray(0,z).toString("base64"),offset:d,length:z,totalSize:i.size,path:a}})}finally{l.closeSync(y)}return}const S=t.params.maxSize||(c==="base64"?5*1024*1024:512*1024);if(i.size>S){e.client.sendRes({type:"res",id:t.id,ok:!1,error:`File too large: ${i.size} bytes (max ${S})`,payload:{size:i.size,path:a}});return}if(c==="base64"){const f=l.readFileSync(a);e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{data:f.toString("base64"),path:a,size:i.size}});return}if($(c)){const f=l.readFileSync(a),y=N(f);e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{content:y.content,path:a,size:i.size,encoding:y.encoding,encodingFallback:y.fallback}});return}const w=l.readFileSync(a,"utf-8");e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{content:w,path:a,size:i.size}})}catch(i){e.client.sendRes({type:"res",id:t.id,ok:!1,error:i instanceof M?i.message:String(i)})}}async function oe(e,t){const r=t.params.path,s=t.params.content,o=t.params.rootPath||r;if(!r||typeof s!="string"){e.client.sendRes({type:"res",id:t.id,ok:!1,error:"path and content are required"});return}const a=e.resolveAuthorizedPath(r,o);if(!a.ok){e.client.sendRes({type:"res",id:t.id,ok:!1,error:a.error});return}try{const n=l.existsSync(a.path)?l.statSync(a.path):null;if(n&&!n.isFile()){e.client.sendRes({type:"res",id:t.id,ok:!1,error:"Not a file"});return}l.writeFileSync(a.path,s,"utf-8");const c=l.statSync(a.path);e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{path:a.path,size:c.size,modifiedAt:c.mtimeMs}})}catch(n){e.client.sendRes({type:"res",id:t.id,ok:!1,error:String(n)})}}async function ne(e,t){const r=t.params.path,s=t.params.newName;if(!r||!s){e.client.sendRes({type:"res",id:t.id,ok:!1,error:"path and newName are required"});return}if(!W(s)){e.client.sendRes({type:"res",id:t.id,ok:!1,error:"Invalid newName"});return}const o=m(r),a=t.params.rootPath||o.dirname(r),n=e.resolveAuthorizedPath(r,a);if(!n.ok){e.client.sendRes({type:"res",id:t.id,ok:!1,error:n.error});return}try{const c=m(n.path),d=c.join(c.dirname(n.path),s),p=e.resolveAuthorizedPath(d,a);if(!p.ok){e.client.sendRes({type:"res",id:t.id,ok:!1,error:p.error});return}if(l.existsSync(p.path)){e.client.sendRes({type:"res",id:t.id,ok:!1,error:"Target already exists"});return}l.renameSync(n.path,p.path),e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{oldPath:n.path,newPath:p.path,entry:g(p.path)}})}catch(c){e.client.sendRes({type:"res",id:t.id,ok:!1,error:String(c)})}}async function ie(e,t){const r=t.params.path,s=t.params.rootPath||h.dirname(r||"."),o=typeof t.params.title=="string"?t.params.title:void 0;if(!r){e.client.sendRes({type:"res",id:t.id,ok:!1,error:"path is required"});return}const a=e.resolveAuthorizedPath(r,s);if(!a.ok){e.client.sendRes({type:"res",id:t.id,ok:!1,error:a.error});return}if(!/\.mdx?$/i.test(a.path)){e.client.sendRes({type:"res",id:t.id,ok:!1,error:"Only Markdown files can be exported to PDF"});return}const n=E(a.path),c=e.resolveAuthorizedPath(n,s);if(!c.ok){e.client.sendRes({type:"res",id:t.id,ok:!1,error:c.error});return}try{const d=await F(a.path,{outputPath:c.path,title:o});e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{sourcePath:a.path,outputPath:d.outputPath,entry:g(d.outputPath)}})}catch(d){if(d instanceof C){e.client.sendRes({type:"res",id:t.id,ok:!1,error:"This machine needs the PDF export component before Markdown files can be exported to PDF.",payload:d.setup});return}e.client.sendRes({type:"res",id:t.id,ok:!1,error:d instanceof Error?d.message:String(d)})}}async function de(e,t){try{await b();const r=await T();e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{ready:!0,browserPath:r,managedPath:I()}})}catch(r){e.client.sendRes({type:"res",id:t.id,ok:!1,error:r instanceof Error?r.message:String(r)})}}function V(e){let t="";for(const s of e.trim())s.charCodeAt(0)<=31||'<>:"/\\|?*'.includes(s)?t.endsWith("-")||(t+="-"):t+=s;return t.replace(/[. ]+$/g,"")||"folder"}async function ce(e,t){const r=t.params.path,s=t.params.rootPath||r;if(!r){e.client.sendRes({type:"res",id:t.id,ok:!1,error:"path is required"});return}const o=e.resolveAuthorizedPath(r,s);if(!o.ok){e.client.sendRes({type:"res",id:t.id,ok:!1,error:o.error});return}try{if(!l.statSync(o.path).isDirectory()){e.client.sendRes({type:"res",id:t.id,ok:!1,error:"Not a directory"});return}const n=m(o.path),c=V(n.basename(o.path)),d=h.join(R.tmpdir(),"shennian-archives"),p=h.join(d,`${c}-${Date.now()}-${Math.random().toString(36).slice(2,8)}.zip`),i=D(o.path,p,{maxFiles:L,maxTotalSize:Z});e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{sourcePath:o.path,outputPath:i.outputPath,entry:g(i.outputPath),fileCount:i.fileCount,totalSize:i.totalSize}})}catch(a){e.client.sendRes({type:"res",id:t.id,ok:!1,error:a instanceof Error?a.message:String(a)})}}async function pe(e,t){const r=t.params;try{k(r);const s=e.resolveAuthorizedPath(r.rootPath,r.rootPath);if(!s.ok){e.client.sendRes({type:"res",id:t.id,ok:!1,error:s.error});return}const o=B({...r,rootPath:s.path});o.reused||e.pendingTransfers.set(r.transferId,{transferId:r.transferId,rootPath:s.path,lastActivityAt:Date.now()}),e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{...u(P()),...o,...o.attachment?{attachment:{...u(P()),...o.attachment}}:{}}})}catch(s){e.client.sendRes({type:"res",id:t.id,ok:!1,error:s instanceof Error?s.message:String(s)})}}async function le(e,t){const r=t.params;try{k(r);const s=e.resolveAuthorizedPath(r.rootPath,r.rootPath);if(!s.ok){e.client.sendRes({type:"res",id:t.id,ok:!1,error:s.error});return}const o=Buffer.from(r.data,"base64"),a=O({rootPath:s.path,transferId:r.transferId,relativePath:r.relativePath,offset:r.offset,data:o});e.pendingTransfers.set(r.transferId,{transferId:r.transferId,rootPath:s.path,lastActivityAt:Date.now()}),e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{...u(P()),transferId:r.transferId,...a}})}catch(s){e.client.sendRes({type:"res",id:t.id,ok:!1,error:s instanceof Error?s.message:String(s)})}}async function fe(e,t){const r=t.params;try{k(r);const s=e.resolveAuthorizedPath(r.rootPath,r.rootPath);if(!s.ok){e.client.sendRes({type:"res",id:t.id,ok:!1,error:s.error});return}const o=j(s.path,r.transferId);e.pendingTransfers.delete(r.transferId),e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{...u(P()),...o}})}catch(s){e.client.sendRes({type:"res",id:t.id,ok:!1,error:s instanceof Error?s.message:String(s)})}}async function he(e,t){const r=t.params;try{k(r);const s=e.resolveAuthorizedPath(r.rootPath,r.rootPath);if(!s.ok){e.client.sendRes({type:"res",id:t.id,ok:!1,error:s.error});return}_(s.path,r.transferId),e.pendingTransfers.delete(r.transferId),e.client.sendRes({type:"res",id:t.id,ok:!0,payload:{...u(P()),transferId:r.transferId,aborted:!0}})}catch(s){e.client.sendRes({type:"res",id:t.id,ok:!1,error:s instanceof Error?s.message:String(s)})}}function ye(e){e.pendingTransfers.clear()}export{ye as cleanupPendingTransfers,ce as handleFsArchiveZip,ie as handleFsExportMarkdownPdf,de as handleFsExportMarkdownPdfSetup,se as handleFsLs,ae as handleFsRead,ne as handleFsRename,he as handleFsTransferAbort,le as handleFsTransferChunk,fe as handleFsTransferFinish,pe as handleFsTransferStart,oe as handleFsWrite};
+// @arch docs/architecture/cli/daemon.md#会话管理
+// @test src/__tests__/session-manager.test.ts
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { convertMarkdownToPdf, defaultPdfOutputPath, findChromiumExecutable, installManagedChromium, managedChromiumBrowsersPath, MarkdownPdfBrowserMissingError, } from '../../tools/markdown-to-pdf.js';
+import { createZipArchive } from '../archive-zip.js';
+import { BinaryTextPreviewError, decodeTextBufferAuto, isAutoTextEncoding, } from '../../fs/text-decoder.js';
+import { abortAttachmentTransfer, appendAttachmentTransferChunk, finishAttachmentTransfer, startAttachmentTransfer, } from '../attachment-transfer-store.js';
+import { assertPersonalSyncIdentity, getPersonalSyncIdentity } from '../../personal-sync/epoch.js';
+import { getDaemonInstallationId } from '../../personal-sync/identity.js';
+const FILE_SYSTEM_ROOTS_PATH = '__roots__';
+const MAX_ARCHIVE_FILES = 5000;
+const MAX_ARCHIVE_TOTAL_SIZE = 1024 * 1024 * 1024;
+function isWindowsAbsolutePath(pathValue) {
+    return /^[A-Za-z]:([\\/]|$)/.test(pathValue) || /^\\\\[^\\]+\\[^\\]+/.test(pathValue);
+}
+function pathApiForPath(pathValue) {
+    return isWindowsAbsolutePath(pathValue) ? path.win32 : path.posix;
+}
+function makeFsEntry(entryPath) {
+    const stat = fs.statSync(entryPath);
+    const api = pathApiForPath(entryPath);
+    return {
+        name: api.basename(entryPath),
+        path: entryPath,
+        isDir: stat.isDirectory(),
+        size: stat.isFile() ? stat.size : undefined,
+        modifiedAt: stat.mtimeMs,
+    };
+}
+function listFileSystemRoots() {
+    if (os.platform() === 'win32') {
+        const entries = [];
+        for (let code = 65; code <= 90; code += 1) {
+            const drive = `${String.fromCharCode(code)}:\\`;
+            if (fs.existsSync(drive))
+                entries.push({ name: drive, path: drive, isDir: true });
+        }
+        return entries;
+    }
+    return [{ name: '/', path: '/', isDir: true }];
+}
+function fsErrorMessage(err, fallbackPath) {
+    const code = typeof err === 'object' && err && 'code' in err
+        ? String(err.code)
+        : '';
+    if (code === 'ENOENT')
+        return `Directory not found: ${fallbackPath}`;
+    if (code === 'EACCES' || code === 'EPERM')
+        return `Permission denied: ${fallbackPath}`;
+    return err instanceof Error ? err.message : String(err);
+}
+function isSafeRenameName(name) {
+    const trimmed = name.trim();
+    if (!trimmed || trimmed !== name)
+        return false;
+    if (name === '.' || name === '..')
+        return false;
+    if (hasControlChar(name) || /[\\/:]/.test(name))
+        return false;
+    if (/[<>|"?*]/.test(name))
+        return false;
+    if (/[. ]$/.test(name))
+        return false;
+    const upper = name.split('.')[0]?.toUpperCase();
+    if (upper && /^(CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])$/.test(upper))
+        return false;
+    return true;
+}
+function hasControlChar(value) {
+    return Array.from(value).some((char) => {
+        const code = char.charCodeAt(0);
+        return code >= 0x00 && code <= 0x1f;
+    });
+}
+export async function handleFsLs(runtime, req) {
+    const requestedPath = req.params.path || os.homedir();
+    const rootPath = req.params.rootPath || requestedPath;
+    if (requestedPath === FILE_SYSTEM_ROOTS_PATH) {
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: true,
+            payload: { path: FILE_SYSTEM_ROOTS_PATH, entries: listFileSystemRoots() },
+        });
+        return;
+    }
+    const resolved = await runtime.resolveAuthorizedPathAsync(requestedPath, rootPath);
+    if (!resolved.ok) {
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: resolved.error });
+        return;
+    }
+    const dirPath = resolved.path;
+    try {
+        const raw = await fs.promises.readdir(dirPath, { withFileTypes: true });
+        const joinPath = isWindowsAbsolutePath(dirPath) ? path.win32.join : path.join;
+        const entries = raw
+            .map((entry) => ({
+            name: entry.name,
+            path: joinPath(dirPath, entry.name),
+            isDir: entry.isDirectory(),
+        }))
+            .sort((left, right) => {
+            if (left.isDir !== right.isDir)
+                return left.isDir ? -1 : 1;
+            return left.name.localeCompare(right.name);
+        });
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: true,
+            payload: { path: dirPath, entries },
+        });
+    }
+    catch (err) {
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: false,
+            error: fsErrorMessage(err, dirPath),
+        });
+    }
+}
+export async function handleFsRead(runtime, req) {
+    const requestedPath = req.params.path;
+    const rootPath = req.params.rootPath || requestedPath;
+    const resolved = runtime.resolveAuthorizedPath(requestedPath, rootPath);
+    if (!resolved.ok) {
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: resolved.error });
+        return;
+    }
+    const filePath = resolved.path;
+    const requestedEncoding = req.params.encoding;
+    const encoding = typeof requestedEncoding === 'string' ? requestedEncoding : 'utf8';
+    const offset = req.params.offset;
+    const length = req.params.length;
+    try {
+        const stat = fs.statSync(filePath);
+        if (!stat.isFile()) {
+            runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: 'Not a file' });
+            return;
+        }
+        if (offset != null && length != null) {
+            const readLen = Math.min(length, Math.max(0, stat.size - offset));
+            if (readLen <= 0) {
+                runtime.client.sendRes({
+                    type: 'res',
+                    id: req.id,
+                    ok: true,
+                    payload: { data: '', offset, length: 0, totalSize: stat.size, path: filePath },
+                });
+                return;
+            }
+            const fd = fs.openSync(filePath, 'r');
+            try {
+                const buffer = Buffer.alloc(readLen);
+                const bytesRead = fs.readSync(fd, buffer, 0, readLen, offset);
+                runtime.client.sendRes({
+                    type: 'res',
+                    id: req.id,
+                    ok: true,
+                    payload: {
+                        data: buffer.subarray(0, bytesRead).toString('base64'),
+                        offset,
+                        length: bytesRead,
+                        totalSize: stat.size,
+                        path: filePath,
+                    },
+                });
+            }
+            finally {
+                fs.closeSync(fd);
+            }
+            return;
+        }
+        const maxSize = req.params.maxSize || (encoding === 'base64' ? 5 * 1024 * 1024 : 512 * 1024);
+        if (stat.size > maxSize) {
+            runtime.client.sendRes({
+                type: 'res',
+                id: req.id,
+                ok: false,
+                error: `File too large: ${stat.size} bytes (max ${maxSize})`,
+                payload: { size: stat.size, path: filePath },
+            });
+            return;
+        }
+        if (encoding === 'base64') {
+            const buffer = fs.readFileSync(filePath);
+            runtime.client.sendRes({
+                type: 'res',
+                id: req.id,
+                ok: true,
+                payload: { data: buffer.toString('base64'), path: filePath, size: stat.size },
+            });
+            return;
+        }
+        if (isAutoTextEncoding(encoding)) {
+            const buffer = fs.readFileSync(filePath);
+            const decoded = decodeTextBufferAuto(buffer);
+            runtime.client.sendRes({
+                type: 'res',
+                id: req.id,
+                ok: true,
+                payload: {
+                    content: decoded.content,
+                    path: filePath,
+                    size: stat.size,
+                    encoding: decoded.encoding,
+                    encodingFallback: decoded.fallback,
+                },
+            });
+            return;
+        }
+        const content = fs.readFileSync(filePath, 'utf-8');
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: true,
+            payload: { content, path: filePath, size: stat.size },
+        });
+    }
+    catch (err) {
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: false,
+            error: err instanceof BinaryTextPreviewError ? err.message : String(err),
+        });
+    }
+}
+export async function handleFsWrite(runtime, req) {
+    const requestedPath = req.params.path;
+    const content = req.params.content;
+    const rootPath = req.params.rootPath || requestedPath;
+    if (!requestedPath || typeof content !== 'string') {
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: false,
+            error: 'path and content are required',
+        });
+        return;
+    }
+    const resolved = runtime.resolveAuthorizedPath(requestedPath, rootPath);
+    if (!resolved.ok) {
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: resolved.error });
+        return;
+    }
+    try {
+        const existing = fs.existsSync(resolved.path) ? fs.statSync(resolved.path) : null;
+        if (existing && !existing.isFile()) {
+            runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: 'Not a file' });
+            return;
+        }
+        fs.writeFileSync(resolved.path, content, 'utf-8');
+        const stat = fs.statSync(resolved.path);
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: true,
+            payload: { path: resolved.path, size: stat.size, modifiedAt: stat.mtimeMs },
+        });
+    }
+    catch (err) {
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: String(err) });
+    }
+}
+export async function handleFsRename(runtime, req) {
+    const requestedPath = req.params.path;
+    const newName = req.params.newName;
+    if (!requestedPath || !newName) {
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: false,
+            error: 'path and newName are required',
+        });
+        return;
+    }
+    if (!isSafeRenameName(newName)) {
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: 'Invalid newName' });
+        return;
+    }
+    const api = pathApiForPath(requestedPath);
+    const rootPath = req.params.rootPath || api.dirname(requestedPath);
+    const resolved = runtime.resolveAuthorizedPath(requestedPath, rootPath);
+    if (!resolved.ok) {
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: resolved.error });
+        return;
+    }
+    try {
+        const api = pathApiForPath(resolved.path);
+        const newPath = api.join(api.dirname(resolved.path), newName);
+        const checkedNewPath = runtime.resolveAuthorizedPath(newPath, rootPath);
+        if (!checkedNewPath.ok) {
+            runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: checkedNewPath.error });
+            return;
+        }
+        if (fs.existsSync(checkedNewPath.path)) {
+            runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: 'Target already exists' });
+            return;
+        }
+        fs.renameSync(resolved.path, checkedNewPath.path);
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: true,
+            payload: {
+                oldPath: resolved.path,
+                newPath: checkedNewPath.path,
+                entry: makeFsEntry(checkedNewPath.path),
+            },
+        });
+    }
+    catch (err) {
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: String(err) });
+    }
+}
+export async function handleFsExportMarkdownPdf(runtime, req) {
+    const requestedPath = req.params.path;
+    const rootPath = req.params.rootPath || path.dirname(requestedPath || '.');
+    const title = typeof req.params.title === 'string' ? req.params.title : undefined;
+    if (!requestedPath) {
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: 'path is required' });
+        return;
+    }
+    const resolved = runtime.resolveAuthorizedPath(requestedPath, rootPath);
+    if (!resolved.ok) {
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: resolved.error });
+        return;
+    }
+    if (!/\.mdx?$/i.test(resolved.path)) {
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: false,
+            error: 'Only Markdown files can be exported to PDF',
+        });
+        return;
+    }
+    const outputPath = defaultPdfOutputPath(resolved.path);
+    const checkedOutput = runtime.resolveAuthorizedPath(outputPath, rootPath);
+    if (!checkedOutput.ok) {
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: checkedOutput.error });
+        return;
+    }
+    try {
+        const result = await convertMarkdownToPdf(resolved.path, {
+            outputPath: checkedOutput.path,
+            title,
+        });
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: true,
+            payload: {
+                sourcePath: resolved.path,
+                outputPath: result.outputPath,
+                entry: makeFsEntry(result.outputPath),
+            },
+        });
+    }
+    catch (err) {
+        if (err instanceof MarkdownPdfBrowserMissingError) {
+            runtime.client.sendRes({
+                type: 'res',
+                id: req.id,
+                ok: false,
+                error: 'This machine needs the PDF export component before Markdown files can be exported to PDF.',
+                payload: err.setup,
+            });
+            return;
+        }
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: false,
+            error: err instanceof Error ? err.message : String(err),
+        });
+    }
+}
+export async function handleFsExportMarkdownPdfSetup(runtime, req) {
+    try {
+        await installManagedChromium();
+        const browserPath = await findChromiumExecutable();
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: true,
+            payload: { ready: true, browserPath, managedPath: managedChromiumBrowsersPath() },
+        });
+    }
+    catch (error) {
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: false,
+            error: error instanceof Error ? error.message : String(error),
+        });
+    }
+}
+function safeArchiveBaseName(name) {
+    let safeName = '';
+    for (const char of name.trim()) {
+        const code = char.charCodeAt(0);
+        const unsafe = code <= 0x1f || '<>:"/\\|?*'.includes(char);
+        if (unsafe) {
+            if (!safeName.endsWith('-'))
+                safeName += '-';
+        }
+        else {
+            safeName += char;
+        }
+    }
+    const trimmed = safeName.replace(/[. ]+$/g, '');
+    return trimmed || 'folder';
+}
+export async function handleFsArchiveZip(runtime, req) {
+    const requestedPath = req.params.path;
+    const rootPath = req.params.rootPath || requestedPath;
+    if (!requestedPath) {
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: 'path is required' });
+        return;
+    }
+    const resolved = runtime.resolveAuthorizedPath(requestedPath, rootPath);
+    if (!resolved.ok) {
+        runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: resolved.error });
+        return;
+    }
+    try {
+        const stat = fs.statSync(resolved.path);
+        if (!stat.isDirectory()) {
+            runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: 'Not a directory' });
+            return;
+        }
+        const api = pathApiForPath(resolved.path);
+        const baseName = safeArchiveBaseName(api.basename(resolved.path));
+        const archiveDir = path.join(os.tmpdir(), 'shennian-archives');
+        const outputPath = path.join(archiveDir, `${baseName}-${Date.now()}-${Math.random().toString(36).slice(2, 8)}.zip`);
+        const result = createZipArchive(resolved.path, outputPath, {
+            maxFiles: MAX_ARCHIVE_FILES,
+            maxTotalSize: MAX_ARCHIVE_TOTAL_SIZE,
+        });
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: true,
+            payload: {
+                sourcePath: resolved.path,
+                outputPath: result.outputPath,
+                entry: makeFsEntry(result.outputPath),
+                fileCount: result.fileCount,
+                totalSize: result.totalSize,
+            },
+        });
+    }
+    catch (err) {
+        runtime.client.sendRes({
+            type: 'res',
+            id: req.id,
+            ok: false,
+            error: err instanceof Error ? err.message : String(err),
+        });
+    }
+}
+export async function handleFsTransferStart(runtime, req) {
+    const params = req.params;
+    try {
+        assertPersonalSyncIdentity(params);
+        const resolved = runtime.resolveAuthorizedPath(params.rootPath, params.rootPath);
+        if (!resolved.ok) {
+            runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: resolved.error });
+            return;
+        }
+        const result = startAttachmentTransfer({ ...params, rootPath: resolved.path });
+        if (!result.reused) {
+            runtime.pendingTransfers.set(params.transferId, {
+                transferId: params.transferId,
+                rootPath: resolved.path,
+                lastActivityAt: Date.now(),
+            });
+        }
+        runtime.client.sendRes({
+            type: 'res', id: req.id, ok: true,
+            payload: {
+                ...getPersonalSyncIdentity(getDaemonInstallationId()),
+                ...result,
+                ...(result.attachment
+                    ? { attachment: { ...getPersonalSyncIdentity(getDaemonInstallationId()), ...result.attachment } }
+                    : {}),
+            },
+        });
+    }
+    catch (err) {
+        runtime.client.sendRes({
+            type: 'res', id: req.id, ok: false,
+            error: err instanceof Error ? err.message : String(err),
+        });
+    }
+}
+export async function handleFsTransferChunk(runtime, req) {
+    const params = req.params;
+    try {
+        assertPersonalSyncIdentity(params);
+        const resolved = runtime.resolveAuthorizedPath(params.rootPath, params.rootPath);
+        if (!resolved.ok) {
+            runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: resolved.error });
+            return;
+        }
+        const buffer = Buffer.from(params.data, 'base64');
+        const result = appendAttachmentTransferChunk({
+            rootPath: resolved.path,
+            transferId: params.transferId,
+            relativePath: params.relativePath,
+            offset: params.offset,
+            data: buffer,
+        });
+        runtime.pendingTransfers.set(params.transferId, {
+            transferId: params.transferId,
+            rootPath: resolved.path,
+            lastActivityAt: Date.now(),
+        });
+        runtime.client.sendRes({
+            type: 'res', id: req.id, ok: true,
+            payload: {
+                ...getPersonalSyncIdentity(getDaemonInstallationId()),
+                transferId: params.transferId,
+                ...result,
+            },
+        });
+    }
+    catch (err) {
+        runtime.client.sendRes({
+            type: 'res', id: req.id, ok: false,
+            error: err instanceof Error ? err.message : String(err),
+        });
+    }
+}
+export async function handleFsTransferFinish(runtime, req) {
+    const params = req.params;
+    try {
+        assertPersonalSyncIdentity(params);
+        const resolved = runtime.resolveAuthorizedPath(params.rootPath, params.rootPath);
+        if (!resolved.ok) {
+            runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: resolved.error });
+            return;
+        }
+        const result = finishAttachmentTransfer(resolved.path, params.transferId);
+        runtime.pendingTransfers.delete(params.transferId);
+        runtime.client.sendRes({
+            type: 'res', id: req.id, ok: true,
+            payload: { ...getPersonalSyncIdentity(getDaemonInstallationId()), ...result },
+        });
+    }
+    catch (err) {
+        runtime.client.sendRes({
+            type: 'res', id: req.id, ok: false,
+            error: err instanceof Error ? err.message : String(err),
+        });
+    }
+}
+export async function handleFsTransferAbort(runtime, req) {
+    const params = req.params;
+    try {
+        assertPersonalSyncIdentity(params);
+        const resolved = runtime.resolveAuthorizedPath(params.rootPath, params.rootPath);
+        if (!resolved.ok) {
+            runtime.client.sendRes({ type: 'res', id: req.id, ok: false, error: resolved.error });
+            return;
+        }
+        abortAttachmentTransfer(resolved.path, params.transferId);
+        runtime.pendingTransfers.delete(params.transferId);
+        runtime.client.sendRes({
+            type: 'res', id: req.id, ok: true,
+            payload: {
+                ...getPersonalSyncIdentity(getDaemonInstallationId()),
+                transferId: params.transferId,
+                aborted: true,
+            },
+        });
+    }
+    catch (err) {
+        runtime.client.sendRes({
+            type: 'res', id: req.id, ok: false,
+            error: err instanceof Error ? err.message : String(err),
+        });
+    }
+}
+export function cleanupPendingTransfers(runtime) {
+    // Staging is deliberately durable across daemon restarts. The 10-minute
+    // lease sweeper owns deletion; process shutdown must not destroy resumable data.
+    runtime.pendingTransfers.clear();
+}