UNPKG

openclaw

Version:

Multi-channel AI gateway with extensible messaging integrations

415 lines (414 loc) 16.8 kB
import "./src-vebZIeLe.js"; import { t as expectDefined } from "./expect-CyE8FADM.js"; import { p as redactSensitiveText } from "./redact-BtvPPfTi.js"; import { s as sleepWithAbort } from "./src-BQ327IOM.js"; import { n as isAbortError } from "./abort-signal-D2k14JsD.js"; import { t as formatErrorMessage } from "./errors-Db3Ymjlb.js"; import { t as retryAsync } from "./retry-DIUON3ys.js"; import "./http-body-D3IMwTJJ.js"; import { a as readChunkWithIdleTimeout, i as readResponseWithLimit, r as readResponseTextSnippet } from "./http-response-body-CwT_cCNz.js"; import { n as buildTimeoutAbortSignal } from "./fetch-timeout-DGxOi-Tg.js"; import "./backoff-BkMI1WEL.js"; import { c as withTrustedExplicitProxyGuardedFetchMode, i as fetchWithSsrFGuard, o as withStrictGuardedFetchMode } from "./fetch-guard-BMdGQhbb.js"; import { n as MAX_DOCUMENT_BYTES } from "./constants-DUxuqQz8.js"; import { t as parseMediaContentLength } from "./content-length-CHOuQ9D3.js"; import { n as extnameFromAnyPath, t as basenameFromAnyPath } from "./file-name-CKnWacTs.js"; import { n as detectMime, r as extensionForMime } from "./mime-CVpcq9ju.js"; import { n as isTransientNetworkError } from "./retryable-network-errors-D2gJmBqw.js"; import { g as SaveMediaSourceError, m as saveMediaStream } from "./store-Ph57PZ9P.js"; //#region src/media/fetch.ts /** Default remote media fetch cap shared by buffer reads and store writes. */ const DEFAULT_FETCH_MEDIA_MAX_BYTES = MAX_DOCUMENT_BYTES; const DEFAULT_MEDIA_RESPONSE_HEADER_TIMEOUT_MS = 9e5; /** Structured fetch error used for retry decisions and caller-facing diagnostics. */ var MediaFetchError = class extends Error { constructor(code, message, options) { super(message, options); this.code = code; this.status = options?.status; this.name = "MediaFetchError"; } }; function stripQuotes(value) { return value.replace(/^["']|["']$/g, ""); } function decodeRemoteFileNameComponent(value) { try { return decodeURIComponent(value).replace(/[\\/]/g, "_"); } catch { return value; } } function decodeExtendedRemoteFileName(value) { const match = /^([^']*)'[^']*'(.*)$/u.exec(value); if (!match) return; const charset = match[1]?.toLowerCase(); const encoded = match[2] ?? ""; try { if (charset === "utf-8") return decodeURIComponent(encoded).replace(/[\\/]/g, "_"); if (charset === "iso-8859-1") { if (/%(?![\da-f]{2})/iu.test(encoded)) return; return encoded.replace(/%([\da-f]{2})/giu, (_match, hex) => String.fromCharCode(Number.parseInt(hex, 16))).replace(/[\\/]/g, "_"); } } catch { return; } } function* parseContentDispositionParameters(header) { let start = 0; let quoted = false; let escaped = false; for (let index = 0; index <= header.length; index += 1) { const character = header[index]; if (escaped || quoted && character === "\\") { escaped = !escaped; continue; } if (character === "\"") { quoted = !quoted; continue; } if (index !== header.length && (quoted || character !== ";")) continue; const parameter = header.slice(start, index).trim(); start = index + 1; const separator = parameter.indexOf("="); if (separator > 0) yield { name: parameter.slice(0, separator).trim().toLowerCase(), value: stripQuotes(parameter.slice(separator + 1).trim()) }; } } function decodeQuotedRemoteFileName(value) { const windowsDrivePath = /^[a-z]:[\\/]/iu.test(value); const windowsNetworkPath = value.startsWith("\\\\"); const mixedWindowsPath = value.includes("/") && value.includes("\\"); const relativeWindowsPath = /\\[\p{L}\p{N}]/u.test(value) && /^[^\\/:]+(?:\\[^\\]+)+$/u.test(value); if (!windowsDrivePath && !windowsNetworkPath && !mixedWindowsPath && !relativeWindowsPath) return value.replace(/\\(.)/gu, "$1"); const lastForwardSeparator = value.lastIndexOf("/"); if (lastForwardSeparator >= 0) return `${value.slice(0, lastForwardSeparator + 1)}${value.slice(lastForwardSeparator + 1).replace(/\\([^\p{L}\p{N}])/gu, "$1")}`; const firstBackslash = value.indexOf("\\"); if (!windowsDrivePath && !windowsNetworkPath && firstBackslash === value.lastIndexOf("\\") && /\\[^\p{L}\p{N}]/u.test(value)) return value.replace(/\\(.)/gu, "$1"); return value.replace(/\\"/gu, "\""); } function parseContentDispositionFileName(header) { if (!header) return; let fallbackFileName; for (const parameter of parseContentDispositionParameters(header)) { if (parameter.name === "filename") { fallbackFileName ??= basenameFromAnyPath(decodeQuotedRemoteFileName(parameter.value)) || void 0; continue; } if (parameter.name !== "filename*") continue; const fileName = basenameFromAnyPath(decodeExtendedRemoteFileName(parameter.value) ?? ""); if (fileName) return fileName; } return fallbackFileName; } function basenameFromUrlPathname(pathname) { const base = basenameFromAnyPath(pathname); if (!base) return ""; return decodeRemoteFileNameComponent(base); } async function readErrorBodySnippet(res, opts) { try { return await readResponseTextSnippet(res, { maxBytes: 8192, maxChars: opts?.maxChars, chunkTimeoutMs: opts?.chunkTimeoutMs }); } catch { return; } } function redactMediaUrl(url) { return redactSensitiveText(url); } function createMediaFetchFailure(sourceUrl, cause) { return new MediaFetchError("fetch_failed", `Failed to fetch media from ${sourceUrl}: ${formatErrorMessage(cause)}`, { cause }); } async function fetchGuardedMediaResponse(options) { const { url, fetchImpl, beforeRequest, requestInit, maxRedirects, requireHttps, timeoutMs, responseHeaderTimeoutMs = DEFAULT_MEDIA_RESPONSE_HEADER_TIMEOUT_MS, ssrfPolicy, lookupFn, dispatcherPolicy, dispatcherAttempts, shouldRetryFetchError, trustExplicitProxyDns } = options; const sourceUrl = redactMediaUrl(url); const attempts = dispatcherAttempts && dispatcherAttempts.length > 0 ? dispatcherAttempts : [{ dispatcherPolicy, lookupFn }]; const responseHeaderDeadline = buildTimeoutAbortSignal({ timeoutMs: responseHeaderTimeoutMs, signal: requestInit?.signal ?? void 0, operation: "media response headers", url }); const requestSignal = responseHeaderDeadline.signal; const runGuardedFetch = async (attempt) => await fetchWithSsrFGuard((trustExplicitProxyDns && attempt.dispatcherPolicy?.mode === "explicit-proxy" ? withTrustedExplicitProxyGuardedFetchMode : withStrictGuardedFetchMode)({ url, fetchImpl, ...beforeRequest ? { beforeRequest } : {}, init: requestInit, maxRedirects, ...requireHttps !== void 0 ? { requireHttps } : {}, ...timeoutMs !== void 0 ? { timeoutMs } : {}, ...requestSignal ? { signal: requestSignal } : {}, policy: ssrfPolicy, lookupFn: attempt.lookupFn ?? lookupFn, dispatcherPolicy: attempt.dispatcherPolicy })); try { let result; const attemptErrors = []; for (let i = 0; i < attempts.length; i += 1) try { result = await runGuardedFetch(expectDefined(attempts[i], "attempts entry at i")); break; } catch (err) { if (typeof shouldRetryFetchError !== "function" || !shouldRetryFetchError(err) || i === attempts.length - 1) { if (attemptErrors.length > 0) { const combined = new Error(`Primary fetch failed and fallback fetch also failed for ${sourceUrl}`, { cause: err }); combined.primaryError = attemptErrors[0]; combined.attemptErrors = [...attemptErrors, err]; throw combined; } throw err; } attemptErrors.push(err); } responseHeaderDeadline.cleanup(); return { response: result.response, finalUrl: result.finalUrl, release: async () => { await result.release(); }, sourceUrl }; } catch (err) { responseHeaderDeadline.cleanup(); throw createMediaFetchFailure(sourceUrl, err); } } async function assertMediaResponseOk(params) { const { res, url, finalUrl, sourceUrl, readIdleTimeoutMs } = params; if (res.ok && res.body) return; const statusText = res.statusText ? ` ${res.statusText}` : ""; const redirected = finalUrl !== url ? ` (redirected to ${redactMediaUrl(finalUrl)})` : ""; let detail = `HTTP ${res.status}${statusText}`; if (!res.body) detail = `HTTP ${res.status}${statusText}; empty response body`; else { const snippet = await readErrorBodySnippet(res, { chunkTimeoutMs: readIdleTimeoutMs }); if (snippet) detail += `; body: ${snippet}`; } throw new MediaFetchError("http_error", `Failed to fetch media from ${sourceUrl}${redirected}: ${redactSensitiveText(detail)}`, { status: res.status }); } function assertMediaContentLength(params) { let length; try { length = parseMediaContentLength(params.res.headers.get("content-length")); } catch (err) { params.res.body?.cancel().catch(() => void 0); throw new MediaFetchError("http_error", `Failed to fetch media from ${params.sourceUrl}: ${formatErrorMessage(err)}`, { cause: err }); } if (length === null) return; if (length > params.maxBytes) { params.res.body?.cancel().catch(() => void 0); throw new MediaFetchError("max_bytes", `Failed to fetch media from ${params.sourceUrl}: content length ${length} exceeds maxBytes ${params.maxBytes}`); } } function resolveRemoteFileName(params) { let fileNameFromUrl; try { fileNameFromUrl = basenameFromUrlPathname(new URL(params.finalUrl).pathname) || void 0; } catch {} return parseContentDispositionFileName(params.res.headers.get("content-disposition")) || (params.filePathHint ? basenameFromAnyPath(params.filePathHint) : void 0) || fileNameFromUrl; } function isGenericResponseContentType(value) { const normalized = value?.split(";")[0]?.trim().toLowerCase(); return !normalized || normalized === "application/octet-stream" || normalized === "binary/octet-stream" || normalized === "application/zip"; } function resolveResponseContentType(params) { if (!params.fallbackContentType) return params.headerContentType ?? void 0; if (isGenericResponseContentType(params.headerContentType)) return params.fallbackContentType; const headerContentType = params.headerContentType?.split(";")[0]?.trim().toLowerCase(); const fallbackContentType = params.fallbackContentType.split(";")[0]?.trim().toLowerCase(); if (headerContentType?.startsWith("video/") && fallbackContentType?.startsWith("audio/") && headerContentType.slice(6) === fallbackContentType.slice(6)) return params.fallbackContentType; return params.headerContentType ?? params.fallbackContentType; } async function* responseBodyChunks(body, readIdleTimeoutMs) { const reader = body.getReader(); let completed = false; try { while (true) { const { done, value } = readIdleTimeoutMs ? await readChunkWithIdleTimeout(reader, readIdleTimeoutMs) : await reader.read(); if (done) { completed = true; return; } if (value?.byteLength) yield value; } } finally { if (!completed) reader.cancel().catch(() => void 0); try { reader.releaseLock(); } catch {} } } async function saveOkMediaResponse(params) { assertMediaContentLength({ res: params.res, sourceUrl: params.sourceUrl, maxBytes: params.maxBytes }); const fileName = resolveRemoteFileName({ res: params.res, finalUrl: params.finalUrl, filePathHint: params.filePathHint }); const contentType = resolveResponseContentType({ headerContentType: params.res.headers.get("content-type"), fallbackContentType: params.fallbackContentType }); const detectionFilePathHint = isGenericResponseContentType(contentType) ? params.filePathHint ?? fileName : void 0; try { const body = expectDefined(params.res.body, "media response body"); return { ...await saveMediaStream(responseBodyChunks(body, params.readIdleTimeoutMs), contentType ?? void 0, params.subdir ?? "inbound", params.maxBytes, params.originalFilename, detectionFilePathHint), ...fileName ? { fileName } : {} }; } catch (err) { if (err instanceof MediaFetchError) throw err; if (err instanceof SaveMediaSourceError && err.code === "too-large") throw new MediaFetchError("max_bytes", `Failed to fetch media from ${params.sourceUrl}: payload exceeds maxBytes ${params.maxBytes}`, { cause: err }); throw createMediaFetchFailure(params.sourceUrl, err); } } function shouldRetryMediaFetch(err) { if (err instanceof MediaFetchError) { if (err.code === "max_bytes") return false; if (err.code === "http_error") return typeof err.status === "number" && (err.status === 408 || err.status >= 500); if (err.code === "fetch_failed") { if (isAbortError(err) || isAbortError(err.cause)) return false; return isTransientNetworkError(err.cause ?? err); } return false; } return isTransientNetworkError(err); } async function withMediaFetchRetry(options, fn) { const retry = options.retry; if (!retry) return await fn(); return await retryAsync(fn, { label: "media:fetch", ...retry, shouldRetry: (err, attempt) => retry.shouldRetry ? retry.shouldRetry(err, attempt) : shouldRetryMediaFetch(err), sleep: retry.sleep ?? ((delay) => sleepWithAbort(delay, options.requestInit?.signal ?? void 0).catch((cause) => { throw createMediaFetchFailure(redactMediaUrl(options.url), cause); })) }); } /** Validates and saves a caller-provided response without performing a new fetch. */ async function saveResponseMedia(res, options = {}) { const sourceUrl = redactMediaUrl((options.sourceUrl ?? res.url) || "response"); const finalUrl = options.sourceUrl ?? res.url; await assertMediaResponseOk({ res, url: options.sourceUrl ?? finalUrl, finalUrl, sourceUrl, readIdleTimeoutMs: options.readIdleTimeoutMs }); return await saveOkMediaResponse({ res, finalUrl, sourceUrl, filePathHint: options.filePathHint, maxBytes: options.maxBytes ?? DEFAULT_FETCH_MEDIA_MAX_BYTES, readIdleTimeoutMs: options.readIdleTimeoutMs, fallbackContentType: options.fallbackContentType, subdir: options.subdir, originalFilename: options.originalFilename }); } /** Fetches media through SSRF guards and saves the body into the media store. */ async function saveRemoteMedia(options) { return await withMediaFetchRetry(options, () => saveRemoteMediaOnce(options)); } async function saveRemoteMediaOnce(options) { const { response: res, finalUrl, release, sourceUrl } = await fetchGuardedMediaResponse(options); try { await assertMediaResponseOk({ res, url: options.url, finalUrl, sourceUrl, readIdleTimeoutMs: options.readIdleTimeoutMs }); return await saveOkMediaResponse({ res, finalUrl, sourceUrl, filePathHint: options.filePathHint, maxBytes: options.maxBytes ?? DEFAULT_FETCH_MEDIA_MAX_BYTES, readIdleTimeoutMs: options.readIdleTimeoutMs, fallbackContentType: options.fallbackContentType, subdir: options.subdir, originalFilename: options.originalFilename }); } finally { if (release) await release(); } } /** Fetches media through SSRF guards and returns the bounded response body as a buffer. */ async function readRemoteMediaBuffer(options) { return await withMediaFetchRetry(options, () => readRemoteMediaBufferOnce(options)); } /** @deprecated Use `readRemoteMediaBuffer` for buffer reads or `saveRemoteMedia` for URL-to-store. */ const fetchRemoteMedia = readRemoteMediaBuffer; async function readRemoteMediaBufferOnce(options) { const { response: res, finalUrl, release, sourceUrl } = await fetchGuardedMediaResponse(options); try { await assertMediaResponseOk({ res, url: options.url, finalUrl, sourceUrl, readIdleTimeoutMs: options.readIdleTimeoutMs }); const effectiveMaxBytes = options.maxBytes ?? DEFAULT_FETCH_MEDIA_MAX_BYTES; assertMediaContentLength({ res, sourceUrl, maxBytes: effectiveMaxBytes }); let buffer; try { buffer = await readResponseWithLimit(res, effectiveMaxBytes, { onOverflow: ({ maxBytes, res: resLocal }) => new MediaFetchError("max_bytes", `Failed to fetch media from ${redactMediaUrl(resLocal.url || options.url)}: payload exceeds maxBytes ${maxBytes}`), chunkTimeoutMs: options.readIdleTimeoutMs }); } catch (err) { if (err instanceof MediaFetchError) throw err; throw createMediaFetchFailure(redactMediaUrl(res.url || options.url), err); } let fileName = resolveRemoteFileName({ res, finalUrl, filePathHint: options.filePathHint }); const filePathForMime = fileName && extnameFromAnyPath(fileName) ? fileName : options.filePathHint ?? finalUrl; const contentType = await detectMime({ buffer, headerMime: res.headers.get("content-type"), filePath: filePathForMime }); if (fileName && !extnameFromAnyPath(fileName) && contentType) { const ext = extensionForMime(contentType); if (ext) fileName = `${fileName}${ext}`; } return { buffer, contentType: contentType ?? void 0, fileName }; } finally { if (release) await release(); } } //#endregion export { saveResponseMedia as a, saveRemoteMedia as i, fetchRemoteMedia as n, readRemoteMediaBuffer as r, MediaFetchError as t };