openclaw/extensions/bluebubbles/src/local-file-access.ts

import path from "node:path";
import { fileURLToPath, URL } from "node:url";

function isLocalFileUrlHost(hostname: string): boolean {
  return hostname === "" || hostname.toLowerCase() === "localhost";
}

function assertNoWindowsNetworkPath(filePath: string, label = "Path"): void {
  if (process.platform !== "win32") {
    return;
  }
  const normalized = filePath.replace(/\//g, "\\");
  if (normalized.startsWith("\\\\?\\UNC\\") || normalized.startsWith("\\\\")) {
    throw new Error(`${label} cannot use Windows network paths: ${filePath}`);
  }
}

export function safeFileURLToPath(fileUrl: string): string {
  let parsed: URL;
  try {
    parsed = new URL(fileUrl);
  } catch {
    throw new Error(`Invalid file:// URL: ${fileUrl}`);
  }
  if (parsed.protocol !== "file:") {
    throw new Error(`Invalid file:// URL: ${fileUrl}`);
  }
  if (!isLocalFileUrlHost(parsed.hostname)) {
    throw new Error(`file:// URLs with remote hosts are not allowed: ${fileUrl}`);
  }
  const filePath = fileURLToPath(parsed);
  assertNoWindowsNetworkPath(filePath, "Local file URL");
  return filePath;
}

function trySafeFileURLToPath(fileUrl: string): string | undefined {
  try {
    return safeFileURLToPath(fileUrl);
  } catch {
    return undefined;
  }
}

export function basenameFromMediaSource(source?: string): string | undefined {
  if (!source) {
    return undefined;
  }
  if (source.startsWith("file://")) {
    const filePath = trySafeFileURLToPath(source);
    return filePath ? path.basename(filePath) || undefined : undefined;
  }
  if (/^https?:\/\//i.test(source)) {
    try {
      return path.basename(new URL(source).pathname) || undefined;
    } catch {
      return undefined;
    }
  }
  return path.basename(source) || undefined;
}