qixinbo
97 lines
2.8 KiB
Python
97 lines
2.8 KiB
Python
import os
|
|
from pathlib import Path
|
|
from typing import Optional
|
|
|
|
from app.core.data_root import (
|
|
BACKEND_ROOT,
|
|
LEGACY_DATA_ROOT,
|
|
get_data_root,
|
|
get_reports_root,
|
|
get_uploads_root,
|
|
get_workspace_root,
|
|
)
|
|
|
|
|
|
data_root = get_data_root()
|
|
workspace_root = get_workspace_root()
|
|
uploads_root = get_uploads_root()
|
|
reports_root = get_reports_root()
|
|
legacy_workspace_root = LEGACY_DATA_ROOT / "workspace"
|
|
legacy_uploads_root = LEGACY_DATA_ROOT / "uploads"
|
|
legacy_reports_root = LEGACY_DATA_ROOT / "data"
|
|
backend_root = BACKEND_ROOT
|
|
allowed_artifact_roots = (
|
|
workspace_root,
|
|
uploads_root,
|
|
reports_root,
|
|
legacy_workspace_root,
|
|
legacy_uploads_root,
|
|
legacy_reports_root,
|
|
)
|
|
|
|
|
|
def resolve_upload_file_path(file_url: Optional[str]) -> Path:
|
|
if not file_url:
|
|
raise ValueError("File URL is empty")
|
|
|
|
if file_url.startswith("local://"):
|
|
raw_name = file_url.replace("local://", "", 1)
|
|
safe_name = os.path.basename(raw_name)
|
|
file_path = uploads_root / safe_name
|
|
return file_path
|
|
|
|
return Path(file_url)
|
|
|
|
|
|
def resolve_artifact_target(target: str) -> Path | None:
|
|
locator = (target or "").strip().strip("'\"")
|
|
if not locator:
|
|
return None
|
|
if locator.startswith("local://"):
|
|
raw_local = locator.replace("local://", "", 1).strip().lstrip("/\\")
|
|
if not raw_local:
|
|
return None
|
|
candidate = Path(raw_local)
|
|
if candidate.is_absolute():
|
|
return candidate
|
|
checks = (
|
|
workspace_root / candidate,
|
|
reports_root / candidate,
|
|
uploads_root / candidate,
|
|
uploads_root / candidate.name,
|
|
)
|
|
for path in checks:
|
|
if path.exists():
|
|
return path
|
|
return uploads_root / candidate.name
|
|
normalized = locator.replace("\\", "/")
|
|
path = Path(locator)
|
|
if path.is_absolute():
|
|
return path
|
|
if normalized.startswith("data/data/"):
|
|
return data_root.parent / normalized
|
|
checks = (
|
|
workspace_root / normalized,
|
|
data_root / normalized,
|
|
backend_root / normalized,
|
|
)
|
|
for candidate in checks:
|
|
if candidate.exists():
|
|
return candidate
|
|
return None
|
|
|
|
|
|
def ensure_artifact_access(path: Path, *, require_file: bool = True) -> Path:
|
|
try:
|
|
resolved = path.resolve(strict=True)
|
|
except FileNotFoundError as exc:
|
|
raise FileNotFoundError("目标文件不存在") from exc
|
|
if require_file and not resolved.is_file():
|
|
raise FileNotFoundError("目标文件不存在")
|
|
if not require_file and not resolved.is_dir():
|
|
raise FileNotFoundError("目标目录不存在")
|
|
for root in allowed_artifact_roots:
|
|
if resolved.is_relative_to(root.resolve()):
|
|
return resolved
|
|
raise PermissionError("非法路径访问")
|