import fs from "node:fs/promises";

import type { IncomingMessage, ServerResponse } from "node:http";

import path from "node:path";

import { isPassThroughRemoteMediaSource } from "@openclaw/media-core/media-source-url";

import { resolveDefaultAgentId } from "../agents/agent-scope-config.js";

import { getRuntimeConfig } from "../config/config.js";

import { resolveStateDir } from "../config/paths.js";

import { readLocalFileSafely } from "../infra/fs-safe.js";

import { tryReadJson, writeJson } from "../infra/json-files.js";

import { safeFileURLToPath } from "../infra/local-file-access.js";

import { assertLocalMediaAllowed } from "../media/local-media-access.js";

import { resolveLocalMediaPath } from "../media/local-media-path.js";

import {

createImageProcessor,

getImageMetadata,

readImageProbeFromHeader,

} from "../media/media-services.js";

import { MEDIA_MAX_BYTES, saveMediaBuffer, saveMediaSource } from "../media/store.js";

import { resolveUserPath } from "../utils.js";

import type { AuthRateLimiter } from "./auth-rate-limit.js";

import type { ResolvedGatewayAuth } from "./auth.js";

import { sendJson, sendMethodNotAllowed, sendMissingScopeForbidden } from "./http-common.js";

const DEFAULT_TRANSIENT_OUTGOING_IMAGE_TTL_MS = 15 * 60 * 1000;

const MANAGED_OUTGOING_ATTACHMENT_ID_RE =

/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;

const DATA_URL_RE = /^data:/i;

const WINDOWS_DRIVE_RE = /^[A-Za-z]:[\\/]/;

export const DEFAULT_MANAGED_IMAGE_ATTACHMENT_LIMITS = {

maxBytes: 12 * 1024 * 1024,

return localName || fallback;

}

function resolveLocalMediaPath(source: string): string | undefined {

const trimmed = source.trim();

if (!trimmed || isPassThroughRemoteMediaSource(trimmed) || DATA_URL_RE.test(trimmed)) {

return undefined;

}

if (trimmed.startsWith("file://")) {

try {

return safeFileURLToPath(trimmed);

} catch {

return undefined;

}

}

if (trimmed.startsWith("~")) {

return resolveUserPath(trimmed);

}

if (path.isAbsolute(trimmed) || WINDOWS_DRIVE_RE.test(trimmed)) {

return path.resolve(trimmed);

}

return undefined;

}

function parseImageDataUrl(

source: string,

alt: string,