+ jHjީh aRt0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI t ^RIt^RIt^RIHt^RIHt^RIHtHtHt^RIHtHtHtHtHtHt^RIH t H!t!^RI"H#t#^RI$H%t%H&t&^R I'H(t(^R I)H*t*H+t+H,t,H-t-H.t.H/t/H0t0H1t1^R I2H3t3H4t4H5t5H6t6H7t7]!4t8](!R R 4t9](!RR4t:](!RR4t;](!RR4t<](!R4t=RRRRRRRRRRRRRRR R!/t>Rt?]@!0Rm4tA0RmtB]@!0Rm4tC]@!R-R.04tDR/R0ltER1R2ltFRtGRtHRtI/R3R4bR5R6bR7R8bR9R:bR;RbR?R@bRAR4bRBR8bRCRDbRERFbRGRHbRIRJbRKRLbRMRNbRORPbRQRRbRSRHRTRURVRWRXRYRZR[R\R]RR^R_R`RaRbRcRdReRfRgR^RhRiRjRiRkR[/CtJ/R"RlbRRbR#RmbRRbRRbRRbR$RnbR%RobR&RpbR'RqbR(RrbR)RsbR*RtbRRbRRbR+RubR,RvbRR/CtKRwRxltLRyRzltM]PR{R|l4tORR}R~lltPRRRlltQ]PRRl4tRRRltSRRRlltTRRltURRltVRRltWRRRlltXRRltYRRltZRRlt[]8PR4RRl4t]Rt^Rt_RRlt`]8PR4RRl4taRRltbRtc]@!0Rm4tdRte]^kRRltfRRltgRRlth]8PR4RRRll4tj]8PR4RRRll4tkRRltlRRltm]8PR4RRl4tnRR/RRllto]8PR4RRl4tp]8PR4]8PR4RRl44trRRltsRRltt]8PR4RRl4tuRRltv]8PR4]!R4]!R4]!R43RRll4tw]8PR4RRl4tx]8PR4RRl4tz]{R3]|R3]}R33t~]8PR4RRRll4t]8PR4RRRll4t]8PR4RRRll4tRRltRRlt]8PR4RRRll4t]8PR4RRRll4t]8PR4RRRll4t]8PR4RRRll4tR#)zManaged-files, chat image upload, /api/media and /api/fs dashboard routes. Helpers/state that tests monkeypatch on ``web_server`` stay there and are reached through the late-binding seam (cycle-safe). N)datetimePath)AnyDictOptional) APIRouterFileForm HTTPExceptionRequest UploadFile) FileResponseStreamingResponse)windows_hide_flags)LiveConnectionErroroffline_file_access)late)SANDBOX_NOT_FOUND_agent_fs_path_fs_path_hosted_fs_read_guard_is_unmapped_container_path_managed_file_entry_managed_response_meta_resolve_managed_path)ChatImageUpload FsWriteTextManagedDirectoryCreateManagedFileDeleteManagedFileUpload_profile_scopezhermes_cli.web_server_profilesget_hermes_homezhermes_cli.config load_configload_env_require_token.pngz image/png.jpgz image/jpeg.jpeg.gifz image/gif.webpz image/webpz.svgz image/svg+xml.bmpz image/bmpz.icoz image/x-icon.avi.flac.m4a.mkv.mov.mp3.mp4.ogg.opus.wav.webmz mcp-tokenspairingc0V^8dQhR\R\/#)namereturnstrbool)formats"A/home/ubuntu/.hermes/hermes-agent/hermes_cli/web_routers/files.py __annotate__rAVs8888cVP4pVR8XgVPR4'gVR8XdR#V\9#)u"Basename denylist: ``.env`` / ``.env.`` / ``.envrc`` plus the credential-store basenames. Case-insensitive so ``.ENV`` / ``Auth.JSON`` on case-insensitive mounts can't slip past. Basename-only — call sites use :func:`_is_sensitive_path`, which adds the credential-directory check.z.envz.env.z.envrcT)lower startswith!_SENSITIVE_MANAGED_FILE_BASENAMES)r:lowereds& r@_is_sensitive_filenamerHVs= jjlG&G..w777h;N 7 77rBc0V^8dQhR\R\/#r9pathr;)rr>)r?s"r@rArAas T TT Td TrBc\VP4'dR#\;QJd&RVP4F 'gK R# R#!RVP44#)aTrue when the basename is sensitive OR any path component (case- insensitive) is a credential directory. Read-side guard (list/read/ download); the write endpoints are a separate threat class. Read-side only: this guards list/read/download (the #57505 exfil surface). The write endpoints (upload/mkdir/delete) are a separate threat class handled by the write-path checks; extending this guard to them is out of scope for this fix. Tc3N"TFqP4\9xK R#5iN)rD_SENSITIVE_MANAGED_DIR_NAMES).0parts& r@ %_is_sensitive_path..lsS zz|;; s#%F)rHr:anyparts)rKs&r@_is_sensitive_pathrVasGdii(( 3S S33S3S3S S SSrBz.ccz.confiniz.cppcppz.csscssz.csvcsvz.gogoz.graphqlgraphqlz.hz.hppz.htmlhtmlz.javajavaz.js javascriptz.jsonjsonz.jsxjsxz.ktkotlinz.lualuaz.mdmarkdownz.mjsz.pypythonz.rbrubyz.rsrustz.shshellz.sqlsqlxmlz.tomltomlz.ts typescriptz.tsxtsxz.txttextz.xmlz.yamlyamlz.ymlz.zshzvideo/x-msvideoz audio/flacz audio/mp4zvideo/x-matroskazvideo/quicktimez audio/mpegz video/mp4z audio/oggzaudio/ogg; codecs=opusz audio/wavz video/webmc0V^8dQhR\R\/#rJrr=)r?s"r@rArAs1111rBcVPP4pV\9d\V,#\P!\ V44wr#T;'gR#)application/octet-stream)suffixrD_FS_MIME_TYPES mimetypes guess_typer=)rKruguessed_s& r@ _fs_mime_typer{sL [[   F f%%%%c$i0JG  0 000rBc0V^8dQhR\R\/#)r9datar;)bytesr>)r?s"r@rArAs))5)T)rBcvV'gR#RV9dR#\RV44pV\V4, R8#)FTc3H"TFq^ 8gK VR9gK^xK R#5i) N> )rPbytes& r@rR#_fs_looks_binary..sQ44"9Q[9PQQ4s "" "gQ?)sumlen)r} suspiciouss& r@_fs_looks_binaryrs6  }Q4QQJ D !D ((rBc0V^8dQhR\R\/#)r9deniedfailedr=)r?s"r@rArAsHHsHCHrBc#"RxR# \d\RTR7h\dp\RT RT 2R7hRp?ii;i5i)zNPermissionError -> 403 ``denied``; other OSError -> 500 ``": "``.N status_codedetail: )PermissionErrorr OSError)rrexcs&& r@ _io_errorsrsLH <F;; Hvhb4FGGHs'A A AA>AAcRV^8dQhR\R\\,R\/#r9rK profile_homer;)rrr=)r?s"r@rArAs&??t?8D>?UX?rBcX\VP4VR7pV'd\#R#)zIDistinguish an untranslated agent-sandbox path from a plain missing file.rFile not found)ras_posixr)rKrunmappeds&& r@_fs_sandbox_not_found_detailrs#*4==?VH ( >.>>rBcV^8dQhR\R\\,R\\\P3,/#r)rrtupleos stat_result)r?s"r@rArAs64x~tUWUcUcOcIdrBc:\\V44pVP4p\P!TP4'd\ RRR7h\P!TP4'g\ RRR7h\T4'd\ RR R7hY#3# \\3d\ R\ Y!4R7h\d\ RRR7h\d&p\ R\T4;'gRR7hRp?ii;i) rrFile is not readable Invalid pathNPath points to a directoryOnly regular files can be read(Access to sensitive files is not allowed) rr=statFileNotFoundErrorNotADirectoryErrorr rrrS_ISDIRst_modeS_ISREGrV)rKrtargetstrs&& r@_fs_regular_filers c$i FP [[] ||BJJ4PQQ << # #4TUU&!!4^__ : 1 2h4PQW4fgg L4JKK PCH4N4NOOPs#B--/DD4D5 DDc$V^8dQhR\/#)r9rr)r?s"r@rArAs G G4 GrBc#"\VRR7;_uu_4RxRRR4R# +'giR#;i \dp\R\T4R7ThRp?ii;i5i)zHold ``offline_file_access`` for serving ``target``; 409 while a SQLite connection to it is live. Callers keep the block open through the file's close: a raw close cancels this process's SQLite POSIX locks on it.serve)whatNr)rrr r=)rrs& r@_serve_offlinersM G g 6 6 7 6 6 6 GCH=3FGs>A&<(<A& 9 <A&< A#AA##A&c(V^8dQhR\RR/#)r9rr;Nr)r?s"r@rArAs   $  4  rBch\V4;_uu_4RRR4R# +'giR#;i)aPoint-in-time 409 before streaming ``target`` while a SQLite connection to it is live. ``FileResponse`` opens and closes the file in-process, and that raw close cancels the connection's POSIX locks. The registry lock can't be held across a streamed response (never across an await/yield), so streamed routes only get this admission check. It takes the global registry lock, which other threads hold across whole-file reads, so call it via ``asyncio.to_thread``.N)rrs&r@_refuse_live_databasers!       s  1 cRV^8dQhR\R\\,R\/#)r9rlimitr;)rrintr~)r?s"r@rArAs* T T4 T T TrBc \V4;_uu_4VfVP4uuRRR4#VPR4;_uu_4pVPV4uuRRR4uuRRR4# +'giM;iRRR4R# +'giR#;i \d\ RRR7h\ d&p\ R\T4;'gRR7hRp?ii;i)z_Read (a prefix of) ``target``; 403/400 on failure, 409 while a SQLite connection to it is live.NrbrrrrzFile read failed)r read_bytesopenreadrr rr=)rrhandlers&& r@_fs_read_bytesrs T F # #}((*$ #T""f{{5)#"$ ##""$ # # # L4JKK TCH4R4R@RSSTsbB%B B%B A3  B( B%3 B >BB% B" B%"B%% C,C, C''C,c>V^8dQhR\R\R,/#)r9startr;Nrr)r?s"r@rArAs  T cDj rBcTp\^24FFpVR, P4'd\V4u#TPpY18XdR#TpKH R# \dR#i;i)2.gitN)rangeexistsr=rparent)r directoryrzrs& r@_fs_find_git_rootrsqI 2Y F"**,,9~%-!!       s'A A*)A*c$V^8dQhR\/#r9r;r)r?s"r@rArAs   rBc\4PR4;'g/p\VPR4;'g*\PPR4;'gR4P 4pV'dTVR9dM\ V4P4PRR7pVP4'd \V4#\\ P!44# \\3dL1i;i)terminalcwd TERMINAL_CWDF)strict>.rauto) r#getr=renvironstripr expanduserresolveis_dirr RuntimeErrorr) cfg_terminalraw candidates r@_fs_default_cwdrs=$$Z066BL lu%MM)GMM2 N T T VC s.. S ,,.66e6DI!!9~%" txxz?&   s A C66D  D c0V^8dQhR\R\/#)r9rr;r)r?s"r@rArAs    rBc RRRRRRRRR^/p\PR8Xd\4VR &\P!R R VR R .3/VBRR/BpVP ^8XdVP P4#R# \dR#i;i)capture_outputTroencodingutf-8errorsreplacetimeoutwin32 creationflagsgitz-Cbranchz--show-currentcheckFr) sysplatformr subprocessrun returncodestdoutr Exception)r run_kwargsresults& r@_fs_git_branchrs '7fdJX_&. 9a&I <<7 "*<*>J 'c8=M NjR\jdij(.(9(9Q(>v}}""$FBF sA8A=;A== B  B c:V^8dQhR\\,/#r9profilerr=)r?s"r@rArA s77#7rBc^RIHp\V4;_uu_4\\ 4P R4;'g/4p\ 4pRRR4RRRRRR R R /P4FAwrEXP V4'dKXP V4'gK7W5,W$&KC T;'gR P4P4;'gR pV!VX4# +'giL;i) zFReturn the profile's SSH workspace adapter, or None for host-local FS.)get_ssh_workspace_fsrNssh_hostTERMINAL_SSH_HOSTssh_userTERMINAL_SSH_USERssh_portTERMINAL_SSH_PORTssh_keyTERMINAL_SSH_KEYcurrent) hermes_cli.ssh_workspace_fsr r!dictr#rr$itemsrrD)rr r profile_envkeyenv_name profile_keys& r@ _fs_backendr s@   ))*5;;<j  ! '''%   eg   ||C  [__X%>%>'1HM''i..0668EEIK  X 66 ! s 7C11 D c(V^8dQhR\RR/#)r9rr;N)r)r?s"r@rArA s;;;t;rBc^RIHp\W4'gVhRRRRRRRR R R R R RR /PVPR 4pRRRRRRRRR RR RRR/PVP\ V4;'gR4p\ W#R7h))SshWorkspaceFsErrorEACCESrECONNiEFBIGEINVALrEIOENOENTrENOTREGrzSSH workspace is unavailableFile too largerzSSH workspace request failedrrzFilesystem request failedr)rr isinstancercoder=r )rrstatusrs& r@_raise_fs_backend_errorr, s? c / / ## s#3 c#((C  (/!. -"3 c#((CH;; ;<  F ::rBc:V^8dQhR\\,/#r)listr)r?s"r@rArA:s  DJ rBc\4p.pVR, VR, VR, 3F#pVPVP44K% V# \\3dK=i;i)zDirectories GET /api/media may read: where the agent and attach pipeline actually write media (images, screenshots, cache). Stops an authenticated client reading image-suffixed files anywhere else on disk.images screenshotscache)r"appendrrr)homeoutroots r@_media_serve_rootsr7:sg  DC$"6wG  JJt||~ &H J&   sAA%$A%c0V^8dQhR\R\/#rJrr)r?s"r@rArAHs22D2S2rBc\V4;_uu_4VP4pRRR4\P!X4P R4# +'giL5;i)zaRead and encode a bounded file from a worker thread; 409 while a SQLite connection to it is live.Nascii)rrbase64 b64encodedecode)rKr}s& r@_read_base64_filer>HsE        D ! ( ( 11  s A A" z /api/mediac$V^8dQhR\/#)r9rKr)r?s"r@rArAQs``#`rBca"\V4P4P4oSP P4\9d\ RRR7h\4p\;QJdT3RlT4F 'gK RM RM!T3RlT44'g\ R R R7hSP4'g\ R R R7hSP4P\8d\ R RR7h\P !\"S4GRjxL pRR\SP P4, RT 2/# \\3d\ RRR7hi;iLS5i)zReturn a gateway-local image as a base64 data URL for remote clients that can't read this machine's disk. Auth-gated; restricted to the image allowlist, a size cap AND the resolved (symlink-safe) media roots.rrrUnsupported media typec3\<"TF!pSV8H;'gVSP9xK# R#5irN)parents)rPr6rs& r@rRget_media..]s)JEDv~77!77Es,,TFrzPath outside media rootsrrr"r(Ndata_urldata:;base64,)rrrrrr rurD_MEDIA_CONTENT_TYPESr7rTis_filerst_size_MEDIA_MAX_BYTESasyncio to_threadr>)rKrootsencodedrs& @r@ get_mediarQPs1 Dd&&(002}}$884LMM  E 3JEJ333JEJ J J4NOO >>  4DEE {{}//4DEE%%&7@@G % 4V]]5H5H5J KLHU\T]^ __ \ "DNCCDAs;E:'EAE:E:&"E: AE:$E8%1E:E55E:g4@c0V^8dQhR\R\/#)r9hostr;r<)r?s"r@rArAtsCDrBcaSP4PR4o\;QJd#V3Rl\4F 'gK R# R#!V3Rl\44#)rc3<"TFRpSVPR48H;'g2VPR4;'dSPVR,4xKT R#5i)z*.:NNN)lstriprEendswith)rPallowedrSs& r@rR,_media_proxy_host_allowed..vsT1G t$$aa););D)A)`)`dmmT[\^T_F`a1sAA!ATF)rDrstriprT_MEDIA_PROXY_ALLOWED_HOSTS)rSsfr@_media_proxy_host_allowedr]tsT ::<  s #D 3133331 rBz/api/media/proxyc0V^8dQhR\R\/#)r9urlrequest)r=r )r?s"r@rArA}s&A&A#&A&ArBc("\V4\PPT;'gRP 44pTPR9gTP'g\ RRR7h\TP4'g\ RRR7hTP'd7\TP4PP4\9di\TP4P'dD\TP4PP4\9d\ RR R7h^RIpTP!\"R R 7;_uu_4GRjxL pTP%T4GRjxL pRRR4GRjxL XP(^8wd\ R RTP( 2R7hTP*P%R4;'gRP-R4^,P 4P4pT\P/49d\ RR R7hTP0p\3T4\48d\ RRR7h\6P8!T4P;R4p RRT RT 2/# \ dp\ RRR7ThRp?ii;iELSEL=EL0 +GRjxL 'giELH;i \&dp\ R R T 2R7hRp?ii;i5i)zFetch a remote image URL the gateway can reach but the client cannot (#74564), returning the same ``data_url`` shape as ``/api/media``. Only allowlisted image CDNs; the bytes stay behind the size cap.rrzA remote image URL is requiredrNrzImage host not allowedrArBT)rfollow_redirectsr%zImage fetch failed: zImage fetch returned HTTP z content-type;r"r(r:rFrGrH)httphttps)r%urllibparseurlparser ValueErrorr schemehostnamer]rKrrurDrIhttpx AsyncClient_MEDIA_PROXY_TIMEOUT_SrrrheaderssplitvaluescontentrrLr;r<r=) r_r`parsedrrlclientresponse content_typer}rPs && r@proxy_remote_mediarw|sq 7_&& r'8'8':;}}--V___4TUU $V__ 5 54LMM ;;;$v{{+2288:BVV   # # #V[[(9(@(@(F(F(HPd(dC8PQ QR$$-CVZ$[[[_e#ZZ_,H\[ s"6PQYQeQePf4ghh$$((8>>BEEcJ1MSSU[[]L/66884LMM   D 4y##4DEEt$++G4G % ~XgY? @@? _4TU[^^_ \,\[[[ R6J3%4PQQRs L7J("L)AL0B"L#K/6K 7K/:KK K K/K K/$A L1B7L( K3KKL K/ KK/K, K K, $K, &K/*L,K// L:L  LLcRV^8dQhR\R\\\3,/#)r9rFr;)r=rr~)r?s"r@rArAs#suUCZ'8rBc^RIHpT;'gRP4pVPR4'dRV9d\ RRR7hVP R^4wr4VR,P R ^4^,;'gR pR V9d\ RR R7h\ P!VR R7p\T4T8d\ RRR7hYe3# \P\3d\ RRR7hi;i)r_MANAGED_FILE_MAX_BYTESrrG,rz!Upload payload must be a data URLr:NNrcrtz;base64z%Upload payload must be base64 encodedT)validatez"Upload payload is not valid base64r"File is too large) hermes_cli.web_serverr{rrEr rpr; b64decodebinasciiErrorrir)rFr{roheaderrP mime_typer}s& r@_decode_data_urlrs= NN ! ! #D ??7 # #s$4WXXjja(OFr   a(+II/II4[\\Z$7 4y**4GHH ? NNJ 'Z4XYYZs C)Dc>V^8dQhR\R,R\/#)r9filenameNr;r)r?s"r@rArAs::C$J:3:rBc\\T;'gR4P44Pp\P !RRV4pVP4PR4;'gR#)rz [\x00-\x1f]+rzr pasted-image)rr=rr:resub)rrs& r@_sanitize_chat_image_filenamersXSR(..0166IY7I ??  " "3 ' 9 9>9rBc>V^8dQhR\R\R,/#)r9r}r;N)r~r=)r?s"r@rArAs#*rBcVR,pVPR4'dVR,R8XdR#\F wr#VPV4'gKVu# R#):NNsRIFF: NsWEBPr*N)rE_CHAT_IMAGE_MAGIC)r}headsigexts& r@_chat_image_extensionrsM 9D wDJ'$9% ??3  J& rBc\V^8dQhR\R\\\\3,/#)r9payloadr;)rrr~r=)r?s"r@rArAs%     5S;Q  rBcF\VP4wrVP4PR4'g\ RRR7h\ V4\ 8d\ R,p\ RRV R2R7h\V4pV\9d\ RRR7hWV3#) zimage/rzUpload payload must be an imagerr"zImage is too large; cap is z MBzUnsupported image typei) rrFrDrEr r_CHAT_IMAGE_UPLOAD_MAX_BYTESr_CHAT_IMAGE_ALLOWED_EXTENSIONS)rr}rmbrs& r@_decode_chat_image_uploadrs&w'7'78OD ??  ' ' 1 14UVV 4y// )k :6QRTQUUX4YZZ  %C 004LMM C rBz/api/chat/image-uploadcFV^8dQhR\R\\,/#r9rr)rrr=)r?s"r@rArAs")")_")x}")rBc\aa"VV3Rlp\P!V4GRjxL #L5i)aWPersist a browser clipboard image where the embedded TUI can read it. Browser clipboard bytes aren't visible to the server-side clipboard, so the /chat page uploads them here and drives the TUI's ``/image `` with the returned gateway-visible path under ``HERMES_HOME/images/`` (the same dir ``clipboard.paste`` / ``image.attach`` use). c P<\S4wrp\S 4;_uu_4^RIHpV!4p\ RR4;_uu_4VP RRR7RRR4\ \SP44P;'gRp\P!RR V4PR 4;'gRp\P!4PR 4pVR V R \ P"!^4 R V V 2, p\ RR 4;_uu_4VP%V4RRR4RRR4RRR\'X4RVP(R\+V4RV/# +'giEL;i +'giLT;i +'giL_;i)r)get_image_cache_dirzImage directory is not writablez Could not create image directoryTrDexist_okNrz[^A-Za-z0-9_.-]+rzz._-z %Y%m%d_%H%M%S dashboard_zCould not write imageokrKr:r~r)rr!gateway.platforms.baserrmkdirrrrstemrrrrnowstrftimesecrets token_hex write_bytesr=r:r) r}rrrimg_dirrtsrrrs r@_runupload_chat_image.._runsV8A G $ $ B)+G=?abb dT :c5g6F6FGHMM__Q_D66-sD9??FXX.D((9BB4q1B1B11E0FavcUSSF=?VWW""4(X% $ CK FKK SY    cbbXW% $sH"FE. 6F0FA#F$F 6F. E? 9 F F F F% N)rMrN)rrrsff r@upload_chat_imagers$ 4""4( (( (s !,*,z /api/filescFV^8dQhR\R\\,/#r9r`rK)r rr=)r?s"r@rArAs"jjgjXc]jrBc "\W4wr#pVP4'g\RRR7hVP4'g\RRR7h\ RR4;_uu_4\ P !V4;_uu_4p.pVFOp\VP4p\V4'dK+\W(RR7p V fK>VPV 4KQ R R R 4R R R 4XPR R 7VPp R p VPV8wd V eW:8wd\VP4p R VR V RV/\!V4C# +'giL|;i +'giL;i5i)rPath not foundrrzPath is not a directoryzDirectory is not readablezCould not read directoryT) skip_missingNc^VR,'*\VR,4P43#) is_directoryr:)r=rDitems&r@$list_managed_files..s#tN';#;Sf=N=T=T=V"WrBrrKrentries)rrr rrrscandirrrKrVrr3sort locked_rootrr=r) r`rKpolicyr display_pathscanrentry entry_pathmetadatarrs && r@list_managed_filesrs/#8#G FL ==??4DEE ==??4MNN /1K L LbjjY_N`N`dhEejj)J!*--*6DQH#x( Oa L LLWLX$$K F }}K$76;PV]]# L(FIw iJ`agJh iiOaN` L LsCAE< !E<+E) >E E "E)*A,E< E& !E)) E9 4E<c |V^8dQhR\R\R\\\\\ \3,/#)r9r`rKr;)r r=rrrr)r?s"r@rArAs8LLGL3L5dCQTVYAY;ZLrBcb^RIHp\WRR7wr4pVP4'g\ RRR7hVP 4'g\ RRR7h\ V4'd\ R R R7h\P!VP4^,;'gR pW4WRV3#) aResolve + guard a managed file for reading: existence, regular file, sensitive-path denylist. Returns (policy, target, display_path, max_bytes, mime_type). Callers own the live-SQLite 409 (held through the read for /api/files/read, point-in-time for streamed responses).rzT)for_agent_readrrrrzPath is not a filerrrt) rr{rrr rJrVrwrxr:)r`rKr{rrrrs&& r@_managed_readable_filers >#8W[#\ FL ==??4DEE >>  4HII&!!4^__$$V[[1!4RR8RI <) KKrBc<V^8dQhR\R\R\/#)r9r max_bytesr;)rr)r?s"r@rArA.s!trBcVP4PpY!8d\RRR7hT# \dp\RRT 2R7hRp?ii;i)rzCould not stat file: rNr"r)rrKrr )rrsizers&& r@_managed_file_sizer.s]S{{}$$ 4GHH K S6KC54QRRSs1 AA  Az/api/files/readc0V^8dQhR\R\/#rr r=)r?s"r@rArA9s  W C rBc 6"\W4wr#rEp\W54p\RR4;_uu_4\P!\ V4GRjxL pRRR4RVP RVRVRVRRV R X 2/\V4C#L3 +'giL9;i5i) rzCould not read fileNr:rKrrrFrGrH)rrrrMrNr>r:r) r`rKrrrrrrrPs && r@read_managed_filer8s9OPW9^6FLY f 0D *,A B B))*;VDD C   YeI;hwi8   ! (  E C Bs./BBBB/BB B B media_onlyFc TV^8dQhR\R\R\R\R\/#)r9r`rKcontent_disposition_typerr;)r r=r>r)r?s"r@rArAHs:  "     rBc`"\W4wrErgpV'd1VPP4\9d\ RRR7h\ WW4\ P!\V4GRjxL \\V4TVPTV'd RR/R7#RR7#L85i)z8Range-aware response after applying managed-file policy.rArBrNzX-Content-Type-Optionsnosniff)rK media_typerrro) rrurD_STREAMABLE_MEDIA_EXTENSIONSr rrMrNrrr=r:) r`rKrr_policyr _display_pathrrs &&$$ r@_managed_file_responserHs``/``