2 Commits

Author	SHA1	Message	Date
viettranx	519ecd1eac	fix(zalo): address PR #62 review findings — security, reliability, modularity ... - Fix CI: use %s for json.Number in e2e test (was %d) - Fix path traversal in parseMediaPath: restrict to os.TempDir() - Add 25MB file size limit (checkFileSize) before upload reads - Drain stale uploadCallbacks on Listener.reset() to prevent leaks - Split send.go (688 LOC) into send.go, send_image.go, send_file.go, send_helpers.go - Add unit tests for parseMediaPath (12 cases incl. traversal attacks)	2026-03-06 23:21:16 +07:00
Luan Vu	95885da14e	feat(zalo): add file and image upload/send support (#62) ... ## Summary - Implement UploadImage, SendImage, UploadFile, SendFile in Zalo Personal protocol - Handle WebSocket control events (cmd=601) for async file upload callbacks - Add media attachment routing in channel.Send() — auto-detects image vs file - Add MEDIA: prefix support in message tool for agent file attachments - Add group_id metadata routing for correct Zalo group API selection ## Review fixes (dc475bc) - Fix CI: %s for json.Number (was %d) - Fix path traversal: parseMediaPath restricted to os.TempDir() - Add 25MB file size limit before upload reads - Drain stale uploadCallbacks on Listener.reset() - Split send.go (688 LOC) into send.go, send_image.go, send_file.go, send_helpers.go - Add 12 unit tests for parseMediaPath	2026-03-06 23:20:50 +07:00