@deepseek-insight/dsi 0.5.5

package/build/server/chunks/entries/endpoints/api/prompts/_id_/_server.ts.js-CInfjM-i.js

@@ -0,0 +1,64 @@
+import { d as deletePrompt, u as updatePrompt, a as renamePromptLabel } from '../../../../../chunks/db2.js-DBltVUGg.js';
+import { j as json } from '../../../../../chunks/utils.js-tOWCe9Wk.js';
+import '../../../../../chunks/insight-config.js-CfMPTA6Z.js';
+import '../../../../../chunks/config.js-BBYogCe7.js';
+import 'node:fs';
+import 'node:path';
+import 'node:os';
+import 'yaml';
+import 'node:sqlite';
+import '../../../../../chunks/shared.js-C4-Py8s_.js';
+import '../../../../../chunks/uneval.js-BJ9Qq2SF.js';
+
+//#region src/routes/api/prompts/[id]/+server.ts
+/**
+* PATCH /api/prompts/[id] — update a prompt (ADR D3/D8 + E4 extend).
+* Body fields (any subset): { label?: string | null, text?: string,
+* use_count?: number, macro?: boolean } — label null clears it, use_count
+* floored at 1 (reset), macro toggles the macro flag. 200 + record on
+* success; 409 on text/label collision or no-op against a missing row;
+* 400 on invalid id/body.
+*
+* DELETE /api/prompts/[id] — remove a saved prompt (ADR D8 row menu).
+* 200 {ok}; 404 unknown id; 400 invalid id.
+*
+* Spec: dev/specs/2026-08-28 - DSI Suggest Strip (PRD Module Map
+*      "prompts-api"; Tasks 1.3). Reference: OCI [id]/+server.ts.
+*/
+var PATCH = async ({ params, request }) => {
+	const id = Number(params.id);
+	if (!Number.isInteger(id) || id <= 0) return json({ error: "Invalid id" }, { status: 400 });
+	let body;
+	try {
+		body = await request.json();
+	} catch {
+		return json({ error: "Invalid JSON body" }, { status: 400 });
+	}
+	const b = body;
+	if (b.text !== void 0 || b.use_count !== void 0 || b.macro !== void 0) {
+		if (b.text !== void 0 && typeof b.text !== "string") return json({ error: "text must be a string" }, { status: 400 });
+		if (b.use_count !== void 0 && typeof b.use_count !== "number") return json({ error: "use_count must be a number" }, { status: 400 });
+		if (b.macro !== void 0 && typeof b.macro !== "boolean") return json({ error: "macro must be a boolean" }, { status: 400 });
+		const updated = updatePrompt(id, {
+			text: b.text,
+			label: b.label,
+			use_count: b.use_count,
+			macro: b.macro
+		});
+		if (!updated) return json({ error: "Not found or conflict" }, { status: 409 });
+		return json({ record: updated });
+	}
+	const label = b.label;
+	if (label !== null && typeof label !== "string") return json({ error: "label must be a string or null" }, { status: 400 });
+	if (!renamePromptLabel(id, label)) return json({ error: "Label conflict or not found" }, { status: 409 });
+	return json({ ok: true });
+};
+var DELETE = async ({ params }) => {
+	const id = Number(params.id);
+	if (!Number.isInteger(id) || id <= 0) return json({ error: "Invalid id" }, { status: 400 });
+	if (!deletePrompt(id)) return json({ error: "Not found" }, { status: 404 });
+	return json({ ok: true });
+};
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts.js-CInfjM-i.js.map

package/build/server/chunks/entries/endpoints/api/prompts/_server.ts.js-C1lqP1OV.js

@@ -0,0 +1,87 @@
+import { l as listPrompts, s as searchPrompts, c as createPrompt } from '../../../../chunks/db2.js-DBltVUGg.js';
+import { j as json } from '../../../../chunks/utils.js-tOWCe9Wk.js';
+import '../../../../chunks/insight-config.js-CfMPTA6Z.js';
+import '../../../../chunks/config.js-BBYogCe7.js';
+import 'node:fs';
+import 'node:path';
+import 'node:os';
+import 'yaml';
+import 'node:sqlite';
+import '../../../../chunks/shared.js-C4-Py8s_.js';
+import '../../../../chunks/uneval.js-BJ9Qq2SF.js';
+
+//#region src/routes/api/prompts/+server.ts
+/**
+* GET /api/prompts — search + manager list (Suggest Strip W1, Task 1.2).
+*
+* Search mode (default): `?q=<query>&limit=&mode=prefix|contains&macro=0|1`
+*   Ranked by use_count DESC, last_used_at DESC; `{ results }` shape,
+*   limit clamped ≤10. `mode=contains` routes to the tiered `?` search
+*   (schema v2 FTS5); absent or unrecognized mode keeps the prefix
+*   contract — a stale client never gets a 500 (thin route). `macro`
+*   filters the macro flag: 1 = macro rows only (the `!` run trigger),
+*   0 = ordinary rows only (the `?` find trigger); absent = all rows.
+*
+* Manager mode (ADR E4): when `sort` is present, switches to listPrompts:
+*   `?q=&limit=&offset=&sort=uses|last_used|created|display&dir=asc|desc`
+*   Returns `{ rows, total }` (limit clamped ≤500, default 200).
+*
+* POST /api/prompts — create (ADR E4). Body: { text, label? }.
+*   201 + record on success; 409 + existing row on duplicate text; 400 on
+*   invalid body. Manual create is never autoAdd-gated (explicit act).
+*
+* Spec: dev/specs/2026-08-28 - DSI Suggest Strip (PRD Module Map
+*      "prompts-api"; Tasks 1.2). DSI drops OCI's ghost param — the ghost
+*      is out (ADR §6); the strip is the only finder surface.
+*/
+var MAX_LIMIT = 10;
+var GET = async ({ url }) => {
+	const q = url.searchParams.get("q") ?? "";
+	const limitParam = Number(url.searchParams.get("limit"));
+	const limit = Number.isFinite(limitParam) && limitParam > 0 ? Math.min(Math.floor(limitParam), MAX_LIMIT) : 5;
+	const mode = url.searchParams.get("mode") === "contains" ? "contains" : "prefix";
+	const macroParam = url.searchParams.get("macro");
+	const macro = macroParam === "0" || macroParam === "1" ? Number(macroParam) : void 0;
+	const sort = url.searchParams.get("sort");
+	if (sort) {
+		const offset = Number(url.searchParams.get("offset")) || 0;
+		const dir = url.searchParams.get("dir") === "asc" ? "asc" : "desc";
+		const result = listPrompts({
+			q,
+			limit: Number.isFinite(limitParam) && limitParam > 0 ? Math.min(Math.floor(limitParam), 500) : 200,
+			offset,
+			sort,
+			dir
+		});
+		return json(result);
+	}
+	const results = searchPrompts(q, limit, {
+		mode,
+		macro
+	});
+	return json({ results });
+};
+var POST = async ({ request }) => {
+	let body;
+	try {
+		body = await request.json();
+	} catch {
+		return json({ error: "Invalid JSON body" }, { status: 400 });
+	}
+	const text = body?.text;
+	const label = body?.label;
+	if (typeof text !== "string" || text.trim().length === 0) return json({ error: "text must be a non-empty string" }, { status: 400 });
+	if (label !== void 0 && label !== null && typeof label !== "string") return json({ error: "label must be a string or null" }, { status: 400 });
+	const result = createPrompt(text, label);
+	if (!result.ok) {
+		if (result.existing) return json({
+			error: "Duplicate",
+			existing: result.existing
+		}, { status: 409 });
+		return json({ error: "Failed to create prompt" }, { status: 500 });
+	}
+	return json({ record: result.record }, { status: 201 });
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-C1lqP1OV.js.map

package/build/server/chunks/entries/endpoints/api/prompts/use/_server.ts.js-B36YMKMt.js

@@ -0,0 +1,54 @@
+import { i as readPromptsConfig } from '../../../../../chunks/insight-config.js-CfMPTA6Z.js';
+import { f as findPromptByText, r as recordPromptUse } from '../../../../../chunks/db2.js-DBltVUGg.js';
+import { j as json } from '../../../../../chunks/utils.js-tOWCe9Wk.js';
+import '../../../../../chunks/config.js-BBYogCe7.js';
+import 'node:fs';
+import 'node:path';
+import 'node:os';
+import 'yaml';
+import 'node:sqlite';
+import '../../../../../chunks/shared.js-C4-Py8s_.js';
+import '../../../../../chunks/uneval.js-BJ9Qq2SF.js';
+
+//#region src/routes/api/prompts/use/+server.ts
+/**
+* POST /api/prompts/use — record a sent prompt (ADR D5/D15): first send
+* inserts with use_count=1, later sends increment. Enforces the 5,000-row
+* cap (ADR D13). Body: { text: string }. One call per admitted ordinary
+* send — the record guard in ConversationPanel fires this (W3); the route
+* itself stays stateless and thin.
+*
+* prompts.autoAdd (~/.dsi/settings.yaml `prompts` section, default
+* true) gates the auto-insert: known prompts still count uses, but a
+* first send of a new text records nothing (HTTP 202 + reason). Manual
+* add via POST /api/prompts is never gated — that's an explicit act.
+*
+* Spec: dev/specs/2026-08-28 - DSI Suggest Strip (Tasks 1.3).
+* Reference: OCI use/+server.ts; config seam is DSI's insight-config.
+*/
+var POST = async ({ request }) => {
+	let body;
+	try {
+		body = await request.json();
+	} catch {
+		return json({ error: "Invalid JSON body" }, { status: 400 });
+	}
+	const text = body?.text;
+	if (typeof text !== "string" || text.trim().length === 0) return json({ error: "text must be a non-empty string" }, { status: 400 });
+	const { autoAdd } = readPromptsConfig();
+	if (!autoAdd) {
+		if (!findPromptByText(text)) return json({
+			skipped: true,
+			reason: "autoAdd disabled"
+		}, { status: 202 });
+		const record = recordPromptUse(text);
+		if (!record) return json({ error: "Failed to record prompt" }, { status: 500 });
+		return json({ record });
+	}
+	const record = recordPromptUse(text);
+	if (!record) return json({ error: "Failed to record prompt" }, { status: 500 });
+	return json({ record });
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts.js-B36YMKMt.js.map

package/build/server/chunks/entries/endpoints/api/settings/_server.ts.js-CHvHNzeB.js

@@ -0,0 +1,101 @@
+import { j as readSettingsDocument, s as saveSettingsDocument, S as SettingsParseError, k as DEFAULT_DSH_PRESET_ENGLISH, l as DEFAULT_SERVER_CONFIG, m as DEFAULT_PROMPTS_CONFIG, n as DEFAULT_SIDEBAR_CONFIG, o as DEFAULT_PANEL_CONFIG, p as DEFAULT_A2A_CONFIG, q as DEFAULT_HOME_CONFIG, t as DEFAULT_CONVERSATION_CONFIG, u as DEFAULT_CHAT_CONFIG } from '../../../../chunks/insight-config.js-CfMPTA6Z.js';
+import { j as json } from '../../../../chunks/utils.js-tOWCe9Wk.js';
+import { stringify } from 'yaml';
+import '../../../../chunks/config.js-BBYogCe7.js';
+import 'node:fs';
+import 'node:path';
+import 'node:os';
+import '../../../../chunks/shared.js-C4-Py8s_.js';
+import '../../../../chunks/uneval.js-BJ9Qq2SF.js';
+
+//#region src/routes/api/settings/+server.ts
+/**
+* GET/PUT /api/settings?target=dsi|dsh — raw-document access for the
+* settings editor panel (The Settings Panel ADR, 2026-09-07, D5/D7).
+*
+* GET returns the file's raw text plus an honest `missing` marker and,
+* for the dsi target only, `defaultText` — the section defaults
+* serialized as YAML, so the editor shows something true about a file
+* that does not exist yet (the dsh document is DSH-owned; DSI never
+* fabricates harness defaults). The full document crosses this seam for
+* the single local operator, `dsh.authToken` included (D7 — a buffer
+* that is not the file would corrupt it on save).
+*
+* PUT accepts `{ text }` (the whole edited document). The server
+* YAML-parses first: a parse failure is a 400 carrying the parser's line
+* and column, and NOTHING is written (D5). Unknown target is a 400.
+*
+* Spec: dev/specs/2026-09-07 - DSI Settings Panel (PRD Module Map
+*      "settings-api"; Tasks 2.1/2.1-T).
+*/
+/** The dsi default document — one home per fact: the same DEFAULT_*
+*  constants the section readers fall back to, serialized as YAML. */
+function defaultDsiDocument() {
+	return stringify({
+		chat: DEFAULT_CHAT_CONFIG,
+		conversation: DEFAULT_CONVERSATION_CONFIG,
+		home: DEFAULT_HOME_CONFIG,
+		a2a: DEFAULT_A2A_CONFIG,
+		panel: DEFAULT_PANEL_CONFIG,
+		sidebar: DEFAULT_SIDEBAR_CONFIG,
+		prompts: DEFAULT_PROMPTS_CONFIG,
+		server: DEFAULT_SERVER_CONFIG,
+		dsh: { presetEnglish: DEFAULT_DSH_PRESET_ENGLISH.presetEnglish }
+	});
+}
+/** Validate the target param; null + a served 400 when absent/unknown. */
+function parseTarget(url) {
+	const raw = url.searchParams.get("target");
+	if (raw === "dsi" || raw === "dsh") return { target: raw };
+	return { error: json({
+		ok: false,
+		error: "target must be dsi or dsh"
+	}, { status: 400 }) };
+}
+var GET = async ({ url }) => {
+	const parsed = parseTarget(url);
+	if ("error" in parsed) return parsed.error;
+	const { text, missing } = readSettingsDocument(parsed.target);
+	return json({
+		ok: true,
+		target: parsed.target,
+		text,
+		missing,
+		defaultText: parsed.target === "dsi" && missing ? defaultDsiDocument() : ""
+	});
+};
+var PUT = async ({ url, request }) => {
+	const parsed = parseTarget(url);
+	if ("error" in parsed) return parsed.error;
+	let body;
+	try {
+		body = await request.json();
+	} catch {
+		return json({
+			ok: false,
+			error: "body must be JSON with a text field"
+		}, { status: 400 });
+	}
+	if (typeof body !== "object" || body === null || typeof body.text !== "string") return json({
+		ok: false,
+		error: "body must be { text: string }"
+	}, { status: 400 });
+	try {
+		saveSettingsDocument(parsed.target, body.text);
+	} catch (err) {
+		if (err instanceof SettingsParseError) return json({
+			ok: false,
+			error: err.message,
+			line: err.line,
+			column: err.column
+		}, { status: 400 });
+		throw err;
+	}
+	return json({
+		ok: true,
+		target: parsed.target
+	});
+};
+
+export { GET, PUT };
+//# sourceMappingURL=_server.ts.js-CHvHNzeB.js.map

package/build/server/chunks/entries/pages/_error.svelte.js-BE3-BWDd.js

@@ -0,0 +1,41 @@
+import { U as head, V as escape_html, y as derived } from '../../chunks/server.js-DoCd0fEo.js';
+import { p as page } from '../../chunks/state.js-CpmOS0a2.js';
+import '../../chunks/uneval.js-BJ9Qq2SF.js';
+import '../../chunks/internal.js-CQzEjdyk.js';
+import '../../chunks/shared.js-C4-Py8s_.js';
+import '../../chunks/exports.js-DMiPee3x.js';
+import '../../chunks/utils.js-tOWCe9Wk.js';
+
+//#region src/routes/+error.svelte
+function _error($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		/**
+		* App-wide error boundary (the Root-is-the-Floor ADR, 2026-09-02):
+		* 404 (session absent — and any retired address), 503 (host down),
+		* 409 (sub-agent ownership). The way back is `/` itself: a bare
+		* arrival restores the persisted desk, so "back" costs nothing.
+		*/
+		const status = derived(() => page.status);
+		const message = derived(() => page.error?.message ?? "Something went wrong.");
+		head("1j96wlh", $$renderer, ($$renderer) => {
+			$$renderer.title(($$renderer) => {
+				$$renderer.push(`<title>${escape_html(status())} — deepseek-insight</title>`);
+			});
+		});
+		$$renderer.push(`<main data-svelte="ErrorPage" class="mx-auto flex max-w-3xl flex-col items-center gap-4 px-4 py-16 text-center"><p class="text-5xl font-semibold text-slate-300" data-testid="error-status">${escape_html(status())}</p> `);
+		if (status() === 404) {
+			$$renderer.push("<!--[0-->");
+			$$renderer.push(`<h1 class="text-xl font-semibold">Session not found</h1> <p class="text-sm text-slate-500" data-testid="error-message">${escape_html(message())}</p> <p class="text-xs text-slate-400">It may have been reaped, or the link predates this host's ledger.</p>`);
+		} else if (status() === 503) {
+			$$renderer.push("<!--[1-->");
+			$$renderer.push(`<h1 class="text-xl font-semibold">DSH host unreachable</h1> <p class="text-sm text-slate-500" data-testid="error-message">${escape_html(message())}</p>`);
+		} else {
+			$$renderer.push("<!--[-1-->");
+			$$renderer.push(`<h1 class="text-xl font-semibold">Unexpected error</h1> <p class="text-sm text-slate-500" data-testid="error-message">${escape_html(message())}</p>`);
+		}
+		$$renderer.push(`<!--]--> <a href="/" class="mt-2 rounded-md border border-slate-300 px-3 py-1.5 text-sm text-slate-600 hover:bg-slate-100" data-testid="error-back-home">← Back to the workspace</a></main>`);
+	});
+}
+
+export { _error as default };
+//# sourceMappingURL=_error.svelte.js-BE3-BWDd.js.map

package/build/server/chunks/entries/pages/_layout.svelte.js-EFiihTdF.js

@@ -0,0 +1,18 @@
+//#region src/routes/+layout.svelte
+function _layout($$renderer, $$props) {
+	/**
+	* Root layout — the one place global styles enter the app.
+	*
+	* Wave 4.1 finding: no root layout existed, so `src/app.css`
+	* (`@import 'tailwindcss'`) was never imported — every Tailwind class in
+	* every component was dead markup. Surfaced by the Playwright dots test:
+	* the indicator's dots had `h-1.5 w-1.5` sizes only via Tailwind, rendered
+	* 0×0, and Playwright correctly reported the span `hidden`.
+	*/
+	let { children } = $$props;
+	children($$renderer);
+	$$renderer.push(`<!---->`);
+}
+
+export { _layout as default };
+//# sourceMappingURL=_layout.svelte.js-EFiihTdF.js.map

package/build/server/chunks/entries/pages/_layout.ts.js-CNSo-Z1U.js

@@ -0,0 +1,22 @@
+//#region src/routes/+layout.ts
+/**
+* Root layout load — operator config before the first component mounts.
+*
+* ~/.dsi/settings.yaml arrives via GET /api/config (app-config store,
+* singleton): the layout's default values (panel/sidebar widths, poll
+* cadences, prompt clamp) are read synchronously at mount, so awaiting the
+* ONE fetch here means they land before any reader runs — no flash of code
+* defaults, no layout jump. SSR skips (a relative fetch has no origin
+* server-side); client hydration re-runs this load before render.
+*/
+var load = async () => {
+	return {};
+};
+
+var _layout_ts = /*#__PURE__*/Object.freeze({
+	__proto__: null,
+	load: load
+});
+
+export { _layout_ts as _ };
+//# sourceMappingURL=_layout.ts.js-CNSo-Z1U.js.map

package/build/server/chunks/entries/pages/_page.server.ts.js-Bk8UuUXA.js

@@ -0,0 +1,85 @@
+import { g as getDshConnection, D as DshRpcError, i as isSubagentRejection } from '../../chunks/dsh-connection.js-DwihVtk_.js';
+import { h as historyToEvents, e as eventsToEntries } from '../../chunks/dsh-events.js-BtDxaV6Q.js';
+import { p as permissionFromProjection, i as imageLimitsFromProjection, f as filterKnobEvents } from '../../chunks/image-limits.js-BMPZ55kJ.js';
+import { v as error } from '../../chunks/utils.js-tOWCe9Wk.js';
+
+//#region src/routes/+page.server.ts
+/**
+* Conversation route — cold load (BC-4: the LEDGER is the truth).
+*
+* session.history via the connection singleton → DsiEntry render list through
+* dsh-events.eventsToEntries. 404 when the host says session/not-found; 409 on
+* a subagent-ownership rejection (the host answered — the child opens through
+* its parent); blank sessions render an empty transcript (empty entries, not
+* an error); host unreachable → 503 page with retry context.
+*/
+var load = async ({ url }) => {
+	const sessionKeyRaw = url.searchParams.get("sessionKey");
+	const sessionId = sessionKeyRaw !== null && sessionKeyRaw.length > 0 ? sessionKeyRaw : void 0;
+	if (sessionId === void 0) return {};
+	let historyEvents;
+	let ledgerHasMore = false;
+	let ledgerTitle = null;
+	let permission = null;
+	/** W4: host admission numbers from the tail projections (null → defaults). */
+	let imageLimits = null;
+	/** The tail page's own projections block (0.1.1-shaped fallback — the
+	*  0.1.2 page carries none; the live baseline below is the seed). */
+	let tailProjections = {};
+	let knobEvents = [];
+	try {
+		const historyPage = await getDshConnection().history(sessionId);
+		historyEvents = historyPage.events;
+		ledgerHasMore = historyPage.hasMore === true;
+		tailProjections = historyPage.projections?.values ?? {};
+		const title = historyPage.projections?.values?.["title"];
+		ledgerTitle = typeof title === "string" && title.length > 0 ? title : null;
+		permission = permissionFromProjection(historyPage.projections?.values?.["permissions"]) ?? null;
+		imageLimits = imageLimitsFromProjection(historyPage.projections?.values?.["imageLimits"]);
+		knobEvents = filterKnobEvents(historyToEvents(historyPage.events));
+	} catch (err) {
+		if (err instanceof DshRpcError && err.code === "session/not-found") error(404, { message: `Session ${sessionId} not found on the DSH host.` });
+		if (isSubagentRejection(err)) error(409, { message: `Session ${sessionId} is a harness sub-agent owned by subagent routing — it opens through its durable parent session. (${err.message})` });
+		error(503, { message: err instanceof Error ? `Cannot reach the DSH host for session history: ${err.message}` : "Cannot reach the DSH host for session history." });
+	}
+	const entries = eventsToEntries(historyToEvents(historyEvents));
+	const conn = getDshConnection();
+	conn.ensureDownlinks();
+	conn.subscribe(sessionId);
+	const projectionValues = (await conn.waitForProjections(sessionId).catch(() => null))?.values ?? tailProjections;
+	const lastLedgerSeq = historyEvents.at(-1)?.event.seq ?? -1;
+	permission = permissionFromProjection(projectionValues["permissions"]) ?? permission;
+	imageLimits = imageLimitsFromProjection(projectionValues["imageLimits"]) ?? imageLimits;
+	const running = conn.isRunning(sessionId);
+	let workspace = null;
+	let agentPreset = null;
+	try {
+		const row = (await conn.listSessions()).items.find((r) => r.sessionId === sessionId);
+		workspace = row?.workspace ?? null;
+		agentPreset = row?.agentPreset ?? null;
+	} catch {
+		workspace = null;
+		agentPreset = null;
+	}
+	return {
+		sessionId,
+		title: ledgerTitle,
+		workspace,
+		agentPreset,
+		permission,
+		imageLimits,
+		knobEvents,
+		entries,
+		lastSeq: Math.max(lastLedgerSeq, -1),
+		running,
+		hasMore: ledgerHasMore
+	};
+};
+
+var _page_server_ts = /*#__PURE__*/Object.freeze({
+	__proto__: null,
+	load: load
+});
+
+export { _page_server_ts as _ };
+//# sourceMappingURL=_page.server.ts.js-Bk8UuUXA.js.map