@deepseek-insight/dsi 0.5.9 → 0.5.11

package/build/client/_app/version.json

@@ -1 +1 @@
-{"version":"1789166955840"}
+{"version":"1789310148060"}

package/build/env.js

@@ -1,9 +1,9 @@
-import path from 'node:path';
+import nodePath__default from 'node:path';
 import process from 'node:process';
 import { fileURLToPath } from 'node:url';
 
 // since env.js is an entrypoint, `dir` will point to the output directory
-const dir = path.dirname(fileURLToPath(import.meta.url));
+const dir = nodePath__default.dirname(fileURLToPath(import.meta.url));
 
 const expected_unprefixed = new Set(['LISTEN_PID', 'LISTEN_FDS']);
 

package/build/handler.js

@@ -2,9 +2,9 @@ import './shims.js';
 import 'node:fs';
 import 'node:path';
 import 'node:process';
-export { h as handler } from './server/chunks/handler-DonVRS0X.js';
-import './server/chunks/index.js-BeG-TgOY.js';
-import './server/chunks/manifest.js-CjHfy5rn.js';
+export { h as handler } from './server/chunks/handler-BKbAUWNh.js';
+import './server/chunks/index.js-DNjzSibQ.js';
+import './server/chunks/manifest.js-By1cjJ9N.js';
 import './env.js';
 import 'node:buffer';
 import 'node:crypto';
@@ -12,12 +12,12 @@ import 'node:http';
 import 'node:timers';
 import 'node:querystring';
 import 'node:stream';
-import './server/chunks/chunks/shared.js-C4-Py8s_.js';
+import './server/chunks/chunks/shared.js-HQ0rfhm4.js';
 import './server/chunks/chunks/uneval.js-BJ9Qq2SF.js';
-import './server/chunks/chunks/utils.js-tOWCe9Wk.js';
+import './server/chunks/chunks/utils.js-CAdNO8Tu.js';
 import 'node:url';
-import './server/chunks/chunks/internal.js-kXJJJomG.js';
-import './server/chunks/chunks/server.js-DoCd0fEo.js';
-import './server/chunks/chunks/internal2.js-D-DAuSVh.js';
-import './server/chunks/chunks/exports.js-DMiPee3x.js';
+import './server/chunks/chunks/internal.js-CRfRCfoU.js';
+import './server/chunks/chunks/server.js-11-pxAWV.js';
+import './server/chunks/chunks/internal2.js-BcS47nI-.js';
+import './server/chunks/chunks/exports.js-DH_tjtdv.js';
 //# sourceMappingURL=handler.js.map

package/build/index.js

@@ -1,7 +1,7 @@
 import http from 'node:http';
 import fs__default from 'node:fs';
 import process from 'node:process';
-import { p as polka, h as handler, f as format_listening_address } from './server/chunks/handler-DonVRS0X.js';
+import { p as polka, h as handler, f as format_listening_address } from './server/chunks/handler-BKbAUWNh.js';
 import { env, timeout_env } from './env.js';
 import { rm } from 'node:fs/promises';
 import './shims.js';
@@ -11,15 +11,15 @@ import 'node:path';
 import 'node:timers';
 import 'node:querystring';
 import 'node:stream';
-import './server/chunks/chunks/shared.js-C4-Py8s_.js';
+import './server/chunks/chunks/shared.js-HQ0rfhm4.js';
 import './server/chunks/chunks/uneval.js-BJ9Qq2SF.js';
-import './server/chunks/chunks/utils.js-tOWCe9Wk.js';
-import './server/chunks/index.js-BeG-TgOY.js';
-import './server/chunks/chunks/internal.js-kXJJJomG.js';
-import './server/chunks/chunks/server.js-DoCd0fEo.js';
-import './server/chunks/chunks/internal2.js-D-DAuSVh.js';
-import './server/chunks/chunks/exports.js-DMiPee3x.js';
-import './server/chunks/manifest.js-CjHfy5rn.js';
+import './server/chunks/chunks/utils.js-CAdNO8Tu.js';
+import './server/chunks/index.js-DNjzSibQ.js';
+import './server/chunks/chunks/internal.js-CRfRCfoU.js';
+import './server/chunks/chunks/server.js-11-pxAWV.js';
+import './server/chunks/chunks/internal2.js-BcS47nI-.js';
+import './server/chunks/chunks/exports.js-DH_tjtdv.js';
+import './server/chunks/manifest.js-By1cjJ9N.js';
 import 'node:url';
 
 const path = env('SOCKET_PATH', false);

package/build/server/chunks/chunks/{app-config.svelte.js-Co9jacqT.js → app-config.svelte.js-BkhuJ9bF.js}

@@ -1,4 +1,4 @@
-import { D as DEFAULT_SIDEBAR_PLACEMENT, a as DEFAULT_PANEL_MAX_ZOOM, b as DEFAULT_PANEL_MIN_ZOOM, c as DEFAULT_A2A_WATCH_TIMEOUT_MS, d as DEFAULT_A2A_FAST_POLL_MS, e as DEFAULT_HOME_REFRESH_MS, f as DEFAULT_STATS_BAR_MODE, g as DEFAULT_POLL_IDLE_MS, h as DEFAULT_ACCESS_CONFIRM_TIMEOUT_MS } from './config.js-BBYogCe7.js';
+import { D as DEFAULT_SIDEBAR_PLACEMENT, a as DEFAULT_PANEL_MAX_ZOOM, b as DEFAULT_PANEL_MIN_ZOOM, c as DEFAULT_A2A_WATCH_TIMEOUT_MS, d as DEFAULT_A2A_FAST_POLL_MS, e as DEFAULT_HOME_REFRESH_MS, f as DEFAULT_STATS_BAR_MODE, g as DEFAULT_POLL_IDLE_MS, h as DEFAULT_ACCESS_CONFIRM_TIMEOUT_MS } from './config.js-D2vQdial.js';
 
 //#region src/lib/services/config/app-config.svelte.ts
 function freshDefault() {
@@ -49,4 +49,4 @@ function appConfig() {
 }
 
 export { appConfig as a };
-//# sourceMappingURL=app-config.svelte.js-Co9jacqT.js.map
+//# sourceMappingURL=app-config.svelte.js-BkhuJ9bF.js.map

package/build/server/chunks/chunks/{config.js-BBYogCe7.js → config.js-D2vQdial.js}

@@ -30,6 +30,13 @@ function resolveConversationFlags(v) {
 		progressiveFold: typeof rec.progressiveFold === "boolean" ? rec.progressiveFold : false
 	};
 }
+/** The UI locale fleet — ADR D5. A fourth language is one catalog file
+*  plus one entry here and in project.inlang/settings.json. */
+var UI_LOCALES = [
+	"en",
+	"zh",
+	"id"
+];
 /** `home.refreshMs` default — home list + spine refresh cadence (BC-7). */
 var DEFAULT_HOME_REFRESH_MS = 5e3;
 /** `a2a.fastPollMs` default — LIST-lane tick (ONE batched session.list for
@@ -119,5 +126,5 @@ function isConfigRecord(v) {
 	return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 
-export { DEFAULT_SIDEBAR_PLACEMENT as D, DEFAULT_PANEL_MAX_ZOOM as a, DEFAULT_PANEL_MIN_ZOOM as b, DEFAULT_A2A_WATCH_TIMEOUT_MS as c, DEFAULT_A2A_FAST_POLL_MS as d, DEFAULT_HOME_REFRESH_MS as e, DEFAULT_STATS_BAR_MODE as f, DEFAULT_POLL_IDLE_MS as g, DEFAULT_ACCESS_CONFIRM_TIMEOUT_MS as h, resolveSidebarPlacement as i, resolveWidthBounds as j, resolveZoomBounds as k, intWithin as l, resolveConversationFlags as m, resolveStatsBarMode as n, isConfigRecord as o, dshBaseUrl as p, resolveA2aConfig as r };
-//# sourceMappingURL=config.js-BBYogCe7.js.map
+export { DEFAULT_SIDEBAR_PLACEMENT as D, UI_LOCALES as U, DEFAULT_PANEL_MAX_ZOOM as a, DEFAULT_PANEL_MIN_ZOOM as b, DEFAULT_A2A_WATCH_TIMEOUT_MS as c, DEFAULT_A2A_FAST_POLL_MS as d, DEFAULT_HOME_REFRESH_MS as e, DEFAULT_STATS_BAR_MODE as f, DEFAULT_POLL_IDLE_MS as g, DEFAULT_ACCESS_CONFIRM_TIMEOUT_MS as h, isConfigRecord as i, resolveSidebarPlacement as j, resolveWidthBounds as k, resolveZoomBounds as l, intWithin as m, resolveConversationFlags as n, resolveStatsBarMode as o, dshBaseUrl as p, resolveA2aConfig as r };
+//# sourceMappingURL=config.js-D2vQdial.js.map

package/build/server/chunks/chunks/{db.js-C4EPtpZT.js → db.js-Cya8uRCD.js}

@@ -1,4 +1,4 @@
-import { D as DSI_CONFIG_PATH } from './insight-config.js-BAitz0O1.js';
+import { D as DSI_CONFIG_PATH } from './insight-config.js-BwcV3Bct.js';
 import { mkdirSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { DatabaseSync } from 'node:sqlite';
@@ -117,4 +117,4 @@ function pruneTerminalBefore(cutoffMs, db = openA2aDb()) {
 }
 
 export { listRecent as a, getRow as g, insertWaiting as i, listWaiting as l, openA2aDb as o, pruneTerminalBefore as p, settleRow as s };
-//# sourceMappingURL=db.js-C4EPtpZT.js.map
+//# sourceMappingURL=db.js-Cya8uRCD.js.map

package/build/server/chunks/chunks/{db2.js-BYr2lzQs.js → db2.js-CPqi0hcH.js}

@@ -1,4 +1,4 @@
-import { i as readPromptsConfig, D as DSI_CONFIG_PATH } from './insight-config.js-BAitz0O1.js';
+import { i as readPromptsConfig, D as DSI_CONFIG_PATH } from './insight-config.js-BwcV3Bct.js';
 import { mkdirSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { DatabaseSync } from 'node:sqlite';
@@ -761,4 +761,4 @@ function updatePrompt(id, fields) {
 }
 
 export { renamePromptLabel as a, createPrompt as c, deletePrompt as d, findPromptByText as f, listPrompts as l, recordPromptUse as r, searchPrompts as s, updatePrompt as u };
-//# sourceMappingURL=db2.js-BYr2lzQs.js.map
+//# sourceMappingURL=db2.js-CPqi0hcH.js.map

package/build/server/chunks/chunks/{dsh-connection.js-D52KwDXm.js → dsh-connection.js-DlwhJZaV.js}

@@ -1,5 +1,5 @@
-import { p as dshBaseUrl } from './config.js-BBYogCe7.js';
-import { r as readDshPresetEnglishConfig, a as readDshAuthConfig, b as readServerConfig } from './insight-config.js-BAitz0O1.js';
+import { p as dshBaseUrl } from './config.js-D2vQdial.js';
+import { r as readDshPresetEnglishConfig, a as readDshAuthConfig, b as readServerConfig } from './insight-config.js-BwcV3Bct.js';
 
 //#region src/lib/server/dsh-rpc.ts
 /**
@@ -1954,4 +1954,4 @@ function normalizePreset(row, overlayEnglish = true) {
 }
 
 export { DshRpcError as D, isPromptImageMediaType as a, buildPromptContent as b, getDshConnection as g, isSubagentRejection as i, mapRpcFailure as m, statusFor as s };
-//# sourceMappingURL=dsh-connection.js-D52KwDXm.js.map
+//# sourceMappingURL=dsh-connection.js-DlwhJZaV.js.map

package/build/server/chunks/chunks/{exports.js-DMiPee3x.js → exports.js-DH_tjtdv.js}

@@ -112,7 +112,7 @@ function allow_nodejs_console_log(url) {
 	};
 }
 //#endregion
-//#region node_modules/.pnpm/@sveltejs+kit@2.70.3_@sveltejs+vite-plugin-svelte@7.3.0_svelte@5.56.10_vite@8.2.2_@type_516d88433e8c68d15ca595d506c600a7/node_modules/@sveltejs/kit/src/utils/hash.js
+//#region node_modules/.pnpm/@sveltejs+kit@2.70.3_@sveltejs+vite-plugin-svelte@7.3.0_svelte@5.56.10_vite@8.2.2_@type_60f7eb265b11a32382764d70df8bbe24/node_modules/@sveltejs/kit/src/utils/hash.js
 /**
 * Hash using djb2
 * @param {import('types').StrictBody[]} values
@@ -130,7 +130,7 @@ function hash(...values) {
 	return (hash >>> 0).toString(36);
 }
 //#endregion
-//#region node_modules/.pnpm/@sveltejs+kit@2.70.3_@sveltejs+vite-plugin-svelte@7.3.0_svelte@5.56.10_vite@8.2.2_@type_516d88433e8c68d15ca595d506c600a7/node_modules/@sveltejs/kit/src/utils/routing.js
+//#region node_modules/.pnpm/@sveltejs+kit@2.70.3_@sveltejs+vite-plugin-svelte@7.3.0_svelte@5.56.10_vite@8.2.2_@type_60f7eb265b11a32382764d70df8bbe24/node_modules/@sveltejs/kit/src/utils/routing.js
 /**
 * @param {RegExpMatchArray} match
 * @param {import('types').RouteParam[]} params
@@ -191,7 +191,7 @@ function find_route(path, routes, matchers) {
 	return null;
 }
 //#endregion
-//#region node_modules/.pnpm/@sveltejs+kit@2.70.3_@sveltejs+vite-plugin-svelte@7.3.0_svelte@5.56.10_vite@8.2.2_@type_516d88433e8c68d15ca595d506c600a7/node_modules/@sveltejs/kit/src/utils/exports.js
+//#region node_modules/.pnpm/@sveltejs+kit@2.70.3_@sveltejs+vite-plugin-svelte@7.3.0_svelte@5.56.10_vite@8.2.2_@type_60f7eb265b11a32382764d70df8bbe24/node_modules/@sveltejs/kit/src/utils/exports.js
 /**
 * @param {Set<string>} expected
 */
@@ -260,4 +260,4 @@ var validate_layout_server_exports = validator(valid_layout_server_exports);
 var validate_page_server_exports = validator(valid_page_server_exports);
 
 export { disable_search as a, validate_layout_exports as b, validate_page_server_exports as c, decode_pathname as d, validate_page_exports as e, find_route as f, hash as h, make_trackable as m, normalize_path as n, resolve as r, validate_layout_server_exports as v };
-//# sourceMappingURL=exports.js-DMiPee3x.js.map
+//# sourceMappingURL=exports.js-DH_tjtdv.js.map

package/build/server/chunks/chunks/git-probe.js-nfLEa58f.js

@@ -0,0 +1,219 @@
+import { g as getDshConnection } from './dsh-connection.js-DlwhJZaV.js';
+import { h as historyToEvents } from './dsh-events.js-BtDxaV6Q.js';
+import { a as foldKnobs, f as filterKnobEvents, F as FULL_ACCESS_PRESET } from './permission-state.js-yvwUSnug.js';
+import { promises } from 'node:fs';
+import * as nodePath from 'node:path';
+import { execFile } from 'node:child_process';
+
+//#region src/lib/server/git-probe.ts
+/**
+* git-probe — the DSI server's gated git eye (ADR 2026-09-12, The Git Eye,
+* D1/D2/D5): the ONE place that looks at the filesystem on the browser's
+* behalf. Detection is pure node:fs over a SINGLE directory level (a
+* .git file flags like a .git directory — the worktree/submodule form);
+* status is a read-only `git status --porcelain=v1 -z` child run with a
+* bounded result. Every entry point routes through the gate: the owning
+* session's sandbox mode must be danger-full-access, resolved FRESH per
+* call from the ledger tail (folded knob events first, the projections
+* baseline second) — the gate is never cached, and callers must treat a
+* closed gate as final (the route answers enabled:false without touching
+* the filesystem). The DSH host is never asked: no git RPC exists there
+* and this module deliberately does not add one (ADR D1).
+*/
+/** git status ran and the git binary is not installed on this machine. */
+var GitUnavailableError = class extends Error {
+	constructor() {
+		super("the git binary is not available on the DSI server machine");
+		this.name = "GitUnavailableError";
+	}
+};
+/**
+* Path containment for the status route: the requested repo must BE the
+* workspace root or live inside it, compared over REALPATHS (a symlinked
+* checkout cannot smuggle a path out). Best-effort: a root that cannot be
+* real-pathed (vanished mid-request) counts as outside — refuse, never
+* guess.
+*/
+async function isInsideRoot(root, repo) {
+	try {
+		const [rootReal, repoReal] = await Promise.all([promises.realpath(root), promises.realpath(repo)]);
+		return repoReal === rootReal || repoReal.startsWith(rootReal + nodePath.sep);
+	} catch {
+		return false;
+	}
+}
+/** Wall-clock cap on one git child run. */
+var GIT_TIMEOUT_MS = 1e4;
+/** Output cap on one git child run (porcelain is ~100 bytes/entry; generous). */
+var GIT_MAX_BUFFER = 4194304;
+/**
+* The gate (ADR D2): the owning session's effective sandbox mode must be
+* danger-full-access. Resolved fresh per call — owner session first (a
+* sub-agent id is refused by the host, the same as the tree route), then
+* the ledger tail: the folded sandbox/mode knob wins; without one, the
+* tail projections' permissions.currentValue is the baseline (the Access
+* chip's own source). No signal at all closes the gate.
+*/
+async function gitGateEnabled(sessionId) {
+	const conn = getDshConnection();
+	const owner = await conn.workspaceOwnerSessionId(sessionId);
+	conn.ensureDownlinks();
+	conn.subscribe(owner);
+	const [page, live] = await Promise.all([conn.history(owner), conn.waitForProjections(owner).catch(() => null)]);
+	const knobs = foldKnobs(filterKnobEvents(historyToEvents(page.events)));
+	if (knobs.sandbox !== null) return knobs.sandbox === FULL_ACCESS_PRESET;
+	const permissions = (live?.values ?? page.projections?.values ?? {})["permissions"];
+	return typeof permissions?.currentValue === "string" && permissions.currentValue === "danger-full-access";
+}
+/** Does this directory contain a .git entry (file OR directory)? */
+async function isRepo(dir) {
+	try {
+		await promises.stat(nodePath.join(dir, ".git"));
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
+* Detect repos under ONE directory level: the directory itself plus each
+* immediate child that is a directory (symlinks resolved — a linked
+* checkout flags like a real one). A child whose stat fails (permissions,
+* race) is simply not a repo; a detection answer is never an error.
+*/
+async function detectRepos(dir) {
+	const dirents = await promises.readdir(dir, { withFileTypes: true });
+	const repos = {};
+	for (const dirent of dirents) {
+		if (dirent.isDirectory()) {
+			repos[dirent.name] = await isRepo(nodePath.join(dir, dirent.name));
+			continue;
+		}
+		if (dirent.isSymbolicLink()) try {
+			if ((await promises.stat(nodePath.join(dir, dirent.name))).isDirectory()) repos[dirent.name] = await isRepo(nodePath.join(dir, dirent.name));
+		} catch {}
+	}
+	return {
+		rootIsRepo: await isRepo(dir),
+		repos
+	};
+}
+/**
+* The repo that directly contains a root-relative workspace path: the
+* root itself when it is a repo, else the DEEPEST ancestor directory of
+* the path that hosts a .git entry. Null when no repo encloses the path
+* — the route answers honestly, the browser guesses nothing.
+*/
+async function resolveEnclosingRepo(root, relPath) {
+	const parts = relPath.split("/").filter((p) => p.length > 0);
+	if (parts.length === 0) return null;
+	if (await isRepo(root)) return {
+		repo: root,
+		rel: parts.join("/")
+	};
+	for (let i = parts.length - 1; i >= 1; i--) {
+		const dir = nodePath.join(root, ...parts.slice(0, i));
+		if (await isRepo(dir)) return {
+			repo: dir,
+			rel: parts.slice(i).join("/")
+		};
+	}
+	return null;
+}
+/**
+* Read-only HEAD blob text for one repo-relative path: git show
+* HEAD:rel with the same child-run caps as status. A path git does not
+* know in HEAD (untracked or newly added) resolves to NULL — an honest
+* "no before-version", never an error. Traversal attempts (.. segments,
+* absolute, empty) throw before git runs. A missing git binary raises
+* GitUnavailableError.
+*/
+async function gitFileHead(repo, rel) {
+	if (rel.length === 0 || rel.startsWith("/") || rel.split("/").includes("..")) throw new Error("rel must be a non-empty repo-relative path without traversal");
+	return new Promise((resolve, reject) => {
+		execFile("git", [
+			"-C",
+			repo,
+			"show",
+			"HEAD:" + rel
+		], {
+			timeout: GIT_TIMEOUT_MS,
+			maxBuffer: GIT_MAX_BUFFER
+		}, (err, out) => {
+			if (err === null) {
+				resolve(out);
+				return;
+			}
+			const code = err.code;
+			if (code === "ENOENT") {
+				reject(new GitUnavailableError());
+				return;
+			}
+			if (String(code) === "128") {
+				resolve(null);
+				return;
+			}
+			reject(err);
+		});
+	});
+}
+/**
+* Porcelain parser shared by gitStatus and git-watch's baseline seed
+* (Index Pulse: the watcher's verify-by-status-diff must compare EXACTLY
+* what the route serves).
+*/
+function parsePorcelainStatus(stdout) {
+	const fields = stdout.split("\0");
+	const files = [];
+	let truncated = false;
+	for (let i = 0; i < fields.length - 1; i++) {
+		const field = fields[i];
+		if (field.length < 4) continue;
+		if (files.length >= 500) {
+			truncated = true;
+			break;
+		}
+		const code = field.slice(0, 2);
+		const filePath = field.slice(3);
+		if (code.includes("R") || code.includes("C")) i++;
+		files.push({
+			code,
+			path: filePath
+		});
+	}
+	return {
+		truncated,
+		files
+	};
+}
+/**
+* Read-only working-tree status for one repo root: `git status
+* --porcelain=v1 -z`, NUL-separated so spaces in paths need no unquoting.
+* Rename/copy entries carry the ORIGIN path as a second NUL field — the
+* origin is skipped (the NEW path is what the explorer opens). At
+* MAX_STATUS_ENTRIES the result truncates honestly. A missing git binary
+* raises GitUnavailableError; any other child failure propagates.
+*/
+async function gitStatus(repo) {
+	return parsePorcelainStatus(await new Promise((resolve, reject) => {
+		execFile("git", [
+			"-C",
+			repo,
+			"status",
+			"--porcelain=v1",
+			"-z"
+		], {
+			timeout: GIT_TIMEOUT_MS,
+			maxBuffer: GIT_MAX_BUFFER
+		}, (err, out) => {
+			if (err) {
+				if (err.code === "ENOENT") reject(new GitUnavailableError());
+				else reject(err);
+				return;
+			}
+			resolve(out);
+		});
+	}));
+}
+
+export { GitUnavailableError as G, gitStatus as a, gitFileHead as b, detectRepos as d, gitGateEnabled as g, isInsideRoot as i, parsePorcelainStatus as p, resolveEnclosingRepo as r };
+//# sourceMappingURL=git-probe.js-nfLEa58f.js.map

package/build/server/chunks/chunks/image-limits.js-CUdJ0f7r.js

@@ -0,0 +1,41 @@
+//#region src/lib/services/conversation/image-limits.ts
+/** DSH documented defaults (fallback when no projection rides the tail). */
+var DEFAULT_IMAGE_LIMITS = {
+	maxImageBytes: 20971520,
+	maxImagesPerMessage: 20,
+	maxMessageImageBytes: 209715200,
+	maxImagePixels: 64e6,
+	maxImageDimension: 8192,
+	mediaTypes: [
+		"image/png",
+		"image/jpeg",
+		"image/webp",
+		"image/gif"
+	]
+};
+function isPositiveInt(value) {
+	return typeof value === "number" && Number.isInteger(value) && value > 0;
+}
+/**
+* Validate the projections block's imageLimits value.
+*
+* @param raw - the projection value (projections.values.imageLimits), untyped.
+* @returns the six-field limits, or null when absent/malformed — the caller
+* then falls back to DEFAULT_IMAGE_LIMITS (BC-A6).
+*/
+function imageLimitsFromProjection(raw) {
+	if (!raw || typeof raw !== "object") return null;
+	const value = raw;
+	if (!isPositiveInt(value.maxImageBytes) || !isPositiveInt(value.maxImagesPerMessage) || !isPositiveInt(value.maxMessageImageBytes) || !isPositiveInt(value.maxImagePixels) || !isPositiveInt(value.maxImageDimension) || !Array.isArray(value.mediaTypes) || value.mediaTypes.length === 0 || !value.mediaTypes.every((t) => typeof t === "string" && t.length > 0)) return null;
+	return {
+		maxImageBytes: value.maxImageBytes,
+		maxImagesPerMessage: value.maxImagesPerMessage,
+		maxMessageImageBytes: value.maxMessageImageBytes,
+		maxImagePixels: value.maxImagePixels,
+		maxImageDimension: value.maxImageDimension,
+		mediaTypes: [...value.mediaTypes]
+	};
+}
+
+export { DEFAULT_IMAGE_LIMITS as D, imageLimitsFromProjection as i };
+//# sourceMappingURL=image-limits.js-CUdJ0f7r.js.map

package/build/server/chunks/chunks/{insight-config.js-BAitz0O1.js → insight-config.js-BwcV3Bct.js}

@@ -1,163 +1,9 @@
-import { r as resolveA2aConfig, i as resolveSidebarPlacement, j as resolveWidthBounds, k as resolveZoomBounds, l as intWithin, m as resolveConversationFlags, n as resolveStatsBarMode, o as isConfigRecord, D as DEFAULT_SIDEBAR_PLACEMENT, a as DEFAULT_PANEL_MAX_ZOOM, b as DEFAULT_PANEL_MIN_ZOOM, c as DEFAULT_A2A_WATCH_TIMEOUT_MS, d as DEFAULT_A2A_FAST_POLL_MS, e as DEFAULT_HOME_REFRESH_MS, f as DEFAULT_STATS_BAR_MODE, g as DEFAULT_POLL_IDLE_MS, h as DEFAULT_ACCESS_CONFIRM_TIMEOUT_MS } from './config.js-BBYogCe7.js';
-import { existsSync, readFileSync, cpSync, mkdirSync, writeFileSync, renameSync } from 'node:fs';
+import { r as resolveA2aConfig, j as resolveSidebarPlacement, k as resolveWidthBounds, l as resolveZoomBounds, m as intWithin, n as resolveConversationFlags, o as resolveStatsBarMode, i as isConfigRecord, D as DEFAULT_SIDEBAR_PLACEMENT, a as DEFAULT_PANEL_MAX_ZOOM, b as DEFAULT_PANEL_MIN_ZOOM, c as DEFAULT_A2A_WATCH_TIMEOUT_MS, d as DEFAULT_A2A_FAST_POLL_MS, e as DEFAULT_HOME_REFRESH_MS, f as DEFAULT_STATS_BAR_MODE, g as DEFAULT_POLL_IDLE_MS, h as DEFAULT_ACCESS_CONFIRM_TIMEOUT_MS } from './config.js-D2vQdial.js';
+import { e as ensureDsiHome, m as migrateLegacyDsiConfig, p as parseYamlSettings } from './settings-document.js-BIwLIxnE.js';
+import { readFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { homedir } from 'node:os';
-import { parseDocument, stringify, parse } from 'yaml';
 
-//#region src/lib/server/settings-document.ts
-/**
-* Settings document — raw-document access to DSI's and DSH's settings
-* files for the settings editor panel (ADR The Settings Panel, 2026-09-07,
-* D1/D2/D5). The YAML file is the authority: this module reads raw text,
-* gates saves on a YAML parse, and writes atomically. It owns the one-time
-* migration from DSI's legacy `~/.dsi/config.json` (D1): convert
-* once, never touch the legacy file again, never run twice (a second
-* resolve sees settings.yaml present and no-ops).
-*
-* Section readers (insight-config.ts) keep their own clamps and no-cache
-* contract; they trigger the migration through this module and parse the
-* same YAML home. The browser never learns a filesystem path — the API
-* route (wave 2) is the only consumer of these functions.
-*/
-/** `~/.dsi/settings.yaml` — DSI's settings home (post-migration). */
-var DSI_SETTINGS_PATH = join(homedir(), ".dsi", "settings.yaml");
-/** `~/.dsh/settings.yaml` — the harness's settings home (DSH-owned). */
-var DSH_SETTINGS_PATH = join(homedir(), ".dsh", "settings.yaml");
-/** Resolve the DSI settings path: explicit arg → env override → default. */
-function dsiSettingsPath(configPath) {
-	return process.env.DSI_CONFIG_PATH ?? DSI_SETTINGS_PATH;
-}
-/** Resolve the DSH settings path: explicit arg → env override → default. */
-function dshSettingsPath(configPath) {
-	return configPath ?? process.env.DSH_SETTINGS_PATH ?? DSH_SETTINGS_PATH;
-}
-/** Resolve a target to its settings path (unknown targets are a bug at the
-*  caller — the route validates before this point; this switch is total). */
-function resolveSettingsPath(target, configPath) {
-	switch (target) {
-		case "dsi": return dsiSettingsPath();
-		case "dsh": return dshSettingsPath(configPath);
-	}
-}
-/** Parse failure carrying the YAML parser's own position (line 1-based,
-*  column 0-based — surfaced verbatim to the editor banner). */
-var SettingsParseError = class extends Error {
-	line;
-	column;
-	constructor(message, line, column) {
-		super(message);
-		this.line = line;
-		this.column = column;
-		this.name = "SettingsParseError";
-	}
-};
-/**
-* One-time DSI migration (ADR D1): when settings.yaml is absent and the
-* legacy config.json exists, parse the JSON and write it as YAML —
-* atomically, so a crash mid-migration never leaves a torn file. The
-* legacy file is READ ONLY here, never written, never read again once
-* settings.yaml exists (a second resolve no-ops — the migration cannot
-* run twice by construction).
-* @param settingsPath - the resolved settings.yaml path.
-* @param legacyPath - the legacy config.json path (same directory).
-*/
-function migrateLegacyDsiConfig(settingsPath, legacyPath) {
-	if (existsSync(settingsPath)) return;
-	const legacy = join(dirname(settingsPath), "config.json");
-	if (!existsSync(legacy)) return;
-	let parsed;
-	try {
-		parsed = JSON.parse(readFileSync(legacy, "utf-8"));
-	} catch {
-		return;
-	}
-	writeAtomic(settingsPath, stringify(parsed));
-}
-/** Resolve the template home: explicit arg → `DSI_TEMPLATE_PATH` env (set
-*  by bin/dsi.mjs from the package root) → `template/.dsi` under the cwd
-*  (dev runs). */
-function templateHomePath(templatePath) {
-	return process.env.DSI_TEMPLATE_PATH ?? join(process.cwd(), "template", ".dsi");
-}
-/**
-* First-start home bootstrap (template/.dsi): when the DSI home directory is
-* absent, clone the shipped template (settings.yaml, prompts.sqlite seed,
-* a2a.sqlite ledger) into place. An existing home is NEVER touched; a missing
-* template is a silent no-op so builds without one degrade to the defaults
-* contract.
-* @param homePath - test seam overriding the operator home directory.
-* @param templatePath - test seam overriding the template directory.
-* @returns `exists` (home present), `cloned` (template copied), or
-*   `no-template` (nothing to copy from).
-*/
-function ensureDsiHome(homePath, templatePath) {
-	const home = homePath ?? dirname(DSI_SETTINGS_PATH);
-	if (existsSync(home)) return "exists";
-	const template = templateHomePath();
-	if (!existsSync(template)) return "no-template";
-	cpSync(template, home, { recursive: true });
-	return "cloned";
-}
-/** Atomic write: temp file in the target directory, then rename. */
-function writeAtomic(path, text) {
-	mkdirSync(dirname(path), { recursive: true });
-	const temp = join(dirname(path), `.${basenameOf(path)}.${process.pid}.tmp`);
-	writeFileSync(temp, text, "utf-8");
-	renameSync(temp, path);
-}
-function basenameOf(path) {
-	const parts = path.split(/[\\/]/);
-	return parts[parts.length - 1] || path;
-}
-/**
-* Read a settings document as raw text, running the DSI migration first
-* (dsi target only — DSH owns its own file lifecycle).
-* @param target - which document to read.
-* @param configPath - test seam overriding the resolved path.
-*/
-function readSettingsDocument(target, configPath) {
-	const path = resolveSettingsPath(target, configPath);
-	if (target === "dsi") {
-		ensureDsiHome(dirname(path));
-		migrateLegacyDsiConfig(path);
-	}
-	if (!existsSync(path)) return {
-		text: "",
-		missing: true
-	};
-	return {
-		text: readFileSync(path, "utf-8"),
-		missing: false
-	};
-}
-/**
-* Validate and atomically save a settings document. A parse failure throws
-* {@link SettingsParseError} and writes NOTHING (ADR D5).
-* @param target - which document to save.
-* @param text - the whole edited document text.
-* @param configPath - test seam overriding the resolved path.
-*/
-function saveSettingsDocument(target, text, configPath) {
-	const path = resolveSettingsPath(target, configPath);
-	const error = parseDocument(text, { strict: false }).errors[0];
-	if (error !== void 0) {
-		const pos = error.linePos?.[0];
-		throw new SettingsParseError(error.message, pos?.line ?? null, pos?.col ?? null);
-	}
-	writeAtomic(path, text);
-}
-/** Parse YAML into a record for section readers (JSON is a YAML subset, so
-*  the same parse serves both shapes). Null on missing/invalid. */
-function parseYamlSettings(text) {
-	if (text.trim() === "") return null;
-	try {
-		const parsed = parse(text);
-		return isConfigRecord(parsed) ? parsed : null;
-	} catch {
-		return null;
-	}
-}
-//#endregion
 //#region src/lib/server/insight-config.ts
 /**
 * Insight config — DSI's operator-tunable settings
@@ -358,5 +204,5 @@ function readPromptsConfig(configPath) {
 	};
 }
 
-export { DSI_CONFIG_PATH as D, SettingsParseError as S, readDshAuthConfig as a, readServerConfig as b, readA2aConfig as c, readSidebarConfig as d, readPanelConfig as e, readHomeConfig as f, readConversationConfig as g, readChatConfig as h, readPromptsConfig as i, readSettingsDocument as j, DEFAULT_DSH_PRESET_ENGLISH as k, DEFAULT_SERVER_CONFIG as l, DEFAULT_PROMPTS_CONFIG as m, DEFAULT_SIDEBAR_CONFIG as n, DEFAULT_PANEL_CONFIG as o, DEFAULT_A2A_CONFIG as p, DEFAULT_HOME_CONFIG as q, readDshPresetEnglishConfig as r, saveSettingsDocument as s, DEFAULT_CONVERSATION_CONFIG as t, DEFAULT_CHAT_CONFIG as u };
-//# sourceMappingURL=insight-config.js-BAitz0O1.js.map
+export { DSI_CONFIG_PATH as D, readDshAuthConfig as a, readServerConfig as b, readA2aConfig as c, readSidebarConfig as d, readPanelConfig as e, readHomeConfig as f, readConversationConfig as g, readChatConfig as h, readPromptsConfig as i, DEFAULT_DSH_PRESET_ENGLISH as j, DEFAULT_SERVER_CONFIG as k, DEFAULT_PROMPTS_CONFIG as l, DEFAULT_SIDEBAR_CONFIG as m, DEFAULT_PANEL_CONFIG as n, DEFAULT_A2A_CONFIG as o, DEFAULT_HOME_CONFIG as p, DEFAULT_CONVERSATION_CONFIG as q, readDshPresetEnglishConfig as r, DEFAULT_CHAT_CONFIG as s };
+//# sourceMappingURL=insight-config.js-BwcV3Bct.js.map