@konneal/engine 0.2.46 → 0.2.48

package/dist/{ask-6QPD3QA5.js → ask-KL7XUELS.js}

@@ -1,7 +1,7 @@
 import {
   handleAsk
-} from "./chunk-SE67PTJ6.js";
-import "./chunk-N2UOENDY.js";
+} from "./chunk-SONICKNY.js";
+import "./chunk-IUMHKBOY.js";
 import "./chunk-R2V3X6SQ.js";
 import "./chunk-A3QHHUN5.js";
 import "./chunk-4GJGBGJK.js";

package/dist/attachments.d.ts

@@ -0,0 +1,31 @@
+import type { Blobs } from "./ports/blobs.ts";
+import type { StoreQuery } from "./ports/store.ts";
+export interface AttachmentDeps {
+    blobs: Blobs;
+    store: StoreQuery;
+}
+export interface AttachmentRow {
+    id: string;
+    sub: string;
+    mime: string;
+    bytes: number;
+    created_at: string;
+}
+/** Sniff the image type from the magic bytes — the declared type is
+ *  never trusted. Returns null for anything that is not one of the four
+ *  allowed images or that exceeds the cap. */
+export declare function sniffImage(head: Uint8Array, totalBytes: number): string | null;
+/** A data URL (the composer's current shape) → { mime, bytes } or null. */
+export declare function parseDataUrl(dataUrl: string): {
+    mime: string;
+    bytes: Uint8Array;
+} | null;
+export declare function uploadAttachment(deps: AttachmentDeps, sub: string, dataUrl: string): Promise<{
+    id: string;
+} | Response>;
+/** The ownership check every access runs first: the row must exist and
+ *  belong to the caller. A foreign id is indistinguishable from a
+ *  missing one (404 — never a confirmation of someone else's file). */
+export declare function ownedAttachment(deps: AttachmentDeps, sub: string, id: string): Promise<AttachmentRow | null>;
+export declare function readAttachment(deps: AttachmentDeps, sub: string, id: string): Promise<Response | null>;
+export declare function deleteAttachment(deps: AttachmentDeps, sub: string, id: string): Promise<boolean>;

package/dist/{chunk-AKAFLMIB.js → chunk-47VBMM7I.js}

@@ -7,7 +7,7 @@ import {
   sessionFrom,
   telemetry,
   understandQuery
-} from "./chunk-N2UOENDY.js";
+} from "./chunk-IUMHKBOY.js";
 import {
   corsHeaders,
   err,

package/dist/{chunk-N2UOENDY.js → chunk-IUMHKBOY.js}

@@ -22214,6 +22214,22 @@ function cfVectorIndex(index) {
     }
   };
 }
+function cfBlobs(bucket) {
+  const r2 = bucket;
+  return {
+    async get(key) {
+      const obj = await r2.get(key);
+      if (!obj) return null;
+      return { body: obj.body, contentType: obj.httpMetadata?.contentType };
+    },
+    async put(key, value2, contentType) {
+      await r2.put(key, value2, contentType ? { httpMetadata: { contentType } } : void 0);
+    },
+    async delete(key) {
+      await r2.delete(key);
+    }
+  };
+}
 function cfStore(db) {
   return db;
 }
@@ -24618,6 +24634,7 @@ export {
   parseAppliedContext,
   contextNote,
   syntheticUnderstanding,
+  cfBlobs,
   portModelRunner,
   portStore,
   promptVars,

package/dist/{chunk-SE67PTJ6.js → chunk-SONICKNY.js}

@@ -35,7 +35,7 @@ import {
   syntheticUnderstanding,
   telemetry,
   understandQuery
-} from "./chunk-N2UOENDY.js";
+} from "./chunk-IUMHKBOY.js";
 import {
   corsHeaders,
   err,

package/dist/env.d.ts

@@ -20,6 +20,7 @@ export interface Env {
     ASSETS: Fetcher;
     INDEX_VERSION: string;
     UNIT_ASSETS: R2Bucket;
+    CHAT_UPLOADS: R2Bucket;
     ANON_DAY_ASK: string;
     ANON_DAY_SEARCH: string;
     KEY_DAY_ASK_DEFAULT: string;

package/dist/openapi-surface.gen.d.ts

@@ -3,7 +3,7 @@ export interface OpenApiRoute {
     pattern: string;
     operationId: string;
 }
-export type OpenApiOperationId = "askAnonymous" | "askKeyed" | "search" | "searchKeyed" | "absence" | "absenceKeyed" | "verify" | "verifyKeyed" | "research" | "researchKeyed" | "mcp" | "datasets" | "keyUsage" | "health" | "listConversations" | "createConversation" | "getConversation" | "renameConversation" | "deleteConversation" | "appendMessage" | "shareConversation" | "getShared" | "listMemories" | "createMemory" | "deleteMemory" | "listProjects" | "createProject" | "deleteProject" | "listProjectFiles" | "attachProjectFile" | "detachProjectFile" | "laneQuery" | "laneKeyed" | "feedback" | "adminEnrich" | "adminEnrichAlias" | "adminSection" | "adminSectionAlias" | "adminVectors" | "adminCaption" | "adminJudge" | "adminJudgeAlias" | "adminRevokeKey" | "authMe" | "authLogin" | "authCallback" | "authLogout" | "authLogoutLink" | "adminStats" | "adminListKeys" | "adminCreateKey";
+export type OpenApiOperationId = "askAnonymous" | "askKeyed" | "search" | "searchKeyed" | "absence" | "absenceKeyed" | "verify" | "verifyKeyed" | "research" | "researchKeyed" | "mcp" | "datasets" | "keyUsage" | "health" | "listConversations" | "createConversation" | "getConversation" | "renameConversation" | "deleteConversation" | "appendMessage" | "shareConversation" | "getShared" | "uploadAttachment" | "listAttachments" | "getAttachment" | "deleteAttachment" | "listMemories" | "createMemory" | "deleteMemory" | "listProjects" | "createProject" | "deleteProject" | "listProjectFiles" | "attachProjectFile" | "detachProjectFile" | "laneQuery" | "laneKeyed" | "feedback" | "adminEnrich" | "adminEnrichAlias" | "adminSection" | "adminSectionAlias" | "adminVectors" | "adminCaption" | "adminJudge" | "adminJudgeAlias" | "adminRevokeKey" | "authMe" | "authLogin" | "authCallback" | "authLogout" | "authLogoutLink" | "adminStats" | "adminListKeys" | "adminCreateKey";
 export declare const OPENAPI_SURFACE: readonly (Omit<OpenApiRoute, "operationId"> & {
     operationId: OpenApiOperationId;
 })[];

package/dist/openapi-types.d.ts

@@ -368,6 +368,51 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/attachments": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List the member's attachments */
+        get: operations["listAttachments"];
+        put?: never;
+        /**
+         * Upload an image attachment
+         * @description Stores a member-uploaded image (PNG, JPEG, WebP or GIF, at most 4 MB) and returns its identifier. The attachment persists until the member deletes it. The content is verified from its bytes, never from a declared type. The body carries the image as a data URL — the same shape the composer produces.
+         */
+        post: operations["uploadAttachment"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/attachments/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Read one attachment's image
+         * @description Streams the stored image. The response is 404 for a foreign identifier — ownership is checked on every fetch, and a file belonging to another account is indistinguishable from a missing one.
+         */
+        get: operations["getAttachment"];
+        put?: never;
+        post?: never;
+        /**
+         * Delete an attachment
+         * @description Removes the stored object and its record. Stored until deleted — and this deletes it.
+         */
+        delete: operations["deleteAttachment"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/memories": {
         parameters: {
             query?: never;
@@ -1479,6 +1524,110 @@ export interface operations {
             };
         };
     };
+    listAttachments: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The attachment identifiers, newest first. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    uploadAttachment: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description The image as a data URL. */
+                    data_url: string;
+                };
+            };
+        };
+        responses: {
+            /** @description The attachment's identifier. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The content is not an allowed image, or exceeds the size cap. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    getAttachment: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The image bytes. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description No such attachment owned by the caller. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    deleteAttachment: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Deleted. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description No such attachment owned by the caller. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     listMemories: {
         parameters: {
             query?: never;

package/dist/{search-QZDQVB57.js → search-NTQVSSAE.js}

@@ -1,7 +1,7 @@
 import {
   handleSearch
-} from "./chunk-AKAFLMIB.js";
-import "./chunk-N2UOENDY.js";
+} from "./chunk-47VBMM7I.js";
+import "./chunk-IUMHKBOY.js";
 import "./chunk-R2V3X6SQ.js";
 import "./chunk-A3QHHUN5.js";
 import "./chunk-4GJGBGJK.js";

package/dist/worker_public/src/index.js

@@ -1,6 +1,6 @@
 import {
   handleSearch
-} from "../../chunk-AKAFLMIB.js";
+} from "../../chunk-47VBMM7I.js";
 import {
   bindModelNode,
   checkQuoteAnchors,
@@ -9,9 +9,10 @@ import {
   modelGroundingBlock,
   scoreJudge,
   standardForDocNumber
-} from "../../chunk-SE67PTJ6.js";
+} from "../../chunk-SONICKNY.js";
 import {
   buildMessages,
+  cfBlobs,
   citations,
   editionNote,
   embed,
@@ -35,7 +36,7 @@ import {
   sessionFrom,
   telemetry,
   understandQuery
-} from "../../chunk-N2UOENDY.js";
+} from "../../chunk-IUMHKBOY.js";
 import {
   authenticate,
   corsHeaders,
@@ -936,6 +937,64 @@ ${recent.map((h, n) => `[${n + 1}] ${h.metadata.docidentifier ?? ""} \xA7${h.met
   return out;
 }
 
+// workers/worker_public/src/attachments.ts
+var MAX_BYTES = 4e6;
+var ALLOWED = {
+  "image/png": "png",
+  "image/jpeg": "jpg",
+  "image/webp": "webp",
+  "image/gif": "gif"
+};
+function sniffImage(head, totalBytes) {
+  if (totalBytes > MAX_BYTES || totalBytes < 12) return null;
+  if (head[0] === 137 && head[1] === 80 && head[2] === 78 && head[3] === 71) return "image/png";
+  if (head[0] === 255 && head[1] === 216) return "image/jpeg";
+  if (head.length >= 12 && head[8] === 87 && head[9] === 69 && head[10] === 66 && head[11] === 80) return "image/webp";
+  if (head[0] === 71 && head[1] === 73 && head[2] === 70) return "image/gif";
+  return null;
+}
+function parseDataUrl(dataUrl) {
+  const m = /^data:(image\/[a-z+]+);base64,([\s\S]+)$/.exec(dataUrl);
+  if (!m) return null;
+  const raw = atob(m[2]);
+  const bytes = new Uint8Array(raw.length);
+  for (let i = 0; i < raw.length; i++) bytes[i] = raw.charCodeAt(i);
+  const mime = ALLOWED[m[1]] ? m[1] : sniffImage(bytes.subarray(0, 12), bytes.length);
+  if (!mime || bytes.length > MAX_BYTES) return null;
+  return { mime, bytes };
+}
+async function uploadAttachment(deps, sub, dataUrl) {
+  const parsed = parseDataUrl(dataUrl);
+  if (!parsed) {
+    return new Response(JSON.stringify({ error: { code: "invalid_input", message: "A PNG, JPEG, WebP or GIF image of at most 4 MB is required" } }), { status: 400, headers: { "content-type": "application/json" } });
+  }
+  const id = crypto.randomUUID();
+  const key = `att/${sub}/${id}`;
+  await deps.blobs.put(key, parsed.bytes.buffer, parsed.mime);
+  await deps.store.prepare("INSERT INTO attachments (id, sub, mime, bytes, r2_key) VALUES (?1,?2,?3,?4,?5)").bind(id, sub, parsed.mime, parsed.bytes.length, key).run();
+  return { id };
+}
+async function ownedAttachment(deps, sub, id) {
+  const row = await deps.store.prepare("SELECT id, sub, mime, bytes, created_at FROM attachments WHERE id = ?1 AND sub = ?2").bind(id, sub).first();
+  return row ?? null;
+}
+async function readAttachment(deps, sub, id) {
+  const row = await ownedAttachment(deps, sub, id);
+  if (!row) return null;
+  const obj = await deps.blobs.get(`att/${row.sub}/${row.id}`);
+  if (!obj) return null;
+  return new Response(obj.body, {
+    headers: { "content-type": obj.contentType ?? row.mime, "cache-control": "private, max-age=86400" }
+  });
+}
+async function deleteAttachment(deps, sub, id) {
+  const row = await ownedAttachment(deps, sub, id);
+  if (!row) return false;
+  await deps.blobs.delete(`att/${sub}/${id}`);
+  await deps.store.prepare("DELETE FROM attachments WHERE id = ?1 AND sub = ?2").bind(id, sub).run();
+  return true;
+}
+
 // workers/worker_public/src/mcp-proto.ts
 var PROTOCOL_VERSION = "2025-06-18";
 var TOOLS = [
@@ -999,7 +1058,7 @@ async function handleMcp(env, ctx, req, tier, key) {
       // stream:false forces the JSON lane (anon defaults to SSE)
       body: JSON.stringify({ ...args, stream: false })
     });
-    const res = name === "ask" ? await (await import("../../ask-6QPD3QA5.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-QZDQVB57.js")).handleSearch(env, ctx, inner, tier, key);
+    const res = name === "ask" ? await (await import("../../ask-KL7XUELS.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-NTQVSSAE.js")).handleSearch(env, ctx, inner, tier, key);
     return res.json().catch(() => ({ error: { message: "tool transport failed", status: res.status } }));
   });
   if (out.ok && "accepted" in out) return new Response(null, { status: 202 });
@@ -1149,6 +1208,26 @@ var OPENAPI_SURFACE = [
     "pattern": "/api/shared/:slug",
     "operationId": "getShared"
   },
+  {
+    "method": "POST",
+    "pattern": "/api/attachments",
+    "operationId": "uploadAttachment"
+  },
+  {
+    "method": "GET",
+    "pattern": "/api/attachments",
+    "operationId": "listAttachments"
+  },
+  {
+    "method": "GET",
+    "pattern": "/api/attachments/:id",
+    "operationId": "getAttachment"
+  },
+  {
+    "method": "DELETE",
+    "pattern": "/api/attachments/:id",
+    "operationId": "deleteAttachment"
+  },
   {
     "method": "GET",
     "pattern": "/api/memories",
@@ -1325,6 +1404,36 @@ function opWriteRefused(c, who) {
   }
   return null;
 }
+async function attachmentsUploadRoute(c) {
+  const session = await sessionFrom(c.req, c.env);
+  if (!session) return withCors(err(401, "unauthorized", "Sign in to store attachments"), corsHeaders(c.req));
+  const deps = { blobs: cfBlobs(c.env.CHAT_UPLOADS), store: c.env.DB };
+  const body = await readJson(c.req);
+  const out = await uploadAttachment(deps, session.sub, String(body?.data_url ?? ""));
+  if (out instanceof Response) return withCors(out, corsHeaders(c.req));
+  return withCors(json({ id: out.id }, 201), corsHeaders(c.req));
+}
+async function attachmentsListRoute(c) {
+  const session = await sessionFrom(c.req, c.env);
+  if (!session) return withCors(err(401, "unauthorized", "Sign in to list attachments"), corsHeaders(c.req));
+  const rows = await c.env.DB.prepare("SELECT id, mime, bytes, created_at FROM attachments WHERE sub = ?1 ORDER BY created_at DESC LIMIT 200").bind(session.sub).all();
+  return withCors(json({ attachments: rows.results ?? [] }), corsHeaders(c.req));
+}
+async function attachmentsGetRoute(c) {
+  const session = await sessionFrom(c.req, c.env);
+  if (!session) return err(404, "not_found", "No such attachment");
+  const deps = { blobs: cfBlobs(c.env.CHAT_UPLOADS), store: c.env.DB };
+  const out = await readAttachment(deps, session.sub, c.params.id);
+  return out ?? err(404, "not_found", "No such attachment");
+}
+async function attachmentsDeleteRoute(c) {
+  const session = await sessionFrom(c.req, c.env);
+  if (!session) return withCors(err(401, "unauthorized", "Sign in to manage attachments"), corsHeaders(c.req));
+  const deps = { blobs: cfBlobs(c.env.CHAT_UPLOADS), store: c.env.DB };
+  const gone = await deleteAttachment(deps, session.sub, c.params.id);
+  if (!gone) return withCors(err(404, "not_found", "No such attachment"), corsHeaders(c.req));
+  return withCors(json({ ok: true }), corsHeaders(c.req));
+}
 async function memoriesRoute(c) {
   const who = await opIdentity(c, "Sign in to use memory files");
   if (who instanceof Response) return withCors(who, corsHeaders(c.req));
@@ -1643,7 +1752,8 @@ async function feedbackRoute(c) {
   if (!/^[a-f0-9]{64}$/.test(queryHash) || ![1, -1].includes(rating)) {
     return withCors(err(400, "invalid_input", "query_hash and rating (1 or -1) are required"), corsHeaders(c.req));
   }
-  await c.env.DB.prepare("INSERT INTO feedback (query_hash, rating, ts) VALUES (?1,?2,?3)").bind(queryHash, rating, (/* @__PURE__ */ new Date()).toISOString()).run();
+  const note = typeof body?.note === "string" ? body.note.trim().slice(0, 280) : "";
+  await c.env.DB.prepare("INSERT INTO feedback (query_hash, rating, ts, note) VALUES (?1,?2,?3,?4)").bind(queryHash, rating, (/* @__PURE__ */ new Date()).toISOString(), note || null).run();
   return json({ ok: true, ...corsHeaders(c.req) });
 }
 async function unitAssetRoute(c) {
@@ -1741,6 +1851,10 @@ var OPENAPI_HANDLERS = {
   appendMessage: appendMessageRoute,
   shareConversation: shareRoute,
   getShared: getSharedRoute,
+  uploadAttachment: attachmentsUploadRoute,
+  listAttachments: attachmentsListRoute,
+  getAttachment: attachmentsGetRoute,
+  deleteAttachment: attachmentsDeleteRoute,
   listMemories: memoriesRoute,
   createMemory: memoriesRoute,
   deleteMemory: memoriesRoute,

package/package.json

@@ -27,7 +27,7 @@
     "playwright": "^1.62.1",
     "yaml": "^2.9.1"
   },
-  "version": "0.2.46",
+  "version": "0.2.48",
   "description": "The Konneal engine: the publisher-agnostic build pipeline and API plane for standards intelligence (retrieval, answer contract, verdicts, evaluation).",
   "license": "BSD-3-Clause",
   "type": "module",

package/workers/worker_public/migrations/0016_feedback_note.sql

@@ -0,0 +1,3 @@
+-- the feedback vote's optional reason (the 👎 reason chips) — read by the
+-- triage clustering, never by the answer path
+ALTER TABLE feedback ADD COLUMN note TEXT;

package/workers/worker_public/migrations/0017_attachments.sql

@@ -0,0 +1,12 @@
+-- conversation attachments (TODO.new-era/8 Tier 1): a member's uploaded
+-- images persist until they delete them; the R2 object key embeds the
+-- owner's subject so the storage partition is the isolation
+CREATE TABLE IF NOT EXISTS attachments (
+    id TEXT PRIMARY KEY,
+    sub TEXT NOT NULL,
+    mime TEXT NOT NULL,
+    bytes INTEGER NOT NULL,
+    r2_key TEXT NOT NULL,
+    created_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+CREATE INDEX IF NOT EXISTS idx_attachments_sub ON attachments (sub);

package/workers/worker_public/openapi.yaml

@@ -545,6 +545,75 @@ paths:
       responses:
         '200':
           description: The shared conversation, without member identity.
+  /api/attachments:
+    post:
+      tags: [Attachments]
+      summary: Upload an image attachment
+      description: >-
+        Stores a member-uploaded image (PNG, JPEG, WebP or GIF, at most
+        4 MB) and returns its identifier. The attachment persists until
+        the member deletes it. The content is verified from its bytes,
+        never from a declared type. The body carries the image as a data
+        URL — the same shape the composer produces.
+      operationId: uploadAttachment
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [data_url]
+              properties:
+                data_url:
+                  type: string
+                  description: The image as a data URL.
+      responses:
+        '201':
+          description: The attachment's identifier.
+        '400':
+          description: The content is not an allowed image, or exceeds the size cap.
+    get:
+      tags: [Attachments]
+      summary: List the member's attachments
+      operationId: listAttachments
+      responses:
+        '200':
+          description: The attachment identifiers, newest first.
+  /api/attachments/{id}:
+    get:
+      tags: [Attachments]
+      summary: Read one attachment's image
+      description: >-
+        Streams the stored image. The response is 404 for a foreign
+        identifier — ownership is checked on every fetch, and a file
+        belonging to another account is indistinguishable from a missing
+        one.
+      operationId: getAttachment
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema: { type: string }
+      responses:
+        '200':
+          description: The image bytes.
+        '404':
+          description: No such attachment owned by the caller.
+    delete:
+      tags: [Attachments]
+      summary: Delete an attachment
+      description: Removes the stored object and its record. Stored until deleted — and this deletes it.
+      operationId: deleteAttachment
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema: { type: string }
+      responses:
+        '200':
+          description: Deleted.
+        '404':
+          description: No such attachment owned by the caller.
   /api/memories:
     get:
       tags: [Memory]

package/workers/worker_public/schema.sql

@@ -248,3 +248,13 @@ CREATE TABLE IF NOT EXISTS model_plane_meta (
   node_count  INTEGER NOT NULL,
   indexed_at  TEXT NOT NULL          -- when the index landed (operational truth)
 );
+
+CREATE TABLE IF NOT EXISTS attachments (
+    id TEXT PRIMARY KEY,
+    sub TEXT NOT NULL,
+    mime TEXT NOT NULL,
+    bytes INTEGER NOT NULL,
+    r2_key TEXT NOT NULL,
+    created_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+CREATE INDEX IF NOT EXISTS idx_attachments_sub ON attachments (sub);

package/workers/worker_public/src/attachments.ts

@@ -0,0 +1,102 @@
+// Conversation attachments (TODO.new-era/8, Tier 1): a member's uploaded
+// image persists until they delete it. The guarantees, in order:
+//
+//   1. NO CROSS-ACCOUNT READS — the R2 object key embeds the owner's
+//      subject (`att/{sub}/{id}`), and every route re-checks the D1
+//      row's ownership against the caller before touching storage. A
+//      logic slip cannot cross accounts, because the key-space itself
+//      is partitioned.
+//   2. Stored until deleted — by the owner, or by the cascade when
+//      their conversation is deleted. No TTL quietly eats member files.
+//   3. The content is verified, not the extension: the magic bytes
+//      decide what the file is.
+//
+// Storage rides the Blobs port and the row rides the StoreQuery port —
+// the module never names a provider binding (the ports purity lint).
+
+import type { Blobs } from "./ports/blobs.ts";
+import type { StoreQuery } from "./ports/store.ts";
+
+export interface AttachmentDeps {
+  blobs: Blobs;
+  store: StoreQuery;
+}
+
+const MAX_BYTES = 4_000_000;
+const ALLOWED: Record<string, string> = {
+  "image/png": "png",
+  "image/jpeg": "jpg",
+  "image/webp": "webp",
+  "image/gif": "gif",
+};
+
+export interface AttachmentRow {
+  id: string;
+  sub: string;
+  mime: string;
+  bytes: number;
+  created_at: string;
+}
+
+/** Sniff the image type from the magic bytes — the declared type is
+ *  never trusted. Returns null for anything that is not one of the four
+ *  allowed images or that exceeds the cap. */
+export function sniffImage(head: Uint8Array, totalBytes: number): string | null {
+  if (totalBytes > MAX_BYTES || totalBytes < 12) return null;
+  if (head[0] === 0x89 && head[1] === 0x50 && head[2] === 0x4e && head[3] === 0x47) return "image/png";
+  if (head[0] === 0xff && head[1] === 0xd8) return "image/jpeg";
+  if (head.length >= 12 && head[8] === 0x57 && head[9] === 0x45 && head[10] === 0x42 && head[11] === 0x50) return "image/webp";
+  if (head[0] === 0x47 && head[1] === 0x49 && head[2] === 0x46) return "image/gif";
+  return null;
+}
+
+/** A data URL (the composer's current shape) → { mime, bytes } or null. */
+export function parseDataUrl(dataUrl: string): { mime: string; bytes: Uint8Array } | null {
+  const m = /^data:(image\/[a-z+]+);base64,([\s\S]+)$/.exec(dataUrl);
+  if (!m) return null;
+  const raw = atob(m[2]);
+  const bytes = new Uint8Array(raw.length);
+  for (let i = 0; i < raw.length; i++) bytes[i] = raw.charCodeAt(i);
+  const mime = ALLOWED[m[1]] ? m[1] : sniffImage(bytes.subarray(0, 12), bytes.length);
+  if (!mime || bytes.length > MAX_BYTES) return null;
+  return { mime, bytes };
+}
+
+export async function uploadAttachment(deps: AttachmentDeps, sub: string, dataUrl: string): Promise<{ id: string } | Response> {
+  const parsed = parseDataUrl(dataUrl);
+  if (!parsed) {
+    return new Response(JSON.stringify({ error: { code: "invalid_input", message: "A PNG, JPEG, WebP or GIF image of at most 4 MB is required" } }), { status: 400, headers: { "content-type": "application/json" } });
+  }
+  const id = crypto.randomUUID();
+  // the key embeds the owner — the storage partition IS the isolation
+  const key = `att/${sub}/${id}`;
+  await deps.blobs.put(key, parsed.bytes.buffer as ArrayBuffer, parsed.mime);
+  await deps.store.prepare("INSERT INTO attachments (id, sub, mime, bytes, r2_key) VALUES (?1,?2,?3,?4,?5)").bind(id, sub, parsed.mime, parsed.bytes.length, key).run();
+  return { id };
+}
+
+/** The ownership check every access runs first: the row must exist and
+ *  belong to the caller. A foreign id is indistinguishable from a
+ *  missing one (404 — never a confirmation of someone else's file). */
+export async function ownedAttachment(deps: AttachmentDeps, sub: string, id: string): Promise<AttachmentRow | null> {
+  const row = await deps.store.prepare("SELECT id, sub, mime, bytes, created_at FROM attachments WHERE id = ?1 AND sub = ?2").bind(id, sub).first();
+  return (row as AttachmentRow) ?? null;
+}
+
+export async function readAttachment(deps: AttachmentDeps, sub: string, id: string): Promise<Response | null> {
+  const row = await ownedAttachment(deps, sub, id);
+  if (!row) return null;
+  const obj = await deps.blobs.get(`att/${row.sub}/${row.id}`);
+  if (!obj) return null;
+  return new Response(obj.body, {
+    headers: { "content-type": obj.contentType ?? row.mime, "cache-control": "private, max-age=86400" },
+  });
+}
+
+export async function deleteAttachment(deps: AttachmentDeps, sub: string, id: string): Promise<boolean> {
+  const row = await ownedAttachment(deps, sub, id);
+  if (!row) return false;
+  await deps.blobs.delete(`att/${sub}/${id}`);
+  await deps.store.prepare("DELETE FROM attachments WHERE id = ?1 AND sub = ?2").bind(id, sub).run();
+  return true;
+}

package/workers/worker_public/src/env.ts

@@ -22,6 +22,7 @@ export interface Env {
   ASSETS: Fetcher;
   INDEX_VERSION: string;
   UNIT_ASSETS: R2Bucket;
+  CHAT_UPLOADS: R2Bucket;
   ANON_DAY_ASK: string;
   ANON_DAY_SEARCH: string;
   KEY_DAY_ASK_DEFAULT: string;

package/workers/worker_public/src/index.ts

@@ -24,6 +24,8 @@ import { json, err, corsHeaders, withCors, readJson, authenticate, type ApiKey }
 import { handleSearch } from "./search";
 import { handleEnrich, handleSectionUnit, handleCaption, handleVectors, handleJudge, handleCreateKey, handleListKeys, handleRevokeKey, handleKeyUsage } from "./admin";
 import { handleResearch } from "./research";
+import { uploadAttachment, readAttachment, deleteAttachment, type AttachmentDeps } from "./attachments";
+import { cfBlobs } from "./ports/cloudflare/adapters";
 import { handleAsk } from "./ask";
 import { handleMcp } from "./mcp";
 
@@ -80,6 +82,42 @@ function opWriteRefused(c: RouteContext, who: { write: boolean } | Response): Re
   return null;
 }
 
+async function attachmentsUploadRoute(c: RouteContext): Promise<Response> {
+  const session = await sessionFrom(c.req, c.env as any);
+  if (!session) return withCors(err(401, "unauthorized", "Sign in to store attachments"), corsHeaders(c.req));
+  const deps: AttachmentDeps = { blobs: cfBlobs(c.env.CHAT_UPLOADS), store: c.env.DB };
+  const body = await readJson(c.req);
+  const out = await uploadAttachment(deps, session.sub, String(body?.data_url ?? ""));
+  if (out instanceof Response) return withCors(out, corsHeaders(c.req));
+  return withCors(json({ id: out.id }, 201), corsHeaders(c.req));
+}
+
+async function attachmentsListRoute(c: RouteContext): Promise<Response> {
+  const session = await sessionFrom(c.req, c.env as any);
+  if (!session) return withCors(err(401, "unauthorized", "Sign in to list attachments"), corsHeaders(c.req));
+  const rows = await c.env.DB.prepare("SELECT id, mime, bytes, created_at FROM attachments WHERE sub = ?1 ORDER BY created_at DESC LIMIT 200")
+    .bind(session.sub)
+    .all();
+  return withCors(json({ attachments: rows.results ?? [] }), corsHeaders(c.req));
+}
+
+async function attachmentsGetRoute(c: RouteContext): Promise<Response> {
+  const session = await sessionFrom(c.req, c.env as any);
+  if (!session) return err(404, "not_found", "No such attachment");
+  const deps: AttachmentDeps = { blobs: cfBlobs(c.env.CHAT_UPLOADS), store: c.env.DB };
+  const out = await readAttachment(deps, session.sub, c.params.id!);
+  return out ?? err(404, "not_found", "No such attachment");
+}
+
+async function attachmentsDeleteRoute(c: RouteContext): Promise<Response> {
+  const session = await sessionFrom(c.req, c.env as any);
+  if (!session) return withCors(err(401, "unauthorized", "Sign in to manage attachments"), corsHeaders(c.req));
+  const deps: AttachmentDeps = { blobs: cfBlobs(c.env.CHAT_UPLOADS), store: c.env.DB };
+  const gone = await deleteAttachment(deps, session.sub, c.params.id!);
+  if (!gone) return withCors(err(404, "not_found", "No such attachment"), corsHeaders(c.req));
+  return withCors(json({ ok: true }), corsHeaders(c.req));
+}
+
 async function memoriesRoute(c: RouteContext): Promise<Response> {
   const who = await opIdentity(c, "Sign in to use memory files");
   if (who instanceof Response) return withCors(who, corsHeaders(c.req));
@@ -459,8 +497,11 @@ async function feedbackRoute(c: RouteContext): Promise<Response> {
   if (!/^[a-f0-9]{64}$/.test(queryHash) || ![1, -1].includes(rating)) {
     return withCors(err(400, "invalid_input", "query_hash and rating (1 or -1) are required"), corsHeaders(c.req));
   }
-  await c.env.DB.prepare("INSERT INTO feedback (query_hash, rating, ts) VALUES (?1,?2,?3)")
-    .bind(queryHash, rating, new Date().toISOString())
+  // an optional free-text note (the reason chips) - capped, stored with
+  // the vote, and read by the triage script's clustering
+  const note = typeof body?.note === "string" ? body.note.trim().slice(0, 280) : "";
+  await c.env.DB.prepare("INSERT INTO feedback (query_hash, rating, ts, note) VALUES (?1,?2,?3,?4)")
+    .bind(queryHash, rating, new Date().toISOString(), note || null)
     .run();
   return json({ ok: true, ...corsHeaders(c.req) });
 }
@@ -580,6 +621,10 @@ const OPENAPI_HANDLERS: Record<OpenApiOperationId, RouteHandler> = {
   appendMessage: appendMessageRoute,
   shareConversation: shareRoute,
   getShared: getSharedRoute,
+  uploadAttachment: attachmentsUploadRoute,
+  listAttachments: attachmentsListRoute,
+  getAttachment: attachmentsGetRoute,
+  deleteAttachment: attachmentsDeleteRoute,
   listMemories: memoriesRoute,
   createMemory: memoriesRoute,
   deleteMemory: memoriesRoute,

package/workers/worker_public/src/openapi-surface.gen.ts

@@ -29,6 +29,10 @@ export type OpenApiOperationId =
   | "appendMessage"
   | "shareConversation"
   | "getShared"
+  | "uploadAttachment"
+  | "listAttachments"
+  | "getAttachment"
+  | "deleteAttachment"
   | "listMemories"
   | "createMemory"
   | "deleteMemory"
@@ -170,6 +174,26 @@ export const OPENAPI_SURFACE: readonly (Omit<OpenApiRoute, "operationId"> & { op
     "pattern": "/api/shared/:slug",
     "operationId": "getShared"
   },
+  {
+    "method": "POST",
+    "pattern": "/api/attachments",
+    "operationId": "uploadAttachment"
+  },
+  {
+    "method": "GET",
+    "pattern": "/api/attachments",
+    "operationId": "listAttachments"
+  },
+  {
+    "method": "GET",
+    "pattern": "/api/attachments/:id",
+    "operationId": "getAttachment"
+  },
+  {
+    "method": "DELETE",
+    "pattern": "/api/attachments/:id",
+    "operationId": "deleteAttachment"
+  },
   {
     "method": "GET",
     "pattern": "/api/memories",

package/workers/worker_public/src/ports/blobs.ts

@@ -4,4 +4,5 @@
 export interface Blobs {
   get(key: string): Promise<{ body: ReadableStream | null; contentType?: string } | null>;
   put(key: string, value: string | ReadableStream | ArrayBuffer, contentType?: string): Promise<void>;
+  delete(key: string): Promise<void>;
 }

package/workers/worker_public/src/ports/cloudflare/adapters.ts

@@ -164,6 +164,9 @@ export function cfBlobs(bucket: unknown): Blobs {
     async put(key, value, contentType) {
       await r2.put(key, value, contentType ? { httpMetadata: { contentType } } : undefined);
     },
+    async delete(key) {
+      await r2.delete(key);
+    },
   };
 }