@konneal/engine 0.2.50 → 0.2.52

package/dist/ask-27TMC7PV.js

@@ -0,0 +1,12 @@
+import {
+  handleAsk
+} from "./chunk-SU4FO7TN.js";
+import "./chunk-TPV5GPY2.js";
+import "./chunk-SPKPH54J.js";
+import "./chunk-A3QHHUN5.js";
+import "./chunk-LVZTWUVJ.js";
+import "./chunk-2PCUAJJO.js";
+import "./chunk-3FYJM7LH.js";
+export {
+  handleAsk
+};

package/dist/{chunk-Z24IAKB6.js → chunk-2PCUAJJO.js}

@@ -31,6 +31,11 @@ var MODELS = {
   research: "@cf/zai-org/glm-5.3-flash"
 };
 var LIMITS = {
+  /** Attachment quotas (TODO.new-era/8): per-member ceilings so a member's
+   *  uploads cannot grow without bound — count AND total bytes, checked
+   *  before every upload writes. */
+  attachMaxCount: 50,
+  attachMaxTotalBytes: 50 * 1024 * 1024,
   // input sizes: generous — real questions can be long (pasted scenarios,
   // multi-part asks). The context BUDGET is the real governor of what the
   // model sees; these caps only bound abuse.

package/dist/{chunk-DMIOBGQU.js → chunk-FLNX4O7C.js}

@@ -7,24 +7,24 @@ import {
   sessionFrom,
   telemetry,
   understandQuery
-} from "./chunk-VVLNUHW2.js";
+} from "./chunk-TPV5GPY2.js";
 import {
   corsHeaders,
   err,
   json,
   readJson,
   validateQuery
-} from "./chunk-JWTIPQ4L.js";
+} from "./chunk-SPKPH54J.js";
 import {
   entitlementScope,
   standardKeysFrom
-} from "./chunk-O6VZIDPW.js";
+} from "./chunk-LVZTWUVJ.js";
 import {
   LIMITS,
   MODELS,
   num,
   sha256Hex
-} from "./chunk-Z24IAKB6.js";
+} from "./chunk-2PCUAJJO.js";
 
 // workers/worker_public/src/search.ts
 async function handleSearch(env, ctx, req, tier, key) {

package/dist/{chunk-O6VZIDPW.js → chunk-LVZTWUVJ.js}

@@ -1,7 +1,7 @@
 import {
   DATASETS,
   datasetAllowed
-} from "./chunk-Z24IAKB6.js";
+} from "./chunk-2PCUAJJO.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";

package/dist/{chunk-JWTIPQ4L.js → chunk-SPKPH54J.js}

@@ -1,7 +1,7 @@
 import {
   LIMITS,
   sha256Hex
-} from "./chunk-Z24IAKB6.js";
+} from "./chunk-2PCUAJJO.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";

package/dist/{chunk-HT2MDJ5S.js → chunk-SU4FO7TN.js}

@@ -35,14 +35,14 @@ import {
   syntheticUnderstanding,
   telemetry,
   understandQuery
-} from "./chunk-VVLNUHW2.js";
+} from "./chunk-TPV5GPY2.js";
 import {
   corsHeaders,
   err,
   json,
   readJson,
   validateQuery
-} from "./chunk-JWTIPQ4L.js";
+} from "./chunk-SPKPH54J.js";
 import {
   canonicalRefusal,
   refusalAnswer
@@ -52,7 +52,7 @@ import {
   requestSalt,
   resolveRequestScope,
   standardKeysFrom
-} from "./chunk-O6VZIDPW.js";
+} from "./chunk-LVZTWUVJ.js";
 import {
   LIMITS,
   MODELS,
@@ -63,7 +63,7 @@ import {
   requestEffort,
   roleModel,
   sha256Hex
-} from "./chunk-Z24IAKB6.js";
+} from "./chunk-2PCUAJJO.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";

package/dist/{chunk-VVLNUHW2.js → chunk-TPV5GPY2.js}

@@ -1,7 +1,7 @@
 import {
   bubbleConfirmPage,
   isAllowedBubbleOrigin
-} from "./chunk-JWTIPQ4L.js";
+} from "./chunk-SPKPH54J.js";
 import {
   DATASETS,
   LIMITS,
@@ -12,7 +12,7 @@ import {
   processExpansion,
   sha256Hex,
   today
-} from "./chunk-Z24IAKB6.js";
+} from "./chunk-2PCUAJJO.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";

package/dist/config.d.ts

@@ -12,6 +12,11 @@ export declare const MODELS: {
     readonly research: "@cf/zai-org/glm-5.3-flash";
 };
 export declare const LIMITS: {
+    /** Attachment quotas (TODO.new-era/8): per-member ceilings so a member's
+     *  uploads cannot grow without bound — count AND total bytes, checked
+     *  before every upload writes. */
+    readonly attachMaxCount: 50;
+    readonly attachMaxTotalBytes: number;
     readonly maxInputChars: 8000;
     readonly maxOutputTokens: 3072;
     readonly retrieveK: 50;

package/dist/search-PBOODCMQ.js

@@ -0,0 +1,12 @@
+import {
+  handleSearch
+} from "./chunk-FLNX4O7C.js";
+import "./chunk-TPV5GPY2.js";
+import "./chunk-SPKPH54J.js";
+import "./chunk-A3QHHUN5.js";
+import "./chunk-LVZTWUVJ.js";
+import "./chunk-2PCUAJJO.js";
+import "./chunk-3FYJM7LH.js";
+export {
+  handleSearch
+};

package/dist/worker_mcp/src/index.js

@@ -1,7 +1,7 @@
 import {
   authenticate
-} from "../../chunk-JWTIPQ4L.js";
-import "../../chunk-Z24IAKB6.js";
+} from "../../chunk-SPKPH54J.js";
+import "../../chunk-2PCUAJJO.js";
 import {
   P,
   setProfile

package/dist/worker_public/src/config.js

@@ -16,7 +16,7 @@ import {
   roleModel,
   sha256Hex,
   today
-} from "../../chunk-Z24IAKB6.js";
+} from "../../chunk-2PCUAJJO.js";
 import "../../chunk-3FYJM7LH.js";
 export {
   DATASETS,

package/dist/worker_public/src/index.js

@@ -1,6 +1,6 @@
 import {
   handleSearch
-} from "../../chunk-DMIOBGQU.js";
+} from "../../chunk-FLNX4O7C.js";
 import {
   bindModelNode,
   checkQuoteAnchors,
@@ -10,7 +10,7 @@ import {
   scoreFaithfulness,
   scoreJudge,
   standardForDocNumber
-} from "../../chunk-HT2MDJ5S.js";
+} from "../../chunk-SU4FO7TN.js";
 import {
   buildMessages,
   cfBlobs,
@@ -37,7 +37,7 @@ import {
   sessionFrom,
   telemetry,
   understandQuery
-} from "../../chunk-VVLNUHW2.js";
+} from "../../chunk-TPV5GPY2.js";
 import {
   authenticate,
   corsHeaders,
@@ -46,14 +46,14 @@ import {
   readJson,
   validateQuery,
   withCors
-} from "../../chunk-JWTIPQ4L.js";
+} from "../../chunk-SPKPH54J.js";
 import {
   canonicalRefusal
 } from "../../chunk-A3QHHUN5.js";
 import {
   entitlementScope,
   standardKeysFrom
-} from "../../chunk-O6VZIDPW.js";
+} from "../../chunk-LVZTWUVJ.js";
 import {
   LIMITS,
   MODELS,
@@ -64,7 +64,7 @@ import {
   roleModel,
   sha256Hex,
   today
-} from "../../chunk-Z24IAKB6.js";
+} from "../../chunk-2PCUAJJO.js";
 import {
   P,
   setProfile
@@ -857,6 +857,13 @@ async function uploadAttachment(deps, sub, dataUrl) {
   if (!parsed) {
     return new Response(JSON.stringify({ error: { code: "invalid_input", message: "A PNG, JPEG, WebP or GIF image of at most 4 MB is required" } }), { status: 400, headers: { "content-type": "application/json" } });
   }
+  const usage = await deps.store.prepare("SELECT COUNT(*) AS n, COALESCE(SUM(bytes), 0) AS total FROM attachments WHERE sub = ?1").bind(sub).first();
+  if ((usage?.n ?? 0) >= LIMITS.attachMaxCount) {
+    return new Response(JSON.stringify({ error: { code: "attachment_count_cap", message: `Attachment limit reached (${LIMITS.attachMaxCount} files). Delete one to upload another.` } }), { status: 409, headers: { "content-type": "application/json" } });
+  }
+  if ((usage?.total ?? 0) + parsed.bytes.length > LIMITS.attachMaxTotalBytes) {
+    return new Response(JSON.stringify({ error: { code: "attachment_bytes_cap", message: `Attachment storage limit reached (${Math.round(LIMITS.attachMaxTotalBytes / 1048576)} MB). Delete an image to upload another.` } }), { status: 409, headers: { "content-type": "application/json" } });
+  }
   const id = crypto.randomUUID();
   const key = `att/${sub}/${id}`;
   await deps.blobs.put(key, parsed.bytes.buffer, parsed.mime);
@@ -947,7 +954,7 @@ async function handleMcp(env, ctx, req, tier, key) {
       // stream:false forces the JSON lane (anon defaults to SSE)
       body: JSON.stringify({ ...args, stream: false })
     });
-    const res = name === "ask" ? await (await import("../../ask-FZA3ZFVB.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-KNB2S2PS.js")).handleSearch(env, ctx, inner, tier, key);
+    const res = name === "ask" ? await (await import("../../ask-27TMC7PV.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-PBOODCMQ.js")).handleSearch(env, ctx, inner, tier, key);
     return res.json().catch(() => ({ error: { message: "tool transport failed", status: res.status } }));
   });
   if (out.ok && "accepted" in out) return new Response(null, { status: 202 });

package/dist/worker_public/src/requestScope.js

@@ -4,8 +4,8 @@ import {
   requestSalt,
   resolveRequestScope,
   standardKeysFrom
-} from "../../chunk-O6VZIDPW.js";
-import "../../chunk-Z24IAKB6.js";
+} from "../../chunk-LVZTWUVJ.js";
+import "../../chunk-2PCUAJJO.js";
 import "../../chunk-3FYJM7LH.js";
 export {
   entitlementScope,

package/package.json

@@ -27,7 +27,7 @@
     "playwright": "^1.62.1",
     "yaml": "^2.9.1"
   },
-  "version": "0.2.50",
+  "version": "0.2.52",
   "description": "The Konneal engine: the publisher-agnostic build pipeline and API plane for standards intelligence (retrieval, answer contract, verdicts, evaluation).",
   "license": "BSD-3-Clause",
   "type": "module",

package/workers/worker_public/openapi.yaml

@@ -14,8 +14,10 @@ info:
     administrator; signed-in members obtain a higher allowance together
     with conversation synchronisation, project memory and research mode.
 servers:
+  - url: https://www.ommisa.org
+    description: Production (the canonical door)
   - url: https://ai.oimlsmart.org
-    description: Production
+    description: The institutional origin — a permanent, method-preserving redirect to the canonical door
 tags:
   - name: Ask
     description: Ask a question and receive a citation-grounded answer.

package/workers/worker_public/src/attachments.ts

@@ -14,6 +14,7 @@
 // Storage rides the Blobs port and the row rides the StoreQuery port —
 // the module never names a provider binding (the ports purity lint).
 
+import { LIMITS } from "./config.ts";
 import type { Blobs } from "./ports/blobs.ts";
 import type { StoreQuery } from "./ports/store.ts";
 
@@ -67,6 +68,18 @@ export async function uploadAttachment(deps: AttachmentDeps, sub: string, dataUr
   if (!parsed) {
     return new Response(JSON.stringify({ error: { code: "invalid_input", message: "A PNG, JPEG, WebP or GIF image of at most 4 MB is required" } }), { status: 400, headers: { "content-type": "application/json" } });
   }
+  // the per-member ceilings: count first, then total bytes — both
+  // checked against the member's own rows before anything writes
+  const usage = await deps.store
+    .prepare("SELECT COUNT(*) AS n, COALESCE(SUM(bytes), 0) AS total FROM attachments WHERE sub = ?1")
+    .bind(sub)
+    .first<{ n: number; total: number }>();
+  if ((usage?.n ?? 0) >= LIMITS.attachMaxCount) {
+    return new Response(JSON.stringify({ error: { code: "attachment_count_cap", message: `Attachment limit reached (${LIMITS.attachMaxCount} files). Delete one to upload another.` } }), { status: 409, headers: { "content-type": "application/json" } });
+  }
+  if ((usage?.total ?? 0) + parsed.bytes.length > LIMITS.attachMaxTotalBytes) {
+    return new Response(JSON.stringify({ error: { code: "attachment_bytes_cap", message: `Attachment storage limit reached (${Math.round(LIMITS.attachMaxTotalBytes / 1048576)} MB). Delete an image to upload another.` } }), { status: 409, headers: { "content-type": "application/json" } });
+  }
   const id = crypto.randomUUID();
   // the key embeds the owner — the storage partition IS the isolation
   const key = `att/${sub}/${id}`;

package/workers/worker_public/src/config.ts

@@ -27,6 +27,12 @@ export const MODELS = {
 } as const;
 
 export const LIMITS = {
+  /** Attachment quotas (TODO.new-era/8): per-member ceilings so a member's
+   *  uploads cannot grow without bound — count AND total bytes, checked
+   *  before every upload writes. */
+  attachMaxCount: 50,
+  attachMaxTotalBytes: 50 * 1024 * 1024,
+
   // input sizes: generous — real questions can be long (pasted scenarios,
   // multi-part asks). The context BUDGET is the real governor of what the
   // model sees; these caps only bound abuse.

package/dist/ask-FZA3ZFVB.js

@@ -1,12 +0,0 @@
-import {
-  handleAsk
-} from "./chunk-HT2MDJ5S.js";
-import "./chunk-VVLNUHW2.js";
-import "./chunk-JWTIPQ4L.js";
-import "./chunk-A3QHHUN5.js";
-import "./chunk-O6VZIDPW.js";
-import "./chunk-Z24IAKB6.js";
-import "./chunk-3FYJM7LH.js";
-export {
-  handleAsk
-};

package/dist/search-KNB2S2PS.js

@@ -1,12 +0,0 @@
-import {
-  handleSearch
-} from "./chunk-DMIOBGQU.js";
-import "./chunk-VVLNUHW2.js";
-import "./chunk-JWTIPQ4L.js";
-import "./chunk-A3QHHUN5.js";
-import "./chunk-O6VZIDPW.js";
-import "./chunk-Z24IAKB6.js";
-import "./chunk-3FYJM7LH.js";
-export {
-  handleSearch
-};