@songsid/agend 2.2.0-beta.2 → 2.2.0-beta.20

package/dist/web-shell-routes.d.ts

@@ -31,6 +31,9 @@ export type ShellRoute = {
 } | {
     panel: "details";
     instance: string;
+} | {
+    panel: "log";
+    instance: string;
 };
 /** What a path is: the app shell (with its route), a malformed shell path (400), or not the shell at all (null). */
 export type ShellMatch = {
@@ -60,4 +63,5 @@ export declare function isWebPageNavigation(path: string): boolean;
 /** The app's client-side paths, for links the server builds (#1386 links, the tour). */
 export declare function chatPath(instance: string): string;
 export declare function viewPath(instance: string): string;
+export declare function logPath(instance: string): string;
 export declare function detailsPath(instance: string): string;

package/dist/web-shell-routes.js

@@ -54,6 +54,12 @@ export function shellRoute(method, path) {
     const fleet = /^\/ui\/fleet\/([^/]+)$/.exec(path);
     if (fleet)
         return FLEET_TABS.includes(fleet[1]) ? { kind: "shell", route: { panel: "fleet", tab: fleet[1] } } : null;
+    // #1218: one instance's Log.
+    const log = /^\/ui\/log\/([^/]+)$/.exec(path);
+    if (log) {
+        const name = decodeSegment(log[1]);
+        return name !== null && isSafeInstanceName(name) ? { kind: "shell", route: { panel: "log", instance: name } } : { kind: "malformed" };
+    }
     const chat = /^\/ui\/chat\/([^/]+)$/.exec(path);
     if (chat) {
         const name = decodeSegment(chat[1]);
@@ -100,6 +106,9 @@ export function chatPath(instance) {
 export function viewPath(instance) {
     return `/view/${encodeURIComponent(instance)}`;
 }
+export function logPath(instance) {
+    return `/ui/log/${encodeURIComponent(instance)}`;
+}
 export function detailsPath(instance) {
     return `/ui/fleet/agent/${encodeURIComponent(instance)}`;
 }

package/dist/web-shell-routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"web-shell-routes.js","sourceRoot":"","sources":["../src/web-shell-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAE7F,uHAAuH;AACvH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,CAAU,CAAC;AAehH,MAAM,yBAAyB,GAAG,0BAA0B,CAAC;AAC7D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,iBAAiB,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;WAC9F,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,2EAA2E;AAC3E,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC;QAAC,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACpE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,IAAY;IACrD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;IACvF,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;IAC5F,8GAA8G;IAC9G,wCAAwC;IACxC,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;IAC9E,8GAA8G;IAC9G,MAAM,OAAO,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC;QACxC,OAAO,IAAI,KAAK,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC5I,CAAC;IACD,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,KAAK;QAAE,OAAQ,UAAgC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAa,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACzJ,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACrC,OAAO,IAAI,KAAK,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACzI,CAAC;IACD,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;IACzF,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACrC,OAAO,IAAI,KAAK,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACzI,CAAC;IACD,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;IACpG,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAQ,iBAAuC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;YACpE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtG,CAAC;IACD,sGAAsG;IACtG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC;AAC1E,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;AACvG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC;AAC1C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,OAAO,YAAY,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AACpD,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,OAAO,SAAS,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AACjD,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,mBAAmB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"web-shell-routes.js","sourceRoot":"","sources":["../src/web-shell-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAE7F,uHAAuH;AACvH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,CAAU,CAAC;AAiBhH,MAAM,yBAAyB,GAAG,0BAA0B,CAAC;AAC7D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,iBAAiB,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;WAC9F,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,2EAA2E;AAC3E,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC;QAAC,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACpE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,IAAY;IACrD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;IACvF,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;IAC5F,8GAA8G;IAC9G,wCAAwC;IACxC,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;IAC9E,8GAA8G;IAC9G,MAAM,OAAO,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC;QACxC,OAAO,IAAI,KAAK,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC5I,CAAC;IACD,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,KAAK;QAAE,OAAQ,UAAgC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAa,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACzJ,6BAA6B;IAC7B,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC;QACpC,OAAO,IAAI,KAAK,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACxI,CAAC;IACD,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACrC,OAAO,IAAI,KAAK,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACzI,CAAC;IACD,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;IACzF,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACrC,OAAO,IAAI,KAAK,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACzI,CAAC;IACD,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;IACpG,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAQ,iBAAuC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;YACpE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtG,CAAC;IACD,sGAAsG;IACtG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC;AAC1E,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;AACvG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC;AAC1C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,OAAO,YAAY,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AACpD,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,OAAO,SAAS,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AACjD,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,QAAgB;IACtC,OAAO,WAAW,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AACnD,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,mBAAmB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC3D,CAAC"}

package/dist/web-upload.d.ts

@@ -1,3 +1,5 @@
+import { openSync } from "node:fs";
+/** #1937: the defaults; `web.upload_max_file_mb` / `web.upload_max_total_mb` change the two sizes (uploadLimits()). */
 export declare const UPLOAD_LIMITS: {
     /** One file. */
     readonly maxFileBytes: number;
@@ -6,10 +8,79 @@ export declare const UPLOAD_LIMITS: {
     /** All files on one message together. */
     readonly maxTotalBytes: number;
 };
+/** #1937: what `web.upload_max_file_mb` and `web.upload_max_total_mb` may be — whole MB (MiB). */
+export declare const UPLOAD_MB_RANGE: {
+    readonly min: 1;
+    readonly max: 500;
+};
+/**
+ * #1937: one file over the public link. A Cloudflare quick tunnel carries a request body of about 100 MB at most, and
+ * one upload is one request, so whatever the config says, a file through the tunnel stays under that.
+ */
+export declare const PUBLIC_LINK_MAX_FILE_BYTES: number;
+export interface UploadLimits {
+    maxFileBytes: number;
+    maxFiles: number;
+    maxTotalBytes: number;
+    /** The public link lowered the per-file cap below the configured one (its 413 says why). */
+    publicLinkCapped?: true;
+}
+/**
+ * #1937: the limits in force — the one source the upload route, the send, the served-file cap, the page's own check
+ * and its words all read. A file is never allowed more than a whole message is; over the public link a file is at most
+ * PUBLIC_LINK_MAX_FILE_BYTES. Read on every request, so `agend reload` applies a change to the next upload.
+ */
+export declare function uploadLimits(web: {
+    upload_max_file_mb?: unknown;
+    upload_max_total_mb?: unknown;
+} | null | undefined, opts?: {
+    publicLink?: boolean;
+}): UploadLimits;
+/** A size in MB as the limits are worded ("50", "2.5"). */
+export declare function mbText(bytes: number): string;
+/** #1937: the 413 for one file, from the limits in force (never a constant's number). */
+export declare function fileTooLargeText(limits: UploadLimits): string;
+/** #1937: how long an upload may go without a byte before it is dropped (its partial file with it). */
+export declare const UPLOAD_STALL_MS = 60000;
+/** #1937: the longest one upload may take, start to end (at 95 MB, about 54 KB/s on average). */
+export declare const UPLOAD_MAX_MS: number;
+/** #1937: what a listener allows for receiving one request — above UPLOAD_MAX_MS, so an upload's own clocks decide. */
+export declare const UPLOAD_REQUEST_TIMEOUT_MS: number;
+/** #1937: the one route whose body may take long to arrive (its own clocks bound it). */
+export declare function isUploadRequest(req: {
+    method?: string;
+    url?: string;
+}): boolean;
+/**
+ * #1937: every other request keeps the listener's old bound on receiving it — not whole within `ms`, its connection is
+ * dropped (what `server.requestTimeout` did before it was raised for uploads).
+ */
+export declare function limitRequestReceive(req: {
+    complete?: boolean;
+    socket?: {
+        destroy(): void;
+    } | null;
+    once?(event: "close", fn: () => void): unknown;
+}, ms: number): void;
 /** How long an uploaded file waits to be sent with a message before its id stops working. */
 export declare const UPLOAD_TTL_MS: number;
 /** An upload no message has taken yet is stored under this prefix; it drops the prefix when a message takes it. */
 export declare const PENDING_PREFIX = "web-pending-";
+/** #1937: an upload's bytes stream into this file first (pending prefix: a restart's sweep removes one left behind). */
+export declare const PART_SUFFIX = ".part";
+/**
+ * #1937: a new, empty part file in `inboxDir` (made private, 0700), created exclusively, 0600, never through a link.
+ * Its bytes are written through `fd` (never by reopening the name); the caller closes it. `discard()` removes the part
+ * and the directories made for it, when they are still empty — an upload that ends in nothing leaves nothing behind
+ * (an instance deleted while its body was arriving gets no inbox made back, #1252 review P2-3).
+ */
+export declare function createPartFile(inboxDir: string, open?: typeof openSync): {
+    path: string;
+    fd: number;
+    discard(): void;
+};
+/** Remove a file of ours, if it is still there; never throws. */
+export declare function removeQuietly(path: string): void;
 /** The largest file the dashboard will serve back (a reply attachment can be anything the agent made). */
 export declare const MAX_SERVED_BYTES: number;
 export type UploadKind = "photo" | "document";
@@ -18,12 +89,31 @@ export interface SniffedType {
     mime: string;
     ext: string;
 }
+/** #1900: any other file, as Discord and Telegram take it — a download (application/octet-stream), never shown. */
+export declare const OTHER_FILE_MIME = "application/octet-stream";
+/** The extension an upload of an unread type is stored under: its own, lower-cased, if short and plain; else .bin. */
+export declare function storedExtension(name: string): string;
 /**
- * The type of an upload, from its bytes. Images by signature (PNG, JPEG, GIF, WebP), PDF by `%PDF-`,
- * text when it is valid UTF-8 with no NUL byte. Everything else is refused — no executable, archive or
- * office format is guessed at.
+ * The type of an upload, from its bytes. Images by signature (PNG, JPEG, GIF, WebP), PDF by `%PDF-`, text when it is
+ * valid UTF-8 with no NUL byte and not markup. #1900: anything else (an archive, an office file, a binary, HTML, SVG …)
+ * is taken too, as a document the dashboard only offers as a download. Null only for an empty file.
  */
 export declare function sniffUpload(bytes: Uint8Array, name: string): SniffedType | null;
+/**
+ * #1937: sniffUpload() as the bytes stream in — the upload is written to disk chunk by chunk, never held whole. Keeps
+ * the first bytes (every signature is in the first 12), whether a NUL was seen, and whether everything so far is
+ * valid UTF-8 (a streaming decoder: a character split across two chunks is still one character).
+ */
+export declare class UploadSniffer {
+    private head;
+    private size;
+    private nul;
+    private utf8;
+    private readonly decoder;
+    push(chunk: Uint8Array): this;
+    /** The type of everything pushed (call once, at the end); null for an empty file. */
+    result(name: string): SniffedType | null;
+}
 /** A file name as a label only: no directory, no control characters, no leading dots, bounded. */
 export declare function displayName(raw: string | undefined | null, fallback: string): string;
 /** Any lone surrogate replaced by U+FFFD, so the name always encodes. */
@@ -57,6 +147,11 @@ export interface ServedFile {
     /** The instance whose chat shows it. */
     instance: string;
     kind: UploadKind;
+    /**
+     * #1770: a reply file's snapshot (workspaces/<instance>/web-files): the fleet's own copy, kept as long as its message
+     * — outside the served-id cap, and removed from disk when the message leaves the history (dropServed).
+     */
+    snapshot?: true;
 }
 export declare const isFileId: (id: string) => boolean;
 /** Images the browser may show inline; everything else is served as a download. */
@@ -76,10 +171,15 @@ export declare class WebFileLedger {
     private readonly served;
     private readonly now;
     private readonly maxServed;
+    /** #1937: the limits in force (the fleet's config, read each time): the send's count and total, the served-file cap. */
+    readonly limits: () => UploadLimits;
     constructor(opts?: {
         now?: () => number;
         maxServed?: number;
+        limits?: () => UploadLimits;
     });
+    /** #1937: the largest file served back — MAX_SERVED_BYTES, or more when a file that large may be uploaded. */
+    maxServedBytes(): number;
     /**
      * Store an upload in `inboxDir` under a name chosen here and register it. The directory is made
      * private (0700), the file 0600, written exclusively (never over an existing file).
@@ -91,6 +191,16 @@ export declare class WebFileLedger {
         name: string;
         type: SniffedType;
     }): UploadEntry;
+    /**
+     * #1937: register an upload that was streamed to `partPath` (createPartFile(), in the inbox it belongs to): it is
+     * linked under its stored name — never over an existing file — and the part goes. The part is removed on failure too.
+     */
+    storeUploadedFile(input: {
+        instance: string;
+        partPath: string;
+        name: string;
+        type: SniffedType;
+    }): UploadEntry;
     /**
      * The uploads a message names, all or nothing: each must exist, belong to this instance, not be
      * expired and be waiting for a message; together within the per-message limits. On success they are
@@ -128,6 +238,7 @@ export declare class WebFileLedger {
         mime?: string;
         instance: string;
         kind?: UploadKind;
+        snapshot?: boolean;
     }): ServedFile | null;
     /**
      * The bytes of a served file, re-checked at read time: opened without following a symlink, still a
@@ -137,6 +248,16 @@ export declare class WebFileLedger {
         file: ServedFile;
         bytes: Buffer;
     } | null;
+    /**
+     * #1937: a served file opened for streaming whole, with read()'s checks on the open descriptor (no symlink followed,
+     * a regular file, the device + inode and size it was registered with). The caller closes `fd`. Null when any fails.
+     */
+    open(id: string): {
+        file: ServedFile;
+        fd: number;
+    } | null;
+    /** #1937: what is served under an id (no file is opened: open() and read() check the file itself). */
+    servedFile(id: string): ServedFile | null;
     /** #1589: a served file that is audio or video (MEDIA_MIME), or null — the file route plays those by range. */
     mediaOf(id: string): ServedFile | null;
     /**
@@ -155,14 +276,21 @@ export declare class WebFileLedger {
      * nothing is served under the id, or it is an upload no message has taken (web-pending-…): that is never kept.
      */
     storablePath(id: string): string | null;
-    /** #1565: these ids are no longer shown (their message left the history's window): nothing is served under them. */
+    /**
+     * #1565: these ids are no longer shown (their message left the history's window): nothing is served under them.
+     * #1770: a snapshot goes from disk with them — the file registered, still that file (device + inode), never a link.
+     */
     dropServed(ids: Iterable<string>): void;
+    /** #1770: the ids of an instance's snapshots served now — what a fleet start's sweep keeps. */
+    heldSnapshots(instance: string): Set<string>;
     /**
      * #1565: serve again, under the id it had, a file a message showed before the fleet restarted — only if it still
      * passes every check: an id of ours in shape; never an upload no message took (web-pending-…); the path itself not a
      * symlink, and a regular file within MAX_SERVED_BYTES; its real path inside this instance's inbox
-     * (`workspaces/<instance>/inbox`, itself not a link elsewhere). Null when any check fails (the message then shows the
-     * name as unavailable). Fetched by id only, as ever: the stored path is the fleet's own file, never a request's.
+     * (`workspaces/<instance>/inbox`, itself not a link elsewhere) — or (#1770) inside its reply snapshots
+     * (`webFilesDir`, `workspaces/<instance>/web-files`, the same checks), then served as a snapshot again. Null when any
+     * check fails (the message then shows the name as unavailable). (Within maxServedBytes(): #1937.) Fetched by id only, as ever: the stored path is the
+     * fleet's own file, never a request's.
      */
     restoreServed(entry: {
         id: unknown;
@@ -170,7 +298,7 @@ export declare class WebFileLedger {
         name?: unknown;
         mime?: unknown;
         kind?: unknown;
-    }, instance: string, inboxDir: string): ServedFile | null;
+    }, instance: string, inboxDir: string, webFilesDir?: string): ServedFile | null;
     /** Forget an instance's files (it was deleted). The files themselves are its workspace's to remove. */
     forget(instance: string): void;
     /**