@sparkelf/dsh-dataops-managed 0.3.13 → 0.3.15

package/lib/client.js

@@ -46,7 +46,7 @@ window.__ModuleLoader__.load({
 		/** Route the plugin's Host half serves for model sharing. */
 		const MODEL_SYNC_PATH = "/integrations/dataops/model-sync";
 		/** Narrow a response body to the status shape, rejecting anything else. */
-		function asStatus(value) {
+		function asStatus$1(value) {
 			if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
 			const record = value;
 			if (record.followState !== "following" && record.followState !== "detached") return null;
@@ -86,7 +86,7 @@ window.__ModuleLoader__.load({
 			const response = await fetch(MODEL_SYNC_PATH, { headers: { accept: "application/json" } });
 			if (response.status === 503) return null;
 			if (!response.ok) throw new Error("model sync status failed with HTTP " + String(response.status));
-			return asStatus(await response.json());
+			return asStatus$1(await response.json());
 		}
 		/**
 		* Change what this workspace shares.
@@ -104,11 +104,85 @@ window.__ModuleLoader__.load({
 			});
 			if (response.status === 503) return null;
 			if (!response.ok) throw new Error("model sync action failed with HTTP " + String(response.status));
+			return asStatus$1(await response.json());
+		}
+		//#endregion
+		//#region src/client/workspace-limits-client.ts
+		/** Same-origin workspace-limits calls from the DataOps settings surface. */
+		/** Route the plugin's Host half serves for workspace limits. */
+		const WORKSPACE_LIMITS_PATH = "/integrations/dataops/workspace-limits";
+		/** Narrow a response body to the status, rejecting anything else. */
+		function asStatus(value) {
+			if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+			const record = value;
+			const limits = record.limits;
+			if (typeof limits !== "object" || limits === null) return null;
+			const fileReadMaxBytes = limits.fileReadMaxBytes;
+			const uploadMaxBytes = limits.uploadMaxBytes;
+			if (typeof fileReadMaxBytes !== "number" || typeof uploadMaxBytes !== "number") return null;
+			return {
+				limits: {
+					fileReadMaxBytes,
+					uploadMaxBytes
+				},
+				canWrite: record.canWrite === true,
+				readOnlyReason: typeof record.readOnlyReason === "string" ? record.readOnlyReason : null
+			};
+		}
+		function readJson(value) {
+			return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+		}
+		/**
+		* A write DataOps refused, carrying the reason it gave.
+		*
+		* The message is written for the person who set the value, so the panel shows it as-is rather
+		* than replacing it with a generic failure notice.
+		*/
+		var WorkspaceLimitsRejection = class extends Error {
+			constructor(message) {
+				super(message);
+				this.name = "WorkspaceLimitsRejection";
+			}
+		};
+		/** Read the reason from a refused response, falling back to the status line. */
+		async function refusalReason(response, fallback) {
+			try {
+				const error = readJson(await response.json())?.error;
+				if (typeof error === "string" && error.trim() !== "") return error;
+			} catch {}
+			return `${fallback} with HTTP ${String(response.status)}`;
+		}
+		/**
+		* Read the workspace limits the panel shows.
+		* @returns The status, or null when the workspace is not connected to DataOps.
+		*/
+		async function fetchWorkspaceLimits() {
+			const response = await fetch(WORKSPACE_LIMITS_PATH, { credentials: "same-origin" });
+			if (response.status === 503) return null;
+			if (!response.ok) throw new Error(`Workspace limits read failed with HTTP ${String(response.status)}`);
 			return asStatus(await response.json());
 		}
+		/**
+		* Store new workspace limits.
+		* @param limits - The ceilings to store.
+		* @returns The stored status.
+		*/
+		async function saveWorkspaceLimits(limits) {
+			const response = await fetch(WORKSPACE_LIMITS_PATH, {
+				method: "POST",
+				credentials: "same-origin",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify(limits)
+			});
+			if (response.status === 503) return null;
+			if (response.status === 400) throw new WorkspaceLimitsRejection(await refusalReason(response, "Workspace limits write refused"));
+			if (!response.ok) throw new Error(await refusalReason(response, "Workspace limits write failed"));
+			const body = readJson(await response.json());
+			return body === null ? null : asStatus(body);
+		}
 		//#endregion
 		//#region \0dsh-css:/root/projects/dsh-plugins-plus/packages/dataops-managed/src/client/ManagedDataOpsSection.module.css.mjs
-		const css$2 = "._2dqzjG_section{max-width:720px;color:var(--dsw-alias-label-primary);flex-direction:column;gap:14px;display:flex}._2dqzjG_title{margin:0;font-size:16px;font-weight:500;line-height:24px}._2dqzjG_statusRow{align-items:center;gap:8px;min-height:24px;font-size:14px;line-height:22px;display:flex}._2dqzjG_description{color:var(--dsw-alias-label-tertiary);margin:0;font-size:14px;line-height:22px}._2dqzjG_details{margin:2px 0 0}._2dqzjG_detailRow{grid-template-columns:minmax(140px,2fr) minmax(0,3fr);gap:20px;padding:12px 0;display:grid}._2dqzjG_detailRow+._2dqzjG_detailRow{border-top:1px solid var(--dsw-alias-border-l2)}._2dqzjG_detailRow dt,._2dqzjG_detailRow dd{margin:0;font-size:14px;line-height:22px}._2dqzjG_detailRow dt{color:var(--dsw-alias-label-secondary)}._2dqzjG_detailRow dd{color:var(--dsw-alias-label-primary)}._2dqzjG_brandingRow{border-top:1px solid var(--dsw-alias-border-l2);align-items:center;gap:20px;padding:14px 0 12px;display:flex}._2dqzjG_brandingCopy{flex-direction:column;flex:1;gap:3px;min-width:0;display:flex}._2dqzjG_brandingCopy strong{font-size:14px;font-weight:500;line-height:22px}._2dqzjG_brandingCopy span{color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:18px}._2dqzjG_switch{background:var(--dsw-alias-border-l1);cursor:pointer;border:0;border-radius:10px;flex:none;width:34px;height:20px;padding:0;transition:background-color .12s;position:relative}._2dqzjG_switch>span{background:var(--dsw-alias-bg-base);border-radius:50%;width:14px;height:14px;transition:transform .12s;position:absolute;top:3px;left:3px;box-shadow:0 1px 2px #0003}._2dqzjG_switch[data-checked=true]{background:var(--dsw-alias-state-business-primary)}._2dqzjG_switch[data-checked=true]>span{transform:translate(14px)}._2dqzjG_switch:focus-visible{outline:2px solid var(--dsw-alias-state-business-primary);outline-offset:2px}@media (prefers-reduced-motion:reduce){._2dqzjG_switch,._2dqzjG_switch>span{transition:none}}._2dqzjG_modelPanel{border-top:1px solid var(--dsw-alias-border-l2);flex-direction:column;gap:10px;padding:14px 0 12px;display:flex}._2dqzjG_modelTitle{margin:0;font-size:14px;font-weight:500;line-height:22px}._2dqzjG_modelDescription{color:var(--dsw-alias-label-tertiary);margin:0;font-size:12px;line-height:18px}._2dqzjG_modelList{flex-direction:column;gap:8px;padding-top:4px;display:flex}._2dqzjG_modelListTitle{font-size:13px;font-weight:500;line-height:20px}._2dqzjG_modelListDescription{color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:18px}._2dqzjG_modelRow{align-items:center;gap:16px;min-height:28px;display:flex}._2dqzjG_modelId{min-width:0;color:var(--dsw-alias-label-primary);text-overflow:ellipsis;white-space:nowrap;flex:1;font-size:13px;line-height:20px;overflow:hidden}._2dqzjG_modelAction{border:1px solid var(--dsw-alias-border-l2);color:var(--dsw-alias-label-primary);cursor:pointer;background:0 0;border-radius:6px;flex:none;padding:5px 12px;font-size:13px;line-height:20px}._2dqzjG_modelAction:hover:not(:disabled){background:var(--dsw-alias-bg-hover)}._2dqzjG_modelAction:disabled,._2dqzjG_switch:disabled{cursor:default;opacity:.5}";
+		const css$2 = "._2dqzjG_section{max-width:720px;color:var(--dsw-alias-label-primary);flex-direction:column;gap:12px;display:flex}._2dqzjG_title{margin:0;font-size:18px;font-weight:600;line-height:28px}._2dqzjG_status{color:var(--dsw-alias-label-secondary);align-items:center;gap:8px;font-size:13px;line-height:22px;display:flex}._2dqzjG_card{border:.5px solid var(--dsw-alias-settings-card-stroke);border-radius:var(--dsw-radius-xl);background:var(--dsw-alias-settings-card-fill);flex-direction:column;gap:12px;padding:12px 16px;display:flex}._2dqzjG_heading{margin:0;font-size:13px;font-weight:600;line-height:22px}._2dqzjG_row{justify-content:space-between;align-items:center;gap:16px;display:flex}._2dqzjG_copy{flex-direction:column;min-width:0;display:flex}._2dqzjG_label{font-size:13px;line-height:22px}._2dqzjG_meta{color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:18px}._2dqzjG_fields{grid-template-columns:repeat(auto-fit,minmax(min(200px,100%),1fr));gap:0 16px;display:grid}._2dqzjG_fields>div{min-width:0}._2dqzjG_fields input{font-variant-numeric:tabular-nums;min-width:0}._2dqzjG_actions{justify-content:flex-end;align-items:center;gap:12px;display:flex}._2dqzjG_refusal{color:var(--dsw-alias-state-error-primary);align-items:flex-start;gap:6px;margin-right:auto;font-size:12px;line-height:18px;display:flex}";
 		const tagId$2 = "@sparkelf/dsh-dataops-managed/ManagedDataOpsSection.module.css";
 		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId$2) + "]") === null) {
 			const tag = document.createElement("style");
@@ -118,29 +192,43 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var ManagedDataOpsSection_module_css_default = {
-			"modelTitle": "_2dqzjG_modelTitle",
+			"refusal": "_2dqzjG_refusal",
+			"row": "_2dqzjG_row",
 			"section": "_2dqzjG_section",
-			"modelListDescription": "_2dqzjG_modelListDescription",
-			"statusRow": "_2dqzjG_statusRow",
-			"description": "_2dqzjG_description",
-			"modelDescription": "_2dqzjG_modelDescription",
-			"modelListTitle": "_2dqzjG_modelListTitle",
-			"modelRow": "_2dqzjG_modelRow",
-			"modelId": "_2dqzjG_modelId",
+			"actions": "_2dqzjG_actions",
+			"card": "_2dqzjG_card",
+			"heading": "_2dqzjG_heading",
 			"title": "_2dqzjG_title",
-			"brandingCopy": "_2dqzjG_brandingCopy",
-			"brandingRow": "_2dqzjG_brandingRow",
-			"modelPanel": "_2dqzjG_modelPanel",
-			"detailRow": "_2dqzjG_detailRow",
-			"switch": "_2dqzjG_switch",
-			"modelList": "_2dqzjG_modelList",
-			"details": "_2dqzjG_details",
-			"modelAction": "_2dqzjG_modelAction"
+			"copy": "_2dqzjG_copy",
+			"label": "_2dqzjG_label",
+			"status": "_2dqzjG_status",
+			"meta": "_2dqzjG_meta",
+			"fields": "_2dqzjG_fields"
 		};
 		//#endregion
 		//#region src/client/ManagedDataOpsSection.tsx
+		/** The panel's unit, so a stored byte count survives a round trip through the input. */
+		const BYTES_PER_MIB = 1048576;
+		/** Render a byte ceiling as the whole MiB the input shows. */
+		function toMib(bytes) {
+			return String(Math.round(bytes / BYTES_PER_MIB * 100) / 100);
+		}
+		/** Parse a MiB draft into a byte ceiling, or null when it is not a positive count. */
+		function toBytes(text) {
+			if (text.trim() === "") return null;
+			const mib = Number(text);
+			if (!Number.isFinite(mib) || mib <= 0) return null;
+			const bytes = Math.round(mib * BYTES_PER_MIB);
+			return Number.isSafeInteger(bytes) && bytes > 0 ? bytes : null;
+		}
+		/** Format a stored publication time for the row, or nothing when it never published. */
+		function publishedText(publishedAt) {
+			const at = new Date(publishedAt);
+			return Number.isNaN(at.getTime()) ? null : at.toLocaleString();
+		}
 		/**
-		* Explain the DataOps-managed JWT and permission owner, and share model configuration.
+		* The DataOps settings this workspace owns: its connection state, its branding, its file ceilings,
+		* and the default configuration it publishes to other workspaces.
 		* @param props - Settings slot injection values.
 		* @returns The localized managed DataOps section, or nothing before injection.
 		*/
@@ -156,40 +244,184 @@ window.__ModuleLoader__.load({
 						children: t("title")
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: ManagedDataOpsSection_module_css_default.statusRow,
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.StateDot, { state: "done" }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("managed") })]
+						className: ManagedDataOpsSection_module_css_default.status,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.StateDot, { state: "done" }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("managed") })]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(BrandingRow, {
+						t,
+						enabled: branding.enabled
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(LimitsCard, { t }),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(DefaultsCard, { t })
+				]
+			});
+		}
+		/** The branding toggle as one settings row. */
+		function BrandingRow({ t, enabled }) {
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: ManagedDataOpsSection_module_css_default.card,
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: ManagedDataOpsSection_module_css_default.row,
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: ManagedDataOpsSection_module_css_default.label,
+						children: t("brandingTitle")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Switch, {
+						checked: enabled,
+						label: t("brandingToggle"),
+						onChange: (next) => {
+							setWanxiangBrandEnabled(next);
+						}
+					})]
+				})
+			});
+		}
+		/** The one row a card renders while it cannot offer its controls. */
+		function UnavailableCard({ title, t, state }) {
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				className: ManagedDataOpsSection_module_css_default.card,
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+					className: ManagedDataOpsSection_module_css_default.heading,
+					children: title
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: ManagedDataOpsSection_module_css_default.status,
+					role: state === "failed" ? "alert" : void 0,
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.StateDot, { state: state === "failed" ? "error" : "idle" }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: state === "failed" ? t("loadFailed") : t("unavailable") })]
+				})]
+			});
+		}
+		/**
+		* The file ceilings DataOps enforces on this workspace.
+		*
+		* The values live in DataOps and are read through the plugin, which holds the JWT; the panel only
+		* ever holds what the administrator is allowed to see.
+		* @param props - Translate function from the section.
+		* @returns The limits card.
+		*/
+		function LimitsCard({ t }) {
+			const [state, setState] = (0, react.useState)({ kind: "loading" });
+			const [fileReadMib, setFileReadMib] = (0, react.useState)("");
+			const [uploadMib, setUploadMib] = (0, react.useState)("");
+			/** The ceilings the draft started from, so Save stays off until one of them changes. */
+			const [saved, setSaved] = (0, react.useState)("");
+			/** Why DataOps refused the last save, kept beside the draft it refused. */
+			const [refusal, setRefusal] = (0, react.useState)(null);
+			const [busy, setBusy] = (0, react.useState)(false);
+			const fileReadId = (0, react.useId)();
+			const uploadId = (0, react.useId)();
+			const apply = (0, react.useCallback)((status) => {
+				setState({
+					kind: "ready",
+					status
+				});
+				const file = toMib(status.limits.fileReadMaxBytes);
+				const upload = toMib(status.limits.uploadMaxBytes);
+				setFileReadMib(file);
+				setUploadMib(upload);
+				setSaved(file + "|" + upload);
+				setRefusal(null);
+			}, []);
+			const refresh = (0, react.useCallback)(async () => {
+				try {
+					const status = await fetchWorkspaceLimits();
+					if (status === null) setState({ kind: "unavailable" });
+					else apply(status);
+				} catch {
+					setState({ kind: "failed" });
+				}
+			}, [apply]);
+			(0, react.useEffect)(() => {
+				refresh();
+			}, [refresh]);
+			const fileReadBytes = toBytes(fileReadMib);
+			const uploadBytes = toBytes(uploadMib);
+			const writable = state.kind === "ready" && state.status.canWrite;
+			const dirty = fileReadMib + "|" + uploadMib !== saved;
+			const ready = fileReadBytes !== null && uploadBytes !== null && dirty;
+			/** Edit one ceiling, dropping a refusal that no longer describes what is in the field. */
+			const edit = (0, react.useCallback)((set) => (text) => {
+				set(text);
+				setRefusal(null);
+			}, []);
+			const submit = (0, react.useCallback)(async () => {
+				if (fileReadBytes === null || uploadBytes === null) return;
+				setBusy(true);
+				setRefusal(null);
+				try {
+					const status = await saveWorkspaceLimits({
+						fileReadMaxBytes: fileReadBytes,
+						uploadMaxBytes: uploadBytes
+					});
+					if (status === null) setState({ kind: "unavailable" });
+					else apply(status);
+				} catch (error) {
+					if (error instanceof WorkspaceLimitsRejection) setRefusal(error.message);
+					else setState({ kind: "failed" });
+				} finally {
+					setBusy(false);
+				}
+			}, [
+				fileReadBytes,
+				uploadBytes,
+				apply
+			]);
+			if (state.kind === "loading") return null;
+			if (state.kind !== "ready") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(UnavailableCard, {
+				title: t("limitsTitle"),
+				t,
+				state: state.kind
+			});
+			const disabled = busy || !writable;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				className: ManagedDataOpsSection_module_css_default.card,
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+						className: ManagedDataOpsSection_module_css_default.heading,
+						children: t("limitsTitle")
 					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						className: ManagedDataOpsSection_module_css_default.description,
-						children: t("description")
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: ManagedDataOpsSection_module_css_default.fields,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.SettingsValueField, {
+							id: fileReadId,
+							label: t("limitsFileReadLabel"),
+							text: fileReadMib,
+							numeric: true,
+							invalid: fileReadBytes === null,
+							overridden: false,
+							overriddenLabel: "",
+							resetLabel: "",
+							invalidLabel: t("limitsInvalid"),
+							disabled,
+							onEdit: edit(setFileReadMib),
+							onReset: () => void 0
+						}) }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.SettingsValueField, {
+							id: uploadId,
+							label: t("limitsUploadLabel"),
+							text: uploadMib,
+							numeric: true,
+							invalid: uploadBytes === null,
+							overridden: false,
+							overriddenLabel: "",
+							resetLabel: "",
+							invalidLabel: t("limitsInvalid"),
+							disabled,
+							onEdit: edit(setUploadMib),
+							onReset: () => void 0
+						}) })]
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: ManagedDataOpsSection_module_css_default.brandingRow,
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: ManagedDataOpsSection_module_css_default.brandingCopy,
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("brandingTitle") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("brandingDescription") })]
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-							type: "button",
-							className: ManagedDataOpsSection_module_css_default.switch,
-							role: "switch",
-							"aria-label": t("brandingToggle"),
-							"aria-checked": branding.enabled,
-							"data-checked": branding.enabled,
+						className: ManagedDataOpsSection_module_css_default.actions,
+						children: [refusal === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+							className: ManagedDataOpsSection_module_css_default.refusal,
+							role: "alert",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.StateDot, { state: "error" }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: refusal })]
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+							variant: "primary",
+							size: "sm",
+							disabled: disabled || !ready,
 							onClick: () => {
-								setWanxiangBrandEnabled(!branding.enabled);
+								submit();
 							},
-							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {})
-						})]
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(PublishDefaults, { t }),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("dl", {
-						className: ManagedDataOpsSection_module_css_default.details,
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: ManagedDataOpsSection_module_css_default.detailRow,
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("dt", { children: t("identityLabel") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("dd", { children: t("identityValue") })]
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: ManagedDataOpsSection_module_css_default.detailRow,
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("dt", { children: t("toolsLabel") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("dd", { children: t("toolsValue") })]
+							children: busy ? t("limitsSaving") : t("limitsSave")
 						})]
 					})
 				]
@@ -199,13 +431,11 @@ window.__ModuleLoader__.load({
 		* Publish this workspace's configuration as the default other users start from.
 		*
 		* One action rather than a set of controls: the configuration is whatever this workspace already
-		* holds -- the models, the permission default, the general settings -- and the button copies it to
-		* DataOps. Every other user's workspace takes that copy as its starting values and may then change
-		* anything, at which point their own version wins and this button never reaches it again.
+		* holds, and the button copies it to DataOps.
 		* @param props - Translate function from the section.
-		* @returns The publish row.
+		* @returns The default-configuration card.
 		*/
-		function PublishDefaults({ t }) {
+		function DefaultsCard({ t }) {
 			const [state, setState] = (0, react.useState)({ kind: "loading" });
 			const [busy, setBusy] = (0, react.useState)(false);
 			const refresh = (0, react.useCallback)(async () => {
@@ -226,7 +456,8 @@ window.__ModuleLoader__.load({
 				setBusy(true);
 				try {
 					const status = await postModelSyncAction({ action: "publish-defaults" });
-					if (status !== null) setState({
+					if (status === null) setState({ kind: "unavailable" });
+					else setState({
 						kind: "ready",
 						status
 					});
@@ -237,55 +468,38 @@ window.__ModuleLoader__.load({
 				}
 			}, []);
 			if (state.kind === "loading") return null;
-			if (state.kind === "unavailable" || state.kind === "failed") return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: ManagedDataOpsSection_module_css_default.modelPanel,
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
-					className: ManagedDataOpsSection_module_css_default.modelTitle,
-					children: t("defaultsTitle")
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-					className: ManagedDataOpsSection_module_css_default.modelDescription,
-					role: state.kind === "failed" ? "alert" : void 0,
-					children: state.kind === "failed" ? t("loadFailed") : t("modelsUnavailable")
-				})]
+			if (state.kind !== "ready") return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(UnavailableCard, {
+				title: t("defaultsTitle"),
+				t,
+				state: state.kind
 			});
-			const { status } = state;
-			if (!status.canPublish) return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: ManagedDataOpsSection_module_css_default.modelPanel,
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
-					className: ManagedDataOpsSection_module_css_default.modelTitle,
-					children: t("defaultsTitle")
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-					className: ManagedDataOpsSection_module_css_default.modelDescription,
-					children: t("defaultsNotAdmin")
-				})]
-			});
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: ManagedDataOpsSection_module_css_default.modelPanel,
-				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
-						className: ManagedDataOpsSection_module_css_default.modelTitle,
-						children: t("defaultsTitle")
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						className: ManagedDataOpsSection_module_css_default.modelDescription,
-						children: t("defaultsDescription")
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: ManagedDataOpsSection_module_css_default.brandingRow,
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-							className: ManagedDataOpsSection_module_css_default.brandingCopy,
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("strong", { children: t("defaultsActionTitle") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: status.publishedAt === null ? t("defaultsNeverPublished") : t("defaultsPublishedAt") + " " + status.publishedAt })]
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-							type: "button",
-							className: ManagedDataOpsSection_module_css_default.modelAction,
-							disabled: busy,
-							onClick: () => {
-								publish();
-							},
-							children: busy ? t("defaultsPublishing") : t("defaultsPublish")
+			const published = state.status.publishedAt === null ? null : publishedText(state.status.publishedAt);
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("section", {
+				className: ManagedDataOpsSection_module_css_default.card,
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: ManagedDataOpsSection_module_css_default.row,
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: ManagedDataOpsSection_module_css_default.copy,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: ManagedDataOpsSection_module_css_default.label,
+							children: t("defaultsTitle")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: ManagedDataOpsSection_module_css_default.meta,
+							children: published === null ? t("defaultsNeverPublished") : t("defaultsPublishedAt") + " · " + published
 						})]
-					})
-				]
+					}), state.status.canPublish ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+						variant: "outline",
+						size: "sm",
+						disabled: busy,
+						onClick: () => {
+							publish();
+						},
+						children: busy ? t("defaultsPublishing") : t("defaultsPublish")
+					}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: ManagedDataOpsSection_module_css_default.meta,
+						children: t("defaultsNotAdmin")
+					})]
+				})
 			});
 		}
 		//#endregion
@@ -362,28 +576,28 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var SkillPlazaSection_module_css_default = {
-			"cardTitle": "_9FdZvq_cardTitle",
-			"title": "_9FdZvq_title",
+			"toolbar": "_9FdZvq_toolbar",
+			"card": "_9FdZvq_card",
 			"mine": "_9FdZvq_mine",
-			"intro": "_9FdZvq_intro",
+			"cardMarks": "_9FdZvq_cardMarks",
+			"emptyText": "_9FdZvq_emptyText",
 			"tagBar": "_9FdZvq_tagBar",
+			"intro": "_9FdZvq_intro",
+			"cardTitle": "_9FdZvq_cardTitle",
+			"emptyIcon": "_9FdZvq_emptyIcon",
+			"search": "_9FdZvq_search",
 			"notice": "_9FdZvq_notice",
+			"cardMain": "_9FdZvq_cardMain",
+			"cardEnd": "_9FdZvq_cardEnd",
+			"title": "_9FdZvq_title",
+			"cardIcon": "_9FdZvq_cardIcon",
 			"cardHead": "_9FdZvq_cardHead",
-			"card": "_9FdZvq_card",
 			"cards": "_9FdZvq_cards",
-			"cardMarks": "_9FdZvq_cardMarks",
-			"section": "_9FdZvq_section",
-			"cardEnd": "_9FdZvq_cardEnd",
-			"emptyText": "_9FdZvq_emptyText",
-			"head": "_9FdZvq_head",
 			"cardDesc": "_9FdZvq_cardDesc",
-			"empty": "_9FdZvq_empty",
 			"titleIcon": "_9FdZvq_titleIcon",
-			"toolbar": "_9FdZvq_toolbar",
-			"search": "_9FdZvq_search",
-			"emptyIcon": "_9FdZvq_emptyIcon",
-			"cardMain": "_9FdZvq_cardMain",
-			"cardIcon": "_9FdZvq_cardIcon"
+			"head": "_9FdZvq_head",
+			"empty": "_9FdZvq_empty",
+			"section": "_9FdZvq_section"
 		};
 		//#endregion
 		//#region src/client/SkillPlazaSection.tsx
@@ -635,18 +849,18 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var WanxiangBrand_module_css_default = {
-			"animatedMark": "s0HPxG_animatedMark",
-			"unit-top": "s0HPxG_unit-top",
-			"sidebarName": "s0HPxG_sidebarName",
-			"unitTop": "s0HPxG_unitTop",
-			"unitLeft": "s0HPxG_unitLeft",
 			"unit-left": "s0HPxG_unit-left",
-			"unit-right": "s0HPxG_unit-right",
+			"unit-top": "s0HPxG_unit-top",
 			"mark": "s0HPxG_mark",
 			"unit-core": "s0HPxG_unit-core",
+			"sidebarName": "s0HPxG_sidebarName",
+			"unit-right": "s0HPxG_unit-right",
+			"animatedMark": "s0HPxG_animatedMark",
+			"unitLeft": "s0HPxG_unitLeft",
+			"unitCore": "s0HPxG_unitCore",
 			"unitRight": "s0HPxG_unitRight",
-			"harness": "s0HPxG_harness",
-			"unitCore": "s0HPxG_unitCore"
+			"unitTop": "s0HPxG_unitTop",
+			"harness": "s0HPxG_harness"
 		};
 		//#endregion
 		//#region src/client/WanxiangBrand.tsx
@@ -922,27 +1136,23 @@ window.__ModuleLoader__.load({
 		const en = {
 			nav: "DataOps",
 			title: "DataOps",
-			managed: "Managed by this DataOps workspace",
-			description: "DSH uses your current DataOps session JWT. DataOps applies its role and resource permissions to every tool request.",
-			identityLabel: "Identity and permissions",
-			identityValue: "Current DataOps JWT",
-			toolsLabel: "DataOps tools",
-			toolsValue: "Authorized by DataOps on every request",
-			brandingTitle: "Apply Wanxiang branding",
-			brandingDescription: "Use the Wanxiang Data Platform identity in navigation, the New Session welcome view, browser title, and favicon.",
-			brandingToggle: "Apply Wanxiang branding",
-			modelsTitle: "Model configuration",
-			modelsDescription: "Share the models configured here with other users, and choose which of them they may use.",
-			modelsUnavailable: "Model configuration is unavailable until this workspace is connected to DataOps.",
+			managed: "Connected to DataOps",
+			unavailable: "DataOps is not connected.",
+			loadFailed: "Loading failed. Try again.",
+			brandingTitle: "Wanxiang branding",
+			brandingToggle: "Wanxiang branding",
+			limitsTitle: "File size limits",
+			limitsFileReadLabel: "Largest file to read (MiB)",
+			limitsUploadLabel: "Largest file to upload (MiB)",
+			limitsInvalid: "Enter a size in MiB.",
+			limitsSave: "Save",
+			limitsSaving: "Saving…",
 			defaultsTitle: "Default configuration",
-			defaultsDescription: "Publish the configuration this workspace holds — models, permissions, and general settings — as the values other users start from. Their workspace takes that copy once and may then change anything, and a change they make is never overwritten.",
-			defaultsActionTitle: "Publish as the default",
-			defaultsNotAdmin: "Only an administrator may publish the default configuration.",
-			defaultsNeverPublished: "Not published yet.",
-			defaultsPublishedAt: "Last published:",
-			defaultsPublish: "Publish default configuration",
+			defaultsPublish: "Publish",
 			defaultsPublishing: "Publishing…",
-			loadFailed: "The model configuration could not be loaded. Try again.",
+			defaultsPublishedAt: "Last published",
+			defaultsNeverPublished: "Not published yet",
+			defaultsNotAdmin: "Administrators only",
 			plazaTitle: "Skill plaza",
 			plazaIntro: "Skills other users shared. Install one to use it in this workspace, or share a skill of your own.",
 			plazaSearch: "Search skills",
@@ -964,27 +1174,23 @@ window.__ModuleLoader__.load({
 		const zh = {
 			nav: "DataOps",
 			title: "DataOps",
-			managed: "由当前 DataOps 工作区托管",
-			description: "DSH 使用当前 DataOps 会话 JWT；DataOps 对每次工具请求应用角色与资源权限。",
-			identityLabel: "身份与权限",
-			identityValue: "当前 DataOps JWT",
-			toolsLabel: "DataOps 工具",
-			toolsValue: "每次请求均由 DataOps 授权",
+			managed: "已连接 DataOps",
+			unavailable: "未连接 DataOps。",
+			loadFailed: "加载失败，请重试。",
 			brandingTitle: "应用万相品牌",
-			brandingDescription: "在导航、新会话欢迎页、浏览器标题和图标中使用万相数据平台品牌。",
 			brandingToggle: "应用万相品牌",
-			modelsTitle: "模型配置共享",
-			modelsDescription: "把这里配置的模型共享给其他用户，并决定他们可以使用其中哪些。",
-			modelsUnavailable: "工作区接入 DataOps 后即可使用模型配置共享。",
+			limitsTitle: "文件大小限制",
+			limitsFileReadLabel: "最大读取文件（MiB）",
+			limitsUploadLabel: "最大上传文件（MiB）",
+			limitsInvalid: "请输入以 MiB 为单位的大小。",
+			limitsSave: "保存",
+			limitsSaving: "保存中…",
 			defaultsTitle: "默认配置",
-			defaultsDescription: "把本工作区当前的配置（模型、权限、通用设置）发布为其他用户的初始值。对方工作区只取用一次，之后可以随意修改，改过的内容不会被覆盖。",
-			defaultsActionTitle: "发布为默认值",
-			defaultsNotAdmin: "只有管理员可以发布默认配置。",
-			defaultsNeverPublished: "尚未发布。",
-			defaultsPublishedAt: "上次发布：",
-			defaultsPublish: "发布默认配置",
+			defaultsPublish: "发布",
 			defaultsPublishing: "发布中…",
-			loadFailed: "模型配置加载失败，请重试。",
+			defaultsPublishedAt: "上次发布",
+			defaultsNeverPublished: "尚未发布",
+			defaultsNotAdmin: "仅管理员可发布",
 			plazaTitle: "技能广场",
 			plazaIntro: "其他用户共享的技能。装载后即可在本工作区使用，也可以把自己的技能共享出去。",
 			plazaSearch: "搜索技能",