@tangle-network/agent-app 0.45.55 → 0.45.56

package/dist/assistant/index.js

@@ -2,13 +2,13 @@ import {
   ChatComposer,
   ChatEmptyState,
   ChatMessages
-} from "../chunk-MQO5ML66.js";
+} from "../chunk-KJ2Q27U7.js";
 import "../chunk-FBVLEGEG.js";
 import "../chunk-ENLRJYVW.js";
 import "../chunk-GEYACSFW.js";
 import {
   ModelPicker
-} from "../chunk-PVP57G3S.js";
+} from "../chunk-2IFGVBNI.js";
 import "../chunk-MLG6XKPV.js";
 import "../chunk-BATKJP3P.js";
 import {
@@ -16,7 +16,7 @@ import {
 } from "../chunk-3UBAO3N5.js";
 import "../chunk-PC2WYTK7.js";
 import "../chunk-QY4BRKRJ.js";
-import "../chunk-CCVG2TL6.js";
+import "../chunk-YNMPMW3G.js";
 import "../chunk-5ZTFZBS6.js";
 import "../chunk-ZVEEWGDK.js";
 import "../chunk-KWXUBMXU.js";

package/dist/chat-react/index.js

@@ -1,11 +1,11 @@
 import {
   AgentSessionControls,
   useComposerAttachments
-} from "../chunk-PVP57G3S.js";
+} from "../chunk-2IFGVBNI.js";
 import "../chunk-MLG6XKPV.js";
 import {
   ATTACHMENT_ACCEPT
-} from "../chunk-CCVG2TL6.js";
+} from "../chunk-YNMPMW3G.js";
 import "../chunk-KWXUBMXU.js";
 import "../chunk-TH7L265V.js";
 

package/dist/chat-routes/attachment-upload.d.ts

@@ -3,8 +3,9 @@
  * route: a two-phase atomic batch (every file is validated before any file is
  * written — a batch never partially lands), a content-sniffed type gate
  * (`checkAttachmentType` over `sniffBinary`'s magic-byte read, not the
- * extension or the browser-reported MIME), per-kind + aggregate byte caps,
- * and sanitized filenames. Storage is fully seamed through the injected
+ * extension or the browser-reported MIME), binary/text caps with optional
+ * per-sniffed-mime overrides, an aggregate byte cap, and sanitized filenames.
+ * Storage is fully seamed through the injected
  * `WriteAttachmentFn` (`./attachment-store`) — no default store, the product
  * owns where bytes actually live (vault, object store, …) — and auth/rate
  * limiting is entirely the injected `authorize` seam's job: this factory
@@ -56,6 +57,10 @@ export interface CreateAttachmentUploadRouteOptions {
         maxCount?: number;
         /** Ceiling on a binary file's raw size. Default {@link MAX_BINARY_ATTACHMENT_BYTES}. */
         maxBinaryBytes?: number;
+        /** Optional binary-file ceilings keyed by the content-sniffed mime. A
+         *  missing mime falls back to `maxBinaryBytes`; text files continue to use
+         *  `maxTextBytes`. */
+        maxBytesBySniffedMime?: ReadonlyMap<string, number>;
         /** Ceiling on a text file's raw size. Default {@link MAX_TEXT_ATTACHMENT_BYTES}. */
         maxTextBytes?: number;
         /** Aggregate raw-byte ceiling across the batch. Default {@link MAX_ATTACHMENT_TOTAL_BYTES}. */

package/dist/chat-routes/binary-sniff.d.ts

@@ -5,10 +5,10 @@
  * the client. Extension-based allowlists lie (a renamed `.docx`, a PNG saved
  * as `.txt`), so classification reads the actual bytes: a magic-byte table
  * for common binary formats first, then a UTF-8 decode attempt for
- * everything else. Two families need more than a fixed-offset signature and
- * get a reader of their own — ISO-BMFF brands (`sniffFtyp`) and OOXML Office
- * packages, whose PKZIP container is shared with every other `.zip`
- * (`sniffOoxml`).
+ * everything else. Three families need more than a fixed-offset signature and
+ * get a reader of their own — ISO-BMFF brands (`sniffFtyp`), EBML containers
+ * (`sniffEbml`), and OOXML Office packages, whose PKZIP container is shared
+ * with every other `.zip` (`sniffOoxml`).
  *
  * Lifted near-verbatim from gtm-agent's `src/lib/binary-sniff.ts` (the
  * source PRs hardened this against real corruption/gate bugs: gtm#584,

package/dist/chat-routes/index.js

@@ -21,7 +21,7 @@ import {
   checkAttachmentType,
   sanitizeAttachmentFileName,
   sniffBinary
-} from "../chunk-CCVG2TL6.js";
+} from "../chunk-YNMPMW3G.js";
 import {
   createInteractionAnswerRoute
 } from "../chunk-ZSSCVT6H.js";
@@ -2539,6 +2539,7 @@ function attachmentUploadError(status, code, message, path) {
 function createAttachmentUploadRoute(options) {
   const maxCount = options.limits?.maxCount ?? ATTACHMENT_MAX_COUNT;
   const maxBinaryBytes = options.limits?.maxBinaryBytes ?? MAX_BINARY_ATTACHMENT_BYTES;
+  const maxBytesBySniffedMime = options.limits?.maxBytesBySniffedMime;
   const maxTextBytes = options.limits?.maxTextBytes ?? MAX_TEXT_ATTACHMENT_BYTES;
   const maxTotalBytes = options.limits?.maxTotalBytes ?? MAX_ATTACHMENT_TOTAL_BYTES;
   const allowedKinds = options.allowedKinds ?? ["image", "file"];
@@ -2601,7 +2602,10 @@ function createAttachmentUploadRoute(options) {
           `${name} is a "${kind}" attachment, which this upload route does not accept`
         );
       }
-      const limit = sniff.binary ? maxBinaryBytes : maxTextBytes;
+      let limit = maxTextBytes;
+      if (sniff.binary) {
+        limit = sniff.mime === null ? maxBinaryBytes : maxBytesBySniffedMime?.get(sniff.mime) ?? maxBinaryBytes;
+      }
       if (bytes.length > limit) {
         return attachmentUploadError(
           413,