@things-factory/ai-assistant 10.1.178 → 10.1.179

package/dist-client/utils/attachment-policy.d.ts

@@ -1,3 +1,4 @@
+import { type FileUploadLimits } from '@operato/utils/file-acceptance.js';
 export type AttachmentKind = 'image' | 'text' | 'spreadsheet';
 export interface AttachmentPolicy {
     kinds: AttachmentKind[];
@@ -10,10 +11,6 @@ export declare const DEFAULT_MAX_BYTES: number;
 export declare const DEFAULT_MAX_FILES = 5;
 /** How much of a text file reaches the model - the server's TEXT_CHARS_FOR_MODEL. */
 export declare const TEXT_CHARS_FOR_MODEL = 20000;
-export declare function attachmentKindOf(file: {
-    type?: string;
-    name?: string;
-}): AttachmentKind | null;
 export type AttachmentRefusal = {
     code: 'attachments-not-accepted';
 } | {
@@ -30,12 +27,19 @@ export type AttachmentRefusal = {
 };
 /** The characters of a text file the model reads under this policy. */
 export declare function textCharsOf(policy: AttachmentPolicy | null | undefined): number;
+/** The mode's size and count as picker limits. */
+export declare function limitsOf(policy: AttachmentPolicy | null | undefined): FileUploadLimits;
+/**
+ * Whether these files may go, by the one picking rule. `server` is the server's upload limit (shell
+ * `fileUploadLimits`); the tighter of it and the mode's policy applies. The first reason, by name: file by file, its
+ * kind, then its size, then whether it is one too many - the door says them in the same order.
+ */
 export declare function refuseAttachments(policy: AttachmentPolicy | null | undefined, files: {
     name?: string;
     type?: string;
     size?: number;
-}[]): AttachmentRefusal | null;
-/** The file picker's `accept` for a policy. */
+}[], server?: FileUploadLimits): AttachmentRefusal | null;
+/** The file picker's `accept` for a policy - a spreadsheet as the person picks it (.xlsx). */
 export declare function acceptOf(policy: AttachmentPolicy | null | undefined): string;
 /** Where a conversation's file opens - the gated route, under the page's domain path. */
 export declare function chatAttachmentUrl(sessionId: string, attachmentId: string): string;

package/dist-client/utils/attachment-policy.js

@@ -1,64 +1,65 @@
 /*
- * What a conversation accepts as attachments - the screen's copy of the server rule
+ * What a conversation accepts as attachments - the screen's side of the server rule
  * (server/service/chat-session/attachment-policy.ts, design/ai/shared-dock.md §9-1).
  *
  * The screen checks first so the person hears "no" before anything is sent; the door checks again and is
- * the authority. `test/attachment-policy-agree.test.ts` runs both copies over one table so they cannot drift.
+ * the authority. `test/attachment-policy-agree.test.ts` runs both over one table so they cannot drift.
+ *
+ * The screen's check is the one file-picking rule (@operato/utils `sortPickedFiles`, ADR-0061 2026-10-17): the mode's
+ * kinds become an `accept` (the table below, the one place), its size and count become limits, narrowed by the
+ * server's upload limits. What stays here is the mode's words: kinds, and a spreadsheet read into text.
  */
+import { narrowLimits, sortPickedFiles } from '@operato/utils/file-acceptance.js';
 export const DEFAULT_MAX_BYTES = 5 * 1024 * 1024;
 export const DEFAULT_MAX_FILES = 5;
 /** How much of a text file reaches the model - the server's TEXT_CHARS_FOR_MODEL. */
 export const TEXT_CHARS_FOR_MODEL = 20_000;
 const TEXT_TYPES = ['text/plain', 'text/csv', 'text/markdown', 'application/json'];
 const TEXT_EXTENSIONS = ['.txt', '.csv', '.md', '.json'];
-export function attachmentKindOf(file) {
-    const type = (file.type || '').toLowerCase();
-    if (type.startsWith('image/'))
-        return 'image';
-    if (TEXT_TYPES.includes(type))
-        return 'text';
-    const name = (file.name || '').toLowerCase();
-    if (TEXT_EXTENSIONS.some(ext => name.endsWith(ext)))
-        return 'text';
-    return null;
-}
+const XLSX_TYPE = 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet';
+/** Each kind as `accept` patterns - the one table from the mode's kinds to what a picker takes. */
+const KIND_ACCEPT = {
+    image: ['image/*'],
+    text: [...TEXT_EXTENSIONS, ...TEXT_TYPES],
+    spreadsheet: ['.xlsx', XLSX_TYPE]
+};
 /** A kind the policy takes - text also when it takes spreadsheets, which arrive as the text of their sheets. */
-function takes(policy, kind) {
-    return policy.kinds.includes(kind) || (kind === 'text' && policy.kinds.includes('spreadsheet'));
-}
+const acceptFor = (kinds) => [...new Set(kinds.flatMap(kind => KIND_ACCEPT[kind]))].join(',');
 /** The characters of a text file the model reads under this policy. */
 export function textCharsOf(policy) {
     return policy?.maxChars ?? TEXT_CHARS_FOR_MODEL;
 }
-export function refuseAttachments(policy, files) {
+/** The mode's size and count as picker limits. */
+export function limitsOf(policy) {
+    return { maxFileSize: policy?.maxBytes ?? DEFAULT_MAX_BYTES, maxFiles: policy?.maxFiles ?? DEFAULT_MAX_FILES };
+}
+/**
+ * Whether these files may go, by the one picking rule. `server` is the server's upload limit (shell
+ * `fileUploadLimits`); the tighter of it and the mode's policy applies. The first reason, by name: file by file, its
+ * kind, then its size, then whether it is one too many - the door says them in the same order.
+ */
+export function refuseAttachments(policy, files, server) {
     if (!files.length)
         return null;
     if (!policy || !policy.kinds?.length)
         return { code: 'attachments-not-accepted' };
-    const maxFiles = policy.maxFiles ?? DEFAULT_MAX_FILES;
-    if (files.length > maxFiles)
-        return { code: 'too-many-attachments', maxFiles };
-    const maxBytes = policy.maxBytes ?? DEFAULT_MAX_BYTES;
-    for (const file of files) {
-        const kind = attachmentKindOf(file);
-        if (!kind || !takes(policy, kind)) {
-            return { code: 'attachment-kind-not-accepted', name: file.name || '', kinds: policy.kinds };
-        }
-        if ((file.size ?? 0) > maxBytes)
-            return { code: 'attachment-too-large', name: file.name || '', maxBytes };
-    }
-    return null;
+    /* What is sent: a spreadsheet arrives as the text of its sheets. */
+    const sent = policy.kinds.map(kind => (kind === 'spreadsheet' ? 'text' : kind));
+    const limits = narrowLimits(limitsOf(policy), server);
+    const { refused } = sortPickedFiles(files, { accept: acceptFor(sent), limits });
+    if (!refused.length)
+        return null;
+    const [first] = refused;
+    if (first.reason === 'count')
+        return { code: 'too-many-attachments', maxFiles: limits.maxFiles };
+    return first.reason === 'type'
+        ? { code: 'attachment-kind-not-accepted', name: first.file.name || '', kinds: policy.kinds }
+        : { code: 'attachment-too-large', name: first.file.name || '', maxBytes: limits.maxFileSize };
 }
-/** The file picker's `accept` for a policy. */
+/** The file picker's `accept` for a policy - a spreadsheet as the person picks it (.xlsx). */
 export function acceptOf(policy) {
-    const accept = [];
-    if (policy?.kinds?.includes('image'))
-        accept.push('image/*');
-    if (policy?.kinds?.includes('text') || policy?.kinds?.includes('spreadsheet'))
-        accept.push(...TEXT_EXTENSIONS, ...TEXT_TYPES);
-    if (policy?.kinds?.includes('spreadsheet'))
-        accept.push('.xlsx', 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet');
-    return accept.join(',');
+    const kinds = policy?.kinds ?? [];
+    return acceptFor(kinds.includes('spreadsheet') ? [...kinds, 'text'] : kinds);
 }
 /** Where a conversation's file opens - the gated route, under the page's domain path. */
 export function chatAttachmentUrl(sessionId, attachmentId) {

package/dist-client/utils/attachment-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"attachment-policy.js","sourceRoot":"","sources":["../../client/utils/attachment-policy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAgBH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAChD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAA;AAClC,qFAAqF;AACrF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAA;AAE1C,MAAM,UAAU,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAA;AAClF,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;AAExD,MAAM,UAAU,gBAAgB,CAAC,IAAsC;IACrE,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAA;IAC7C,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAA;IAC5C,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC5C,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,MAAM,CAAA;IAClE,OAAO,IAAI,CAAA;AACb,CAAC;AAQD,gHAAgH;AAChH,SAAS,KAAK,CAAC,MAAwB,EAAE,IAAoB;IAC3D,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAA;AACjG,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,WAAW,CAAC,MAA2C;IACrE,OAAO,MAAM,EAAE,QAAQ,IAAI,oBAAoB,CAAA;AACjD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAA2C,EAC3C,KAAwD;IAExD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAC9B,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAA;IAEjF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAA;IACrD,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,CAAA;IAE9E,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAA;IACrD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAA;QAC7F,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAA;IAC3G,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,QAAQ,CAAC,MAA2C;IAClE,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC5D,IAAI,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,EAAE,GAAG,UAAU,CAAC,CAAA;IAC7H,IAAI,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,mEAAmE,CAAC,CAAA;IACrI,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACzB,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,YAAoB;IACvE,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACxE,OAAO,GAAG,UAAU,qBAAqB,kBAAkB,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAA;AAC9G,CAAC","sourcesContent":["/*\n * What a conversation accepts as attachments - the screen's copy of the server rule\n * (server/service/chat-session/attachment-policy.ts, design/ai/shared-dock.md §9-1).\n *\n * The screen checks first so the person hears \"no\" before anything is sent; the door checks again and is\n * the authority. `test/attachment-policy-agree.test.ts` runs both copies over one table so they cannot drift.\n */\n\n/*\n * 'spreadsheet' is a kind a mode opens, never a file the door receives: the screen reads each .xlsx sheet into CSV\n * text before sending (client/utils/spreadsheet-text.ts), so a mode that takes spreadsheets takes that text.\n */\nexport type AttachmentKind = 'image' | 'text' | 'spreadsheet'\n\nexport interface AttachmentPolicy {\n  kinds: AttachmentKind[]\n  maxBytes?: number\n  maxFiles?: number\n  /** Per text file, the characters the model reads - a sheet read into text longer than this is refused, not cut. */\n  maxChars?: number\n}\n\nexport const DEFAULT_MAX_BYTES = 5 * 1024 * 1024\nexport const DEFAULT_MAX_FILES = 5\n/** How much of a text file reaches the model - the server's TEXT_CHARS_FOR_MODEL. */\nexport const TEXT_CHARS_FOR_MODEL = 20_000\n\nconst TEXT_TYPES = ['text/plain', 'text/csv', 'text/markdown', 'application/json']\nconst TEXT_EXTENSIONS = ['.txt', '.csv', '.md', '.json']\n\nexport function attachmentKindOf(file: { type?: string; name?: string }): AttachmentKind | null {\n  const type = (file.type || '').toLowerCase()\n  if (type.startsWith('image/')) return 'image'\n  if (TEXT_TYPES.includes(type)) return 'text'\n  const name = (file.name || '').toLowerCase()\n  if (TEXT_EXTENSIONS.some(ext => name.endsWith(ext))) return 'text'\n  return null\n}\n\nexport type AttachmentRefusal =\n  | { code: 'attachments-not-accepted' }\n  | { code: 'attachment-kind-not-accepted'; name: string; kinds: AttachmentKind[] }\n  | { code: 'attachment-too-large'; name: string; maxBytes: number }\n  | { code: 'too-many-attachments'; maxFiles: number }\n\n/** A kind the policy takes - text also when it takes spreadsheets, which arrive as the text of their sheets. */\nfunction takes(policy: AttachmentPolicy, kind: AttachmentKind): boolean {\n  return policy.kinds.includes(kind) || (kind === 'text' && policy.kinds.includes('spreadsheet'))\n}\n\n/** The characters of a text file the model reads under this policy. */\nexport function textCharsOf(policy: AttachmentPolicy | null | undefined): number {\n  return policy?.maxChars ?? TEXT_CHARS_FOR_MODEL\n}\n\nexport function refuseAttachments(\n  policy: AttachmentPolicy | null | undefined,\n  files: { name?: string; type?: string; size?: number }[]\n): AttachmentRefusal | null {\n  if (!files.length) return null\n  if (!policy || !policy.kinds?.length) return { code: 'attachments-not-accepted' }\n\n  const maxFiles = policy.maxFiles ?? DEFAULT_MAX_FILES\n  if (files.length > maxFiles) return { code: 'too-many-attachments', maxFiles }\n\n  const maxBytes = policy.maxBytes ?? DEFAULT_MAX_BYTES\n  for (const file of files) {\n    const kind = attachmentKindOf(file)\n    if (!kind || !takes(policy, kind)) {\n      return { code: 'attachment-kind-not-accepted', name: file.name || '', kinds: policy.kinds }\n    }\n    if ((file.size ?? 0) > maxBytes) return { code: 'attachment-too-large', name: file.name || '', maxBytes }\n  }\n  return null\n}\n\n/** The file picker's `accept` for a policy. */\nexport function acceptOf(policy: AttachmentPolicy | null | undefined): string {\n  const accept: string[] = []\n  if (policy?.kinds?.includes('image')) accept.push('image/*')\n  if (policy?.kinds?.includes('text') || policy?.kinds?.includes('spreadsheet')) accept.push(...TEXT_EXTENSIONS, ...TEXT_TYPES)\n  if (policy?.kinds?.includes('spreadsheet')) accept.push('.xlsx', 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet')\n  return accept.join(',')\n}\n\n/** Where a conversation's file opens - the gated route, under the page's domain path. */\nexport function chatAttachmentUrl(sessionId: string, attachmentId: string): string {\n  const domainPath = /^\\/domain\\/[^/]+/.exec(location.pathname)?.[0] ?? ''\n  return `${domainPath}/chat-attachments/${encodeURIComponent(sessionId)}/${encodeURIComponent(attachmentId)}`\n}\n"]}
+{"version":3,"file":"attachment-policy.js","sourceRoot":"","sources":["../../client/utils/attachment-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,YAAY,EAAE,eAAe,EAAyB,MAAM,mCAAmC,CAAA;AAgBxG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAChD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAA;AAClC,qFAAqF;AACrF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAA;AAE1C,MAAM,UAAU,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAA;AAClF,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;AACxD,MAAM,SAAS,GAAG,mEAAmE,CAAA;AAErF,mGAAmG;AACnG,MAAM,WAAW,GAAqC;IACpD,KAAK,EAAE,CAAC,SAAS,CAAC;IAClB,IAAI,EAAE,CAAC,GAAG,eAAe,EAAE,GAAG,UAAU,CAAC;IACzC,WAAW,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;CAClC,CAAA;AAED,gHAAgH;AAChH,MAAM,SAAS,GAAG,CAAC,KAAuB,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAQ/G,uEAAuE;AACvE,MAAM,UAAU,WAAW,CAAC,MAA2C;IACrE,OAAO,MAAM,EAAE,QAAQ,IAAI,oBAAoB,CAAA;AACjD,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,QAAQ,CAAC,MAA2C;IAClE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,IAAI,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,iBAAiB,EAAE,CAAA;AAChH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAA2C,EAC3C,KAAwD,EACxD,MAAyB;IAEzB,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAC9B,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAA;IAEjF,oEAAoE;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/E,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;IACrD,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/E,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAEhC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAA;IACvB,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAS,EAAE,CAAA;IACjG,OAAO,KAAK,CAAC,MAAM,KAAK,MAAM;QAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;QAC5F,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAY,EAAE,CAAA;AAClG,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,QAAQ,CAAC,MAA2C;IAClE,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,EAAE,CAAA;IACjC,OAAO,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;AAC9E,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,YAAoB;IACvE,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACxE,OAAO,GAAG,UAAU,qBAAqB,kBAAkB,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAA;AAC9G,CAAC","sourcesContent":["/*\n * What a conversation accepts as attachments - the screen's side of the server rule\n * (server/service/chat-session/attachment-policy.ts, design/ai/shared-dock.md §9-1).\n *\n * The screen checks first so the person hears \"no\" before anything is sent; the door checks again and is\n * the authority. `test/attachment-policy-agree.test.ts` runs both over one table so they cannot drift.\n *\n * The screen's check is the one file-picking rule (@operato/utils `sortPickedFiles`, ADR-0061 2026-10-17): the mode's\n * kinds become an `accept` (the table below, the one place), its size and count become limits, narrowed by the\n * server's upload limits. What stays here is the mode's words: kinds, and a spreadsheet read into text.\n */\nimport { narrowLimits, sortPickedFiles, type FileUploadLimits } from '@operato/utils/file-acceptance.js'\n\n/*\n * 'spreadsheet' is a kind a mode opens, never a file the door receives: the screen reads each .xlsx sheet into CSV\n * text before sending (client/utils/spreadsheet-text.ts), so a mode that takes spreadsheets takes that text.\n */\nexport type AttachmentKind = 'image' | 'text' | 'spreadsheet'\n\nexport interface AttachmentPolicy {\n  kinds: AttachmentKind[]\n  maxBytes?: number\n  maxFiles?: number\n  /** Per text file, the characters the model reads - a sheet read into text longer than this is refused, not cut. */\n  maxChars?: number\n}\n\nexport const DEFAULT_MAX_BYTES = 5 * 1024 * 1024\nexport const DEFAULT_MAX_FILES = 5\n/** How much of a text file reaches the model - the server's TEXT_CHARS_FOR_MODEL. */\nexport const TEXT_CHARS_FOR_MODEL = 20_000\n\nconst TEXT_TYPES = ['text/plain', 'text/csv', 'text/markdown', 'application/json']\nconst TEXT_EXTENSIONS = ['.txt', '.csv', '.md', '.json']\nconst XLSX_TYPE = 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet'\n\n/** Each kind as `accept` patterns - the one table from the mode's kinds to what a picker takes. */\nconst KIND_ACCEPT: Record<AttachmentKind, string[]> = {\n  image: ['image/*'],\n  text: [...TEXT_EXTENSIONS, ...TEXT_TYPES],\n  spreadsheet: ['.xlsx', XLSX_TYPE]\n}\n\n/** A kind the policy takes - text also when it takes spreadsheets, which arrive as the text of their sheets. */\nconst acceptFor = (kinds: AttachmentKind[]) => [...new Set(kinds.flatMap(kind => KIND_ACCEPT[kind]))].join(',')\n\nexport type AttachmentRefusal =\n  | { code: 'attachments-not-accepted' }\n  | { code: 'attachment-kind-not-accepted'; name: string; kinds: AttachmentKind[] }\n  | { code: 'attachment-too-large'; name: string; maxBytes: number }\n  | { code: 'too-many-attachments'; maxFiles: number }\n\n/** The characters of a text file the model reads under this policy. */\nexport function textCharsOf(policy: AttachmentPolicy | null | undefined): number {\n  return policy?.maxChars ?? TEXT_CHARS_FOR_MODEL\n}\n\n/** The mode's size and count as picker limits. */\nexport function limitsOf(policy: AttachmentPolicy | null | undefined): FileUploadLimits {\n  return { maxFileSize: policy?.maxBytes ?? DEFAULT_MAX_BYTES, maxFiles: policy?.maxFiles ?? DEFAULT_MAX_FILES }\n}\n\n/**\n * Whether these files may go, by the one picking rule. `server` is the server's upload limit (shell\n * `fileUploadLimits`); the tighter of it and the mode's policy applies. The first reason, by name: file by file, its\n * kind, then its size, then whether it is one too many - the door says them in the same order.\n */\nexport function refuseAttachments(\n  policy: AttachmentPolicy | null | undefined,\n  files: { name?: string; type?: string; size?: number }[],\n  server?: FileUploadLimits\n): AttachmentRefusal | null {\n  if (!files.length) return null\n  if (!policy || !policy.kinds?.length) return { code: 'attachments-not-accepted' }\n\n  /* What is sent: a spreadsheet arrives as the text of its sheets. */\n  const sent = policy.kinds.map(kind => (kind === 'spreadsheet' ? 'text' : kind))\n  const limits = narrowLimits(limitsOf(policy), server)\n  const { refused } = sortPickedFiles(files, { accept: acceptFor(sent), limits })\n  if (!refused.length) return null\n\n  const [first] = refused\n  if (first.reason === 'count') return { code: 'too-many-attachments', maxFiles: limits.maxFiles! }\n  return first.reason === 'type'\n    ? { code: 'attachment-kind-not-accepted', name: first.file.name || '', kinds: policy.kinds }\n    : { code: 'attachment-too-large', name: first.file.name || '', maxBytes: limits.maxFileSize! }\n}\n\n/** The file picker's `accept` for a policy - a spreadsheet as the person picks it (.xlsx). */\nexport function acceptOf(policy: AttachmentPolicy | null | undefined): string {\n  const kinds = policy?.kinds ?? []\n  return acceptFor(kinds.includes('spreadsheet') ? [...kinds, 'text'] : kinds)\n}\n\n/** Where a conversation's file opens - the gated route, under the page's domain path. */\nexport function chatAttachmentUrl(sessionId: string, attachmentId: string): string {\n  const domainPath = /^\\/domain\\/[^/]+/.exec(location.pathname)?.[0] ?? ''\n  return `${domainPath}/chat-attachments/${encodeURIComponent(sessionId)}/${encodeURIComponent(attachmentId)}`\n}\n"]}

package/dist-server/service/chat-session/attachment-policy.js

@@ -44,10 +44,13 @@ function refuseAttachments(policy, files) {
         return null;
     if (!policy || !policy.kinds?.length)
         return { code: 'attachments-not-accepted' };
+    /*
+     * File by file, in the order sent: its kind, then its size, then whether it is one too many. The screen's picking
+     * rule (@operato/utils sortPickedFiles) says them in this order, so the same batch hears the same "no" from both.
+     */
     const maxFiles = policy.maxFiles ?? exports.DEFAULT_MAX_FILES;
-    if (files.length > maxFiles)
-        return { code: 'too-many-attachments', maxFiles };
     const maxBytes = policy.maxBytes ?? exports.DEFAULT_MAX_BYTES;
+    let taken = 0;
     for (const file of files) {
         const kind = attachmentKindOf(file);
         if (!kind || !takes(policy, kind)) {
@@ -55,6 +58,9 @@ function refuseAttachments(policy, files) {
         }
         if ((file.size ?? 0) > maxBytes)
             return { code: 'attachment-too-large', name: file.name || '', maxBytes };
+        if (taken >= maxFiles)
+            return { code: 'too-many-attachments', maxFiles };
+        taken++;
     }
     return null;
 }

package/dist-server/service/chat-session/attachment-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"attachment-policy.js","sourceRoot":"","sources":["../../../server/service/chat-session/attachment-policy.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AA2BH,4CAOC;AAeD,kCAEC;AAED,8CAmBC;AAGD,sDAEC;AA3DY,QAAA,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AACnC,QAAA,iBAAiB,GAAG,CAAC,CAAA;AAClC,yEAAyE;AAC5D,QAAA,oBAAoB,GAAG,MAAM,CAAA;AAE1C,MAAM,UAAU,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAA;AAClF,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;AAExD,iGAAiG;AACjG,SAAgB,gBAAgB,CAAC,IAAsC;IACrE,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAA;IAC7C,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAA;IAC5C,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC5C,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,MAAM,CAAA;IAClE,OAAO,IAAI,CAAA;AACb,CAAC;AAQD,oHAAoH;AACpH,gHAAgH;AAChH,SAAS,KAAK,CAAC,MAAwB,EAAE,IAAoB;IAC3D,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAA;AACjG,CAAC;AAED,uEAAuE;AACvE,SAAgB,WAAW,CAAC,MAA2C;IACrE,OAAO,MAAM,EAAE,QAAQ,IAAI,4BAAoB,CAAA;AACjD,CAAC;AAED,SAAgB,iBAAiB,CAC/B,MAA2C,EAC3C,KAAwD;IAExD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAC9B,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAA;IAEjF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,yBAAiB,CAAA;IACrD,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,CAAA;IAE9E,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,yBAAiB,CAAA;IACrD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAA;QAC7F,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAA;IAC3G,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,+GAA+G;AAC/G,SAAgB,qBAAqB,CAAC,IAA8E;IAClH,OAAO,eAAe,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,IAAI,SAAS,KAAK,IAAI,CAAC,QAAQ,IAAI,cAAc,KAAK,IAAI,CAAC,IAAI,IAAI,GAAG,0CAA0C,CAAA;AAC7J,CAAC","sourcesContent":["/*\n * What a conversation accepts as attachments - declared by its mode (design/ai/shared-dock.md §9-1).\n *\n * Pure, so the rule is tested alone and the screen can say \"no\" before anything is sent. A mode that\n * declares nothing accepts nothing: the chat once took .csv and .json, carried them, and no code ever\n * showed them to the model - the person got an answer about a file it had never seen (AI standard §7).\n */\n\n/*\n * 'spreadsheet' is a kind a mode opens, never a file the door receives: the screen reads each .xlsx sheet into CSV\n * text before sending (client/utils/spreadsheet-text.ts), so a mode that takes spreadsheets takes that text.\n */\nexport type AttachmentKind = 'image' | 'text' | 'spreadsheet'\n\nexport interface AttachmentPolicy {\n  kinds: AttachmentKind[]\n  /** Per file. */\n  maxBytes?: number\n  /** Per message. */\n  maxFiles?: number\n  /** Per text file, the characters the model reads - a sheet read into text longer than this is refused, not cut. */\n  maxChars?: number\n}\n\nexport const DEFAULT_MAX_BYTES = 5 * 1024 * 1024\nexport const DEFAULT_MAX_FILES = 5\n/** How much of a text file reaches the model in the turn it was sent. */\nexport const TEXT_CHARS_FOR_MODEL = 20_000\n\nconst TEXT_TYPES = ['text/plain', 'text/csv', 'text/markdown', 'application/json']\nconst TEXT_EXTENSIONS = ['.txt', '.csv', '.md', '.json']\n\n/** Which kind a file is, from its type - and its name when the browser did not know the type. */\nexport function attachmentKindOf(file: { type?: string; name?: string }): AttachmentKind | null {\n  const type = (file.type || '').toLowerCase()\n  if (type.startsWith('image/')) return 'image'\n  if (TEXT_TYPES.includes(type)) return 'text'\n  const name = (file.name || '').toLowerCase()\n  if (TEXT_EXTENSIONS.some(ext => name.endsWith(ext))) return 'text'\n  return null\n}\n\nexport type AttachmentRefusal =\n  | { code: 'attachments-not-accepted' }\n  | { code: 'attachment-kind-not-accepted'; name: string; kinds: AttachmentKind[] }\n  | { code: 'attachment-too-large'; name: string; maxBytes: number }\n  | { code: 'too-many-attachments'; maxFiles: number }\n\n/** `null` when every file may go; otherwise the first reason, by name - said before sending, never cut silently. */\n/** A kind the policy takes - text also when it takes spreadsheets, which arrive as the text of their sheets. */\nfunction takes(policy: AttachmentPolicy, kind: AttachmentKind): boolean {\n  return policy.kinds.includes(kind) || (kind === 'text' && policy.kinds.includes('spreadsheet'))\n}\n\n/** The characters of a text file the model reads under this policy. */\nexport function textCharsOf(policy: AttachmentPolicy | null | undefined): number {\n  return policy?.maxChars ?? TEXT_CHARS_FOR_MODEL\n}\n\nexport function refuseAttachments(\n  policy: AttachmentPolicy | null | undefined,\n  files: { name?: string; type?: string; size?: number }[]\n): AttachmentRefusal | null {\n  if (!files.length) return null\n  if (!policy || !policy.kinds?.length) return { code: 'attachments-not-accepted' }\n\n  const maxFiles = policy.maxFiles ?? DEFAULT_MAX_FILES\n  if (files.length > maxFiles) return { code: 'too-many-attachments', maxFiles }\n\n  const maxBytes = policy.maxBytes ?? DEFAULT_MAX_BYTES\n  for (const file of files) {\n    const kind = attachmentKindOf(file)\n    if (!kind || !takes(policy, kind)) {\n      return { code: 'attachment-kind-not-accepted', name: file.name || '', kinds: policy.kinds }\n    }\n    if ((file.size ?? 0) > maxBytes) return { code: 'attachment-too-large', name: file.name || '', maxBytes }\n  }\n  return null\n}\n\n/** The line history keeps for a file once its turn is past - the model reads the file again only by asking. */\nexport function attachmentHistoryLine(file: { id: string; name?: string; mimetype?: string; size?: number | string }): string {\n  return `[attachment ${file.id}: ${file.name || 'unnamed'} (${file.mimetype || 'unknown type'}, ${file.size ?? '?'} bytes) - readChatAttachment to open it]`\n}\n"]}
+{"version":3,"file":"attachment-policy.js","sourceRoot":"","sources":["../../../server/service/chat-session/attachment-policy.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AA2BH,4CAOC;AAeD,kCAEC;AAED,8CAwBC;AAGD,sDAEC;AAhEY,QAAA,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AACnC,QAAA,iBAAiB,GAAG,CAAC,CAAA;AAClC,yEAAyE;AAC5D,QAAA,oBAAoB,GAAG,MAAM,CAAA;AAE1C,MAAM,UAAU,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAA;AAClF,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;AAExD,iGAAiG;AACjG,SAAgB,gBAAgB,CAAC,IAAsC;IACrE,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAA;IAC7C,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAA;IAC5C,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC5C,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,MAAM,CAAA;IAClE,OAAO,IAAI,CAAA;AACb,CAAC;AAQD,oHAAoH;AACpH,gHAAgH;AAChH,SAAS,KAAK,CAAC,MAAwB,EAAE,IAAoB;IAC3D,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAA;AACjG,CAAC;AAED,uEAAuE;AACvE,SAAgB,WAAW,CAAC,MAA2C;IACrE,OAAO,MAAM,EAAE,QAAQ,IAAI,4BAAoB,CAAA;AACjD,CAAC;AAED,SAAgB,iBAAiB,CAC/B,MAA2C,EAC3C,KAAwD;IAExD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAC9B,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAA;IAEjF;;;OAGG;IACH,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,yBAAiB,CAAA;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,yBAAiB,CAAA;IACrD,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAA;QAC7F,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAA;QACzG,IAAI,KAAK,IAAI,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,CAAA;QACxE,KAAK,EAAE,CAAA;IACT,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,+GAA+G;AAC/G,SAAgB,qBAAqB,CAAC,IAA8E;IAClH,OAAO,eAAe,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,IAAI,SAAS,KAAK,IAAI,CAAC,QAAQ,IAAI,cAAc,KAAK,IAAI,CAAC,IAAI,IAAI,GAAG,0CAA0C,CAAA;AAC7J,CAAC","sourcesContent":["/*\n * What a conversation accepts as attachments - declared by its mode (design/ai/shared-dock.md §9-1).\n *\n * Pure, so the rule is tested alone and the screen can say \"no\" before anything is sent. A mode that\n * declares nothing accepts nothing: the chat once took .csv and .json, carried them, and no code ever\n * showed them to the model - the person got an answer about a file it had never seen (AI standard §7).\n */\n\n/*\n * 'spreadsheet' is a kind a mode opens, never a file the door receives: the screen reads each .xlsx sheet into CSV\n * text before sending (client/utils/spreadsheet-text.ts), so a mode that takes spreadsheets takes that text.\n */\nexport type AttachmentKind = 'image' | 'text' | 'spreadsheet'\n\nexport interface AttachmentPolicy {\n  kinds: AttachmentKind[]\n  /** Per file. */\n  maxBytes?: number\n  /** Per message. */\n  maxFiles?: number\n  /** Per text file, the characters the model reads - a sheet read into text longer than this is refused, not cut. */\n  maxChars?: number\n}\n\nexport const DEFAULT_MAX_BYTES = 5 * 1024 * 1024\nexport const DEFAULT_MAX_FILES = 5\n/** How much of a text file reaches the model in the turn it was sent. */\nexport const TEXT_CHARS_FOR_MODEL = 20_000\n\nconst TEXT_TYPES = ['text/plain', 'text/csv', 'text/markdown', 'application/json']\nconst TEXT_EXTENSIONS = ['.txt', '.csv', '.md', '.json']\n\n/** Which kind a file is, from its type - and its name when the browser did not know the type. */\nexport function attachmentKindOf(file: { type?: string; name?: string }): AttachmentKind | null {\n  const type = (file.type || '').toLowerCase()\n  if (type.startsWith('image/')) return 'image'\n  if (TEXT_TYPES.includes(type)) return 'text'\n  const name = (file.name || '').toLowerCase()\n  if (TEXT_EXTENSIONS.some(ext => name.endsWith(ext))) return 'text'\n  return null\n}\n\nexport type AttachmentRefusal =\n  | { code: 'attachments-not-accepted' }\n  | { code: 'attachment-kind-not-accepted'; name: string; kinds: AttachmentKind[] }\n  | { code: 'attachment-too-large'; name: string; maxBytes: number }\n  | { code: 'too-many-attachments'; maxFiles: number }\n\n/** `null` when every file may go; otherwise the first reason, by name - said before sending, never cut silently. */\n/** A kind the policy takes - text also when it takes spreadsheets, which arrive as the text of their sheets. */\nfunction takes(policy: AttachmentPolicy, kind: AttachmentKind): boolean {\n  return policy.kinds.includes(kind) || (kind === 'text' && policy.kinds.includes('spreadsheet'))\n}\n\n/** The characters of a text file the model reads under this policy. */\nexport function textCharsOf(policy: AttachmentPolicy | null | undefined): number {\n  return policy?.maxChars ?? TEXT_CHARS_FOR_MODEL\n}\n\nexport function refuseAttachments(\n  policy: AttachmentPolicy | null | undefined,\n  files: { name?: string; type?: string; size?: number }[]\n): AttachmentRefusal | null {\n  if (!files.length) return null\n  if (!policy || !policy.kinds?.length) return { code: 'attachments-not-accepted' }\n\n  /*\n   * File by file, in the order sent: its kind, then its size, then whether it is one too many. The screen's picking\n   * rule (@operato/utils sortPickedFiles) says them in this order, so the same batch hears the same \"no\" from both.\n   */\n  const maxFiles = policy.maxFiles ?? DEFAULT_MAX_FILES\n  const maxBytes = policy.maxBytes ?? DEFAULT_MAX_BYTES\n  let taken = 0\n  for (const file of files) {\n    const kind = attachmentKindOf(file)\n    if (!kind || !takes(policy, kind)) {\n      return { code: 'attachment-kind-not-accepted', name: file.name || '', kinds: policy.kinds }\n    }\n    if ((file.size ?? 0) > maxBytes) return { code: 'attachment-too-large', name: file.name || '', maxBytes }\n    if (taken >= maxFiles) return { code: 'too-many-attachments', maxFiles }\n    taken++\n  }\n  return null\n}\n\n/** The line history keeps for a file once its turn is past - the model reads the file again only by asking. */\nexport function attachmentHistoryLine(file: { id: string; name?: string; mimetype?: string; size?: number | string }): string {\n  return `[attachment ${file.id}: ${file.name || 'unnamed'} (${file.mimetype || 'unknown type'}, ${file.size ?? '?'} bytes) - readChatAttachment to open it]`\n}\n"]}