dsh-plugin-lookatstudy 0.20.0 → 0.20.1

package/lib/index.d.mts

@@ -32,7 +32,7 @@ declare const Config: z<Config>;
 declare const name = "lookatstudy-plugin";
 declare const inject: string[];
 /**
- * Register the activation-gated study surface: the 25 `study_*` tools (kept
+ * Register the activation-gated study surface: the 31 `study_*` tools (kept
  * unregistered while dormant), the tutor persona (stable core + soul), the
  * dynamic learner-snapshot context, and the `/study` command — every prompt
  * text renders empty while inactive, and empty sections are dropped at

package/lib/index.mjs

@@ -2626,11 +2626,13 @@ function sendJson(res, status, value) {
 /**
 * Read one JSON body, answering 400 on malformed or oversized input so the
 * handler never throws into the HTTP layer.
+* @param maxBytes - per-route body ceiling; defaults to the tight 64 kB every
+* small-json route wants (issue #4: only the attachment intake lifts it).
 * @returns the parsed value, or undefined when the response is already sent.
 */
-async function readJsonBodySafe(req, res) {
+async function readJsonBodySafe(req, res, maxBytes = 65536) {
 	try {
-		return await readJsonBody(req);
+		return await readJsonBody(req, maxBytes);
 	} catch (error) {
 		sendJson(res, 400, {
 			ok: false,
@@ -2639,13 +2641,13 @@ async function readJsonBodySafe(req, res) {
 		return;
 	}
 }
-/** Read one JSON request body with a hard 64 kB cap; malformed bodies reject. */
-function readJsonBody(req) {
+/** Read one JSON request body with a hard cap (64 kB unless the route lifts it); malformed bodies reject. */
+function readJsonBody(req, maxBytes = 65536) {
 	return new Promise((resolve, reject) => {
 		const chunks = [];
 		req.on("data", (chunk) => {
 			chunks.push(chunk);
-			if (chunks.reduce((n, c) => n + c.length, 0) > 65536) {
+			if (chunks.reduce((n, c) => n + c.length, 0) > maxBytes) {
 				reject(/* @__PURE__ */ new Error("request body too large"));
 				return;
 			}
@@ -3140,7 +3142,7 @@ function registerDashboard(webServer, deps) {
 				return;
 			}
 			if (req.method === "POST" && pathname === "/lookatstudy/api/attachment") {
-				const body = await readJsonBodySafe(req, res);
+				const body = await readJsonBodySafe(req, res, 29360128);
 				if (body === void 0) return;
 				const name = typeof body.name === "string" ? body.name.trim() : "";
 				const data = typeof body.dataBase64 === "string" ? body.dataBase64 : "";
@@ -8843,7 +8845,7 @@ function createStudySurface(registry, store) {
 const name = "lookatstudy-plugin";
 const inject = ["tools", "systemPrompt"];
 /**
-* Register the activation-gated study surface: the 25 `study_*` tools (kept
+* Register the activation-gated study surface: the 31 `study_*` tools (kept
 * unregistered while dormant), the tutor persona (stable core + soul), the
 * dynamic learner-snapshot context, and the `/study` command — every prompt
 * text renders empty while inactive, and empty sections are dropped at

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin-lookatstudy",
-  "version": "0.20.0",
+  "version": "0.20.1",
   "packageManager": "pnpm@11.7.0",
   "description": "Turn any markdown, local folder, or GitHub learning repo into a guided course inside DeepSeek Harness: gated skill-tree progression, BKT mastery tracking, SM-2 spaced repetition.",
   "type": "module",