pi-roundtable 0.7.0 → 0.7.3

package/CHANGELOG.md

@@ -5,6 +5,44 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [0.7.3] - 2026-10-03
+
+### Fixed
+
+- The sandbox's rich broker streams model responses instead of buffering them and no longer cuts calls at 60 or 120 seconds; the turn deadline is the bound. The worker can no longer raise effort or thinking budget above the host-judged level. `startFresh` and start replace guest-planted symlinks instead of following them, and only the two reserved blocks of the 192.0 range are refused, not all of it.
+
+### Added
+
+- Sandbox `assertPublicUrl`, `safeFetch` options `followRedirects` and `headers`, and a research-worker `fetchContent` hook, so a host can keep a library's own extractors while its fetches of a model-supplied URL stay pinned and vetted per hop. Broker upstream errors keep their status, body and back-off headers.
+- Coding accepts `pushHoldText` for trusted wording of the held `repo_push` approval card.
+- Export `withReplyFiles` for standalone workers to collect reply attachments with the same turn-wide limits, success/failure semantics, and asynchronous scope as host conversation turns.
+- Export `prepareImageBytes` and `ImagePreparationError` from the kit for raster bytes without reopening guest-writable paths; reject encoded images over 25 MiB or headers/aggregate frames over 64 MP before native decode, while preserving ordinary 48 MP images and 9000×1 downscaling. File-based preparation is byte-bounded too and decodes once instead of twice.
+- Drawing accepts `CardPresentation` through `DrawingOptions.cardPresentation` for trusted operator headings and reversal suffixes without changing tool arguments or default captions.
+
+## [0.7.2] - 2026-10-02
+
+### Fixed
+
+- The release preflight reads npm 12's `npm pack --json` report (an object keyed by package name) and `npm view --json` name (a one-element array) as well as npm 11's, so the `v0.7.1` tag stopped before publishing anything.
+
+## [0.7.1] - 2026-10-02
+
+Tagged but not published: the release preflight failed under npm 12 before any package was published. Its changes ship in 0.7.2.
+
+### Docs
+
+- Document five official packages on the site and link their guides from `docs/plugins.md`, including installation, configuration, platform requirements, and security models.
+  Add a Traditional Chinese `release-notice` guide and reply-attachment guide.
+
+### Changed
+
+- Official drawing, coding, web, sandbox, and MCP plugins now live under `packages/` as Bun workspaces with their original Git history.
+  They remain separate npm packages, checked alongside the core in CI and released in lockstep from one `v*` tag through `publish.yml`.
+  The core's npm file list and release tags are unchanged.
+- `pi-roundtable-mcp` moves from its standalone repository to `packages/mcp` and jumps from 0.4.1 to lockstep 0.7.0, retaining its public API.
+  Both MCP and sandbox now peer on `>=0.7.0 <0.8.0` and test against the live core 0.7.0.
+  Shared CI runs MCP's PostgreSQL tests and explicitly opts into sandbox's native Linux Docker integration.
+
 ## [0.7.0] - 2026-10-02
 
 ### Added

package/docs/plugins.md

@@ -52,9 +52,14 @@ Import fixtures and fake threads from `pi-roundtable/testing` for tests.
 
 #### Helpers for a Pi session of your own
 
-Use the kit's building blocks for a plugin that runs Pi itself, such as a coding worker or a container with no network:
+Use the kit's building blocks for a plugin that runs Pi itself, such as a coding worker:
 
 - MCP: `mcpExtension` and `VirtualServer` expose MCP servers to a session, and `mcpAdapterExtension` and `readAttachmentExtension` do the same inside an out-of-process worker.
+- Admitted media: `prepareImageBytes(data, contentType)` prepares raster bytes without reopening a guest-writable path; supported small images remain unchanged, and larger sides/encoded images are downsized to JPEG at a 2,000 px long side.
+  Before any native decoder, it refuses more than 25 MiB of encoded bytes or 64 million decoded pixels, including aggregate GIF/WebP frame dimensions.
+  `ImagePreparationError.reason` is `byte-limit`, `pixel-limit`, or `invalid-image`; hosts can localize refusals without parsing native decoder errors.
+  Ordinary 48 MP images and thin 9000×1 images remain admitted.
+  This helper is not a downloader or filesystem validator.
 - Work: `promptSlot` (how a run asks the owner while it works), `workTimeout` (a time limit that does not count the time spent waiting on the owner), `runWorkerTask`, `archiveSessions`, and `approvalCard` and `canonicalJson` for the cards of held actions.
 - Shell: `SHELL_TOOLS` and `shellHoldRule`, the hold rule that keeps risky host-shell commands behind the owner's approval.
 - Tools: `textToolsExtension`, `requiredString`, `stringList` (with `toolText` and `toolError`) for tools that return text.
@@ -63,6 +68,9 @@ Use the kit's building blocks for a plugin that runs Pi itself, such as a coding
 - Effort: `effortJudge` picks a turn's thinking level from a message with your own brief (`EffortBrief`, `JUDGE_WORK`).
 - Presentation and small helpers: `thinkingLine`, `zonedStamp(date, timeZone)`, `channelQueue()` (a queue of your own, so work does not wait behind a running turn), `checkRepoName` and `SKILL_LIST_TOOL` with `skillListExtension` for repositories and skills, and `searchTerms` for memory search.
 
+The [coding package source][coding-source] shows these helpers in an out-of-process Pi worker.
+The [MCP package source][mcp-source] is a full example of connectors and remote MCP endpoints.
+
 `roundtable add plugin <name>` creates `plugins/<name>.ts` and its test from a small template and lists it in `roundtable.config.ts`.
 The name is lowercase words joined by dashes, such as `my-notes`.
 Three names are reserved for the [official plugins](#official-plugins): `codex-images`, `dice`, and `release-notice` copy a ready-made plugin into the project.
@@ -385,6 +393,7 @@ The core copies the bytes when the call succeeds, so the tool may reuse its buff
 The tool does not send a message itself; the successful turn returns `TurnResult.files` and the reply path hands them to the surface as `OutboundReply.files`.
 On Discord, files follow the text as one file per message to avoid image grids, all through the same agent webhook name and avatar as the text.
 Other surfaces may send the text and files in one message or a message group.
+The [drawing package source][drawing-source] uses `turn.attachFile` to deliver images produced by its tools.
 
 <!-- example: examples/reply-files.ts -->
 ```ts
@@ -425,6 +434,9 @@ A Pi package should use the host's peer dependency on `pi-roundtable`, not bundl
 Transient `SessionContext.runTask` tasks return only text and cannot attach to their parent's reply.
 Calling the helper outside `context.turns.run` or an agent-team turn, or after that turn finishes, throws `ReplyFileError`; direct standalone runtime calls have no reply collector.
 Await work that produces files before returning from the tool.
+A standalone isolated worker may wrap its complete awaited turn in `withReplyFiles(supported, run)` from the main entry.
+`run` returns `Promise<TurnResult>`; the collector validates any returned files, includes accepted attachments only on success, and deactivates on success, failure, or throw.
+The caller must deliver the returned `files` and must not open a fresh collector per tool to evade turn-wide limits.
 
 | Case | Behavior |
 |---|---|
@@ -448,6 +460,7 @@ Test an attachment tool with an injected file-capable surface and inspect `harne
 A held call is described to the owner, who approves or refuses it in Discord before the call runs.
 A tool's `hold` returns the description for its own calls, and `holdRules` are rules over every tool call, asked in order until one describes the call.
 Each rule needs a name, unique across plugins.
+The [coding package source][coding-source] uses an owner hold for `repo_push`.
 
 <!-- example: examples/holds.ts -->
 ```ts
@@ -867,6 +880,7 @@ When no `images` provider is configured, `agent_create` has no `avatar_prompt` p
 The owner's profile panel reports the missing provider and offers no redraw option.
 Each agent gets a picture generated from its display name and the assistant's icon, so you can tell agents apart.
 `bunx roundtable doctor` reports whether the slot is filled.
+The copy-in [`codex-images` provider template][codex-images-template] is a complete implementation of the `images` slot.
 
 <!-- example: examples/providers.ts -->
 ```ts
@@ -1259,6 +1273,7 @@ The configuration's `http` block opens a listener named `public`, which serves t
 A route names the listener, a path (`{ exact }` or `{ prefix }`), optionally the methods, and a handler that gets a `Request` and returns a `Response`.
 Two routes that could take the same request are refused, so a route cannot shadow the avatars.
 This listener is reachable from the internet, so check a secret in the handler before taking action.
+The [web package source][web-source] is a complete owner-console implementation built on these HTTP routes.
 A handler that throws, or returns a rejected promise, answers `500 Internal Server Error` with that fixed body, and the listener keeps serving.
 The host logs one error line with the route's `name` and its `listener`; it never logs the request URL, since a path may hold a secret.
 
@@ -1455,6 +1470,8 @@ Give `stop` to a claim whose conversations run turns that can be interrupted.
 
 For a claim with its own conversations, return the conversation's kind from `startFresh`.
 Run turns with [`context.turns`](#personas-and-contextturns-conversations-of-a-kind-of-your-own), which handles typing, the stop control, events, and replies.
+The [sandbox package source][sandbox-source] is a complete guest-only channel claim backed by a no-network Docker agent and a host-side broker.
+Its container runs a minimal Chat Completions loop rather than a Pi session.
 
 <!-- example: examples/channels.ts -->
 ```ts
@@ -1881,10 +1898,43 @@ The package ships three plugins you can copy into a project and change.
 `roundtable add plugin codex-images`, `roundtable add plugin dice`, and `roundtable add plugin release-notice` write `plugins/<name>.ts` and `plugins/<name>.test.ts`, import the plugin in `roundtable.config.ts`, and list it in `plugins`.
 You can edit the copied files; `add plugin` refuses to overwrite existing ones.
 The three names are reserved for these copies.
+Inspect the ready-made implementations in the [codex-images][codex-images-template], [dice][dice-template], and [release-notice][release-notice-template] templates.
 
-A separate package, [pi-roundtable-mcp](https://www.npmjs.com/package/pi-roundtable-mcp), adds two more plugins, `mcpConnectors` and `remoteMcp`.
+The [pi-roundtable-mcp][mcp-package] workspace, published separately on npm, adds two more plugins, `mcpConnectors` and `remoteMcp`.
 The first lets the owner add MCP servers such as Notion or a calendar from Discord and gives your code the list; the second lets an agent outside Discord reach your agent.
-Install it with `bun add pi-roundtable-mcp`.
+Install it with `bun add pi-roundtable-mcp` after the next lockstep release publishes the migrated package.
+Until then, npm's MCP 0.4.1 requires core below 0.6.0 and is not compatible with core 0.7.x.
+
+Five official packages live in this repository as Bun workspaces and publish as separate npm packages, versioned in lockstep with the core.
+The [site guide source files][package-guides] describe installation, requirements, configuration, and security considerations:
+
+- [pi-roundtable-drawing][drawing-package]: [site guide source][drawing-guide] · local relationship maps, magic circles, sigils, sacred geometry, and card spreads.
+- [pi-roundtable-coding][coding-package]: [site guide source][coding-guide] · repository shelves and owner-approved Pi coding workers.
+- [pi-roundtable-web][web-package]: [site guide source][web-guide] · an owner-only console for conversations, transcripts, and memory notes with live updates.
+- [pi-roundtable-sandbox][sandbox-package]: [site guide source][sandbox-guide] · sealed guest channels on native Linux Docker with a host-only credential broker and allow-listed tools.
+- [pi-roundtable-mcp][mcp-package]: [site guide source][mcp-guide] · MCP connectors through a gateway and remote MCP endpoints for agent turns and owner-granted Discord channel tools.
+
+[drawing-package]: https://github.com/wayne930242/pi-roundtable/blob/master/packages/drawing/README.md
+[coding-package]: https://github.com/wayne930242/pi-roundtable/blob/master/packages/coding/README.md
+[web-package]: https://github.com/wayne930242/pi-roundtable/blob/master/packages/web/README.md
+[sandbox-package]: https://github.com/wayne930242/pi-roundtable/blob/master/packages/sandbox/README.md
+[mcp-package]: https://github.com/wayne930242/pi-roundtable/blob/master/packages/mcp/README.md
+[package-guides]: https://github.com/wayne930242/pi-roundtable/tree/master/site/src/content/docs/plugins/
+[drawing-guide]: https://github.com/wayne930242/pi-roundtable/blob/master/site/src/content/docs/plugins/drawing-package.mdx
+[coding-guide]: https://github.com/wayne930242/pi-roundtable/blob/master/site/src/content/docs/plugins/coding-package.mdx
+[web-guide]: https://github.com/wayne930242/pi-roundtable/blob/master/site/src/content/docs/plugins/web-package.mdx
+[sandbox-guide]: https://github.com/wayne930242/pi-roundtable/blob/master/site/src/content/docs/plugins/sandbox-package.mdx
+[mcp-guide]: https://github.com/wayne930242/pi-roundtable/blob/master/site/src/content/docs/plugins/mcp-package.mdx
+[coding-source]: https://github.com/wayne930242/pi-roundtable/tree/master/packages/coding
+[sandbox-source]: https://github.com/wayne930242/pi-roundtable/tree/master/packages/sandbox
+[web-source]: https://github.com/wayne930242/pi-roundtable/tree/master/packages/web
+[drawing-source]: https://github.com/wayne930242/pi-roundtable/tree/master/packages/drawing
+[mcp-source]: https://github.com/wayne930242/pi-roundtable/tree/master/packages/mcp
+[codex-images-template]: https://github.com/wayne930242/pi-roundtable/blob/master/templates/official/codex-images/plugin.ts
+[dice-template]: https://github.com/wayne930242/pi-roundtable/blob/master/templates/official/dice/plugin.ts
+[release-notice-template]: https://github.com/wayne930242/pi-roundtable/blob/master/templates/official/release-notice/plugin.ts
+
+Install only the packages your host uses; the core does not depend on these workspaces.
 
 | Plugin | What it does | What it needs |
 |---|---|---|
@@ -2437,6 +2487,9 @@ Import from the entries listed below; source area files are internal.
 | `TurnSelection` | `pi-roundtable` | type |
 | `Weekday` | `pi-roundtable` | type |
 | `attachReplyFile` | `pi-roundtable` | value |
+| `withReplyFiles` | `pi-roundtable` | value |
+| `prepareImageBytes` | `pi-roundtable/kit` | value |
+| `ImagePreparationError` | `pi-roundtable/kit` | value |
 | `channelKey` | `pi-roundtable` | value |
 | `definePlugin` | `pi-roundtable` | value |
 | `defineRoundtable` | `pi-roundtable` | value |

package/package.json

@@ -1,9 +1,15 @@
 {
 	"name": "pi-roundtable",
-	"version": "0.7.0",
+	"version": "0.7.3",
 	"description": "A plugin-driven Pi agent server for Discord",
 	"type": "module",
 	"license": "MIT",
+	"workspaces": [
+		"packages/*"
+	],
+	"overrides": {
+		"pi-roundtable": "link:."
+	},
 	"engines": {
 		"bun": ">=1.3.0"
 	},
@@ -45,7 +51,8 @@
 	"scripts": {
 		"typecheck": "tsc --noEmit",
 		"lint": "biome check .",
-		"test": "bun test"
+		"test": "bun test ./src ./scripts ./examples",
+		"check:packages": "bun run --workspaces typecheck && bun run --workspaces lint && bun run --workspaces test"
 	},
 	"dependencies": {
 		"@babel/parser": "7.29.9",
@@ -63,7 +70,7 @@
 	},
 	"devDependencies": {
 		"typescript": "7.0.2",
-		"@biomejs/biome": "2.5.14",
+		"@biomejs/biome": "2.5.15",
 		"@types/bun": "1.4.2",
 		"pi-web-access": "0.35.0"
 	}

package/src/core/attachments/image-budget.ts

@@ -0,0 +1,158 @@
+import { ImagePreparationError } from "./image-preparation-error.ts";
+
+const invalid = () => new ImagePreparationError("invalid-image");
+
+/** Inspect only encoded headers/blocks. Never allocate a raster or follow a media URL. */
+export function assertImagePixelBudget(bytes: Buffer, budget: number): void {
+	const pixels = (width: number, height: number): number => {
+		if (width < 1 || height < 1) throw invalid();
+		const area = width * height;
+		check(area);
+		return area;
+	};
+	const check = (area: number) => {
+		if (area > budget) throw new ImagePreparationError("pixel-limit");
+	};
+	const need = (end: number, limit = bytes.length) => {
+		if (end > limit) throw invalid();
+	};
+	const u24 = (at: number) => bytes.readUIntLE(at, 3);
+	const blockEnd = (start: number): number => {
+		let at = start;
+		for (;;) {
+			need(at + 1);
+			const length = bytes[at++] ?? 0;
+			if (!length) return at;
+			at += length;
+			need(at);
+		}
+	};
+
+	if (
+		bytes.subarray(0, 8).equals(Buffer.from([137, 80, 78, 71, 13, 10, 26, 10]))
+	) {
+		need(24);
+		if (
+			bytes.readUInt32BE(8) !== 13 ||
+			bytes.toString("ascii", 12, 16) !== "IHDR"
+		)
+			throw invalid();
+		pixels(bytes.readUInt32BE(16), bytes.readUInt32BE(20));
+		return;
+	}
+	if (bytes[0] === 0xff && bytes[1] === 0xd8) {
+		let at = 2;
+		while (at < bytes.length) {
+			if (bytes[at++] !== 0xff) throw invalid();
+			while (bytes[at] === 0xff) at++;
+			need(at + 1);
+			const marker = bytes[at++] ?? 0;
+			if (marker === 0xda || marker === 0xd9) break;
+			if (marker === 1 || marker === 0xd8 || (marker >= 0xd0 && marker <= 0xd7))
+				continue;
+			need(at + 2);
+			const length = bytes.readUInt16BE(at);
+			if (length < 2) throw invalid();
+			need(at + length);
+			if (
+				marker >= 0xc0 &&
+				marker <= 0xcf &&
+				![0xc4, 0xc8, 0xcc].includes(marker)
+			) {
+				if (length < 8) throw invalid();
+				pixels(bytes.readUInt16BE(at + 5), bytes.readUInt16BE(at + 3));
+				return;
+			}
+			at += length;
+		}
+		throw invalid();
+	}
+	if (["GIF87a", "GIF89a"].includes(bytes.toString("ascii", 0, 6))) {
+		need(13);
+		pixels(bytes.readUInt16LE(6), bytes.readUInt16LE(8));
+		let at =
+			13 + ((bytes[10] ?? 0) & 0x80 ? 3 * (2 << ((bytes[10] ?? 0) & 7)) : 0);
+		let total = 0;
+		need(at);
+		while (at < bytes.length) {
+			const marker = bytes[at++];
+			if (marker === 0x3b) {
+				if (!total) throw invalid();
+				return;
+			}
+			if (marker === 0x21) {
+				need(at + 1);
+				at = blockEnd(at + 1);
+				continue;
+			}
+			if (marker !== 0x2c) throw invalid();
+			need(at + 9);
+			total += pixels(bytes.readUInt16LE(at + 4), bytes.readUInt16LE(at + 6));
+			check(total);
+			const flags = bytes[at + 8] ?? 0;
+			at += 9 + (flags & 0x80 ? 3 * (2 << (flags & 7)) : 0);
+			need(at + 1);
+			at = blockEnd(at + 1);
+		}
+		throw invalid();
+	}
+	if (
+		bytes.toString("ascii", 0, 4) === "RIFF" &&
+		bytes.toString("ascii", 8, 12) === "WEBP"
+	) {
+		need(12);
+		const end = bytes.readUInt32LE(4) + 8;
+		need(end);
+		if (end < 12) throw invalid();
+		const chunks = (start: number, limit: number, frames: boolean): number => {
+			let at = start,
+				canvas = 0,
+				total = 0;
+			while (at < limit) {
+				need(at + 8, limit);
+				const type = bytes.toString("ascii", at, at + 4);
+				const size = bytes.readUInt32LE(at + 4);
+				const data = at + 8,
+					next = data + size;
+				need(next, limit);
+				let area = 0;
+				if (type === "VP8X") {
+					need(data + 10, next);
+					canvas = pixels(u24(data + 4) + 1, u24(data + 7) + 1);
+				} else if (type === "VP8 ") {
+					need(data + 10, next);
+					if (
+						!bytes
+							.subarray(data + 3, data + 6)
+							.equals(Buffer.from([0x9d, 0x01, 0x2a]))
+					)
+						throw invalid();
+					area = pixels(
+						bytes.readUInt16LE(data + 6) & 0x3fff,
+						bytes.readUInt16LE(data + 8) & 0x3fff,
+					);
+				} else if (type === "VP8L") {
+					need(data + 5, next);
+					if (bytes[data] !== 0x2f) throw invalid();
+					const bits = bytes.readUInt32LE(data + 1);
+					area = pixels((bits & 0x3fff) + 1, ((bits >>> 14) & 0x3fff) + 1);
+				} else if (type === "ANMF") {
+					if (!frames) throw invalid();
+					need(data + 16, next);
+					const declared = pixels(u24(data + 6) + 1, u24(data + 9) + 1);
+					area = Math.max(declared, chunks(data + 16, next, false));
+				}
+				total += area;
+				check(Math.max(total, canvas));
+				at = next + (size & 1);
+				need(at, limit);
+			}
+			const result = Math.max(total, canvas);
+			if (!result) throw invalid();
+			return result;
+		};
+		chunks(12, end, true);
+		return;
+	}
+	throw invalid();
+}

package/src/core/attachments/image-prep.ts

@@ -1,5 +1,8 @@
 import { createCanvas, loadImage } from "canvas";
 import type { ModelImage, StoredAttachment } from "../domain/attachment.ts";
+import { MAX_ATTACHMENT_BYTES } from "./attachment-fetcher.ts";
+import { assertImagePixelBudget } from "./image-budget.ts";
+import { ImagePreparationError } from "./image-preparation-error.ts";
 
 /** Images the model accepts as images; other files stay files. */
 const IMAGE_TYPES = new Set([
@@ -29,15 +32,41 @@ export function isModelImage(
 export async function prepareImage(
 	file: Pick<StoredAttachment, "path" | "contentType">,
 ): Promise<ModelImage> {
-	const bytes = Buffer.from(await Bun.file(file.path).arrayBuffer());
-	const mimeType = file.contentType.split(";")[0]?.trim().toLowerCase() ?? "";
-	if (bytes.byteLength <= MAX_RAW_BYTES) {
-		const image = await loadImage(bytes);
-		if (Math.max(image.width, image.height) <= MAX_SIDE) {
-			return { data: bytes.toString("base64"), mimeType };
+	const reader = Bun.file(file.path).stream().getReader();
+	const chunks: Uint8Array[] = [];
+	let size = 0;
+	try {
+		for (;;) {
+			const { value, done } = await reader.read();
+			if (done) break;
+			size += value.byteLength;
+			if (size > MAX_ATTACHMENT_BYTES)
+				throw new ImagePreparationError("byte-limit");
+			chunks.push(value);
 		}
+	} finally {
+		await reader.cancel();
 	}
+	return prepareImageBytes(Buffer.concat(chunks, size), file.contentType);
+}
+
+/** Prepare bounded raster bytes without reopening a guest-writable filesystem path.
+ * Headers and all GIF/WebP frames must fit 64 MP; encoded bytes must fit 25 MiB. */
+export async function prepareImageBytes(
+	data: Uint8Array,
+	contentType: string,
+): Promise<ModelImage> {
+	if (data.byteLength > MAX_ATTACHMENT_BYTES)
+		throw new ImagePreparationError("byte-limit");
+	const bytes = Buffer.from(data);
+	assertImagePixelBudget(bytes, MAX_SIDE * MAX_SIDE);
+	const mimeType = contentType.split(";")[0]?.trim().toLowerCase() ?? "";
 	const image = await loadImage(bytes);
+	if (
+		bytes.byteLength <= MAX_RAW_BYTES &&
+		Math.max(image.width, image.height) <= MAX_SIDE
+	)
+		return { data: bytes.toString("base64"), mimeType };
 	const scale = DOWNSCALED_SIDE / Math.max(image.width, image.height);
 	const width = Math.max(1, Math.round(image.width * Math.min(1, scale)));
 	const height = Math.max(1, Math.round(image.height * Math.min(1, scale)));

package/src/core/attachments/image-preparation-error.ts

@@ -0,0 +1,14 @@
+/** Image admission failed before native decoding or allocating a bitmap. */
+export class ImagePreparationError extends Error {
+	override readonly name = "ImagePreparationError";
+
+	constructor(readonly reason: "byte-limit" | "pixel-limit" | "invalid-image") {
+		super(
+			{
+				"byte-limit": "Image is larger than 25 MiB.",
+				"pixel-limit": "Image exceeds the 64 MP decoded-pixel budget.",
+				"invalid-image": "Image has an invalid or unsupported raster header.",
+			}[reason],
+		);
+	}
+}

package/src/index.ts

@@ -162,6 +162,7 @@ export {
 	attachReplyFile,
 	REPLY_FILE_LIMITS,
 	ReplyFileError,
+	withReplyFiles,
 } from "./core/reply-files.ts";
 export type {
 	ConversationTurnInput,

package/src/kit/channels.ts

@@ -6,6 +6,8 @@ export {
 	channelSegment,
 	ownerAttachmentDir,
 } from "../core/attachments/attachment-dir.ts";
+export { prepareImageBytes } from "../core/attachments/image-prep.ts";
+export { ImagePreparationError } from "../core/attachments/image-preparation-error.ts";
 export { withAttachmentsBlock } from "../core/attachments/prompt-block.ts";
 export { attachmentsOf } from "../core/attachments/turn-attachments.ts";
 export type { ChannelQueue } from "../core/routing/channel-queue.ts";

package/src/kit/index.ts

@@ -6,8 +6,10 @@ export {
 	channelQueue,
 	channelSegment,
 	discordKey,
+	ImagePreparationError,
 	outcome,
 	ownerAttachmentDir,
+	prepareImageBytes,
 	settleTurn,
 	withAttachmentsBlock,
 	withReference,

package/templates/biome.json.tmpl

@@ -1,5 +1,5 @@
 {
-	"$schema": "https://biomejs.dev/schemas/2.5.14/schema.json",
+	"$schema": "https://biomejs.dev/schemas/2.5.15/schema.json",
 	"vcs": { "enabled": true, "clientKind": "git", "useIgnoreFile": true },
 	"formatter": { "indentStyle": "tab" },
 	"linter": { "rules": { "preset": "recommended" } },

package/templates/package.json.tmpl

@@ -17,7 +17,7 @@
 		"typebox": "1.3.34"
 	},
 	"devDependencies": {
-		"@biomejs/biome": "2.5.14",
+		"@biomejs/biome": "2.5.15",
 		"@types/bun": "1.4.2",
 		"typescript": "7.0.2"
 	}