@agent-native/core 0.111.4 → 0.113.0

package/dist/search/index.js

@@ -0,0 +1,267 @@
+import { isPostgres } from "../db/index.js";
+export const DEFAULT_SEARCH_NAMESPACE = "creative_context";
+export const PGVECTOR_REQUIRED_MESSAGE = "Vector search requires Postgres with the pgvector extension in the configured DATABASE_URL database.";
+function pgVectorOptions(options) {
+    return typeof options === "boolean" ? { postgres: options } : (options ?? {});
+}
+export function searchNamespaceIdentifiers(namespace = DEFAULT_SEARCH_NAMESPACE, dimensions) {
+    if (!/^[a-z][a-z0-9_]{0,62}$/.test(namespace)) {
+        throw new Error("Search namespace must start with a lowercase letter and contain only lowercase letters, numbers, and underscores.");
+    }
+    const suffix = dimensions === undefined ? "" : `_${checkedDimensions(dimensions)}`;
+    return {
+        namespace,
+        ftsTable: `${namespace}_search_documents`,
+        ftsIndex: `${namespace}_search_documents_gin`,
+        ftsAudienceIndex: `${namespace}_search_documents_audience_gin`,
+        vectorTable: `${namespace}_vectors${suffix}`,
+        vectorIndex: `${namespace}_vectors${suffix}_hnsw`,
+        vectorAudienceIndex: `${namespace}_vectors${suffix}_audience_gin`,
+    };
+}
+function checkedDimensions(value) {
+    if (!Number.isInteger(value) || value < 1 || value > 16_000) {
+        throw new Error("Embedding dimensions must be an integer from 1 to 16000.");
+    }
+    return value;
+}
+function vectorLiteral(vector, dimensions) {
+    if (vector.length !== dimensions) {
+        throw new Error(`Embedding has ${vector.length} values; expected ${dimensions}.`);
+    }
+    for (const value of vector) {
+        if (!Number.isFinite(value)) {
+            throw new Error("Embedding vectors may contain only finite numbers.");
+        }
+    }
+    return `[${vector.join(",")}]`;
+}
+function audienceClause(audienceIds, column = "audience_ids") {
+    if (!audienceIds?.length)
+        return { sql: "", args: [] };
+    return {
+        sql: ` AND ${column} && ARRAY[${audienceIds.map(() => "?").join(", ")}]::TEXT[]`,
+        args: [...audienceIds],
+    };
+}
+export function assertPgVectorAvailable(postgres = isPostgres()) {
+    if (!postgres)
+        throw new Error(PGVECTOR_REQUIRED_MESSAGE);
+}
+export async function ensurePgVectorIndex(db, dimensions, options) {
+    const resolved = pgVectorOptions(options);
+    const names = searchNamespaceIdentifiers(resolved.namespace, dimensions);
+    assertPgVectorAvailable(resolved.postgres);
+    try {
+        await db.execute("CREATE EXTENSION IF NOT EXISTS vector");
+        await db.execute(`
+      CREATE TABLE IF NOT EXISTS ${names.vectorTable} (
+        vector_key TEXT PRIMARY KEY,
+        embedding_set_id TEXT NOT NULL,
+        audience_ids TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+        embedding vector(${checkedDimensions(dimensions)}) NOT NULL,
+        updated_at TEXT NOT NULL
+      )
+    `);
+        await db.execute(`ALTER TABLE ${names.vectorTable} ADD COLUMN IF NOT EXISTS audience_ids TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[]`);
+        await db.execute(`CREATE INDEX IF NOT EXISTS ${names.vectorIndex} ON ${names.vectorTable} USING hnsw (embedding vector_cosine_ops)`);
+        await db.execute(`CREATE INDEX IF NOT EXISTS ${names.vectorAudienceIndex} ON ${names.vectorTable} USING GIN (audience_ids)`);
+    }
+    catch (error) {
+        throw new Error(PGVECTOR_REQUIRED_MESSAGE, { cause: error });
+    }
+}
+export async function upsertPgVector(db, input, options) {
+    const resolved = pgVectorOptions(options);
+    const names = searchNamespaceIdentifiers(resolved.namespace, input.dimensions);
+    assertPgVectorAvailable(resolved.postgres);
+    if (!resolved.indexInitialized) {
+        await ensurePgVectorIndex(db, input.dimensions, resolved);
+    }
+    await db.execute({
+        sql: `
+      INSERT INTO ${names.vectorTable} (vector_key, embedding_set_id, audience_ids, embedding, updated_at)
+      VALUES (?, ?, ARRAY[${(input.audienceIds ?? []).map(() => "?").join(", ")}]::TEXT[], ?::vector, ?)
+      ON CONFLICT (vector_key) DO UPDATE SET
+        embedding_set_id = EXCLUDED.embedding_set_id,
+        audience_ids = EXCLUDED.audience_ids,
+        embedding = EXCLUDED.embedding,
+        updated_at = EXCLUDED.updated_at
+    `,
+        args: [
+            input.vectorKey,
+            input.embeddingSetId,
+            ...(input.audienceIds ?? []),
+            vectorLiteral(input.vector, input.dimensions),
+            input.updatedAt ?? new Date().toISOString(),
+        ],
+    });
+}
+export async function deletePgVectors(db, input, postgres = isPostgres()) {
+    const names = searchNamespaceIdentifiers(input.namespace, input.dimensions);
+    assertPgVectorAvailable(postgres);
+    if (!input.vectorKeys.length)
+        return 0;
+    const result = await db.execute({
+        sql: `DELETE FROM ${names.vectorTable} WHERE vector_key IN (${input.vectorKeys.map(() => "?").join(", ")})`,
+        args: [...input.vectorKeys],
+    });
+    return result.rowsAffected;
+}
+export async function queryPgVectorIndex(db, input, postgres = isPostgres()) {
+    const names = searchNamespaceIdentifiers(input.namespace, input.dimensions);
+    assertPgVectorAvailable(postgres);
+    if (input.allowedVectorKeys?.length === 0 ||
+        input.allowedAudienceIds?.length === 0)
+        return [];
+    const limit = Math.max(1, Math.min(200, Math.floor(input.limit ?? 40)));
+    const literal = vectorLiteral(input.vector, input.dimensions);
+    const keySql = input.allowedVectorKeys?.length
+        ? ` AND vector_key IN (${input.allowedVectorKeys.map(() => "?").join(", ")})`
+        : "";
+    const audiences = audienceClause(input.allowedAudienceIds);
+    try {
+        await db.execute("SET hnsw.iterative_scan = strict_order");
+    }
+    catch { }
+    const result = await db.execute({
+        sql: `
+      SELECT vector_key, embedding_set_id, 1 - (embedding <=> ?::vector) AS score
+      FROM ${names.vectorTable}
+      WHERE embedding_set_id = ?${keySql}${audiences.sql}
+      ORDER BY embedding <=> ?::vector
+      LIMIT ?
+    `,
+        args: [
+            literal,
+            input.embeddingSetId,
+            ...(input.allowedVectorKeys ?? []),
+            ...audiences.args,
+            literal,
+            limit,
+        ],
+    });
+    return result.rows.map((row) => ({
+        vectorKey: String(row.vector_key),
+        embeddingSetId: String(row.embedding_set_id),
+        score: Number(row.score),
+    }));
+}
+export async function ensurePostgresFts(db, namespace = DEFAULT_SEARCH_NAMESPACE) {
+    const names = searchNamespaceIdentifiers(namespace);
+    if (!isPostgres())
+        return false;
+    await db.execute(`
+    CREATE TABLE IF NOT EXISTS ${names.ftsTable} (
+      chunk_id TEXT PRIMARY KEY,
+      item_version_id TEXT NOT NULL,
+      audience_ids TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+      document TSVECTOR NOT NULL,
+      updated_at TEXT NOT NULL
+    )
+  `);
+    await db.execute(`ALTER TABLE ${names.ftsTable} ADD COLUMN IF NOT EXISTS audience_ids TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[]`);
+    await db.execute(`CREATE INDEX IF NOT EXISTS ${names.ftsIndex} ON ${names.ftsTable} USING GIN (document)`);
+    await db.execute(`CREATE INDEX IF NOT EXISTS ${names.ftsAudienceIndex} ON ${names.ftsTable} USING GIN (audience_ids)`);
+    return true;
+}
+export async function upsertPostgresFtsDocument(db, input) {
+    const namespace = input.namespace ?? DEFAULT_SEARCH_NAMESPACE;
+    if (!(await ensurePostgresFts(db, namespace)))
+        return false;
+    const names = searchNamespaceIdentifiers(namespace);
+    await db.execute({
+        sql: `
+      INSERT INTO ${names.ftsTable} (chunk_id, item_version_id, audience_ids, document, updated_at)
+      VALUES (?, ?, ARRAY[${(input.audienceIds ?? []).map(() => "?").join(", ")}]::TEXT[], setweight(to_tsvector('simple', ?), 'A') || setweight(to_tsvector('simple', ?), 'B') || setweight(to_tsvector('simple', ?), 'C'), ?)
+      ON CONFLICT (chunk_id) DO UPDATE SET item_version_id = EXCLUDED.item_version_id, audience_ids = EXCLUDED.audience_ids, document = EXCLUDED.document, updated_at = EXCLUDED.updated_at
+    `,
+        args: [
+            input.chunkId,
+            input.itemVersionId,
+            ...(input.audienceIds ?? []),
+            input.title,
+            input.summary ?? "",
+            input.body,
+            input.updatedAt ?? new Date().toISOString(),
+        ],
+    });
+    return true;
+}
+export async function queryPostgresFts(db, input) {
+    const namespace = input.namespace ?? DEFAULT_SEARCH_NAMESPACE;
+    const names = searchNamespaceIdentifiers(namespace);
+    if (!isPostgres() ||
+        input.allowedChunkIds?.length === 0 ||
+        input.allowedAudienceIds?.length === 0)
+        return [];
+    const keys = input.allowedChunkIds?.length
+        ? `chunk_id IN (${input.allowedChunkIds.map(() => "?").join(", ")}) AND`
+        : "";
+    const audiences = audienceClause(input.allowedAudienceIds);
+    const limit = Math.max(1, Math.min(200, Math.floor(input.limit ?? 40)));
+    try {
+        const result = await db.execute({
+            sql: `SELECT chunk_id, item_version_id, ts_rank_cd(document, websearch_to_tsquery('simple', ?)) AS score FROM ${names.ftsTable} WHERE ${keys} document @@ websearch_to_tsquery('simple', ?)${audiences.sql} ORDER BY score DESC, chunk_id ASC LIMIT ?`,
+            args: [
+                input.query,
+                ...(input.allowedChunkIds ?? []),
+                input.query,
+                ...audiences.args,
+                limit,
+            ],
+        });
+        return result.rows.map((row) => ({
+            chunkId: String(row.chunk_id),
+            itemVersionId: String(row.item_version_id),
+            score: Number(row.score),
+        }));
+    }
+    catch (error) {
+        // A read can race the first write for a tenant-specific namespace. Writers
+        // provision it; an absent lane simply contributes no candidates.
+        if (isMissingPostgresRelation(error))
+            return [];
+        throw error;
+    }
+}
+function isMissingPostgresRelation(error) {
+    if (!error || typeof error !== "object")
+        return false;
+    return error.code === "42P01";
+}
+export async function deletePostgresFtsDocuments(db, chunkIds, namespace = DEFAULT_SEARCH_NAMESPACE) {
+    const names = searchNamespaceIdentifiers(namespace);
+    if (!isPostgres() || !chunkIds.length)
+        return 0;
+    await ensurePostgresFts(db, namespace);
+    const result = await db.execute({
+        sql: `DELETE FROM ${names.ftsTable} WHERE chunk_id IN (${chunkIds.map(() => "?").join(", ")})`,
+        args: [...chunkIds],
+    });
+    return result.rowsAffected;
+}
+export function reciprocalRankFusion(lanes, options = {}) {
+    const rankConstant = Math.max(1, options.rankConstant ?? 60);
+    const fused = new Map();
+    for (const [lane, candidates] of Object.entries(lanes)) {
+        candidates.forEach((candidate, index) => {
+            const rank = index + 1;
+            const current = fused.get(candidate.key) ?? {
+                ...candidate,
+                score: 0,
+                laneRanks: {},
+                reasons: [],
+            };
+            current.score += 1 / (rankConstant + rank);
+            current.laneRanks[lane] = rank;
+            if (candidate.reason && !current.reasons.includes(candidate.reason))
+                current.reasons.push(candidate.reason);
+            fused.set(candidate.key, current);
+        });
+    }
+    return [...fused.values()]
+        .sort((a, b) => b.score - a.score || a.key.localeCompare(b.key))
+        .slice(0, Math.max(1, options.limit ?? 40));
+}
+//# sourceMappingURL=index.js.map

package/dist/search/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/search/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC;AAC3D,MAAM,CAAC,MAAM,yBAAyB,GACpC,sGAAsG,CAAC;AA6CzG,SAAS,eAAe,CAAC,OAAoC;IAC3D,OAAO,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,SAAS,GAAG,wBAAwB,EACpC,UAAmB;IAEnB,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,mHAAmH,CACpH,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GACV,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;IACtE,OAAO;QACL,SAAS;QACT,QAAQ,EAAE,GAAG,SAAS,mBAAmB;QACzC,QAAQ,EAAE,GAAG,SAAS,uBAAuB;QAC7C,gBAAgB,EAAE,GAAG,SAAS,gCAAgC;QAC9D,WAAW,EAAE,GAAG,SAAS,WAAW,MAAM,EAAE;QAC5C,WAAW,EAAE,GAAG,SAAS,WAAW,MAAM,OAAO;QACjD,mBAAmB,EAAE,GAAG,SAAS,WAAW,MAAM,eAAe;KAClE,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,MAAyB,EAAE,UAAkB;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,iBAAiB,MAAM,CAAC,MAAM,qBAAqB,UAAU,GAAG,CACjE,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AACjC,CAAC;AAED,SAAS,cAAc,CACrB,WAA0C,EAC1C,MAAM,GAAG,cAAc;IAEvB,IAAI,CAAC,WAAW,EAAE,MAAM;QAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACvD,OAAO;QACL,GAAG,EAAE,QAAQ,MAAM,aAAa,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW;QAChF,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAQ,GAAG,UAAU,EAAE;IAC7D,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAU,EACV,UAAkB,EAClB,OAAyB;IAEzB,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,0BAA0B,CAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzE,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC;QAC1D,MAAM,EAAE,CAAC,OAAO,CAAC;mCACc,KAAK,CAAC,WAAW;;;;2BAIzB,iBAAiB,CAAC,UAAU,CAAC;;;KAGnD,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,OAAO,CACd,eAAe,KAAK,CAAC,WAAW,gFAAgF,CACjH,CAAC;QACF,MAAM,EAAE,CAAC,OAAO,CACd,8BAA8B,KAAK,CAAC,WAAW,OAAO,KAAK,CAAC,WAAW,2CAA2C,CACnH,CAAC;QACF,MAAM,EAAE,CAAC,OAAO,CACd,8BAA8B,KAAK,CAAC,mBAAmB,OAAO,KAAK,CAAC,WAAW,2BAA2B,CAC3G,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAU,EACV,KAOC,EACD,OAAyB;IAEzB,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,0BAA0B,CACtC,QAAQ,CAAC,SAAS,EAClB,KAAK,CAAC,UAAU,CACjB,CAAC;IACF,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QAC/B,MAAM,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,EAAE,CAAC,OAAO,CAAC;QACf,GAAG,EAAE;oBACW,KAAK,CAAC,WAAW;4BACT,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;KAM1E;QACD,IAAI,EAAE;YACJ,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,cAAc;YACpB,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;YAC5B,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC;YAC7C,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC5C;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAU,EACV,KAIC,EACD,QAAQ,GAAG,UAAU,EAAE;IAEvB,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5E,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC9B,GAAG,EAAE,eAAe,KAAK,CAAC,WAAW,yBAAyB,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAC3G,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;KAC5B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,YAAY,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,EAAU,EACV,KAQC,EACD,QAAQ,GAAG,UAAU,EAAE;IAEvB,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5E,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClC,IACE,KAAK,CAAC,iBAAiB,EAAE,MAAM,KAAK,CAAC;QACrC,KAAK,CAAC,kBAAkB,EAAE,MAAM,KAAK,CAAC;QAEtC,OAAO,EAAE,CAAC;IACZ,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB,EAAE,MAAM;QAC5C,CAAC,CAAC,uBAAuB,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAC7E,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC9B,GAAG,EAAE;;aAEI,KAAK,CAAC,WAAW;kCACI,MAAM,GAAG,SAAS,CAAC,GAAG;;;KAGnD;QACD,IAAI,EAAE;YACJ,OAAO;YACP,KAAK,CAAC,cAAc;YACpB,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC;YAClC,GAAG,SAAS,CAAC,IAAI;YACjB,OAAO;YACP,KAAK;SACN;KACF,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC5C,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;KACzB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAU,EACV,SAAS,GAAG,wBAAwB;IAEpC,MAAM,KAAK,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,EAAE;QAAE,OAAO,KAAK,CAAC;IAChC,MAAM,EAAE,CAAC,OAAO,CAAC;iCACc,KAAK,CAAC,QAAQ;;;;;;;GAO5C,CAAC,CAAC;IACH,MAAM,EAAE,CAAC,OAAO,CACd,eAAe,KAAK,CAAC,QAAQ,gFAAgF,CAC9G,CAAC;IACF,MAAM,EAAE,CAAC,OAAO,CACd,8BAA8B,KAAK,CAAC,QAAQ,OAAO,KAAK,CAAC,QAAQ,uBAAuB,CACzF,CAAC;IACF,MAAM,EAAE,CAAC,OAAO,CACd,8BAA8B,KAAK,CAAC,gBAAgB,OAAO,KAAK,CAAC,QAAQ,2BAA2B,CACrG,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAU,EACV,KASC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,wBAAwB,CAAC;IAC9D,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,KAAK,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,EAAE,CAAC,OAAO,CAAC;QACf,GAAG,EAAE;oBACW,KAAK,CAAC,QAAQ;4BACN,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;KAE1E;QACD,IAAI,EAAE;YACJ,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,aAAa;YACnB,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;YAC5B,KAAK,CAAC,KAAK;YACX,KAAK,CAAC,OAAO,IAAI,EAAE;YACnB,KAAK,CAAC,IAAI;YACV,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC5C;KACF,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAU,EACV,KAMC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,wBAAwB,CAAC;IAC9D,MAAM,KAAK,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACpD,IACE,CAAC,UAAU,EAAE;QACb,KAAK,CAAC,eAAe,EAAE,MAAM,KAAK,CAAC;QACnC,KAAK,CAAC,kBAAkB,EAAE,MAAM,KAAK,CAAC;QAEtC,OAAO,EAAE,CAAC;IACZ,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,EAAE,MAAM;QACxC,CAAC,CAAC,gBAAgB,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;QACxE,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC9B,GAAG,EAAE,2GAA2G,KAAK,CAAC,QAAQ,UAAU,IAAI,iDAAiD,SAAS,CAAC,GAAG,4CAA4C;YACtP,IAAI,EAAE;gBACJ,KAAK,CAAC,KAAK;gBACX,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC;gBAChC,KAAK,CAAC,KAAK;gBACX,GAAG,SAAS,CAAC,IAAI;gBACjB,KAAK;aACN;SACF,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC/B,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7B,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC;YAC1C,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;SACzB,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2EAA2E;QAC3E,iEAAiE;QACjE,IAAI,yBAAyB,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,OAAQ,KAA4B,CAAC,IAAI,KAAK,OAAO,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,EAAU,EACV,QAA2B,EAC3B,SAAS,GAAG,wBAAwB;IAEpC,MAAM,KAAK,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IAChD,MAAM,iBAAiB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC9B,GAAG,EAAE,eAAe,KAAK,CAAC,QAAQ,uBAAuB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAC9F,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC;KACpB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,YAAY,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAA8D,EAC9D,OAAO,GAA8C,EAAE;IAEvD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC;YACvB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI;gBAC1C,GAAG,SAAS;gBACZ,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,EAAE;gBACb,OAAO,EAAE,EAAE;aACZ,CAAC;YACF,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;YAC3C,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YAC/B,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;gBACjE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACzC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;SACvB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;SAC/D,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;AAChD,CAAC","sourcesContent":["import type { DbExec } from \"../db/index.js\";\nimport { isPostgres } from \"../db/index.js\";\n\nexport const DEFAULT_SEARCH_NAMESPACE = \"creative_context\";\nexport const PGVECTOR_REQUIRED_MESSAGE =\n  \"Vector search requires Postgres with the pgvector extension in the configured DATABASE_URL database.\";\n\nexport interface SearchNamespaceIdentifiers {\n  namespace: string;\n  ftsTable: string;\n  ftsIndex: string;\n  ftsAudienceIndex: string;\n  vectorTable: string;\n  vectorIndex: string;\n  vectorAudienceIndex: string;\n}\n\nexport interface PgVectorHit {\n  vectorKey: string;\n  embeddingSetId: string;\n  score: number;\n}\n\nexport interface PostgresFtsHit {\n  chunkId: string;\n  itemVersionId: string;\n  score: number;\n}\n\nexport interface RankedCandidate<T> {\n  key: string;\n  value: T;\n  score: number;\n  reason?: string;\n}\n\nexport interface FusedCandidate<T> extends RankedCandidate<T> {\n  laneRanks: Record<string, number>;\n  reasons: string[];\n}\n\ntype PgVectorOptions =\n  | boolean\n  | {\n      namespace?: string;\n      postgres?: boolean;\n      /** The caller has already provisioned this namespace and dimension. */\n      indexInitialized?: boolean;\n    };\n\nfunction pgVectorOptions(options: PgVectorOptions | undefined) {\n  return typeof options === \"boolean\" ? { postgres: options } : (options ?? {});\n}\n\nexport function searchNamespaceIdentifiers(\n  namespace = DEFAULT_SEARCH_NAMESPACE,\n  dimensions?: number,\n): SearchNamespaceIdentifiers {\n  if (!/^[a-z][a-z0-9_]{0,62}$/.test(namespace)) {\n    throw new Error(\n      \"Search namespace must start with a lowercase letter and contain only lowercase letters, numbers, and underscores.\",\n    );\n  }\n  const suffix =\n    dimensions === undefined ? \"\" : `_${checkedDimensions(dimensions)}`;\n  return {\n    namespace,\n    ftsTable: `${namespace}_search_documents`,\n    ftsIndex: `${namespace}_search_documents_gin`,\n    ftsAudienceIndex: `${namespace}_search_documents_audience_gin`,\n    vectorTable: `${namespace}_vectors${suffix}`,\n    vectorIndex: `${namespace}_vectors${suffix}_hnsw`,\n    vectorAudienceIndex: `${namespace}_vectors${suffix}_audience_gin`,\n  };\n}\n\nfunction checkedDimensions(value: number): number {\n  if (!Number.isInteger(value) || value < 1 || value > 16_000) {\n    throw new Error(\"Embedding dimensions must be an integer from 1 to 16000.\");\n  }\n  return value;\n}\n\nfunction vectorLiteral(vector: readonly number[], dimensions: number): string {\n  if (vector.length !== dimensions) {\n    throw new Error(\n      `Embedding has ${vector.length} values; expected ${dimensions}.`,\n    );\n  }\n  for (const value of vector) {\n    if (!Number.isFinite(value)) {\n      throw new Error(\"Embedding vectors may contain only finite numbers.\");\n    }\n  }\n  return `[${vector.join(\",\")}]`;\n}\n\nfunction audienceClause(\n  audienceIds: readonly string[] | undefined,\n  column = \"audience_ids\",\n): { sql: string; args: string[] } {\n  if (!audienceIds?.length) return { sql: \"\", args: [] };\n  return {\n    sql: ` AND ${column} && ARRAY[${audienceIds.map(() => \"?\").join(\", \")}]::TEXT[]`,\n    args: [...audienceIds],\n  };\n}\n\nexport function assertPgVectorAvailable(postgres = isPostgres()): void {\n  if (!postgres) throw new Error(PGVECTOR_REQUIRED_MESSAGE);\n}\n\nexport async function ensurePgVectorIndex(\n  db: DbExec,\n  dimensions: number,\n  options?: PgVectorOptions,\n): Promise<void> {\n  const resolved = pgVectorOptions(options);\n  const names = searchNamespaceIdentifiers(resolved.namespace, dimensions);\n  assertPgVectorAvailable(resolved.postgres);\n  try {\n    await db.execute(\"CREATE EXTENSION IF NOT EXISTS vector\");\n    await db.execute(`\n      CREATE TABLE IF NOT EXISTS ${names.vectorTable} (\n        vector_key TEXT PRIMARY KEY,\n        embedding_set_id TEXT NOT NULL,\n        audience_ids TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],\n        embedding vector(${checkedDimensions(dimensions)}) NOT NULL,\n        updated_at TEXT NOT NULL\n      )\n    `);\n    await db.execute(\n      `ALTER TABLE ${names.vectorTable} ADD COLUMN IF NOT EXISTS audience_ids TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[]`,\n    );\n    await db.execute(\n      `CREATE INDEX IF NOT EXISTS ${names.vectorIndex} ON ${names.vectorTable} USING hnsw (embedding vector_cosine_ops)`,\n    );\n    await db.execute(\n      `CREATE INDEX IF NOT EXISTS ${names.vectorAudienceIndex} ON ${names.vectorTable} USING GIN (audience_ids)`,\n    );\n  } catch (error) {\n    throw new Error(PGVECTOR_REQUIRED_MESSAGE, { cause: error });\n  }\n}\n\nexport async function upsertPgVector(\n  db: DbExec,\n  input: {\n    vectorKey: string;\n    embeddingSetId: string;\n    dimensions: number;\n    vector: readonly number[];\n    audienceIds?: readonly string[];\n    updatedAt?: string;\n  },\n  options?: PgVectorOptions,\n): Promise<void> {\n  const resolved = pgVectorOptions(options);\n  const names = searchNamespaceIdentifiers(\n    resolved.namespace,\n    input.dimensions,\n  );\n  assertPgVectorAvailable(resolved.postgres);\n  if (!resolved.indexInitialized) {\n    await ensurePgVectorIndex(db, input.dimensions, resolved);\n  }\n  await db.execute({\n    sql: `\n      INSERT INTO ${names.vectorTable} (vector_key, embedding_set_id, audience_ids, embedding, updated_at)\n      VALUES (?, ?, ARRAY[${(input.audienceIds ?? []).map(() => \"?\").join(\", \")}]::TEXT[], ?::vector, ?)\n      ON CONFLICT (vector_key) DO UPDATE SET\n        embedding_set_id = EXCLUDED.embedding_set_id,\n        audience_ids = EXCLUDED.audience_ids,\n        embedding = EXCLUDED.embedding,\n        updated_at = EXCLUDED.updated_at\n    `,\n    args: [\n      input.vectorKey,\n      input.embeddingSetId,\n      ...(input.audienceIds ?? []),\n      vectorLiteral(input.vector, input.dimensions),\n      input.updatedAt ?? new Date().toISOString(),\n    ],\n  });\n}\n\nexport async function deletePgVectors(\n  db: DbExec,\n  input: {\n    dimensions: number;\n    vectorKeys: readonly string[];\n    namespace?: string;\n  },\n  postgres = isPostgres(),\n): Promise<number> {\n  const names = searchNamespaceIdentifiers(input.namespace, input.dimensions);\n  assertPgVectorAvailable(postgres);\n  if (!input.vectorKeys.length) return 0;\n  const result = await db.execute({\n    sql: `DELETE FROM ${names.vectorTable} WHERE vector_key IN (${input.vectorKeys.map(() => \"?\").join(\", \")})`,\n    args: [...input.vectorKeys],\n  });\n  return result.rowsAffected;\n}\n\nexport async function queryPgVectorIndex(\n  db: DbExec,\n  input: {\n    embeddingSetId: string;\n    dimensions: number;\n    vector: readonly number[];\n    limit?: number;\n    allowedVectorKeys?: readonly string[];\n    allowedAudienceIds?: readonly string[];\n    namespace?: string;\n  },\n  postgres = isPostgres(),\n): Promise<PgVectorHit[]> {\n  const names = searchNamespaceIdentifiers(input.namespace, input.dimensions);\n  assertPgVectorAvailable(postgres);\n  if (\n    input.allowedVectorKeys?.length === 0 ||\n    input.allowedAudienceIds?.length === 0\n  )\n    return [];\n  const limit = Math.max(1, Math.min(200, Math.floor(input.limit ?? 40)));\n  const literal = vectorLiteral(input.vector, input.dimensions);\n  const keySql = input.allowedVectorKeys?.length\n    ? ` AND vector_key IN (${input.allowedVectorKeys.map(() => \"?\").join(\", \")})`\n    : \"\";\n  const audiences = audienceClause(input.allowedAudienceIds);\n  try {\n    await db.execute(\"SET hnsw.iterative_scan = strict_order\");\n  } catch {}\n  const result = await db.execute({\n    sql: `\n      SELECT vector_key, embedding_set_id, 1 - (embedding <=> ?::vector) AS score\n      FROM ${names.vectorTable}\n      WHERE embedding_set_id = ?${keySql}${audiences.sql}\n      ORDER BY embedding <=> ?::vector\n      LIMIT ?\n    `,\n    args: [\n      literal,\n      input.embeddingSetId,\n      ...(input.allowedVectorKeys ?? []),\n      ...audiences.args,\n      literal,\n      limit,\n    ],\n  });\n  return result.rows.map((row) => ({\n    vectorKey: String(row.vector_key),\n    embeddingSetId: String(row.embedding_set_id),\n    score: Number(row.score),\n  }));\n}\n\nexport async function ensurePostgresFts(\n  db: DbExec,\n  namespace = DEFAULT_SEARCH_NAMESPACE,\n): Promise<boolean> {\n  const names = searchNamespaceIdentifiers(namespace);\n  if (!isPostgres()) return false;\n  await db.execute(`\n    CREATE TABLE IF NOT EXISTS ${names.ftsTable} (\n      chunk_id TEXT PRIMARY KEY,\n      item_version_id TEXT NOT NULL,\n      audience_ids TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],\n      document TSVECTOR NOT NULL,\n      updated_at TEXT NOT NULL\n    )\n  `);\n  await db.execute(\n    `ALTER TABLE ${names.ftsTable} ADD COLUMN IF NOT EXISTS audience_ids TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[]`,\n  );\n  await db.execute(\n    `CREATE INDEX IF NOT EXISTS ${names.ftsIndex} ON ${names.ftsTable} USING GIN (document)`,\n  );\n  await db.execute(\n    `CREATE INDEX IF NOT EXISTS ${names.ftsAudienceIndex} ON ${names.ftsTable} USING GIN (audience_ids)`,\n  );\n  return true;\n}\n\nexport async function upsertPostgresFtsDocument(\n  db: DbExec,\n  input: {\n    chunkId: string;\n    itemVersionId: string;\n    title: string;\n    summary?: string | null;\n    body: string;\n    audienceIds?: readonly string[];\n    updatedAt?: string;\n    namespace?: string;\n  },\n): Promise<boolean> {\n  const namespace = input.namespace ?? DEFAULT_SEARCH_NAMESPACE;\n  if (!(await ensurePostgresFts(db, namespace))) return false;\n  const names = searchNamespaceIdentifiers(namespace);\n  await db.execute({\n    sql: `\n      INSERT INTO ${names.ftsTable} (chunk_id, item_version_id, audience_ids, document, updated_at)\n      VALUES (?, ?, ARRAY[${(input.audienceIds ?? []).map(() => \"?\").join(\", \")}]::TEXT[], setweight(to_tsvector('simple', ?), 'A') || setweight(to_tsvector('simple', ?), 'B') || setweight(to_tsvector('simple', ?), 'C'), ?)\n      ON CONFLICT (chunk_id) DO UPDATE SET item_version_id = EXCLUDED.item_version_id, audience_ids = EXCLUDED.audience_ids, document = EXCLUDED.document, updated_at = EXCLUDED.updated_at\n    `,\n    args: [\n      input.chunkId,\n      input.itemVersionId,\n      ...(input.audienceIds ?? []),\n      input.title,\n      input.summary ?? \"\",\n      input.body,\n      input.updatedAt ?? new Date().toISOString(),\n    ],\n  });\n  return true;\n}\n\nexport async function queryPostgresFts(\n  db: DbExec,\n  input: {\n    query: string;\n    allowedChunkIds?: readonly string[];\n    allowedAudienceIds?: readonly string[];\n    limit?: number;\n    namespace?: string;\n  },\n): Promise<PostgresFtsHit[]> {\n  const namespace = input.namespace ?? DEFAULT_SEARCH_NAMESPACE;\n  const names = searchNamespaceIdentifiers(namespace);\n  if (\n    !isPostgres() ||\n    input.allowedChunkIds?.length === 0 ||\n    input.allowedAudienceIds?.length === 0\n  )\n    return [];\n  const keys = input.allowedChunkIds?.length\n    ? `chunk_id IN (${input.allowedChunkIds.map(() => \"?\").join(\", \")}) AND`\n    : \"\";\n  const audiences = audienceClause(input.allowedAudienceIds);\n  const limit = Math.max(1, Math.min(200, Math.floor(input.limit ?? 40)));\n  try {\n    const result = await db.execute({\n      sql: `SELECT chunk_id, item_version_id, ts_rank_cd(document, websearch_to_tsquery('simple', ?)) AS score FROM ${names.ftsTable} WHERE ${keys} document @@ websearch_to_tsquery('simple', ?)${audiences.sql} ORDER BY score DESC, chunk_id ASC LIMIT ?`,\n      args: [\n        input.query,\n        ...(input.allowedChunkIds ?? []),\n        input.query,\n        ...audiences.args,\n        limit,\n      ],\n    });\n    return result.rows.map((row) => ({\n      chunkId: String(row.chunk_id),\n      itemVersionId: String(row.item_version_id),\n      score: Number(row.score),\n    }));\n  } catch (error) {\n    // A read can race the first write for a tenant-specific namespace. Writers\n    // provision it; an absent lane simply contributes no candidates.\n    if (isMissingPostgresRelation(error)) return [];\n    throw error;\n  }\n}\n\nfunction isMissingPostgresRelation(error: unknown): boolean {\n  if (!error || typeof error !== \"object\") return false;\n  return (error as { code?: unknown }).code === \"42P01\";\n}\n\nexport async function deletePostgresFtsDocuments(\n  db: DbExec,\n  chunkIds: readonly string[],\n  namespace = DEFAULT_SEARCH_NAMESPACE,\n): Promise<number> {\n  const names = searchNamespaceIdentifiers(namespace);\n  if (!isPostgres() || !chunkIds.length) return 0;\n  await ensurePostgresFts(db, namespace);\n  const result = await db.execute({\n    sql: `DELETE FROM ${names.ftsTable} WHERE chunk_id IN (${chunkIds.map(() => \"?\").join(\", \")})`,\n    args: [...chunkIds],\n  });\n  return result.rowsAffected;\n}\n\nexport function reciprocalRankFusion<T>(\n  lanes: Readonly<Record<string, readonly RankedCandidate<T>[]>>,\n  options: { rankConstant?: number; limit?: number } = {},\n): FusedCandidate<T>[] {\n  const rankConstant = Math.max(1, options.rankConstant ?? 60);\n  const fused = new Map<string, FusedCandidate<T>>();\n  for (const [lane, candidates] of Object.entries(lanes)) {\n    candidates.forEach((candidate, index) => {\n      const rank = index + 1;\n      const current = fused.get(candidate.key) ?? {\n        ...candidate,\n        score: 0,\n        laneRanks: {},\n        reasons: [],\n      };\n      current.score += 1 / (rankConstant + rank);\n      current.laneRanks[lane] = rank;\n      if (candidate.reason && !current.reasons.includes(candidate.reason))\n        current.reasons.push(candidate.reason);\n      fused.set(candidate.key, current);\n    });\n  }\n  return [...fused.values()]\n    .sort((a, b) => b.score - a.score || a.key.localeCompare(b.key))\n    .slice(0, Math.max(1, options.limit ?? 40));\n}\n"]}

package/dist/server/agent-engine-api-key-route.d.ts

@@ -27,11 +27,11 @@ export declare function resolveAgentEngineApiKeyWriteTarget(event: H3Event, scop
 export declare function createAgentEngineApiKeyHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: any;
 } | {
-    error?: undefined;
     ok: boolean;
     key: string;
     baseUrlKey?: string;
     scope: AgentEngineApiKeyScope;
+    error?: undefined;
 }>>;
 export {};
 //# sourceMappingURL=agent-engine-api-key-route.d.ts.map

package/dist/server/google-oauth-credentials.d.ts

@@ -2,6 +2,41 @@ export interface GoogleOAuthCredentials {
     clientId: string;
     clientSecret: string;
 }
+export interface GoogleOAuthCredentialKeyPair {
+    clientIdKey: string;
+    clientSecretKey: string;
+}
+export type ReadGoogleOAuthCredential = (key: string) => string | null | undefined | Promise<string | null | undefined>;
+export declare const GOOGLE_PRIMARY_PROVIDER_CREDENTIAL_KEYS: {
+    readonly clientIdKey: "GOOGLE_CLIENT_ID";
+    readonly clientSecretKey: "GOOGLE_CLIENT_SECRET";
+};
+export declare const GOOGLE_LEGACY_PROVIDER_CREDENTIAL_KEYS: {
+    readonly clientIdKey: "GOOGLE_LEGACY_CLIENT_ID";
+    readonly clientSecretKey: "GOOGLE_LEGACY_CLIENT_SECRET";
+};
+export declare const GOOGLE_PROVIDER_CREDENTIAL_KEY_PAIRS: readonly [{
+    readonly clientIdKey: "GOOGLE_CLIENT_ID";
+    readonly clientSecretKey: "GOOGLE_CLIENT_SECRET";
+}, {
+    readonly clientIdKey: "GOOGLE_LEGACY_CLIENT_ID";
+    readonly clientSecretKey: "GOOGLE_LEGACY_CLIENT_SECRET";
+}];
+/**
+ * Resolve Google provider credentials from an app-owned credential source.
+ *
+ * Templates pass their scoped secret reader so Core does not choose an app's
+ * secret store or request context. An optional fallback reader preserves
+ * deployments that still keep the same credential pair in environment vars.
+ * Each candidate pair is read atomically and de-duped by client id, which lets
+ * refresh paths retry tokens minted by a previous Google OAuth client without
+ * ever mixing an id and secret from different sources.
+ */
+export declare function resolveGoogleProviderCredentialCandidatesWithReader(options: {
+    readCredential: ReadGoogleOAuthCredential;
+    fallbackReadCredential?: ReadGoogleOAuthCredential;
+    credentialKeyPairs?: readonly GoogleOAuthCredentialKeyPair[];
+}): Promise<GoogleOAuthCredentials[]>;
 /**
  * Credentials for identity-only Google sign-in. Deploys that also use Google
  * product APIs can set these separately from GOOGLE_CLIENT_ID/SECRET, which

package/dist/server/google-oauth-credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google-oauth-credentials.d.ts","sourceRoot":"","sources":["../../src/server/google-oauth-credentials.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAYD;;;;GAIG;AACH,wBAAgB,8BAA8B,IAAI,sBAAsB,GAAG,IAAI,CAO9E;AAED,wBAAgB,0BAA0B,IAAI,OAAO,CAEpD;AAED,wBAAgB,gCAAgC,IAAI,sBAAsB,GAAG,IAAI,CAEhF;AAED,wBAAgB,sCAAsC,IAAI,sBAAsB,GAAG,IAAI,CAKtF;AAED,wBAAgB,yCAAyC,IAAI,sBAAsB,EAAE,CAMpF"}
+{"version":3,"file":"google-oauth-credentials.d.ts","sourceRoot":"","sources":["../../src/server/google-oauth-credentials.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,yBAAyB,GAAG,CACtC,GAAG,EAAE,MAAM,KACR,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAEpE,eAAO,MAAM,uCAAuC;0BACrC,kBAAkB;8BACd,sBAAsB;CACQ,CAAC;AAElD,eAAO,MAAM,sCAAsC;0BACpC,yBAAyB;8BACrB,6BAA6B;CACC,CAAC;AAElD,eAAO,MAAM,oCAAoC;0BATlC,kBAAkB;8BACd,sBAAsB;;0BAI1B,yBAAyB;8BACrB,6BAA6B;EAMY,CAAC;AAwB7D;;;;;;;;;GASG;AACH,wBAAsB,mDAAmD,CAAC,OAAO,EAAE;IACjF,cAAc,EAAE,yBAAyB,CAAC;IAC1C,sBAAsB,CAAC,EAAE,yBAAyB,CAAC;IACnD,kBAAkB,CAAC,EAAE,SAAS,4BAA4B,EAAE,CAAC;CAC9D,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAsBpC;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,IAAI,sBAAsB,GAAG,IAAI,CAO9E;AAED,wBAAgB,0BAA0B,IAAI,OAAO,CAEpD;AAED,wBAAgB,gCAAgC,IAAI,sBAAsB,GAAG,IAAI,CAKhF;AAED,wBAAgB,sCAAsC,IAAI,sBAAsB,GAAG,IAAI,CAKtF;AAED,wBAAgB,yCAAyC,IAAI,sBAAsB,EAAE,CAMpF"}

package/dist/server/google-oauth-credentials.js

@@ -1,3 +1,15 @@
+export const GOOGLE_PRIMARY_PROVIDER_CREDENTIAL_KEYS = {
+    clientIdKey: "GOOGLE_CLIENT_ID",
+    clientSecretKey: "GOOGLE_CLIENT_SECRET",
+};
+export const GOOGLE_LEGACY_PROVIDER_CREDENTIAL_KEYS = {
+    clientIdKey: "GOOGLE_LEGACY_CLIENT_ID",
+    clientSecretKey: "GOOGLE_LEGACY_CLIENT_SECRET",
+};
+export const GOOGLE_PROVIDER_CREDENTIAL_KEY_PAIRS = [
+    GOOGLE_PRIMARY_PROVIDER_CREDENTIAL_KEYS,
+    GOOGLE_LEGACY_PROVIDER_CREDENTIAL_KEYS,
+];
 function readCredentialPair(clientIdKey, clientSecretKey) {
     const clientId = process.env[clientIdKey];
     const clientSecret = process.env[clientSecretKey];
@@ -5,6 +17,40 @@ function readCredentialPair(clientIdKey, clientSecretKey) {
         return null;
     return { clientId, clientSecret };
 }
+async function readInjectedCredentialPair(readCredential, keys) {
+    const [clientId, clientSecret] = await Promise.all([
+        readCredential(keys.clientIdKey),
+        readCredential(keys.clientSecretKey),
+    ]);
+    if (!clientId || !clientSecret)
+        return null;
+    return { clientId, clientSecret };
+}
+/**
+ * Resolve Google provider credentials from an app-owned credential source.
+ *
+ * Templates pass their scoped secret reader so Core does not choose an app's
+ * secret store or request context. An optional fallback reader preserves
+ * deployments that still keep the same credential pair in environment vars.
+ * Each candidate pair is read atomically and de-duped by client id, which lets
+ * refresh paths retry tokens minted by a previous Google OAuth client without
+ * ever mixing an id and secret from different sources.
+ */
+export async function resolveGoogleProviderCredentialCandidatesWithReader(options) {
+    const pairs = options.credentialKeyPairs ?? GOOGLE_PROVIDER_CREDENTIAL_KEY_PAIRS;
+    const candidates = [];
+    for (const keys of pairs) {
+        const credentials = (await readInjectedCredentialPair(options.readCredential, keys)) ??
+            (options.fallbackReadCredential
+                ? await readInjectedCredentialPair(options.fallbackReadCredential, keys)
+                : null);
+        if (credentials &&
+            !candidates.some((candidate) => candidate.clientId === credentials.clientId)) {
+            candidates.push(credentials);
+        }
+    }
+    return candidates;
+}
 /**
  * Credentials for identity-only Google sign-in. Deploys that also use Google
  * product APIs can set these separately from GOOGLE_CLIENT_ID/SECRET, which
@@ -17,10 +63,10 @@ export function hasGoogleSignInCredentials() {
     return resolveGoogleSignInCredentials() !== null;
 }
 export function resolveGoogleProviderCredentials() {
-    return readCredentialPair("GOOGLE_CLIENT_ID", "GOOGLE_CLIENT_SECRET");
+    return readCredentialPair(GOOGLE_PRIMARY_PROVIDER_CREDENTIAL_KEYS.clientIdKey, GOOGLE_PRIMARY_PROVIDER_CREDENTIAL_KEYS.clientSecretKey);
 }
 export function resolveGoogleLegacyProviderCredentials() {
-    return readCredentialPair("GOOGLE_LEGACY_CLIENT_ID", "GOOGLE_LEGACY_CLIENT_SECRET");
+    return readCredentialPair(GOOGLE_LEGACY_PROVIDER_CREDENTIAL_KEYS.clientIdKey, GOOGLE_LEGACY_PROVIDER_CREDENTIAL_KEYS.clientSecretKey);
 }
 export function resolveGoogleProviderCredentialCandidates() {
     const primary = resolveGoogleProviderCredentials();

package/dist/server/google-oauth-credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"google-oauth-credentials.js","sourceRoot":"","sources":["../../src/server/google-oauth-credentials.ts"],"names":[],"mappings":"AAKA,SAAS,kBAAkB,CACzB,WAAmB,EACnB,eAAuB;IAEvB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B;IAC5C,OAAO,CACL,kBAAkB,CAChB,0BAA0B,EAC1B,8BAA8B,CAC/B,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,CACpE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,OAAO,8BAA8B,EAAE,KAAK,IAAI,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,OAAO,kBAAkB,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,sCAAsC;IACpD,OAAO,kBAAkB,CACvB,yBAAyB,EACzB,6BAA6B,CAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yCAAyC;IACvD,MAAM,OAAO,GAAG,gCAAgC,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,sCAAsC,EAAE,CAAC;IACxD,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC","sourcesContent":["export interface GoogleOAuthCredentials {\n  clientId: string;\n  clientSecret: string;\n}\n\nfunction readCredentialPair(\n  clientIdKey: string,\n  clientSecretKey: string,\n): GoogleOAuthCredentials | null {\n  const clientId = process.env[clientIdKey];\n  const clientSecret = process.env[clientSecretKey];\n  if (!clientId || !clientSecret) return null;\n  return { clientId, clientSecret };\n}\n\n/**\n * Credentials for identity-only Google sign-in. Deploys that also use Google\n * product APIs can set these separately from GOOGLE_CLIENT_ID/SECRET, which\n * remain the backwards-compatible provider OAuth credentials.\n */\nexport function resolveGoogleSignInCredentials(): GoogleOAuthCredentials | null {\n  return (\n    readCredentialPair(\n      \"GOOGLE_SIGN_IN_CLIENT_ID\",\n      \"GOOGLE_SIGN_IN_CLIENT_SECRET\",\n    ) ?? readCredentialPair(\"GOOGLE_CLIENT_ID\", \"GOOGLE_CLIENT_SECRET\")\n  );\n}\n\nexport function hasGoogleSignInCredentials(): boolean {\n  return resolveGoogleSignInCredentials() !== null;\n}\n\nexport function resolveGoogleProviderCredentials(): GoogleOAuthCredentials | null {\n  return readCredentialPair(\"GOOGLE_CLIENT_ID\", \"GOOGLE_CLIENT_SECRET\");\n}\n\nexport function resolveGoogleLegacyProviderCredentials(): GoogleOAuthCredentials | null {\n  return readCredentialPair(\n    \"GOOGLE_LEGACY_CLIENT_ID\",\n    \"GOOGLE_LEGACY_CLIENT_SECRET\",\n  );\n}\n\nexport function resolveGoogleProviderCredentialCandidates(): GoogleOAuthCredentials[] {\n  const primary = resolveGoogleProviderCredentials();\n  const legacy = resolveGoogleLegacyProviderCredentials();\n  if (!primary) return legacy ? [legacy] : [];\n  if (!legacy || legacy.clientId === primary.clientId) return [primary];\n  return [primary, legacy];\n}\n"]}
+{"version":3,"file":"google-oauth-credentials.js","sourceRoot":"","sources":["../../src/server/google-oauth-credentials.ts"],"names":[],"mappings":"AAcA,MAAM,CAAC,MAAM,uCAAuC,GAAG;IACrD,WAAW,EAAE,kBAAkB;IAC/B,eAAe,EAAE,sBAAsB;CACQ,CAAC;AAElD,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,WAAW,EAAE,yBAAyB;IACtC,eAAe,EAAE,6BAA6B;CACC,CAAC;AAElD,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,uCAAuC;IACvC,sCAAsC;CACoB,CAAC;AAE7D,SAAS,kBAAkB,CACzB,WAAmB,EACnB,eAAuB;IAEvB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,cAAyC,EACzC,IAAkC;IAElC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC;QAChC,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mDAAmD,CAAC,OAIzE;IACC,MAAM,KAAK,GACT,OAAO,CAAC,kBAAkB,IAAI,oCAAoC,CAAC;IACrE,MAAM,UAAU,GAA6B,EAAE,CAAC;IAEhD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,WAAW,GACf,CAAC,MAAM,0BAA0B,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YAChE,CAAC,OAAO,CAAC,sBAAsB;gBAC7B,CAAC,CAAC,MAAM,0BAA0B,CAAC,OAAO,CAAC,sBAAsB,EAAE,IAAI,CAAC;gBACxE,CAAC,CAAC,IAAI,CAAC,CAAC;QACZ,IACE,WAAW;YACX,CAAC,UAAU,CAAC,IAAI,CACd,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ,CAC3D,EACD,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B;IAC5C,OAAO,CACL,kBAAkB,CAChB,0BAA0B,EAC1B,8BAA8B,CAC/B,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,CACpE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,OAAO,8BAA8B,EAAE,KAAK,IAAI,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,gCAAgC;IAC9C,OAAO,kBAAkB,CACvB,uCAAuC,CAAC,WAAW,EACnD,uCAAuC,CAAC,eAAe,CACxD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sCAAsC;IACpD,OAAO,kBAAkB,CACvB,sCAAsC,CAAC,WAAW,EAClD,sCAAsC,CAAC,eAAe,CACvD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yCAAyC;IACvD,MAAM,OAAO,GAAG,gCAAgC,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,sCAAsC,EAAE,CAAC;IACxD,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC","sourcesContent":["export interface GoogleOAuthCredentials {\n  clientId: string;\n  clientSecret: string;\n}\n\nexport interface GoogleOAuthCredentialKeyPair {\n  clientIdKey: string;\n  clientSecretKey: string;\n}\n\nexport type ReadGoogleOAuthCredential = (\n  key: string,\n) => string | null | undefined | Promise<string | null | undefined>;\n\nexport const GOOGLE_PRIMARY_PROVIDER_CREDENTIAL_KEYS = {\n  clientIdKey: \"GOOGLE_CLIENT_ID\",\n  clientSecretKey: \"GOOGLE_CLIENT_SECRET\",\n} as const satisfies GoogleOAuthCredentialKeyPair;\n\nexport const GOOGLE_LEGACY_PROVIDER_CREDENTIAL_KEYS = {\n  clientIdKey: \"GOOGLE_LEGACY_CLIENT_ID\",\n  clientSecretKey: \"GOOGLE_LEGACY_CLIENT_SECRET\",\n} as const satisfies GoogleOAuthCredentialKeyPair;\n\nexport const GOOGLE_PROVIDER_CREDENTIAL_KEY_PAIRS = [\n  GOOGLE_PRIMARY_PROVIDER_CREDENTIAL_KEYS,\n  GOOGLE_LEGACY_PROVIDER_CREDENTIAL_KEYS,\n] as const satisfies readonly GoogleOAuthCredentialKeyPair[];\n\nfunction readCredentialPair(\n  clientIdKey: string,\n  clientSecretKey: string,\n): GoogleOAuthCredentials | null {\n  const clientId = process.env[clientIdKey];\n  const clientSecret = process.env[clientSecretKey];\n  if (!clientId || !clientSecret) return null;\n  return { clientId, clientSecret };\n}\n\nasync function readInjectedCredentialPair(\n  readCredential: ReadGoogleOAuthCredential,\n  keys: GoogleOAuthCredentialKeyPair,\n): Promise<GoogleOAuthCredentials | null> {\n  const [clientId, clientSecret] = await Promise.all([\n    readCredential(keys.clientIdKey),\n    readCredential(keys.clientSecretKey),\n  ]);\n  if (!clientId || !clientSecret) return null;\n  return { clientId, clientSecret };\n}\n\n/**\n * Resolve Google provider credentials from an app-owned credential source.\n *\n * Templates pass their scoped secret reader so Core does not choose an app's\n * secret store or request context. An optional fallback reader preserves\n * deployments that still keep the same credential pair in environment vars.\n * Each candidate pair is read atomically and de-duped by client id, which lets\n * refresh paths retry tokens minted by a previous Google OAuth client without\n * ever mixing an id and secret from different sources.\n */\nexport async function resolveGoogleProviderCredentialCandidatesWithReader(options: {\n  readCredential: ReadGoogleOAuthCredential;\n  fallbackReadCredential?: ReadGoogleOAuthCredential;\n  credentialKeyPairs?: readonly GoogleOAuthCredentialKeyPair[];\n}): Promise<GoogleOAuthCredentials[]> {\n  const pairs =\n    options.credentialKeyPairs ?? GOOGLE_PROVIDER_CREDENTIAL_KEY_PAIRS;\n  const candidates: GoogleOAuthCredentials[] = [];\n\n  for (const keys of pairs) {\n    const credentials =\n      (await readInjectedCredentialPair(options.readCredential, keys)) ??\n      (options.fallbackReadCredential\n        ? await readInjectedCredentialPair(options.fallbackReadCredential, keys)\n        : null);\n    if (\n      credentials &&\n      !candidates.some(\n        (candidate) => candidate.clientId === credentials.clientId,\n      )\n    ) {\n      candidates.push(credentials);\n    }\n  }\n\n  return candidates;\n}\n\n/**\n * Credentials for identity-only Google sign-in. Deploys that also use Google\n * product APIs can set these separately from GOOGLE_CLIENT_ID/SECRET, which\n * remain the backwards-compatible provider OAuth credentials.\n */\nexport function resolveGoogleSignInCredentials(): GoogleOAuthCredentials | null {\n  return (\n    readCredentialPair(\n      \"GOOGLE_SIGN_IN_CLIENT_ID\",\n      \"GOOGLE_SIGN_IN_CLIENT_SECRET\",\n    ) ?? readCredentialPair(\"GOOGLE_CLIENT_ID\", \"GOOGLE_CLIENT_SECRET\")\n  );\n}\n\nexport function hasGoogleSignInCredentials(): boolean {\n  return resolveGoogleSignInCredentials() !== null;\n}\n\nexport function resolveGoogleProviderCredentials(): GoogleOAuthCredentials | null {\n  return readCredentialPair(\n    GOOGLE_PRIMARY_PROVIDER_CREDENTIAL_KEYS.clientIdKey,\n    GOOGLE_PRIMARY_PROVIDER_CREDENTIAL_KEYS.clientSecretKey,\n  );\n}\n\nexport function resolveGoogleLegacyProviderCredentials(): GoogleOAuthCredentials | null {\n  return readCredentialPair(\n    GOOGLE_LEGACY_PROVIDER_CREDENTIAL_KEYS.clientIdKey,\n    GOOGLE_LEGACY_PROVIDER_CREDENTIAL_KEYS.clientSecretKey,\n  );\n}\n\nexport function resolveGoogleProviderCredentialCandidates(): GoogleOAuthCredentials[] {\n  const primary = resolveGoogleProviderCredentials();\n  const legacy = resolveGoogleLegacyProviderCredentials();\n  if (!primary) return legacy ? [legacy] : [];\n  if (!legacy || legacy.clientId === primary.clientId) return [primary];\n  return [primary, legacy];\n}\n"]}

package/dist/server/index.d.ts

@@ -45,7 +45,7 @@ export { createTerminalPlugin, defaultTerminalPlugin, type TerminalPluginOptions
 export { createCollabPlugin, type CollabPluginOptions, } from "./collab-plugin.js";
 export { spawnTask, getTask, getTaskByThread, listTasks, sendToTask, markTaskErrored, type AgentTask, type SpawnTaskOptions, } from "./agent-teams.js";
 export { isOAuthConnected, getOAuthAccounts } from "./oauth-helpers.js";
-export { hasGoogleSignInCredentials, resolveGoogleLegacyProviderCredentials, resolveGoogleProviderCredentialCandidates, resolveGoogleProviderCredentials, resolveGoogleSignInCredentials, type GoogleOAuthCredentials, } from "./google-oauth-credentials.js";
+export { hasGoogleSignInCredentials, GOOGLE_LEGACY_PROVIDER_CREDENTIAL_KEYS, GOOGLE_PRIMARY_PROVIDER_CREDENTIAL_KEYS, GOOGLE_PROVIDER_CREDENTIAL_KEY_PAIRS, resolveGoogleLegacyProviderCredentials, resolveGoogleProviderCredentialCandidatesWithReader, resolveGoogleProviderCredentialCandidates, resolveGoogleProviderCredentials, resolveGoogleSignInCredentials, type GoogleOAuthCredentialKeyPair, type GoogleOAuthCredentials, type ReadGoogleOAuthCredential, } from "./google-oauth-credentials.js";
 export { wrapWithAnalytics } from "./analytics.js";
 export { getH3App, awaitBootstrap, markDefaultPluginProvided, type H3AppShim, } from "./framework-request-handler.js";
 export { fireInternalDispatch, resolveSelfDispatchBaseUrl, type FireInternalDispatchOptions, } from "./self-dispatch.js";

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,KAAK,mBAAmB,EACxB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,gCAAgC,EAChC,gCAAgC,EAChC,sCAAsC,EACtC,4CAA4C,EAC5C,oCAAoC,GACrC,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,QAAQ,EACR,qBAAqB,EACrB,UAAU,EACV,2BAA2B,EAC3B,6BAA6B,EAC7B,gCAAgC,EAChC,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,KAAK,aAAa,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EACL,4BAA4B,EAC5B,mBAAmB,EACnB,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,yBAAyB,EACzB,8BAA8B,EAC9B,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,gCAAgC,EACrC,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,6BAA6B,GACnC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACpE,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,WAAW,EACX,UAAU,EACV,aAAa,EACb,eAAe,EACf,+BAA+B,EAC/B,yBAAyB,EACzB,4BAA4B,EAC5B,YAAY,EACZ,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACd,KAAK,2BAA2B,EAChC,KAAK,WAAW,EAChB,KAAK,WAAW,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,0BAA0B,EAC1B,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EACL,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,+BAA+B,EACpC,KAAK,qBAAqB,GAC3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,4BAA4B,EAC5B,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,2BAA2B,EAChC,KAAK,kCAAkC,EACvC,KAAK,iCAAiC,EACtC,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,YAAY,EACZ,KAAK,4BAA4B,EACjC,KAAK,2BAA2B,GACjC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,4BAA4B,EAC5B,kCAAkC,EAClC,oCAAoC,EACpC,2BAA2B,EAC3B,wBAAwB,EACxB,KAAK,+BAA+B,EACpC,KAAK,2BAA2B,EAChC,KAAK,iCAAiC,EACtC,KAAK,gCAAgC,GACtC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,YAAY,EACZ,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,EACjB,KAAK,iBAAiB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,4BAA4B,EAC5B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAI7E,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,sBAAsB,EACtB,KAAK,uBAAuB,GAC7B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,uCAAuC,EACvC,oCAAoC,EACpC,+BAA+B,EAC/B,wBAAwB,EACxB,mCAAmC,EACnC,KAAK,8BAA8B,EACnC,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,EACnC,KAAK,gCAAgC,GACtC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,uBAAuB,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,2CAA2C,EAC3C,2BAA2B,EAC3B,iCAAiC,EACjC,+BAA+B,EAC/B,2BAA2B,EAC3B,2BAA2B,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,iCAAiC,EACjC,KAAK,wCAAwC,GAC9C,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,uCAAuC,EACvC,0CAA0C,EAC1C,8BAA8B,EAC9B,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC7B,2BAA2B,EAC3B,wBAAwB,EACxB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,yBAAyB,EACzB,KAAK,gCAAgC,GACtC,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,yBAAyB,EACzB,+BAA+B,EAC/B,+BAA+B,EAC/B,gCAAgC,EAChC,sCAAsC,EACtC,oCAAoC,EACpC,2CAA2C,EAC3C,sCAAsC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,qBAAqB,GAC3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,GACzB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,SAAS,EACT,OAAO,EACP,eAAe,EACf,SAAS,EACT,UAAU,EACV,eAAe,EACf,KAAK,SAAS,EACd,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EACL,0BAA0B,EAC1B,sCAAsC,EACtC,yCAAyC,EACzC,gCAAgC,EAChC,8BAA8B,EAC9B,KAAK,sBAAsB,GAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACL,QAAQ,EACR,cAAc,EACd,yBAAyB,EACzB,KAAK,SAAS,GACf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,KAAK,2BAA2B,GACjC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,IAAI,0BAA0B,EAChD,mBAAmB,GACpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,6BAA6B,EAC7B,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,6BAA6B,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,4BAA4B,EACjC,KAAK,iCAAiC,GACvC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,GAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,KAAK,cAAc,EACnB,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAExE,OAAO,EACL,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,2BAA2B,EAC3B,qCAAqC,EACrC,UAAU,EACV,yBAAyB,EACzB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,GACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,YAAY,EACZ,wBAAwB,EACxB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,2BAA2B,EAChC,4BAA4B,EAC5B,sBAAsB,EACtB,0BAA0B,EAC1B,8BAA8B,EAC9B,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,GAChC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,UAAU,EACV,QAAQ,EACR,SAAS,EACT,cAAc,EACd,SAAS,EACT,uBAAuB,EACvB,yBAAyB,EACzB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,wBAAwB,EACxB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACnC,kCAAkC,EAClC,oCAAoC,EACpC,iCAAiC,EACjC,iCAAiC,EACjC,yBAAyB,EACzB,gCAAgC,EAChC,0BAA0B,EAC1B,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,GAChC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,gCAAgC,EAChC,0BAA0B,EAC1B,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,2BAA2B,EAC3B,mCAAmC,EACnC,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,sBAAsB,EACtB,kCAAkC,EAClC,oCAAoC,EACpC,4BAA4B,EAC5B,8BAA8B,EAC9B,mCAAmC,EACnC,0BAA0B,EAC1B,sCAAsC,EACtC,sCAAsC,EACtC,6BAA6B,EAC7B,KAAK,yCAAyC,EAC9C,KAAK,gCAAgC,EACrC,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAChC,KAAK,oCAAoC,EACzC,KAAK,4BAA4B,EACjC,KAAK,+BAA+B,EACpC,KAAK,8BAA8B,EACnC,KAAK,8BAA8B,EACnC,KAAK,qCAAqC,EAC1C,KAAK,iCAAiC,GACvC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,+BAA+B,EAC/B,6BAA6B,EAC7B,gCAAgC,EAChC,eAAe,EACf,KAAK,qBAAqB,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,2BAA2B,EAChC,KAAK,uBAAuB,GAC7B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,aAAa,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,WAAW,EACX,WAAW,EACX,SAAS,EACT,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,QAAQ,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,YAAY,IAAI,2BAA2B,GACjD,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,gCAAgC,EAChC,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,4BAA4B,EAC5B,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,0BAA0B,EAC1B,gBAAgB,EAChB,4BAA4B,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,GACnC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oCAAoC,EACpC,mCAAmC,EACnC,mCAAmC,EACnC,0CAA0C,EAC1C,eAAe,EACf,KAAK,8BAA8B,EACnC,KAAK,0CAA0C,GAChD,MAAM,sCAAsC,CAAC;AAU9C,MAAM,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AACrE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,cAAc,CAErE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,KAAK,mBAAmB,EACxB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,gCAAgC,EAChC,gCAAgC,EAChC,sCAAsC,EACtC,4CAA4C,EAC5C,oCAAoC,GACrC,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,QAAQ,EACR,qBAAqB,EACrB,UAAU,EACV,2BAA2B,EAC3B,6BAA6B,EAC7B,gCAAgC,EAChC,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,KAAK,aAAa,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EACL,4BAA4B,EAC5B,mBAAmB,EACnB,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,yBAAyB,EACzB,8BAA8B,EAC9B,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,gCAAgC,EACrC,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,6BAA6B,GACnC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACpE,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,WAAW,EACX,UAAU,EACV,aAAa,EACb,eAAe,EACf,+BAA+B,EAC/B,yBAAyB,EACzB,4BAA4B,EAC5B,YAAY,EACZ,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACd,KAAK,2BAA2B,EAChC,KAAK,WAAW,EAChB,KAAK,WAAW,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,0BAA0B,EAC1B,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EACL,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,+BAA+B,EACpC,KAAK,qBAAqB,GAC3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,4BAA4B,EAC5B,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,2BAA2B,EAChC,KAAK,kCAAkC,EACvC,KAAK,iCAAiC,EACtC,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,YAAY,EACZ,KAAK,4BAA4B,EACjC,KAAK,2BAA2B,GACjC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,4BAA4B,EAC5B,kCAAkC,EAClC,oCAAoC,EACpC,2BAA2B,EAC3B,wBAAwB,EACxB,KAAK,+BAA+B,EACpC,KAAK,2BAA2B,EAChC,KAAK,iCAAiC,EACtC,KAAK,gCAAgC,GACtC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,YAAY,EACZ,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,EACjB,KAAK,iBAAiB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,4BAA4B,EAC5B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAI7E,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,sBAAsB,EACtB,KAAK,uBAAuB,GAC7B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,uCAAuC,EACvC,oCAAoC,EACpC,+BAA+B,EAC/B,wBAAwB,EACxB,mCAAmC,EACnC,KAAK,8BAA8B,EACnC,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,EACnC,KAAK,gCAAgC,GACtC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,uBAAuB,GAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,2CAA2C,EAC3C,2BAA2B,EAC3B,iCAAiC,EACjC,+BAA+B,EAC/B,2BAA2B,EAC3B,2BAA2B,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,iCAAiC,EACjC,KAAK,wCAAwC,GAC9C,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,uCAAuC,EACvC,0CAA0C,EAC1C,8BAA8B,EAC9B,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC7B,2BAA2B,EAC3B,wBAAwB,EACxB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,yBAAyB,EACzB,KAAK,gCAAgC,GACtC,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,yBAAyB,EACzB,+BAA+B,EAC/B,+BAA+B,EAC/B,gCAAgC,EAChC,sCAAsC,EACtC,oCAAoC,EACpC,2CAA2C,EAC3C,sCAAsC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,qBAAqB,GAC3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,GACzB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,SAAS,EACT,OAAO,EACP,eAAe,EACf,SAAS,EACT,UAAU,EACV,eAAe,EACf,KAAK,SAAS,EACd,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EACL,0BAA0B,EAC1B,sCAAsC,EACtC,uCAAuC,EACvC,oCAAoC,EACpC,sCAAsC,EACtC,mDAAmD,EACnD,yCAAyC,EACzC,gCAAgC,EAChC,8BAA8B,EAC9B,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,GAC/B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACL,QAAQ,EACR,cAAc,EACd,yBAAyB,EACzB,KAAK,SAAS,GACf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,KAAK,2BAA2B,GACjC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,IAAI,0BAA0B,EAChD,mBAAmB,GACpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,6BAA6B,EAC7B,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,6BAA6B,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,4BAA4B,EACjC,KAAK,iCAAiC,GACvC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,GAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,KAAK,cAAc,EACnB,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAExE,OAAO,EACL,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,2BAA2B,EAC3B,qCAAqC,EACrC,UAAU,EACV,yBAAyB,EACzB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,GACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,YAAY,EACZ,wBAAwB,EACxB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,2BAA2B,EAChC,4BAA4B,EAC5B,sBAAsB,EACtB,0BAA0B,EAC1B,8BAA8B,EAC9B,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,GAChC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,UAAU,EACV,QAAQ,EACR,SAAS,EACT,cAAc,EACd,SAAS,EACT,uBAAuB,EACvB,yBAAyB,EACzB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,wBAAwB,EACxB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACnC,kCAAkC,EAClC,oCAAoC,EACpC,iCAAiC,EACjC,iCAAiC,EACjC,yBAAyB,EACzB,gCAAgC,EAChC,0BAA0B,EAC1B,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,GAChC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,gCAAgC,EAChC,0BAA0B,EAC1B,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,2BAA2B,EAC3B,mCAAmC,EACnC,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,sBAAsB,EACtB,kCAAkC,EAClC,oCAAoC,EACpC,4BAA4B,EAC5B,8BAA8B,EAC9B,mCAAmC,EACnC,0BAA0B,EAC1B,sCAAsC,EACtC,sCAAsC,EACtC,6BAA6B,EAC7B,KAAK,yCAAyC,EAC9C,KAAK,gCAAgC,EACrC,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAChC,KAAK,oCAAoC,EACzC,KAAK,4BAA4B,EACjC,KAAK,+BAA+B,EACpC,KAAK,8BAA8B,EACnC,KAAK,8BAA8B,EACnC,KAAK,qCAAqC,EAC1C,KAAK,iCAAiC,GACvC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,+BAA+B,EAC/B,6BAA6B,EAC7B,gCAAgC,EAChC,eAAe,EACf,KAAK,qBAAqB,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,KAAK,eAAe,EACpB,KAAK,2BAA2B,EAChC,KAAK,uBAAuB,GAC7B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,aAAa,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,WAAW,EACX,WAAW,EACX,SAAS,EACT,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,QAAQ,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,YAAY,IAAI,2BAA2B,GACjD,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,gCAAgC,EAChC,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,4BAA4B,EAC5B,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,0BAA0B,EAC1B,gBAAgB,EAChB,4BAA4B,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,GACnC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oCAAoC,EACpC,mCAAmC,EACnC,mCAAmC,EACnC,0CAA0C,EAC1C,eAAe,EACf,KAAK,8BAA8B,EACnC,KAAK,0CAA0C,GAChD,MAAM,sCAAsC,CAAC;AAU9C,MAAM,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AACrE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,cAAc,CAErE"}

package/dist/server/index.js

@@ -46,7 +46,7 @@ export { createTerminalPlugin, defaultTerminalPlugin, } from "../terminal/termin
 export { createCollabPlugin, } from "./collab-plugin.js";
 export { spawnTask, getTask, getTaskByThread, listTasks, sendToTask, markTaskErrored, } from "./agent-teams.js";
 export { isOAuthConnected, getOAuthAccounts } from "./oauth-helpers.js";
-export { hasGoogleSignInCredentials, resolveGoogleLegacyProviderCredentials, resolveGoogleProviderCredentialCandidates, resolveGoogleProviderCredentials, resolveGoogleSignInCredentials, } from "./google-oauth-credentials.js";
+export { hasGoogleSignInCredentials, GOOGLE_LEGACY_PROVIDER_CREDENTIAL_KEYS, GOOGLE_PRIMARY_PROVIDER_CREDENTIAL_KEYS, GOOGLE_PROVIDER_CREDENTIAL_KEY_PAIRS, resolveGoogleLegacyProviderCredentials, resolveGoogleProviderCredentialCandidatesWithReader, resolveGoogleProviderCredentialCandidates, resolveGoogleProviderCredentials, resolveGoogleSignInCredentials, } from "./google-oauth-credentials.js";
 export { wrapWithAnalytics } from "./analytics.js";
 export { getH3App, awaitBootstrap, markDefaultPluginProvided, } from "./framework-request-handler.js";
 export { fireInternalDispatch, resolveSelfDispatchBaseUrl, } from "./self-dispatch.js";