@fortemi/core 2026.7.2 → 2026.7.3

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { PGlite } from '@electric-sql/pglite';
 import { z, ZodType } from 'zod';
-export { AIWG_SCAN_REQUIRED_FIELDS, AiwgChunkedIndexBuildOptions, AiwgChunkedIndexBuildResult, AiwgChunkedIndexDetailLoader, AiwgChunkedIndexLoadOptions, AiwgChunkedIndexLoader, AiwgChunkedIndexProgress, AiwgChunkedIndexProgressPhase, AiwgChunkedIndexQueryOptions, AiwgChunkedIndexQueryResult, AiwgChunkedIndexValidationResult, AiwgFortemiAttachmentReference, AiwgFortemiBinarySource, AiwgFortemiChunk, AiwgFortemiChunkDetailRef, AiwgFortemiChunkManifest, AiwgFortemiChunkPart, AiwgFortemiChunkPartRef, AiwgFortemiIndexExport, AiwgFortemiIndexExportSchemaVersion, AiwgFortemiKnownRecordType, AiwgFortemiProjectedRecord, AiwgFortemiProvenance, AiwgFortemiProvenanceEvent, AiwgFortemiRecord, AiwgFortemiRecordEmbedding, AiwgFortemiRecordSchemaVersion, AiwgFortemiRecordSource, AiwgFortemiRecordType, AiwgFortemiRelationship, AiwgFortemiRelationshipDirection, AiwgFortemiSearchProjection, AiwgFortemiSkosConcept, AiwgFortemiSkosRelation, AiwgFortemiSkosRelationType, AiwgHeadlessEmbeddingBackend, AiwgIndexController, AiwgIndexControllerListener, AiwgIndexControllerSnapshot, AiwgIndexGraphOptions, AiwgIndexQueryMatch, AiwgIndexQueryOptions, AiwgIndexQueryRankedItem, AiwgIndexQueryResult, AiwgIndexQueryWeights, AiwgIndexValidationResult, AiwgPrivacyClassification, AiwgProvenanceConfidence, AiwgRelationshipDirection, AiwgRelationshipEdgeSummary, AiwgRelationshipNodeSummary, AiwgRelationshipQueryOptions, AiwgRelationshipSetOperation, AiwgRelationshipSetOptions, AiwgRelationshipSetResult, AiwgRelationshipTraversalOptions, AiwgRelationshipTraversalResult, AiwgReviewAction, AiwgReviewDecision, AiwgReviewDecisionExport, AiwgReviewInput, AiwgStaticDuplicatePair, AiwgStaticEmbeddingRecord, AiwgStaticEmbeddingSet, AiwgStaticHybridQueryOptions, AiwgStaticSemanticQueryOptions, AiwgStaticSemanticResult, BuildAiwgStaticEmbeddingSetOptions, aiwgFortemiIndexToCommunityGraph, assertAiwgFortemiChunkManifest, assertAiwgFortemiChunkPart, assertAiwgFortemiIndexExport, assertAiwgStaticEmbeddingSet, buildAiwgChunkedIndex, buildAiwgStaticEmbeddingSet, createAiwgFetchChunkLoader, createAiwgFetchDetailLoader, createAiwgIndexController, createAiwgReviewDecisionExport, findAiwgStaticDuplicatePairs, getAiwgFortemiFacets, queryAiwgFortemiIndex, queryAiwgHybridIndex, queryAiwgSemanticIndex, validateAiwgFortemiChunkManifest, validateAiwgFortemiChunkPart, validateAiwgFortemiIndexExport, validateAiwgStaticEmbeddingSet } from './aiwg-index.js';
+export { AIWG_SCAN_REQUIRED_FIELDS, AiwgChunkedIndexBuildOptions, AiwgChunkedIndexBuildResult, AiwgChunkedIndexDetailLoader, AiwgChunkedIndexLoadOptions, AiwgChunkedIndexLoader, AiwgChunkedIndexProgress, AiwgChunkedIndexProgressPhase, AiwgChunkedIndexQueryOptions, AiwgChunkedIndexQueryResult, AiwgChunkedIndexValidationResult, AiwgFortemiAttachmentReference, AiwgFortemiBinarySource, AiwgFortemiChunk, AiwgFortemiChunkDetailRef, AiwgFortemiChunkManifest, AiwgFortemiChunkPart, AiwgFortemiChunkPartRef, AiwgFortemiIndexExport, AiwgFortemiIndexExportSchemaVersion, AiwgFortemiKnownRecordType, AiwgFortemiProjectedRecord, AiwgFortemiProvenance, AiwgFortemiProvenanceEvent, AiwgFortemiRecord, AiwgFortemiRecordEmbedding, AiwgFortemiRecordSchemaVersion, AiwgFortemiRecordSource, AiwgFortemiRecordType, AiwgFortemiRelationship, AiwgFortemiRelationshipDirection, AiwgFortemiSearchProjection, AiwgFortemiSkosConcept, AiwgFortemiSkosRelation, AiwgFortemiSkosRelationType, AiwgHeadlessEmbeddingBackend, AiwgIndexController, AiwgIndexControllerListener, AiwgIndexControllerSnapshot, AiwgIndexGraphOptions, AiwgIndexQueryMatch, AiwgIndexQueryOptions, AiwgIndexQueryRankedItem, AiwgIndexQueryResult, AiwgIndexQueryWeights, AiwgIndexValidationResult, AiwgPrivacyClassification, AiwgPrivacyFilterOptions, AiwgProvenanceConfidence, AiwgRelationshipDirection, AiwgRelationshipEdgeSummary, AiwgRelationshipNodeSummary, AiwgRelationshipQueryOptions, AiwgRelationshipSetOperation, AiwgRelationshipSetOptions, AiwgRelationshipSetResult, AiwgRelationshipTraversalOptions, AiwgRelationshipTraversalResult, AiwgReviewAction, AiwgReviewDecision, AiwgReviewDecisionExport, AiwgReviewInput, AiwgStaticDuplicatePair, AiwgStaticEmbeddingRecord, AiwgStaticEmbeddingSet, AiwgStaticHybridQueryOptions, AiwgStaticSemanticQueryOptions, AiwgStaticSemanticResult, BuildAiwgStaticEmbeddingSetOptions, aiwgFortemiIndexToCommunityGraph, assertAiwgFortemiChunkManifest, assertAiwgFortemiChunkPart, assertAiwgFortemiIndexExport, assertAiwgStaticEmbeddingSet, buildAiwgChunkedIndex, buildAiwgStaticEmbeddingSet, createAiwgFetchChunkLoader, createAiwgFetchDetailLoader, createAiwgIndexController, createAiwgReviewDecisionExport, filterAiwgRecordsByPrivacy, findAiwgStaticDuplicatePairs, getAiwgFortemiFacets, queryAiwgFortemiIndex, queryAiwgHybridIndex, queryAiwgSemanticIndex, validateAiwgFortemiChunkManifest, validateAiwgFortemiChunkPart, validateAiwgFortemiIndexExport, validateAiwgStaticEmbeddingSet } from './aiwg-index.js';
 
 /**
  * Generate a RFC 9562 UUIDv7 identifier.
@@ -2378,19 +2378,19 @@ declare const CaptureKnowledgeInputSchema: z.ZodObject<{
     }, {
         content: string;
         title?: string | undefined;
-        format?: "markdown" | "plain" | "html" | undefined;
         tags?: string[] | undefined;
+        format?: "markdown" | "plain" | "html" | undefined;
     }>, "many">>;
     template: z.ZodOptional<z.ZodString>;
     variables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
     source: string;
     format: "markdown" | "plain" | "html";
-    visibility: "private" | "shared" | "public";
+    visibility: "private" | "public" | "shared";
     action: "create" | "bulk_create" | "from_template";
     title?: string | undefined;
-    archive_id?: string | undefined;
     tags?: string[] | undefined;
+    archive_id?: string | undefined;
     content?: string | undefined;
     notes?: {
         format: "markdown" | "plain" | "html";
@@ -2404,16 +2404,16 @@ declare const CaptureKnowledgeInputSchema: z.ZodObject<{
     action: "create" | "bulk_create" | "from_template";
     source?: string | undefined;
     title?: string | undefined;
+    tags?: string[] | undefined;
     archive_id?: string | undefined;
     format?: "markdown" | "plain" | "html" | undefined;
-    visibility?: "private" | "shared" | "public" | undefined;
-    tags?: string[] | undefined;
+    visibility?: "private" | "public" | "shared" | undefined;
     content?: string | undefined;
     notes?: {
         content: string;
         title?: string | undefined;
-        format?: "markdown" | "plain" | "html" | undefined;
         tags?: string[] | undefined;
+        format?: "markdown" | "plain" | "html" | undefined;
     }[] | undefined;
     template?: string | undefined;
     variables?: Record<string, string> | undefined;
@@ -2460,17 +2460,17 @@ declare const SearchInputSchema: z.ZodObject<{
     visibility: z.ZodOptional<z.ZodEnum<["private", "shared", "public"]>>;
     include_facets: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
-    limit: number;
+    query: string;
     offset: number;
+    limit: number;
     include_facets: boolean;
-    mode: "auto" | "text" | "semantic" | "hybrid";
-    query: string;
+    mode: "text" | "auto" | "semantic" | "hybrid";
     source?: string | undefined;
+    tags?: string[] | undefined;
     format?: "markdown" | "plain" | "html" | undefined;
-    visibility?: "private" | "shared" | "public" | undefined;
+    visibility?: "private" | "public" | "shared" | undefined;
     is_starred?: boolean | undefined;
     is_archived?: boolean | undefined;
-    tags?: string[] | undefined;
     collection_id?: string | undefined;
     date_from?: Date | undefined;
     date_to?: Date | undefined;
@@ -2479,18 +2479,18 @@ declare const SearchInputSchema: z.ZodObject<{
 }, {
     query: string;
     source?: string | undefined;
+    tags?: string[] | undefined;
+    offset?: number | undefined;
+    limit?: number | undefined;
     format?: "markdown" | "plain" | "html" | undefined;
-    visibility?: "private" | "shared" | "public" | undefined;
+    visibility?: "private" | "public" | "shared" | undefined;
     is_starred?: boolean | undefined;
     is_archived?: boolean | undefined;
-    tags?: string[] | undefined;
-    limit?: number | undefined;
-    offset?: number | undefined;
     collection_id?: string | undefined;
     date_from?: Date | undefined;
     date_to?: Date | undefined;
     include_facets?: boolean | undefined;
-    mode?: "auto" | "text" | "semantic" | "hybrid" | undefined;
+    mode?: "text" | "auto" | "semantic" | "hybrid" | undefined;
     embeddingSetId?: string | undefined;
     query_embedding?: number[] | undefined;
 }>;
@@ -2570,22 +2570,22 @@ declare const ListNotesInputSchema: z.ZodObject<{
     collection_id: z.ZodOptional<z.ZodString>;
     include_deleted: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
-    sort: "created_at" | "updated_at" | "title";
-    limit: number;
+    sort: "title" | "updated_at" | "created_at";
     offset: number;
+    limit: number;
     order: "asc" | "desc";
+    tags?: string[] | undefined;
     is_starred?: boolean | undefined;
     is_archived?: boolean | undefined;
-    tags?: string[] | undefined;
     include_deleted?: boolean | undefined;
     collection_id?: string | undefined;
 }, {
-    sort?: "created_at" | "updated_at" | "title" | undefined;
-    is_starred?: boolean | undefined;
-    is_archived?: boolean | undefined;
     tags?: string[] | undefined;
-    limit?: number | undefined;
+    sort?: "title" | "updated_at" | "created_at" | undefined;
     offset?: number | undefined;
+    limit?: number | undefined;
+    is_starred?: boolean | undefined;
+    is_archived?: boolean | undefined;
     order?: "asc" | "desc" | undefined;
     include_deleted?: boolean | undefined;
     collection_id?: string | undefined;
@@ -2599,12 +2599,12 @@ declare const ManageTagsInputSchema: z.ZodObject<{
     tag: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     action: "add" | "remove" | "list_for_note" | "list_all";
-    note_id?: string | undefined;
     tag?: string | undefined;
+    note_id?: string | undefined;
 }, {
     action: "add" | "remove" | "list_for_note" | "list_all";
-    note_id?: string | undefined;
     tag?: string | undefined;
+    note_id?: string | undefined;
 }>;
 type ManageTagsInput = z.infer<typeof ManageTagsInputSchema>;
 interface ManageTagsResult {
@@ -2626,17 +2626,17 @@ declare const ManageCollectionsInputSchema: z.ZodObject<{
     note_id: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     action: "create" | "delete" | "list" | "assign" | "unassign" | "list_tree";
-    collection_id?: string | undefined;
-    note_id?: string | undefined;
     name?: string | undefined;
     description?: string | undefined;
+    collection_id?: string | undefined;
+    note_id?: string | undefined;
     parent_id?: string | undefined;
 }, {
     action: "create" | "delete" | "list" | "assign" | "unassign" | "list_tree";
-    collection_id?: string | undefined;
-    note_id?: string | undefined;
     name?: string | undefined;
     description?: string | undefined;
+    collection_id?: string | undefined;
+    note_id?: string | undefined;
     parent_id?: string | undefined;
 }>;
 type ManageCollectionsInput = z.infer<typeof ManageCollectionsInputSchema>;
@@ -3578,10 +3578,19 @@ declare function packTarGz(files: Map<string, Uint8Array>): Uint8Array;
 /**
  * Unpack a gzip-compressed tar archive.
  *
+ * Before decompressing, the gzip ISIZE footer (declared uncompressed size) is
+ * checked against `maxDecompressedBytes` and rejected if it exceeds the cap.
+ * fflate independently verifies the actual output length against ISIZE, so a
+ * lying footer fails during decompression — together this bounds the memory a
+ * malicious archive can force us to allocate.
+ *
  * @param data Compressed archive bytes
+ * @param opts.maxDecompressedBytes Cap on decompressed size (default 256 MiB)
  * @returns Map of filename → file contents
  */
-declare function unpackTarGz(data: Uint8Array): Map<string, Uint8Array>;
+declare function unpackTarGz(data: Uint8Array, opts?: {
+    maxDecompressedBytes?: number;
+}): Map<string, Uint8Array>;
 
 /**
  * SHA-256 checksum utilities for shard integrity verification.
@@ -3595,6 +3604,15 @@ declare function sha256Hex(data: Uint8Array): Promise<string>;
 /**
  * Validate checksums listed in a shard manifest against actual file contents.
  *
+ * SECURITY (SEC7 — trust model): these checksums live *inside* the same archive
+ * as the files they hash, so they detect **transport corruption**, not
+ * **tampering**. An attacker who controls the archive controls both the file
+ * bytes and the manifest hashes, so a passing result proves the archive is
+ * internally consistent — nothing more. For provenance-sensitive imports, verify
+ * integrity out-of-band: a signed manifest, or a caller-supplied expected digest
+ * checked against the whole archive (see `prefetchShard`'s `expectedSha256`,
+ * which is real integrity because the hash arrives on a separate channel).
+ *
  * @returns Object with `valid` flag and list of failed filenames.
  */
 declare function validateChecksums(checksums: Record<string, string>, files: Map<string, Uint8Array>): Promise<{
@@ -3803,6 +3821,6 @@ declare function getPrefetchedSha256(url: string): string | undefined;
  */
 declare function clearPrefetchedShard(url?: string): void;
 
-declare const VERSION = "2026.7.2";
+declare const VERSION = "2026.7.3";
 
 export { type ArchiveInfo, ArchiveManager, type AttachInput, type AttachmentBlobRow, type AttachmentRow, AttachmentsRepository, type BackendCandidate, type BackendCapabilities, type BackendConcept, type BackendLink, type BackendListOptions, type BackendNote, type BackendNoteFull, type BackendProvenanceEdge, type BackendRequest, type BackendSearchHit, type BackendSearchQueryOptions, type BackendSearchResult, type BackendSelection, type BackendSemanticTier, type BackendStartupCost, type BlobStore, type BridgeCapability, type BridgeProviderInfo, type BrowserNoteExport, CURRENT_MIGRATION_HEAD, CURRENT_SHARD_VERSION, type CapabilityInfo, CapabilityManager, type CapabilityName, type CapabilityState, type CaptureKnowledgeInput, CaptureKnowledgeInputSchema, type CaptureKnowledgeResult, type CollectionCreateInput, type CollectionRow, CollectionsRepository, CommunitiesRepository, type CommunityAssignmentView, type CommunityCreateInput, type CommunityFilterDefinition, type CommunityGraph, type CommunityOptions, type CommunitySourceDescriptor, type CommunitySourceType, type CommunitySummary, type CompletionRequest, type CompletionResponse, type ConditionResult, type ConflictStrategy, type CooldownConfig, type CooldownEvent, type CosineSemanticProviderOptions, type CreatePGliteOptions, type CspDirectiveName, type CspDirectives, type CspViolationReport, DB_SNAPSHOT_SCHEMA_VERSION, type DataBackend, type DatabaseClient, type DbSnapshot, type DbSnapshotCompat, type DbSnapshotCompression, type DbSnapshotExpectations, type DbSnapshotMeta, type DbSnapshotSource, DbSnapshotVersionError, type DiscoveredProvider, type DiscoveryOptions, type DumpDbSnapshotOptions, type DumpableDb, EMBED_REQUEST_KIND, EMBED_RESPONSE_KIND, type EmbedFunction, type EmbedRequest, type EmbedRequestMessage, type EmbedResponse, type EmbedResponseMessage, type EmbedTransportPort, type EmbedWorkerOptions, type EmbeddingCompatibilityPolicy, type EmbeddingSetCreateInput, type EmbeddingSetCriteria, type EmbeddingSetDescriptor, type EmbeddingSetEmbeddingInput, type EmbeddingSetFreshness, type EmbeddingSetKind, type EmbeddingSetMode, type EmbeddingSetRow, type EmbeddingSetSelector, EmbeddingSetsRepository, type EnqueueJobInput, type ErrorCategory, type EventMap, type ExportOptions, type FallbackEvent, FallbackRouter, type FallbackRouterConfig, type FortemiBridge, type FortemiBridgeCapabilities, type FortemiBridgeHost, type FortemiConfig, type FortemiCore, type FortemiInferenceRouter, type FortemiSecretStore, type FortemiToolDefinition, FortemiToolManifest, type GetNoteInput, GetNoteInputSchema, type GpuCapabilities, type GraphCommunity, type GraphEdge, type GraphNode, GraphRepository, type IDisposable, type ImportCounts, type ImportOptions, type ImportProgress, type ImportProgressPhase, type ImportResult, type InferenceCapabilities, type InferenceProvider, JOB_CAPABILITIES, JOB_PRIORITIES, type JobQueueOptions, JobQueueWorker, type JobStatus, type JobType, LOCAL_ENDPOINTS, type LinkRow, LinksRepository, type ListNotesInput, ListNotesInputSchema, type LlmCapabilityOptions, type LlmCompleteFn, type LoadedPluginScript, type LocalEndpoint, type ManageArchiveInput, ManageArchiveInputSchema, type ManageArchiveResult, type ManageAttachmentsInput, ManageAttachmentsInputSchema, type ManageAttachmentsResult, type ManageCapabilitiesInput, ManageCapabilitiesInputSchema, type ManageCapabilitiesResult, type ManageCollectionsInput, ManageCollectionsInputSchema, type ManageCollectionsResult, type ManageLinksInput, ManageLinksInputSchema, type ManageLinksResult, type ManageNoteInput, ManageNoteInputSchema, type ManageNoteResult, type ManageTagsInput, ManageTagsInputSchema, type ManageTagsResult, MemoryBlobStore, type Migration, MigrationRunner, type ModelCategory, type ModelFitResult, type ModelInfo, type NoteCreateInput, type NoteFull, type NoteListOptions, type NoteRevision, type NoteSkosTag, type NoteSummary, type NoteUpdateInput, NotesRepository, OpenAICompatibleProvider, type OpenAIProviderConfig, type OpenShardOptions, type PGliteBackendOptions, PGliteStorageBackend, PGliteStorageBackendFactory, PGliteWorkerClient, PGliteWorkerStorageBackend, PGliteWorkerStorageBackendFactory, type PGliteWorkerStorageBackendFactoryOptions, type PaginatedResult, type PersistenceMode, type PluginCspOptions, type PluginScriptDescriptor, type PluginScriptPolicy, type PrefetchOptions, type PrefetchResult, type ProbeResult, type ProbeStatus, type ProvenanceEdge, ProvenanceRepository, type ProviderCapabilities, ProviderRegistry, type ProviderTier, type QueryExecutor, type QueryResult, type RecommendedTier, type RecordProvenanceInput, type RemoteBackendConfig, type RemoteBackendPaths, type ResolvedEmbeddingRow, type ResolvedEmbeddingSet, type RestoreDbSnapshotOptions, type RouteHandler, SHARD_FORMAT, SUPPORTED_PGLITE_VERSION, type SWRegistrationResult, type SearchFacets, type SearchInput, SearchInputSchema, type SearchOptions, SearchRepository, type SearchResponse, type SearchResult, type ShardBackendOptions, type ShardClusterRef, type ShardCollection, type ShardComponent, type ShardComponentStore, type ShardEmbedding, type ShardEmbeddingSet, type ShardEmbeddingSetMember, type ShardLayout, type ShardLink, type ShardListOptions, type ShardManifest, type ShardNote, type ShardNoteFull, type ShardNoteSkosTag, type ShardProvenanceEdge, type ShardReader, type ShardReaderNote, type ShardReaderSource, type ShardSearchOptions, type ShardSearchRankedNote, type ShardSearchResult, type ShardSearchWeights, type ShardSkosConcept, type ShardSkosRelation, type ShardSkosScheme, type ShardTag, type SimilarityGraphCacheKey, type SimilarityGraphOptions, type SimilarityGraphRequest, type SimilarityGraphResult, type SkosConcept, type SkosRelation, SkosRepository, type SkosScheme, type StaticSemanticProvider, type StorageBackend, type StorageBackendFactory, type StorageOpenRequest, type StorageTopology, type StreamChunk, TagsRepository, TransactionProxy, TypedEventBus, VERSION, type VectorEntry, type VirtualEmbeddingSetDefinition, type VirtualEmbeddingSetSource, type VirtualEmbeddingSetValidationError, type VirtualMaterializationPolicy, type VramTier, type WorkerRequest, type WorkerResponse, aiRevisionHandler, allMigrations, appendPluginScript, buildNoteConditions, buildPluginCsp, captureKnowledge, chunkText, classifyError, classifyModel, clearPrefetchedShard, collectionFromShard, collectionToShard, computeHash, computeSri, conceptTaggingHandler, cosineSimilarity, createBlobStore, createCosineSemanticProvider, createCspReportHandler, createFortemi, createLegacyProvider, createPGliteBackend, createPGliteInstance, createRemoteBackend, createRoutes, createShardBackend, createWorkerEmbedFunction, defaultStorageBackendFactory, detectCommunities, detectGpuCapabilities, detectInferenceCapabilities, discoverLocalProviders, dumpDbSnapshot, embeddingFromShard, embeddingGenerationHandler, embeddingSetFromShard, embeddingSetMemberToShard, embeddingSetToShard, embeddingToShard, enqueueFullWorkflow, enqueueJob, enqueueNoteCreationJobs, estimateModelFit, estimateVramMB, estimateVramTier, exportShard, fetchPluginScript, fortemiManifest, fromPrefetched, generateId, getEmbedFunction, getFortemiBridge, getFortemiSecretStore, getJobQueueStatus, getLlmFunction, getNote, getPrefetchedSha256, handleEmbedRequests, hasFortemiSecureSecrets, importShard, isPluginScriptAllowed, isShardPrefetched, linkFromShard, linkToShard, linkingHandler, listNotes, manageArchive, manageAttachments, manageCapabilities, manageCollections, manageLinks, manageNote, manageTags, matchRoute, noteFromShard, noteSkosTagToShard, noteToShard, openShard, packTarGz, parseCspReport, prefetchShard, provenanceEdgeToShard, registerLlmCapability, registerSemanticCapability, registerSemanticCapabilityWorker, registerServiceWorker, restoreDbSnapshot, searchTool, selectBackend, selectLlmModel, setEmbedFunction, setLlmFunction, sha256Hex, skosConceptToShard, skosRelationToShard, skosSchemeToShard, suggestTags, tagsFromShard, tagsToShard, titleGenerationHandler, unpackTarGz, unregisterLlmCapability, unregisterSemanticCapability, validateChecksums, verifyDbSnapshotMeta, verifySri };

package/dist/index.js

@@ -6546,8 +6546,25 @@ function packTarGz(files) {
   const tarData = encodeTar(files);
   return gzipSync(tarData);
 }
-function unpackTarGz(data) {
+var DEFAULT_MAX_DECOMPRESSED_BYTES = 256 * 1024 * 1024;
+function unpackTarGz(data, opts) {
+  const cap = opts?.maxDecompressedBytes ?? DEFAULT_MAX_DECOMPRESSED_BYTES;
+  if (data.byteLength < 18) {
+    throw new Error("Invalid gzip archive: too short");
+  }
+  const view = new DataView(data.buffer, data.byteOffset, data.byteLength);
+  const declaredSize = view.getUint32(data.byteLength - 4, true);
+  if (declaredSize > cap) {
+    throw new Error(
+      "Refusing to decompress archive: declared size " + declaredSize + " exceeds cap " + cap + " bytes"
+    );
+  }
   const tarData = gunzipSync(data);
+  if (tarData.byteLength > cap) {
+    throw new Error(
+      "Refusing to decompress archive: decompressed size " + tarData.byteLength + " exceeds cap " + cap + " bytes"
+    );
+  }
   return decodeTar(tarData);
 }
 
@@ -7174,6 +7191,8 @@ async function importShard(db, data, options) {
   const report = options?.onProgress;
   const warnings = [];
   const errors = [];
+  let droppedAttachmentCount = 0;
+  let notesWithDroppedAttachments = 0;
   const counts = {
     notes: 0,
     collections: 0,
@@ -7408,10 +7427,19 @@ async function importShard(db, data, options) {
             [generateId(), note.id, tag]
           );
         }
+        if (note.binary_sources?.length) {
+          droppedAttachmentCount += note.binary_sources.length;
+          notesWithDroppedAttachments++;
+        }
         counts.notes++;
         report?.({ phase: "notes", done: index + 1, total: parsedNotes.length });
         await maybeYield2(index + 1, batchSize);
       }
+      if (droppedAttachmentCount > 0) {
+        warnings.push(
+          `${droppedAttachmentCount} attachment(s) across ${notesWithDroppedAttachments} note(s) were not imported: shards currently carry attachment references (metadata + checksum) but not the binary content, so attachment bytes cannot be restored. Tracking: #237 (attachment round-trip) / server #1013 (binary contract).`
+        );
+      }
       const totalSkos = parsedSkosSchemes.length + parsedSkosConcepts.length + parsedSkosRelations.length + parsedNoteSkosTags.length;
       let doneSkos = 0;
       report?.({ phase: "skos", done: doneSkos, total: totalSkos });
@@ -7688,6 +7716,11 @@ function parseJsonArray(data) {
 
 // src/shard/shard-reader.ts
 var decoder2 = new TextDecoder();
+function assertSafeComponentName(filename) {
+  if (filename.length === 0 || filename.startsWith("/") || filename.includes("\\") || filename.includes("\0") || filename.includes(":") || filename.split("/").some((segment) => segment === "..")) {
+    throw new Error(`Refusing to read unsafe shard component path: ${JSON.stringify(filename)}`);
+  }
+}
 function parseJsonlBytes(data) {
   if (!data || data.byteLength === 0) return [];
   return decoder2.decode(data).split("\n").filter((line) => line.trim().length > 0).map((line) => JSON.parse(line));
@@ -7723,6 +7756,7 @@ var UrlComponentStore = class {
     this.manifest = manifest;
   }
   async read(filename) {
+    assertSafeComponentName(filename);
     if (this.cache.has(filename)) return this.cache.get(filename);
     const response = await this.fetchImpl(`${this.baseUrl}/${filename}`);
     if (!response.ok) {
@@ -8194,6 +8228,16 @@ var AIWG_SCAN_REQUIRED_FIELDS = [
   "concepts",
   "privacy"
 ];
+function isPrivacyExcluded(record, options) {
+  const privacy = record.privacy;
+  if (!privacy) return false;
+  if (privacy.classification === "private" && !options?.includePrivate) return true;
+  if (privacy.pii && !options?.includePii) return true;
+  return false;
+}
+function filterAiwgRecordsByPrivacy(records, options) {
+  return records.filter((record) => !isPrivacyExcluded(record, options));
+}
 var REQUIRED_RECORD_FIELDS = [
   "schema_version",
   "id",
@@ -8220,8 +8264,12 @@ function hasString(value) {
   return typeof value === "string" && value.length > 0;
 }
 function pushFacet(counts, name, value) {
-  counts[name] ??= {};
-  counts[name][value] = (counts[name][value] ?? 0) + 1;
+  let bucket = counts[name];
+  if (bucket === void 0) {
+    bucket = /* @__PURE__ */ Object.create(null);
+    counts[name] = bucket;
+  }
+  bucket[value] = (bucket[value] ?? 0) + 1;
 }
 function hasNonNegativeInteger(value) {
   return Number.isInteger(value) && typeof value === "number" && value >= 0;
@@ -8343,6 +8391,57 @@ function validateOptionalRichMetadata(item, index, errors) {
     errors.push("items[" + index + "].compatibility must be an object");
   }
 }
+function isPrivacyClassification(value) {
+  return value === "private" || value === "sanitized" || value === "public";
+}
+function isProvenanceConfidence(value) {
+  return value === "source" || value === "candidate" || value === "reviewed" || value === "rejected";
+}
+function validateProvenanceItems(item, index, errors) {
+  if (!Array.isArray(item.provenance)) return;
+  for (const [provIndex, prov] of item.provenance.entries()) {
+    const at = "items[" + index + "].provenance[" + provIndex + "]";
+    if (!isPlainRecord(prov)) {
+      errors.push(at + " must be an object");
+      continue;
+    }
+    if (!hasString(prov.field)) errors.push(at + ".field is required");
+    if (!hasString(prov.source)) errors.push(at + ".source is required");
+    if (!hasString(prov.path)) errors.push(at + ".path is required");
+    if (!isProvenanceConfidence(prov.confidence)) errors.push(at + ".confidence must be one of source, candidate, reviewed, rejected");
+    if (!isPrivacyClassification(prov.privacy)) errors.push(at + ".privacy must be one of private, sanitized, public");
+  }
+}
+var V2_ONLY_RECORD_FIELDS = ["search", "chunks", "embeddings", "skos_concepts", "skos_relations", "compatibility"];
+var V2_ONLY_SOURCE_FIELDS = ["origin", "generated", "checksum", "updated_at"];
+var V2_ONLY_RELATIONSHIP_FIELDS = ["target_path", "direction", "metadata"];
+function forbidV2FieldsOnV1Record(item, index, errors) {
+  if (item.schema_version !== "aiwg.fortemi.index.record.v1") return;
+  const at = "items[" + index + "]";
+  const bag = item;
+  const v2msg = " is a v2-only field and must be absent on a record.v1 record";
+  for (const field of V2_ONLY_RECORD_FIELDS) {
+    if (bag[field] !== void 0) errors.push(at + "." + field + v2msg);
+  }
+  if (isPlainRecord(item.source)) {
+    const src = item.source;
+    for (const field of V2_ONLY_SOURCE_FIELDS) {
+      if (src[field] !== void 0) errors.push(at + ".source." + field + v2msg);
+    }
+  }
+  if (isPlainRecord(item.privacy) && item.privacy.locality !== void 0) {
+    errors.push(at + ".privacy.locality" + v2msg);
+  }
+  if (Array.isArray(item.relationships)) {
+    for (const [relIndex, rel] of item.relationships.entries()) {
+      if (!isPlainRecord(rel)) continue;
+      const relBag = rel;
+      for (const field of V2_ONLY_RELATIONSHIP_FIELDS) {
+        if (relBag[field] !== void 0) errors.push(at + ".relationships[" + relIndex + "]." + field + v2msg);
+      }
+    }
+  }
+}
 function validateAiwgFortemiIndexExport(value) {
   const errors = [];
   const counts = {};
@@ -8353,10 +8452,21 @@ function validateAiwgFortemiIndexExport(value) {
   if (!hasString(data?.generated_at)) errors.push("generated_at is required");
   if (!hasString(data?.source?.repo)) errors.push("source.repo is required");
   if (!hasString(data?.source?.privacy)) errors.push("source.privacy is required");
+  else if (!isPrivacyClassification(data?.source?.privacy)) {
+    errors.push("source.privacy must be one of private, sanitized, public");
+  }
   if (!Array.isArray(data?.items)) errors.push("items must be an array");
   if (data.compatibility !== void 0 && !isPlainRecord(data.compatibility)) {
     errors.push("compatibility must be an object");
   }
+  if (data?.schema_version === "aiwg.fortemi.index.export.v1") {
+    if (isPlainRecord(data.source) && data.source.graph !== void 0) {
+      errors.push("source.graph is a v2-only field and must be absent on an export.v1 export");
+    }
+    if (data.compatibility !== void 0) {
+      errors.push("compatibility is a v2-only field and must be absent on an export.v1 export");
+    }
+  }
   const ids = /* @__PURE__ */ new Set();
   let previousId = "";
   for (const [index, item] of (data.items ?? []).entries()) {
@@ -8391,8 +8501,12 @@ function validateAiwgFortemiIndexExport(value) {
       errors.push("items[" + index + "].provenance must be a non-empty array");
     }
     validateOptionalRichMetadata(item, index, errors);
+    validateProvenanceItems(item, index, errors);
+    forbidV2FieldsOnV1Record(item, index, errors);
     if (!item.privacy || typeof item.privacy.pii !== "boolean" || !hasString(item.privacy.classification)) {
       errors.push("items[" + index + "].privacy requires classification and pii");
+    } else if (!isPrivacyClassification(item.privacy.classification)) {
+      errors.push("items[" + index + "].privacy.classification must be one of private, sanitized, public");
     }
   }
   return { valid: errors.length === 0, errors, counts };
@@ -8413,6 +8527,9 @@ function validateAiwgFortemiChunkManifest(value) {
   if (!hasString(data?.generated_at)) errors.push("generated_at is required");
   if (!hasString(data?.source?.repo)) errors.push("source.repo is required");
   if (!hasString(data?.source?.privacy)) errors.push("source.privacy is required");
+  if (data?.source_export_schema_version !== void 0 && !isSupportedIndexSchemaVersion(data.source_export_schema_version)) {
+    errors.push("source_export_schema_version must be aiwg.fortemi.index.export.v1 or aiwg.fortemi.index.export.v2 when present");
+  }
   if (!hasNonNegativeInteger(data?.total)) errors.push("total must be a non-negative integer");
   if (!hasPositiveInteger(data?.part_size)) errors.push("part_size must be a positive integer");
   if (data.facets !== void 0 && !isFacetCounts(data.facets)) {
@@ -8531,9 +8648,35 @@ function assertAiwgFortemiChunkPart(value, partRef, manifest) {
   }
   return value;
 }
+var ALLOWED_AIWG_FETCH_SCHEMES = /* @__PURE__ */ new Set(["http:", "https:", "blob:", "data:"]);
+function tryParseUrl(value) {
+  try {
+    return new URL(value);
+  } catch {
+    return null;
+  }
+}
+function resolveAiwgFetchUrl(href, baseUrl) {
+  if (baseUrl === void 0) {
+    const absolute = tryParseUrl(href);
+    if (absolute && !ALLOWED_AIWG_FETCH_SCHEMES.has(absolute.protocol)) {
+      throw new Error("Refusing AIWG index fetch with disallowed scheme: " + absolute.protocol);
+    }
+    return href;
+  }
+  const base = new URL(baseUrl);
+  const resolved = new URL(href, base);
+  if (!ALLOWED_AIWG_FETCH_SCHEMES.has(resolved.protocol)) {
+    throw new Error("Refusing AIWG index fetch with disallowed scheme: " + resolved.protocol);
+  }
+  if (resolved.origin !== base.origin) {
+    throw new Error("Refusing cross-origin AIWG index fetch: " + resolved.origin + " != " + base.origin);
+  }
+  return resolved.toString();
+}
 function createAiwgFetchChunkLoader(baseUrl) {
   return async (part) => {
-    const href = baseUrl ? new URL(part.href, baseUrl).toString() : part.href;
+    const href = resolveAiwgFetchUrl(part.href, baseUrl);
     const response = await fetch(href);
     if (!response.ok) throw new Error("Failed to fetch AIWG index chunk " + href + ": " + response.status);
     return response.json();
@@ -8553,14 +8696,14 @@ function createAiwgFetchDetailLoader(baseUrl) {
   return async (id, manifest) => {
     if (!manifest.detail?.href) throw new Error("Manifest has no detail.href for record resolution");
     const relative = aiwgDetailHrefForId(manifest.detail, id);
-    const href = baseUrl ? new URL(relative, baseUrl).toString() : relative;
+    const href = resolveAiwgFetchUrl(relative, baseUrl);
     const response = await fetch(href);
     if (!response.ok) throw new Error("Failed to fetch AIWG index detail " + href + ": " + response.status);
     return response.json();
   };
 }
 function getAiwgFortemiFacets(items) {
-  const result = {};
+  const result = /* @__PURE__ */ Object.create(null);
   for (const item of items) {
     pushFacet(result, "type", item.type);
     pushFacet(result, "privacy", item.privacy.classification);
@@ -8596,7 +8739,7 @@ function generatedAtString(value) {
 async function buildAiwgStaticEmbeddingSet(index, options) {
   assertAiwgFortemiIndexExport(index);
   const granularity = options.granularity ?? "body";
-  const records = options.records ?? index.items;
+  const records = filterAiwgRecordsByPrivacy(options.records ?? index.items, options.privacy);
   const embeddings = [];
   for (const record of records) {
     const input = options.textForRecord?.(record) ?? defaultEmbeddingInput(record, granularity);
@@ -8657,7 +8800,7 @@ function buildAiwgChunkedIndex(index, options = {}) {
   const projection = options.projection;
   const idEncoding = options.idEncoding ?? "base64url";
   const detailHref = options.detailHref ?? "detail/{id}.json";
-  const items = index.items;
+  const items = filterAiwgRecordsByPrivacy(index.items, options.privacy);
   const pad = (value) => String(value).padStart(4, "0");
   const project = (record) => {
     if (!projection) return record;
@@ -8685,6 +8828,7 @@ function buildAiwgChunkedIndex(index, options = {}) {
     schema_version: "aiwg.fortemi.index.chunk-manifest.v1",
     generated_at: options.generatedAt ?? index.generated_at,
     source: index.source,
+    source_export_schema_version: index.schema_version,
     total: items.length,
     part_size: partSize,
     facets: getAiwgFortemiFacets(items),
@@ -8995,8 +9139,15 @@ function queryAiwgHybridIndex(index, embeddingSet, query, queryEmbedding, option
     };
   }).filter((result) => result !== null && result.score >= (options.minScore ?? -1)).sort((left, right) => right.score - left.score || left.item.id.localeCompare(right.item.id)).slice(offset, offset + limit);
 }
-function findAiwgStaticDuplicatePairs(index, embeddingSet, threshold = 0.9) {
+var DEFAULT_AIWG_DUPLICATE_SCAN_MAX_EMBEDDINGS = 5e3;
+function findAiwgStaticDuplicatePairs(index, embeddingSet, threshold = 0.9, options) {
   assertAiwgStaticEmbeddingSet(embeddingSet);
+  const maxEmbeddings = options?.maxEmbeddings ?? DEFAULT_AIWG_DUPLICATE_SCAN_MAX_EMBEDDINGS;
+  if (embeddingSet.embeddings.length > maxEmbeddings) {
+    throw new Error(
+      "Embedding set too large for duplicate scan: " + embeddingSet.embeddings.length + " > " + maxEmbeddings + " (raise options.maxEmbeddings to override for trusted input)"
+    );
+  }
   const byId = new Map(index.items.map((item) => [item.id, item]));
   const pairs = [];
   for (let leftIndex = 0; leftIndex < embeddingSet.embeddings.length; leftIndex += 1) {
@@ -9461,7 +9612,7 @@ function createAiwgIndexController(initialIndex) {
       notify();
     },
     createReviewDecisionExport(generatedAt) {
-      const source = index ?? (chunked ? { schema_version: "aiwg.fortemi.index.export.v1" } : null);
+      const source = index ?? (chunked ? { schema_version: chunked.manifest.source_export_schema_version ?? "aiwg.fortemi.index.export.v1" } : null);
       if (!source) throw new Error("No AIWG index export or chunked manifest loaded");
       return createAiwgReviewDecisionExport(source, reviewDecisions, generatedAt);
     },
@@ -9518,8 +9669,8 @@ function communityIdsFor(item, options) {
 }
 
 // src/index.ts
-var VERSION = "2026.7.2";
+var VERSION = "2026.7.3";
 
-export { AIWG_SCAN_REQUIRED_FIELDS, ArchiveManager, AttachmentsRepository, CURRENT_MIGRATION_HEAD, CURRENT_SHARD_VERSION, CapabilityManager, CaptureKnowledgeInputSchema, CollectionsRepository, CommunitiesRepository, DB_SNAPSHOT_SCHEMA_VERSION, DbSnapshotVersionError, EMBED_REQUEST_KIND, EMBED_RESPONSE_KIND, EmbeddingSetsRepository, FallbackRouter, FortemiToolManifest, GetNoteInputSchema, GraphRepository, JOB_CAPABILITIES, JOB_PRIORITIES, JobQueueWorker, LOCAL_ENDPOINTS, LinksRepository, ListNotesInputSchema, ManageArchiveInputSchema, ManageAttachmentsInputSchema, ManageCapabilitiesInputSchema, ManageCollectionsInputSchema, ManageLinksInputSchema, ManageNoteInputSchema, ManageTagsInputSchema, MemoryBlobStore, MigrationRunner, NotesRepository, OpenAICompatibleProvider, PGliteStorageBackend, PGliteStorageBackendFactory, PGliteWorkerClient, PGliteWorkerStorageBackend, PGliteWorkerStorageBackendFactory, ProvenanceRepository, ProviderRegistry, SHARD_FORMAT, SUPPORTED_PGLITE_VERSION, SearchInputSchema, SearchRepository, SkosRepository, TagsRepository, TransactionProxy, TypedEventBus, VERSION, aiRevisionHandler, aiwgFortemiIndexToCommunityGraph, allMigrations, appendPluginScript, assertAiwgFortemiChunkManifest, assertAiwgFortemiChunkPart, assertAiwgFortemiIndexExport, assertAiwgStaticEmbeddingSet, buildAiwgChunkedIndex, buildAiwgStaticEmbeddingSet, buildNoteConditions, buildPluginCsp, captureKnowledge, chunkText, classifyError, classifyModel, clearPrefetchedShard, collectionFromShard, collectionToShard, computeHash, computeSri, conceptTaggingHandler, cosineSimilarity, createAiwgFetchChunkLoader, createAiwgFetchDetailLoader, createAiwgIndexController, createAiwgReviewDecisionExport, createBlobStore, createCosineSemanticProvider, createCspReportHandler, createFortemi, createLegacyProvider, createPGliteBackend, createPGliteInstance, createRemoteBackend, createRoutes, createShardBackend, createWorkerEmbedFunction, defaultStorageBackendFactory, detectCommunities, detectGpuCapabilities, detectInferenceCapabilities, discoverLocalProviders, dumpDbSnapshot, embeddingFromShard, embeddingGenerationHandler, embeddingSetFromShard, embeddingSetMemberToShard, embeddingSetToShard, embeddingToShard, enqueueFullWorkflow, enqueueJob, enqueueNoteCreationJobs, estimateModelFit, estimateVramMB, estimateVramTier, exportShard, fetchPluginScript, findAiwgStaticDuplicatePairs, fortemiManifest, fromPrefetched, generateId, getAiwgFortemiFacets, getEmbedFunction, getFortemiBridge, getFortemiSecretStore, getJobQueueStatus, getLlmFunction, getNote, getPrefetchedSha256, handleEmbedRequests, hasFortemiSecureSecrets, importShard, isPluginScriptAllowed, isShardPrefetched, linkFromShard, linkToShard, linkingHandler, listNotes, manageArchive, manageAttachments, manageCapabilities, manageCollections, manageLinks, manageNote, manageTags, matchRoute, noteFromShard, noteSkosTagToShard, noteToShard, openShard, packTarGz, parseCspReport, prefetchShard, provenanceEdgeToShard, queryAiwgFortemiIndex, queryAiwgHybridIndex, queryAiwgSemanticIndex, registerLlmCapability, registerSemanticCapability, registerSemanticCapabilityWorker, registerServiceWorker, restoreDbSnapshot, searchTool, selectBackend, selectLlmModel, setEmbedFunction, setLlmFunction, sha256Hex, skosConceptToShard, skosRelationToShard, skosSchemeToShard, suggestTags, tagsFromShard, tagsToShard, titleGenerationHandler, unpackTarGz, unregisterLlmCapability, unregisterSemanticCapability, validateAiwgFortemiChunkManifest, validateAiwgFortemiChunkPart, validateAiwgFortemiIndexExport, validateAiwgStaticEmbeddingSet, validateChecksums, verifyDbSnapshotMeta, verifySri };
+export { AIWG_SCAN_REQUIRED_FIELDS, ArchiveManager, AttachmentsRepository, CURRENT_MIGRATION_HEAD, CURRENT_SHARD_VERSION, CapabilityManager, CaptureKnowledgeInputSchema, CollectionsRepository, CommunitiesRepository, DB_SNAPSHOT_SCHEMA_VERSION, DbSnapshotVersionError, EMBED_REQUEST_KIND, EMBED_RESPONSE_KIND, EmbeddingSetsRepository, FallbackRouter, FortemiToolManifest, GetNoteInputSchema, GraphRepository, JOB_CAPABILITIES, JOB_PRIORITIES, JobQueueWorker, LOCAL_ENDPOINTS, LinksRepository, ListNotesInputSchema, ManageArchiveInputSchema, ManageAttachmentsInputSchema, ManageCapabilitiesInputSchema, ManageCollectionsInputSchema, ManageLinksInputSchema, ManageNoteInputSchema, ManageTagsInputSchema, MemoryBlobStore, MigrationRunner, NotesRepository, OpenAICompatibleProvider, PGliteStorageBackend, PGliteStorageBackendFactory, PGliteWorkerClient, PGliteWorkerStorageBackend, PGliteWorkerStorageBackendFactory, ProvenanceRepository, ProviderRegistry, SHARD_FORMAT, SUPPORTED_PGLITE_VERSION, SearchInputSchema, SearchRepository, SkosRepository, TagsRepository, TransactionProxy, TypedEventBus, VERSION, aiRevisionHandler, aiwgFortemiIndexToCommunityGraph, allMigrations, appendPluginScript, assertAiwgFortemiChunkManifest, assertAiwgFortemiChunkPart, assertAiwgFortemiIndexExport, assertAiwgStaticEmbeddingSet, buildAiwgChunkedIndex, buildAiwgStaticEmbeddingSet, buildNoteConditions, buildPluginCsp, captureKnowledge, chunkText, classifyError, classifyModel, clearPrefetchedShard, collectionFromShard, collectionToShard, computeHash, computeSri, conceptTaggingHandler, cosineSimilarity, createAiwgFetchChunkLoader, createAiwgFetchDetailLoader, createAiwgIndexController, createAiwgReviewDecisionExport, createBlobStore, createCosineSemanticProvider, createCspReportHandler, createFortemi, createLegacyProvider, createPGliteBackend, createPGliteInstance, createRemoteBackend, createRoutes, createShardBackend, createWorkerEmbedFunction, defaultStorageBackendFactory, detectCommunities, detectGpuCapabilities, detectInferenceCapabilities, discoverLocalProviders, dumpDbSnapshot, embeddingFromShard, embeddingGenerationHandler, embeddingSetFromShard, embeddingSetMemberToShard, embeddingSetToShard, embeddingToShard, enqueueFullWorkflow, enqueueJob, enqueueNoteCreationJobs, estimateModelFit, estimateVramMB, estimateVramTier, exportShard, fetchPluginScript, filterAiwgRecordsByPrivacy, findAiwgStaticDuplicatePairs, fortemiManifest, fromPrefetched, generateId, getAiwgFortemiFacets, getEmbedFunction, getFortemiBridge, getFortemiSecretStore, getJobQueueStatus, getLlmFunction, getNote, getPrefetchedSha256, handleEmbedRequests, hasFortemiSecureSecrets, importShard, isPluginScriptAllowed, isShardPrefetched, linkFromShard, linkToShard, linkingHandler, listNotes, manageArchive, manageAttachments, manageCapabilities, manageCollections, manageLinks, manageNote, manageTags, matchRoute, noteFromShard, noteSkosTagToShard, noteToShard, openShard, packTarGz, parseCspReport, prefetchShard, provenanceEdgeToShard, queryAiwgFortemiIndex, queryAiwgHybridIndex, queryAiwgSemanticIndex, registerLlmCapability, registerSemanticCapability, registerSemanticCapabilityWorker, registerServiceWorker, restoreDbSnapshot, searchTool, selectBackend, selectLlmModel, setEmbedFunction, setLlmFunction, sha256Hex, skosConceptToShard, skosRelationToShard, skosSchemeToShard, suggestTags, tagsFromShard, tagsToShard, titleGenerationHandler, unpackTarGz, unregisterLlmCapability, unregisterSemanticCapability, validateAiwgFortemiChunkManifest, validateAiwgFortemiChunkPart, validateAiwgFortemiIndexExport, validateAiwgStaticEmbeddingSet, validateChecksums, verifyDbSnapshotMeta, verifySri };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map