@oscharko-dev/keiko 0.2.0-beta.5 → 0.2.0-beta.7

package/node_modules/@oscharko-dev/keiko-server/dist/gateway-setup.js

@@ -1,7 +1,7 @@
-// First-run gateway setup for non-technical UI users. The browser provides only a base URL and API
-// token; the loopback BFF builds the local provider config, performs a real chat-completions smoke
-// call, stores the resulting config on disk with private permissions, and updates the in-memory
-// runtime config without exposing credentials back to the browser.
+// First-run gateway setup for non-technical UI users. The browser provides a base URL, API token,
+// and optionally a Figma PAT; the loopback BFF builds the local provider config, performs a real
+// chat-completions smoke call, stores the resulting config on disk with private permissions, and
+// updates the in-memory runtime config without exposing credentials back to the browser.
 import { chmodSync, existsSync, lstatSync, mkdirSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { randomUUID } from "node:crypto";
@@ -9,6 +9,7 @@ import { apiKeyHeaderValue, ConfigInvalidError, DEFAULT_API_KEY_HEADER_NAME, Gat
 import { gatewayFetch, readJsonCapped } from "@oscharko-dev/keiko-model-gateway/internal/http";
 import { redact } from "@oscharko-dev/keiko-security";
 import { errorBody } from "./routes.js";
+import { currentGatewayEgressConfig } from "./deps.js";
 const MAX_BODY_BYTES = 64_000;
 // Issue #144: exported so discovery-normalization tests can pin the slice cap
 // without hardcoding the number. The discovery surface is a public seam.
@@ -19,6 +20,7 @@ const DISCOVERED_MODEL_SMOKE_TIMEOUT_MS = 15_000;
 const DEPLOYMENT_SMOKE_TIMEOUT_MS = 30_000;
 const SETUP_SMOKE_CONCURRENCY = 4;
 const CHAT_COMPATIBLE_MODES = new Set(["chat", "completion", "responses"]);
+const EMBEDDING_ID_PATTERN = /(?:^|[-_/. ])(?:text-)?embed(?:ding)?s?(?:[-_/. ]|$)|ada-002(?:$|[-_/. ])/i;
 class BodyTooLargeError extends Error {
     constructor() {
         super("request body too large");
@@ -28,6 +30,9 @@ class BodyTooLargeError extends Error {
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+function isRouteResult(value) {
+    return isRecord(value) && typeof value.status === "number";
+}
 function readBody(req) {
     return new Promise((resolve, reject) => {
         const chunks = [];
@@ -95,23 +100,73 @@ function isAzureFoundryBaseUrl(baseUrl) {
     }
 }
 function providerRaw(modelId, baseUrl, apiKey, options = {}) {
+    const defaultCapability = options.embeddingModelIds?.includes(modelId) === true
+        ? createDefaultEmbeddingCapabilityForSetup(modelId)
+        : createDefaultChatCapability(modelId);
     return {
         modelId,
         baseUrl,
         apiKey,
         apiKeyHeaderName: options.apiKeyHeaderName ?? DEFAULT_API_KEY_HEADER_NAME,
-        capability: createDefaultChatCapability(modelId),
+        capability: options.imageInputModelIds?.includes(modelId) === true
+            ? { ...defaultCapability, supportsImageInput: true }
+            : defaultCapability,
         timeoutMs: options.timeoutMs ?? 30_000,
         maxRetries: options.maxRetries ?? 2,
         retryBaseDelayMs: 500,
     };
 }
+function isLikelyEmbeddingModelId(modelId) {
+    return EMBEDDING_ID_PATTERN.test(modelId);
+}
+function createDefaultEmbeddingCapabilityForSetup(modelId) {
+    return {
+        id: modelId,
+        kind: "embedding",
+        contextWindow: 8_191,
+        maxOutputTokens: 0,
+        toolCalling: false,
+        structuredOutput: false,
+        streaming: false,
+        supportsImageInput: false,
+        supportsDocumentInput: false,
+        workflowEligible: false,
+        costClass: "low",
+        latencyClass: "fast",
+        throughputHint: "runtime-configured embedding endpoint",
+        preferredUseCases: ["Embeddings"],
+        knownLimitations: [
+            "Runtime-configured capability; validate against the target endpoint before production use",
+        ],
+    };
+}
+function mergeChatAndEmbeddingModelIds(chatModelIds, deploymentNames) {
+    const merged = [...chatModelIds];
+    const seen = new Set(merged);
+    for (const modelId of deploymentNames) {
+        if (!isLikelyEmbeddingModelId(modelId) || seen.has(modelId)) {
+            continue;
+        }
+        seen.add(modelId);
+        merged.push(modelId);
+    }
+    return merged;
+}
+function embeddingModelIdsFromDeployments(deploymentNames) {
+    return deploymentNames.filter(isLikelyEmbeddingModelId);
+}
 function buildRawConfig(baseUrl, apiKey, modelIds, options = {}) {
     return {
         providers: modelIds.map((modelId) => providerRaw(modelId, baseUrl, apiKey, options)),
         circuitBreaker: { failureThreshold: 5, cooldownMs: 30_000, halfOpenProbes: 2 },
     };
 }
+function withInheritedEgress(rawConfig, egress) {
+    if (egress === undefined || Object.hasOwn(rawConfig, "egress")) {
+        return rawConfig;
+    }
+    return { ...rawConfig, egress };
+}
 function modelsEndpoint(baseUrl) {
     return `${baseUrl}/models`;
 }
@@ -284,6 +339,32 @@ function parseDeploymentNames(value) {
     }
     return names;
 }
+function parseImageInputModelIds(value) {
+    if (value === undefined) {
+        return [];
+    }
+    const values = deploymentNameValues(value);
+    if (values === undefined) {
+        return {
+            status: 400,
+            body: errorBody("BAD_REQUEST", "imageInputModelIds must be a string or an array of strings."),
+        };
+    }
+    const names = normalizeDeploymentNames(values);
+    if (names.length > MAX_DEPLOYMENT_NAMES) {
+        return {
+            status: 400,
+            body: errorBody("BAD_REQUEST", "imageInputModelIds exceeds the model setup limit."),
+        };
+    }
+    if (names.some((name) => !isUsableModelId(name))) {
+        return {
+            status: 400,
+            body: errorBody("BAD_REQUEST", "imageInputModelIds contains an invalid model id."),
+        };
+    }
+    return names;
+}
 function validateSetupConnection(baseUrl, apiKey, apiKeyHeaderName, env) {
     try {
         parseGatewayConfig(buildRawConfig(baseUrl, apiKey, ["setup-validation"], { apiKeyHeaderName }), env);
@@ -395,6 +476,28 @@ function isSymlink(path) {
         throw error;
     }
 }
+function normalizeSetupApiKeyHeaderName(value) {
+    try {
+        return normalizeApiKeyHeaderName(value, "apiKeyHeaderName", DEFAULT_API_KEY_HEADER_NAME);
+    }
+    catch (error) {
+        if (error instanceof ConfigInvalidError) {
+            return { status: 400, body: errorBody("BAD_REQUEST", error.message) };
+        }
+        throw error;
+    }
+}
+function readSetupModelLists(raw) {
+    const deploymentNames = parseDeploymentNames(raw.deploymentNames);
+    if (isRouteResult(deploymentNames)) {
+        return deploymentNames;
+    }
+    const imageInputModelIds = parseImageInputModelIds(raw.imageInputModelIds);
+    if (isRouteResult(imageInputModelIds)) {
+        return imageInputModelIds;
+    }
+    return { deploymentNames, imageInputModelIds };
+}
 function readSetupRequest(raw, env) {
     if (!isRecord(raw)) {
         return { status: 400, body: errorBody("BAD_REQUEST", "Request body must be a JSON object.") };
@@ -404,37 +507,56 @@ function readSetupRequest(raw, env) {
     if (baseUrl.length === 0 || apiKey.length === 0) {
         return { status: 400, body: errorBody("BAD_REQUEST", "baseUrl and apiKey are required.") };
     }
-    let apiKeyHeaderName;
-    try {
-        apiKeyHeaderName = normalizeApiKeyHeaderName(raw.apiKeyHeaderName, "apiKeyHeaderName", DEFAULT_API_KEY_HEADER_NAME);
+    const apiKeyHeaderName = normalizeSetupApiKeyHeaderName(raw.apiKeyHeaderName);
+    if (isRouteResult(apiKeyHeaderName)) {
+        return apiKeyHeaderName;
     }
-    catch (error) {
-        if (error instanceof ConfigInvalidError) {
-            return { status: 400, body: errorBody("BAD_REQUEST", error.message) };
-        }
-        throw error;
+    const modelLists = readSetupModelLists(raw);
+    if (isRouteResult(modelLists)) {
+        return modelLists;
     }
-    const deploymentNames = parseDeploymentNames(raw.deploymentNames);
-    if ("status" in deploymentNames) {
-        return deploymentNames;
+    if (Object.hasOwn(raw, "figmaAccessToken")) {
+        return {
+            status: 400,
+            body: errorBody("BAD_REQUEST", "Figma access tokens must be configured server-side, not through gateway setup."),
+        };
     }
     const invalidConnection = validateSetupConnection(baseUrl, apiKey, apiKeyHeaderName, env);
     if (invalidConnection !== undefined) {
         return invalidConnection;
     }
-    return { baseUrl, apiKey, apiKeyHeaderName, deploymentNames };
+    return {
+        baseUrl,
+        apiKey,
+        apiKeyHeaderName,
+        deploymentNames: modelLists.deploymentNames,
+        imageInputModelIds: modelLists.imageInputModelIds,
+    };
 }
 function safeError(error, secrets) {
+    const concreteSecrets = secrets.filter((secret) => secret !== undefined);
     if (error instanceof Error) {
-        return redact(error.message, secrets);
+        return redact(error.message, concreteSecrets);
     }
     return "Gateway setup failed.";
 }
-async function verifySetupCandidate(baseUrl, apiKey, apiKeyHeaderName, deploymentNames, tester, discovery, env) {
+function assertImageInputModelsWereTested(imageInputModelIds, testedModelIds) {
+    if (imageInputModelIds.length === 0)
+        return;
+    const tested = new Set(testedModelIds);
+    if (imageInputModelIds.some((modelId) => !tested.has(modelId))) {
+        throw new Error("imageInputModelIds must match tested chat-callable model ids.");
+    }
+}
+async function verifySetupCandidate(baseUrl, apiKey, apiKeyHeaderName, deploymentNames, imageInputModelIds, tester, discovery, env, egress) {
     // Defence-in-depth: never send the credential to a candidate URL that has not passed the same
     // scheme/credential/loopback validation as the originally submitted base URL.
     validateBaseUrl(baseUrl, "candidate");
-    const validationConfig = parseGatewayConfig(buildRawConfig(baseUrl, apiKey, ["setup-validation"], { apiKeyHeaderName }), env);
+    const validationRawConfig = buildRawConfig(baseUrl, apiKey, ["setup-validation"], {
+        apiKeyHeaderName,
+        imageInputModelIds,
+    });
+    const validationConfig = parseGatewayConfig(withInheritedEgress(validationRawConfig, egress), env);
     const candidateModelIds = deploymentNames.length > 0
         ? deploymentNames
         : await discovery(baseUrl, apiKey, apiKeyHeaderName, validationConfig.egress);
@@ -443,11 +565,19 @@ async function verifySetupCandidate(baseUrl, apiKey, apiKeyHeaderName, deploymen
         apiKeyHeaderName,
         timeoutMs: smokeTimeoutMs,
         maxRetries: 0,
+        imageInputModelIds,
     });
-    const candidateConfig = parseGatewayConfig(candidateRawConfig, env);
+    const candidateConfig = parseGatewayConfig(withInheritedEgress(candidateRawConfig, egress), env);
     const testedModelIds = await tester(candidateConfig, candidateModelIds);
-    const rawConfig = buildRawConfig(baseUrl, apiKey, testedModelIds, { apiKeyHeaderName });
-    const config = parseGatewayConfig(rawConfig, env);
+    assertImageInputModelsWereTested(imageInputModelIds, testedModelIds);
+    const embeddingModelIds = embeddingModelIdsFromDeployments(deploymentNames);
+    const configuredModelIds = mergeChatAndEmbeddingModelIds(testedModelIds, deploymentNames);
+    const rawConfig = buildRawConfig(baseUrl, apiKey, configuredModelIds, {
+        apiKeyHeaderName,
+        imageInputModelIds,
+        embeddingModelIds,
+    });
+    const config = parseGatewayConfig(withInheritedEgress(rawConfig, egress), env);
     return { rawConfig, config, testedModelIds };
 }
 function setupSuccessResult(config, testedModelIds) {
@@ -503,10 +633,20 @@ function gatewayUnavailableResult() {
         body: errorBody("GATEWAY_SETUP_UNAVAILABLE", "Gateway setup is unavailable."),
     };
 }
+async function trySetupCandidate(baseUrl, request, deps, gatewayConfig, tester, discovery) {
+    const verified = await verifySetupCandidate(baseUrl, request.apiKey, request.apiKeyHeaderName, request.deploymentNames, request.imageInputModelIds, tester, discovery, deps.env, currentGatewayEgressConfig(deps));
+    savePrivateJson(gatewayConfig.storagePath, verified.rawConfig);
+    gatewayConfig.set(verified.config, true);
+    return setupSuccessResult(verified.config, verified.testedModelIds);
+}
+function setupCandidateError(error, request, baseUrl) {
+    return safeError(error, [request.apiKey, request.baseUrl, baseUrl]);
+}
 export async function handleGatewaySetup(ctx, deps) {
     if (deps.gatewayConfig === undefined) {
         return gatewayUnavailableResult();
     }
+    const { gatewayConfig } = deps;
     const bodyResult = await readJsonSetupBody(ctx);
     if ("status" in bodyResult) {
         return bodyResult;
@@ -525,13 +665,10 @@ export async function handleGatewaySetup(ctx, deps) {
     const errors = [];
     for (const baseUrl of baseUrlCandidates) {
         try {
-            const verified = await verifySetupCandidate(baseUrl, request.apiKey, request.apiKeyHeaderName, request.deploymentNames, tester, discovery, deps.env);
-            savePrivateJson(deps.gatewayConfig.storagePath, verified.rawConfig);
-            deps.gatewayConfig.set(verified.config, true);
-            return setupSuccessResult(verified.config, verified.testedModelIds);
+            return await trySetupCandidate(baseUrl, request, deps, gatewayConfig, tester, discovery);
         }
         catch (error) {
-            errors.push(`candidate ${String(errors.length + 1)}: ${safeError(error, [request.apiKey, request.baseUrl, baseUrl])}`);
+            errors.push(`candidate ${String(errors.length + 1)}: ${setupCandidateError(error, request, baseUrl)}`);
         }
     }
     return setupFailureResult(errors);

package/node_modules/@oscharko-dev/keiko-server/dist/governed-workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"governed-workflow.d.ts","sourceRoot":"","sources":["../src/governed-workflow.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC5B,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAmB,eAAe,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAGnG,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnD;AA8CD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,GAAG,MAAM,CAM1F;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,SAAS,oBAAoB,EAAE,EACtC,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B,SAAS,MAAM,EAAE,CAWnB;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,SAAS,oBAAoB,EAAE,GACrC,SAAS,MAAM,EAAE,CAUnB;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,sBAAsB,GAC9B,sBAAsB,CAWxB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,sBAAsB,GAAG,MAAM,CAEzE;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,8BAA8B,GACtC,+BAA+B,CAWjC;AAED,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,eAAe,EAC3B,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B,eAAe,CA4BjB;AAED,wBAAgB,kCAAkC,CAChD,UAAU,EAAE,eAAe,GAC1B,SAAS,kBAAkB,EAAE,CAkB/B"}
+{"version":3,"file":"governed-workflow.d.ts","sourceRoot":"","sources":["../src/governed-workflow.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC5B,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAmB,eAAe,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAGnG,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnD;AAkDD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,GAAG,MAAM,CAS1F;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,SAAS,oBAAoB,EAAE,EACtC,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B,SAAS,MAAM,EAAE,CAWnB;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,GAAG,SAAS,MAAM,EAAE,CAUjG;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,sBAAsB,CAW7F;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,sBAAsB,GAAG,MAAM,CAEzE;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,8BAA8B,GACtC,+BAA+B,CAWjC;AAED,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,eAAe,EAC3B,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B,eAAe,CA4BjB;AAED,wBAAgB,kCAAkC,CAChD,UAAU,EAAE,eAAe,GAC1B,SAAS,kBAAkB,EAAE,CAkB/B"}

package/node_modules/@oscharko-dev/keiko-server/dist/governed-workflow.js

@@ -41,7 +41,10 @@ export function contextPackStableIdForPacks(packs) {
     if (packs.length === 1) {
         return packs[0]?.stableId ?? `p-${"0".repeat(64)}`;
     }
-    const joined = packs.map((pack) => pack.stableId).sort().join("|");
+    const joined = packs
+        .map((pack) => pack.stableId)
+        .sort()
+        .join("|");
     return `p-${sha256Hex(joined)}`;
 }
 export function readOnlyPathsForPacks(packs, editablePaths) {

package/node_modules/@oscharko-dev/keiko-server/dist/grounded-handoff.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grounded-handoff.d.ts","sourceRoot":"","sources":["../src/grounded-handoff.ts"],"names":[],"mappings":"AAmBA,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AAYxE,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA4hB7D,wBAAsB,6BAA6B,CACjD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAOtB"}
+{"version":3,"file":"grounded-handoff.d.ts","sourceRoot":"","sources":["../src/grounded-handoff.ts"],"names":[],"mappings":"AAmBA,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AAYxE,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA8hB7D,wBAAsB,6BAA6B,CACjD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAOtB"}

package/node_modules/@oscharko-dev/keiko-server/dist/grounded-handoff.js

@@ -9,6 +9,7 @@ import { startRun } from "./run-engine.js";
 import { parseRunRequest } from "./run-request.js";
 import { ActiveRunLimitError } from "./runs.js";
 import { errorBody } from "./routes.js";
+import { memoryCaptureCustomerMatchers } from "./memory-capture-policy.js";
 const MAX_BODY_BYTES = 256 * 1024;
 const RESERVED_WORKFLOW_INPUT_FIELDS = new Set([
     "apply",
@@ -312,6 +313,7 @@ function engineContextFor(deps, request, model) {
         },
         memoryVault: deps.memoryVault,
         memoryAuditRedactString: createAuditRedactor({ additionalSecrets: currentRedactionSecrets(deps) }, deps.env),
+        memoryCustomerIdentifierMatchers: memoryCaptureCustomerMatchers(deps),
     };
 }
 function markSummaryFailed(deps, message, shortResult) {

package/node_modules/@oscharko-dev/keiko-server/dist/grounded-qa-hybrid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grounded-qa-hybrid.d.ts","sourceRoot":"","sources":["../src/grounded-qa-hybrid.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAE7D,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,qCAAqC,CAAC;AAiB7C,OAAO,EAGL,KAAK,uBAAuB,EAO7B,MAAM,wCAAwC,CAAC;AAIhD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,KAAK,EAAY,aAAa,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EAML,KAAK,iBAAiB,EACvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAQL,KAAK,2BAA2B,EACjC,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAEL,KAAK,qBAAqB,EAE3B,MAAM,sBAAsB,CAAC;AAoB9B,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,uBAAuB,EAAE,CAExF;AAID,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAU/E;AAID,MAAM,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAChD,MAAM,MAAM,iBAAiB,GAAG,CAC9B,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE,uBAAuB,EAC9B,QAAQ,EAAE,2BAA2B,KAClC,OAAO,CAAC,eAAe,CAAC,CAAC;AAC9B,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAE9F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;IAGjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS;QACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,EAAE,CAAC;CACL;AAsMD,qBAAa,qBAAsB,SAAQ,KAAK;aACX,MAAM,EAAE,WAAW;gBAAnB,MAAM,EAAE,WAAW;CAIvD;AA0FD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,GAClB,cAAc,CAwBhB;AA4eD,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,CAS1F"}
+{"version":3,"file":"grounded-qa-hybrid.d.ts","sourceRoot":"","sources":["../src/grounded-qa-hybrid.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAE7D,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,qCAAqC,CAAC;AAiB7C,OAAO,EAGL,KAAK,uBAAuB,EAO7B,MAAM,wCAAwC,CAAC;AAIhD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,KAAK,EAAY,aAAa,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAM7C,OAAO,EAML,KAAK,iBAAiB,EACvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAQL,KAAK,2BAA2B,EACjC,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAEL,KAAK,qBAAqB,EAE3B,MAAM,sBAAsB,CAAC;AAsB9B,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,uBAAuB,EAAE,CAExF;AAID,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAU/E;AAID,MAAM,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAChD,MAAM,MAAM,iBAAiB,GAAG,CAC9B,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE,uBAAuB,EAC9B,QAAQ,EAAE,2BAA2B,KAClC,OAAO,CAAC,eAAe,CAAC,CAAC;AAC9B,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAE9F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;IAGjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS;QACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,EAAE,CAAC;CACL;AAwND,qBAAa,qBAAsB,SAAQ,KAAK;aACX,MAAM,EAAE,WAAW;gBAAnB,MAAM,EAAE,WAAW;CAIvD;AA0FD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,GAClB,cAAc,CAwBhB;AA4eD,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,CAS1F"}

package/node_modules/@oscharko-dev/keiko-server/dist/grounded-qa-hybrid.js

@@ -15,13 +15,13 @@ import { buildGroundedAnswerContextPackSummary, } from "@oscharko-dev/keiko-cont
 import { redact } from "@oscharko-dev/keiko-security";
 import { errorBody } from "./routes.js";
 import { currentGroundingLimits, currentRedactionSecrets } from "./deps.js";
-import {} from "./grounded-orchestrator.js";
+import { ClarificationNeededError, clarificationUserMessage, } from "./grounded-orchestrator.js";
 import { buildConnectedScopes, defaultRetriever, mergeContextPackSummaries, sourceLabels, splitExplorationBudget, } from "./grounded-qa-multi-source.js";
 import { MAX_PROMPT_REFERENCES, buildSelectedScopeSourceLookup, createEmbeddingAdapter, openStoreForDeps, projectLocalKnowledgeCitation, scopeStateFailure, selectedCapsulesForScope, } from "./local-knowledge-grounded-qa.js";
 import { GROUNDED_SYSTEM_PROMPT } from "./grounded-prompt.js";
 import { normalizeGroundedAnswerPayload, } from "./grounded-answer.js";
 import { assertUsableAssistantContent } from "./assistant-response.js";
-import { buildCitations, buildQuery, buildSelectedScopeFrom, deriveScopeIdFrom, ensureNotCancelled, internalError, isValidGroundedPack, mappedGatewayError, persistGroundedExchange, promptSafeExcerptText, redactString, } from "./grounded-qa.js";
+import { badRequest, buildCitations, buildQuery, buildSelectedScopeFrom, deriveScopeIdFrom, ensureNotCancelled, internalError, isValidGroundedPack, mappedGatewayError, mappedWorkspaceError, persistGroundedExchange, promptSafeExcerptText, redactString, } from "./grounded-qa.js";
 // ─── Canonical connector reader ───────────────────────────────────────────────
 // Mirrors buildConnectedScopes: the plural `localKnowledgeScopes` list supersedes the legacy single
 // `localKnowledgeScope`. Readers must not mix the two — the list, when present, is authoritative.
@@ -99,12 +99,31 @@ async function retrieveFolderPacks(ctx, folderScopes, query, retriever) {
         if (cs === undefined || label === undefined)
             continue;
         const scope = buildSelectedScopeFrom(ctx.chat, cs, deriveScopeIdFrom(ctx.chat, cs, i));
-        const out = await retriever({
-            scope,
-            query,
-            workspaceRoot: scope.workspaceRoot,
-            budget,
-        });
+        let out;
+        try {
+            out = await retriever({
+                scope,
+                query,
+                workspaceRoot: scope.workspaceRoot,
+                budget,
+            });
+        }
+        catch (error) {
+            // Mirror retrieveOneConnector (GRD-006): a per-source embedding-adapter outage is a skippable
+            // degradation (answer from the remaining sources, record the skip). EVERY other error MUST
+            // propagate — ClarificationNeededError -> 400, ProviderError -> 502, generic -> 500 — so the
+            // boundary maps and redacts it instead of silently dropping a folder and returning a
+            // misleadingly "complete" answer.
+            if (error instanceof EmbeddingAdapterError) {
+                skipped.push({
+                    label,
+                    reason: "embedding-unavailable",
+                    message: "Embedding adapter unavailable.",
+                });
+                continue;
+            }
+            throw error;
+        }
         if (!isValidGroundedPack(out.pack)) {
             skipped.push({ label, reason: "pack-validation-failed", message: "Pack validation failed." });
             continue;
@@ -569,29 +588,95 @@ export async function runHybridGroundedAsk(ctx) {
         env.close();
     }
 }
-// Cap both source lists at their respective operator limits before any budget-split or retrieval
-// loop. A chat row may carry legacy over-limit sources (e.g. operator lowered maxConnectedSources
-// after connection, or a direct DB edit). Capping here is the single choke-point: all loops
-// downstream derive their iteration counts from these sliced lists. Over-cap entries are tagged as
-// "source-skipped" uncertainties so callers can observe the omission without path information.
-function capSourcesToLimits(ctx, limits) {
-    const all = buildConnectedScopes(ctx.chat);
-    const allConnectors = buildLocalKnowledgeScopes(ctx.chat);
+function combinedSourceCap(limits) {
+    return Math.max(limits.maxConnectedSources, limits.maxLocalKnowledgeSources);
+}
+function combinedSourceCandidates(folders, connectors) {
+    return [
+        ...folders.map((scope, index) => ({
+            kind: "folder",
+            index,
+            connectedAtMs: scope.connectedAtMs,
+        })),
+        ...connectors.map((scope, index) => ({
+            kind: "connector",
+            index,
+            connectedAtMs: scope.connectedAtMs,
+        })),
+    ].sort((a, b) => {
+        if (a.connectedAtMs !== b.connectedAtMs)
+            return a.connectedAtMs - b.connectedAtMs;
+        if (a.kind !== b.kind)
+            return a.kind === "folder" ? -1 : 1;
+        return a.index - b.index;
+    });
+}
+function capSelectedIndexes(folders, connectors, totalCap) {
+    const selected = combinedSourceCandidates(folders, connectors).slice(0, totalCap);
     return {
-        folderScopes: all.slice(0, limits.maxConnectedSources),
-        connectorScopes: allConnectors.slice(0, limits.maxLocalKnowledgeSources),
-        allFolderCount: all.length,
-        allConnectorCount: allConnectors.length,
-        overCapFolderSkipped: all.slice(limits.maxConnectedSources).map((cs, i) => ({
+        folderIndexes: new Set(selected
+            .filter((candidate) => candidate.kind === "folder")
+            .map((candidate) => candidate.index)),
+        connectorIndexes: new Set(selected
+            .filter((candidate) => candidate.kind === "connector")
+            .map((candidate) => candidate.index)),
+    };
+}
+function skippedFoldersForCaps(all, perListFolders, selected, limits) {
+    return [
+        ...perListFolders.flatMap((cs, index) => selected.folderIndexes.has(index)
+            ? []
+            : [
+                {
+                    label: sourceLabels([cs])[0] ?? `folder-${String(index)}`,
+                    reason: "source-skipped",
+                    message: "Exceeded combined source limit.",
+                },
+            ]),
+        ...all.slice(limits.maxConnectedSources).map((cs, i) => ({
             label: sourceLabels([cs])[0] ?? `folder-${String(limits.maxConnectedSources + i)}`,
             reason: "source-skipped",
             message: "Exceeded maxConnectedSources limit.",
         })),
-        overCapConnectorSkipped: allConnectors.slice(limits.maxLocalKnowledgeSources).map((_cs, i) => ({
+    ];
+}
+function skippedConnectorsForCaps(allConnectors, perListConnectors, selected, limits) {
+    return [
+        ...perListConnectors.flatMap((_cs, index) => selected.connectorIndexes.has(index)
+            ? []
+            : [
+                {
+                    label: `connector-${String(index)}`,
+                    reason: "source-skipped",
+                    message: "Exceeded combined source limit.",
+                },
+            ]),
+        ...allConnectors.slice(limits.maxLocalKnowledgeSources).map((_cs, i) => ({
             label: `connector-${String(limits.maxLocalKnowledgeSources + i)}`,
             reason: "source-skipped",
             message: "Exceeded maxLocalKnowledgeSources limit.",
         })),
+    ];
+}
+// Cap both source lists at their respective operator limits before any budget-split or retrieval
+// loop, then cap the combined total to the release contract ("up to 16 sources" total by default).
+// A chat row may carry legacy over-limit sources (e.g. operator lowered a limit after connection,
+// or a direct DB edit). Capping here is the single choke-point: all loops downstream derive their
+// iteration counts from these sliced lists. Over-cap entries are tagged as "source-skipped"
+// uncertainties so callers can observe the omission without path information.
+function capSourcesToLimits(ctx, limits) {
+    const all = buildConnectedScopes(ctx.chat);
+    const allConnectors = buildLocalKnowledgeScopes(ctx.chat);
+    const perListFolders = all.slice(0, limits.maxConnectedSources);
+    const perListConnectors = allConnectors.slice(0, limits.maxLocalKnowledgeSources);
+    const selected = capSelectedIndexes(perListFolders, perListConnectors, combinedSourceCap(limits));
+    return {
+        folderScopes: perListFolders.filter((_scope, index) => selected.folderIndexes.has(index)),
+        connectorScopes: perListConnectors.filter((_scope, index) => selected.connectorIndexes.has(index)),
+        allFolderCount: all.length,
+        allConnectorCount: allConnectors.length,
+        overCapFolderSkipped: skippedFoldersForCaps(all, perListFolders, selected, limits),
+        overCapConnectorSkipped: skippedConnectorsForCaps(allConnectors, perListConnectors, selected, limits),
     };
 }
 async function runHybridWithStore(ctx, store) {
@@ -660,6 +745,14 @@ function mapHybridError(error, deps) {
     const gatewayResult = mappedGatewayError(error, deps);
     if (gatewayResult !== undefined)
         return gatewayResult;
+    // GRD-016: mirror the single-source and multi-source paths — a vague/no-anchor question
+    // (ClarificationNeededError) or a typed workspace read error is a client-actionable 400, not
+    // an opaque 500. Without these branches a folders+connectors ask with no anchors 500s.
+    if (error instanceof ClarificationNeededError)
+        return badRequest(clarificationUserMessage(error));
+    const workspaceResult = mappedWorkspaceError(error);
+    if (workspaceResult !== undefined)
+        return workspaceResult;
     if (error instanceof Error) {
         return internalError(redact(error.message, currentRedactionSecrets(deps)));
     }

package/node_modules/@oscharko-dev/keiko-server/dist/grounded-qa-multi-source.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grounded-qa-multi-source.d.ts","sourceRoot":"","sources":["../src/grounded-qa-multi-source.ts"],"names":[],"mappings":"AAWA,OAAO,EAGL,KAAK,WAAW,IAAI,kBAAkB,EACvC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAG7D,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EAGvB,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAEL,KAAK,kBAAkB,EAEvB,KAAK,gCAAgC,EAGtC,MAAM,wCAAwC,CAAC;AAEhD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AAKpC,OAAO,EAEL,KAAK,qBAAqB,EAE3B,MAAM,sBAAsB,CAAC;AA0B9B,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,kBAAkB,EAAE,CAE9E;AAOD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAY5F;AAgBD,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,MAAM,EAAE,CAUrF;AAgFD,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,SAAS,gCAAgC,EAAE,GACrD,gCAAgC,CAsBlC;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;CACrC;AAoBD,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,SAAS,WAAW,EAAE,EACpC,QAAQ,EAAE,QAAQ,GACjB,SAAS,kBAAkB,EAAE,CAE/B;AAmFD,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAI3F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,CAUvE;AAID,MAAM,MAAM,mBAAmB,GAAG,CAChC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,SAAS,WAAW,EAAE,KACjC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAEpC,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,WAAW,GAClB,mBAAmB,CAqBrB;AAyBD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAG7B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACvF;AAmKD,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,CA4CtF"}
+{"version":3,"file":"grounded-qa-multi-source.d.ts","sourceRoot":"","sources":["../src/grounded-qa-multi-source.ts"],"names":[],"mappings":"AAWA,OAAO,EAGL,KAAK,WAAW,IAAI,kBAAkB,EACvC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAG7D,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EAGvB,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAEL,KAAK,kBAAkB,EAEvB,KAAK,gCAAgC,EAGtC,MAAM,wCAAwC,CAAC;AAEhD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AAKpC,OAAO,EAEL,KAAK,qBAAqB,EAE3B,MAAM,sBAAsB,CAAC;AA0B9B,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,kBAAkB,EAAE,CAE9E;AAOD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAY5F;AAgBD,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,MAAM,EAAE,CAUrF;AAgFD,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,SAAS,gCAAgC,EAAE,GACrD,gCAAgC,CAsBlC;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;CACrC;AAoBD,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,SAAS,WAAW,EAAE,EACpC,QAAQ,EAAE,QAAQ,GACjB,SAAS,kBAAkB,EAAE,CAE/B;AAmFD,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAI3F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,CAUvE;AAID,MAAM,MAAM,mBAAmB,GAAG,CAChC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,SAAS,WAAW,EAAE,KACjC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAEpC,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,WAAW,GAClB,mBAAmB,CAqBrB;AAyBD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAG7B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACvF;AAgND,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,CA4CtF"}

package/node_modules/@oscharko-dev/keiko-server/dist/grounded-qa-multi-source.js

@@ -258,43 +258,76 @@ export function createMultiSourceAnswerer(model, modelId, redactor, signal) {
 }
 // ─── Retrieved-source record + worker ─────────────────────────────────────────
 const MAX_RETRIEVAL_CONCURRENCY = 4;
-async function retrieveAllSources(ctx, query, perScopeBudget, labels) {
-    const retrieved = new Array(ctx.scopes.length);
-    const skipped = [];
-    let nextIndex = 0;
-    let firstError;
-    async function retrieveOne(i) {
-        ensureNotCancelled(ctx.signal);
-        const cs = ctx.scopes[i];
-        const label = labels[i];
-        if (cs === undefined || label === undefined)
-            return;
-        const scope = buildSelectedScopeFrom(ctx.chat, cs, deriveScopeIdFrom(ctx.chat, cs, i));
-        const out = await ctx.retriever({
+// GRD-006: classify a thrown per-source retrieve error. A recoverable workspace error becomes a
+// skip (with the mapped RouteResult preserved as the all-bad fallback); anything else returns
+// undefined so the caller re-throws it to the outer handler (ClarificationNeededError, cancel, …).
+function classifyPerSourceRetrieveError(error, label) {
+    const mapped = mappedWorkspaceError(error);
+    if (mapped === undefined)
+        return undefined;
+    return {
+        skipped: {
+            label,
+            message: error instanceof Error ? error.message : "Connected source is not readable.",
+        },
+        mapped,
+    };
+}
+// Retrieve one source into the shared accumulator. GRD-006: a recoverable workspace error skips
+// just that source (preserving the all-bad 400 fallback in `firstError`); any other error
+// propagates to the outer handler.
+async function retrieveOneSource(ctx, query, perScopeBudget, labels, acc, i) {
+    ensureNotCancelled(ctx.signal);
+    const cs = ctx.scopes[i];
+    const label = labels[i];
+    if (cs === undefined || label === undefined)
+        return;
+    const scope = buildSelectedScopeFrom(ctx.chat, cs, deriveScopeIdFrom(ctx.chat, cs, i));
+    let out;
+    try {
+        out = await ctx.retriever({
             scope,
             query,
             workspaceRoot: scope.workspaceRoot,
             budget: perScopeBudget,
         });
-        if (!isValidGroundedPack(out.pack)) {
-            skipped.push({ label, message: "Pack validation failed." });
-            firstError ??= internalError("Grounded answer context pack failed validation.");
-            return;
-        }
-        retrieved[i] = { label, pack: out.pack, elapsedMs: out.elapsedMs, scope, plan: out.plan };
     }
+    catch (error) {
+        const classified = classifyPerSourceRetrieveError(error, label);
+        if (classified === undefined)
+            throw error; // non-workspace error → outer handler
+        acc.skipped.push(classified.skipped);
+        acc.firstError ??= classified.mapped;
+        return;
+    }
+    if (!isValidGroundedPack(out.pack)) {
+        acc.skipped.push({ label, message: "Pack validation failed." });
+        acc.firstError ??= internalError("Grounded answer context pack failed validation.");
+        return;
+    }
+    acc.retrieved[i] = { label, pack: out.pack, elapsedMs: out.elapsedMs, scope, plan: out.plan };
+}
+async function retrieveAllSources(ctx, query, perScopeBudget, labels) {
+    const acc = {
+        retrieved: new Array(ctx.scopes.length),
+        skipped: [],
+        firstError: undefined,
+    };
+    let nextIndex = 0;
     async function worker() {
         for (;;) {
             const i = nextIndex;
             nextIndex += 1;
             if (i >= ctx.scopes.length)
                 return;
-            await retrieveOne(i);
+            await retrieveOneSource(ctx, query, perScopeBudget, labels, acc, i);
         }
     }
     const workerCount = Math.min(MAX_RETRIEVAL_CONCURRENCY, Math.max(1, ctx.scopes.length));
     await Promise.all(Array.from({ length: workerCount }, () => worker()));
-    const sources = retrieved.filter((source) => source !== undefined);
+    const sources = acc.retrieved.filter((source) => source !== undefined);
+    const skipped = acc.skipped;
+    const firstError = acc.firstError;
     if (sources.length === 0 && firstError !== undefined)
         return firstError;
     return { retrieved: sources, skipped, firstError };