@pithy-sh/support 0.3.3 → 0.4.0

package/dist/ai/classify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"classify.d.ts","sourceRoot":"","sources":["../../src/ai/classify.ts"],"names":[],"mappings":"AAKA,OAAO,EAAoC,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9F,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAiB,MAAM,eAAe,CAAC;AAGjF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,0GAA0G;AAC1G,MAAM,WAAW,SAAS;IACxB,qGAAqG;IACrG,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtE;AAED,wCAAwC;AACxC,MAAM,WAAW,cAAc;IAC7B,kGAAkG;IAClG,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,QAAQ,EAAE,eAAe,CAAC;IAC1B,6BAA6B;IAC7B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,6DAA6D;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC;CACf;AA4BD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,iBAAiB,GAAG,MAAM,CAe1E;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAS3F;AAqBD;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,EAAE,EAAE,SAAS,EACb,OAAO,EAAE;IACP,8BAA8B;IAC9B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAC;CACrB,GACA,OAAO,CAAC,cAAc,CAAC,CAkEzB"}
+{"version":3,"file":"classify.d.ts","sourceRoot":"","sources":["../../src/ai/classify.ts"],"names":[],"mappings":"AAKA,OAAO,EAAoC,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9F,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAiB,MAAM,eAAe,CAAC;AAGjF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,0GAA0G;AAC1G,MAAM,WAAW,SAAS;IACxB,qGAAqG;IACrG,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtE;AAED,wCAAwC;AACxC,MAAM,WAAW,cAAc;IAC7B,kGAAkG;IAClG,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,QAAQ,EAAE,eAAe,CAAC;IAC1B,6BAA6B;IAC7B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,6DAA6D;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC;CACf;AA4BD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,iBAAiB,GAAG,MAAM,CAe1E;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAS3F;AAqBD;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,EAAE,EAAE,SAAS,EACb,OAAO,EAAE;IACP,8BAA8B;IAC9B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAC;CACrB,GACA,OAAO,CAAC,cAAc,CAAC,CAsEzB"}

package/dist/ai/classify.js

@@ -108,11 +108,11 @@ function unsure(model) {
 * The code is the whole of how the step can tell the two apart.
 */
 async function classifyMessage(ai, options) {
-	const run = ai?.run;
-	if (typeof run !== "function") throw new SupportClassificationError({ detail: "the AI binding is absent from this worker's env; classification cannot run" });
+	const binding = ai;
+	if (typeof binding?.run !== "function") throw new SupportClassificationError({ detail: "the AI binding is absent from this worker's env; classification cannot run" });
 	let raw;
 	try {
-		raw = await run.call(ai, options.model, {
+		raw = await binding.run(options.model, {
 			messages: [{
 				role: "system",
 				content: classificationPrompt(options.categories)

package/dist/http/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/http/handlers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAGtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAM9D,OAAO,KAAK,EAEV,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,EACxB,gBAAgB,EAChB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,UAAU,EACV,mBAAmB,EACpB,MAAM,WAAW,CAAC;AAGnB;;;;;;GAMG;AAEH,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,0BAA0B;IAC1B,EAAE,EAAE,eAAe,CAAC;IACpB,wFAAwF;IACxF,EAAE,EAAE,UAAU,CAAC;IACf,2BAA2B;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB,8BAA8B;IAC9B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,0CAA0C;IAC1C,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,0CAA0C;IAC1C,GAAG,EAAE,OAAO,CAAC;IACb,gDAAgD;IAChD,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,2FAA2F;IAC3F,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrD,8FAA8F;IAC9F,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,8GAA8G;IAC9G,KAAK,EAAE,WAAW,CAAC;IACnB,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,yBAAyB;IACzB,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,WAAW;IACX,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,sBAAsB;AACtB,wBAAsB,SAAS,CAC7B,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sBAAsB,CAAC,CAkBjC;AAqCD,qCAAqC;AACrC,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA0B1G;AAED,8CAA8C;AAC9C,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,kBAAkB,EACzB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AAED,2BAA2B;AAC3B,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAkBnC;AAED,0EAA0E;AAC1E,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,2BAA2B,CAAC,CAkCtC;AAED,sCAAsC;AACtC,wBAAsB,WAAW,CAC/B,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,oBAAoB,CAAC,CAa/B;AAED,gCAAgC;AAChC,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,GAAG,gBAAgB,EAAE,CAEtF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,yBAAyB,CAAC,CAuEpC;AAED,kDAAkD;AAClD,wBAAsB,aAAa,CACjC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAGnC;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,uBAAuB,CAAC,CAgBlC"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/http/handlers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAGnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAGtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAM9D,OAAO,KAAK,EAEV,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,EACxB,gBAAgB,EAChB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,UAAU,EACV,mBAAmB,EACpB,MAAM,WAAW,CAAC;AAGnB;;;;;;GAMG;AAEH,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,0BAA0B;IAC1B,EAAE,EAAE,eAAe,CAAC;IACpB,wFAAwF;IACxF,EAAE,EAAE,UAAU,CAAC;IACf,2BAA2B;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB,8BAA8B;IAC9B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,0CAA0C;IAC1C,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,0CAA0C;IAC1C,GAAG,EAAE,OAAO,CAAC;IACb,gDAAgD;IAChD,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,2FAA2F;IAC3F,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrD,8FAA8F;IAC9F,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,8GAA8G;IAC9G,KAAK,EAAE,WAAW,CAAC;IACnB,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,yBAAyB;IACzB,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,WAAW;IACX,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,sBAAsB;AACtB,wBAAsB,SAAS,CAC7B,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sBAAsB,CAAC,CAkBjC;AAqCD,qCAAqC;AACrC,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA0B1G;AAED,8CAA8C;AAC9C,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,kBAAkB,EACzB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AAED,2BAA2B;AAC3B,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAiBnC;AAED,0EAA0E;AAC1E,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,2BAA2B,CAAC,CAkCtC;AAED,sCAAsC;AACtC,wBAAsB,WAAW,CAC/B,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,oBAAoB,CAAC,CAa/B;AAED,gCAAgC;AAChC,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,GAAG,gBAAgB,EAAE,CAEtF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,yBAAyB,CAAC,CAsEpC;AAED,kDAAkD;AAClD,wBAAsB,aAAa,CACjC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAGnC;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,uBAAuB,CAAC,CAgBlC"}

package/dist/http/handlers.js

@@ -12,6 +12,7 @@ import { submitFeedback } from "../submission/submit.js";
 import { latestInboundMessageId } from "../workflows/classify.js";
 import { listedThreadView, messageView, myMessageView, myThreadView, senderView, threadView } from "./views.js";
 import { ValidationError } from "@pithy-sh/core/src/error/pithyError";
+import { pithyCommandOf } from "@pithy-sh/core/src/cli/command";
 //#region src/http/handlers.ts
 /** List the inbox. */
 async function listInbox(deps, query, viewer) {
@@ -98,7 +99,6 @@ async function replyToConversation(deps, threadId, input, viewer) {
 		db: deps.db,
 		config: deps.config,
 		enqueue: deps.enqueue,
-		fts: deps.fts,
 		emit: deps.emit,
 		log: deps.log,
 		newId: deps.newId,
@@ -119,7 +119,7 @@ async function reclassifyConversation(deps, threadId, viewer) {
 	});
 	if (!await deps.dispatchClassify(messageId)) throw new SupportClassificationError({
 		message: "Classification is not available on this deployment.",
-		action: "Run `pithy support provision` to deploy the classification worker, then retry.",
+		action: `Run \`${pithyCommandOf("support provision", {}, { runtime: true })}\` to deploy the classification worker, then retry.`,
 		detail: `the SUPPORT_CLASSIFY workflow binding is absent, so no instance was started`
 	});
 	await deps.emit({
@@ -184,7 +184,6 @@ async function submitFeedbackRequest(deps, input, userId) {
 		config: deps.config,
 		categories: deps.categories,
 		bucket: deps.bucket,
-		fts: deps.fts,
 		resolveAccount: (id) => resolveSubmitterAccount(deps.d1, id, deps.peers),
 		dispatchClassify: deps.dispatchClassify,
 		emit: deps.emit,

package/dist/http/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/http/routes.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAK7E,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAEL,KAAK,WAAW,EAUjB,MAAM,YAAY,CAAC;AAoBpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuFG;AAEH,2CAA2C;AAC3C,MAAM,WAAW,oBAAoB;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,qDAAqD;IACrD,WAAW,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;CACjE;AAuCD,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,oBAAoB,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,CAqFtG"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/http/routes.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAM7E,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAEL,KAAK,WAAW,EAUjB,MAAM,YAAY,CAAC;AA+BpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuFG;AAEH,2CAA2C;AAC3C,MAAM,WAAW,oBAAoB;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,qDAAqD;IACrD,WAAW,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;CACjE;AAuCD,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,oBAAoB,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,CAoJtG"}

package/dist/http/routes.js

@@ -2,13 +2,14 @@
 // SPDX-License-Identifier: MIT
 import { requireAuth } from "./guards.js";
 import { archiveConversation, listInbox, listMyThreads, listReplies, readConversation, readMyThread, reclassifyConversation, replyToConversation, submitFeedbackRequest, updateFlags } from "./handlers.js";
+import { SupportArchiveResponse, SupportFlagsResponse, SupportMyThreadResponse, SupportMyThreadsResponse, SupportReclassifiedResponse, SupportRepliesResponse, SupportReplySentResponse, SupportSubmissionResponse, SupportThreadResponse, SupportThreadsResponse } from "./responses.js";
 import { ArchiveThreadInput, FlagsInput, ListThreadsQuery, MyThreadsQuery, RepliesQuery, ReplyInput, SubmitFeedbackInput, ThreadIdParam } from "./schemas.js";
 import { SUPPORT_THREADS_ARCHIVE_SCOPE, SUPPORT_THREADS_FLAG_SCOPE, SUPPORT_THREADS_READ_SCOPE, SUPPORT_THREADS_RECLASSIFY_SCOPE, SUPPORT_THREADS_REPLY_SCOPE } from "./scopes.js";
 import { InternalError } from "@pithy-sh/core/src/error/pithyError";
-import { zValidator } from "@hono/zod-validator";
 import { requireControlPlane } from "@pithy-sh/core/src/controlPlane/http/guard";
+import { describeRoute } from "@pithy-sh/core/src/http/routeSpec";
 import { requireSameOrigin } from "@pithy-sh/core/src/http/sameOrigin";
-import { validationHook } from "@pithy-sh/core/src/http/validation";
+import { validate } from "@pithy-sh/core/src/http/validation";
 //#region src/http/routes.ts
 /**
 * The verified management client behind a control-plane call.
@@ -47,17 +48,64 @@ function registerSupportRoutes(options) {
 	const resolve = options.resolveDeps;
 	const submission = options.submission ?? true;
 	return (app) => {
-		app.get(`${base}/threads`, requireControlPlane(SUPPORT_THREADS_READ_SCOPE), zValidator("query", ListThreadsQuery, validationHook), async (c) => c.json(await listInbox(await resolve(c), c.req.valid("query"), viewer(c))));
-		app.get(`${base}/replies`, requireControlPlane(SUPPORT_THREADS_READ_SCOPE), zValidator("query", RepliesQuery, validationHook), async (c) => c.json({ replies: listReplies(await resolve(c), c.req.valid("query")) }));
-		app.get(`${base}/threads/:id`, requireControlPlane(SUPPORT_THREADS_READ_SCOPE), zValidator("param", ThreadIdParam, validationHook), async (c) => c.json(await readConversation(await resolve(c), c.req.valid("param").id)));
-		app.post(`${base}/threads/:id/archive`, requireControlPlane(SUPPORT_THREADS_ARCHIVE_SCOPE), zValidator("param", ThreadIdParam, validationHook), zValidator("json", ArchiveThreadInput, validationHook), async (c) => c.json(await archiveConversation(await resolve(c), c.req.valid("param").id, c.req.valid("json"), viewer(c))));
-		app.post(`${base}/threads/:id/reply`, requireControlPlane(SUPPORT_THREADS_REPLY_SCOPE), zValidator("param", ThreadIdParam, validationHook), zValidator("json", ReplyInput, validationHook), async (c) => c.json(await replyToConversation(await resolve(c), c.req.valid("param").id, c.req.valid("json"), viewer(c)), 201));
-		app.post(`${base}/threads/:id/reclassify`, requireControlPlane(SUPPORT_THREADS_RECLASSIFY_SCOPE), zValidator("param", ThreadIdParam, validationHook), async (c) => c.json(await reclassifyConversation(await resolve(c), c.req.valid("param").id, viewer(c))));
-		app.post(`${base}/threads/:id/flags`, requireControlPlane(SUPPORT_THREADS_FLAG_SCOPE), zValidator("param", ThreadIdParam, validationHook), zValidator("json", FlagsInput, validationHook), async (c) => c.json(await updateFlags(await resolve(c), c.req.valid("param").id, c.req.valid("json"), viewer(c))));
+		app.get(`${base}/threads`, describeRoute({
+			summary: "List the support inbox.",
+			verification: "control-plane",
+			scopes: [SUPPORT_THREADS_READ_SCOPE],
+			responses: { 200: SupportThreadsResponse }
+		}), requireControlPlane(SUPPORT_THREADS_READ_SCOPE), validate("query", ListThreadsQuery), async (c) => c.json(await listInbox(await resolve(c), c.req.valid("query"), viewer(c))));
+		app.get(`${base}/replies`, describeRoute({
+			summary: "List the canned replies.",
+			verification: "control-plane",
+			scopes: [SUPPORT_THREADS_READ_SCOPE],
+			responses: { 200: SupportRepliesResponse }
+		}), requireControlPlane(SUPPORT_THREADS_READ_SCOPE), validate("query", RepliesQuery), async (c) => c.json({ replies: listReplies(await resolve(c), c.req.valid("query")) }));
+		app.get(`${base}/threads/:id`, describeRoute({
+			summary: "Read one conversation and its messages.",
+			verification: "control-plane",
+			scopes: [SUPPORT_THREADS_READ_SCOPE],
+			responses: { 200: SupportThreadResponse }
+		}), requireControlPlane(SUPPORT_THREADS_READ_SCOPE), validate("param", ThreadIdParam), async (c) => c.json(await readConversation(await resolve(c), c.req.valid("param").id)));
+		app.post(`${base}/threads/:id/archive`, describeRoute({
+			summary: "Mark a conversation done, or reopen it.",
+			verification: "control-plane",
+			scopes: [SUPPORT_THREADS_ARCHIVE_SCOPE],
+			responses: { 200: SupportArchiveResponse }
+		}), requireControlPlane(SUPPORT_THREADS_ARCHIVE_SCOPE), validate("param", ThreadIdParam), validate("json", ArchiveThreadInput), async (c) => c.json(await archiveConversation(await resolve(c), c.req.valid("param").id, c.req.valid("json"), viewer(c))));
+		app.post(`${base}/threads/:id/reply`, describeRoute({
+			summary: "Answer the customer.",
+			verification: "control-plane",
+			scopes: [SUPPORT_THREADS_REPLY_SCOPE],
+			responses: { 201: SupportReplySentResponse }
+		}), requireControlPlane(SUPPORT_THREADS_REPLY_SCOPE), validate("param", ThreadIdParam), validate("json", ReplyInput), async (c) => c.json(await replyToConversation(await resolve(c), c.req.valid("param").id, c.req.valid("json"), viewer(c)), 201));
+		app.post(`${base}/threads/:id/reclassify`, describeRoute({
+			summary: "Run the classifier again on the latest inbound message.",
+			verification: "control-plane",
+			scopes: [SUPPORT_THREADS_RECLASSIFY_SCOPE],
+			responses: { 200: SupportReclassifiedResponse }
+		}), requireControlPlane(SUPPORT_THREADS_RECLASSIFY_SCOPE), validate("param", ThreadIdParam), async (c) => c.json(await reclassifyConversation(await resolve(c), c.req.valid("param").id, viewer(c))));
+		app.post(`${base}/threads/:id/flags`, describeRoute({
+			summary: "Set the caller's private read and snooze flags.",
+			verification: "control-plane",
+			scopes: [SUPPORT_THREADS_FLAG_SCOPE],
+			responses: { 200: SupportFlagsResponse }
+		}), requireControlPlane(SUPPORT_THREADS_FLAG_SCOPE), validate("param", ThreadIdParam), validate("json", FlagsInput), async (c) => c.json(await updateFlags(await resolve(c), c.req.valid("param").id, c.req.valid("json"), viewer(c))));
 		if (!submission) return;
-		app.post(`${base}/feedback`, requireAuth(), requireSameOrigin(), zValidator("json", SubmitFeedbackInput, validationHook), async (c) => c.json(await submitFeedbackRequest(await resolve(c), c.req.valid("json"), submitter(c)), 201));
-		app.get(`${base}/feedback`, requireAuth(), zValidator("query", MyThreadsQuery, validationHook), async (c) => c.json(await listMyThreads(await resolve(c), c.req.valid("query"), submitter(c))));
-		app.get(`${base}/feedback/:id`, requireAuth(), zValidator("param", ThreadIdParam, validationHook), async (c) => c.json(await readMyThread(await resolve(c), c.req.valid("param").id, submitter(c))));
+		app.post(`${base}/feedback`, describeRoute({
+			summary: "Write in to support from the app.",
+			verification: ["bearer", "session"],
+			responses: { 201: SupportSubmissionResponse }
+		}), requireAuth(), requireSameOrigin(), validate("json", SubmitFeedbackInput), async (c) => c.json(await submitFeedbackRequest(await resolve(c), c.req.valid("json"), submitter(c)), 201));
+		app.get(`${base}/feedback`, describeRoute({
+			summary: "List the caller's own support requests.",
+			verification: ["bearer", "session"],
+			responses: { 200: SupportMyThreadsResponse }
+		}), requireAuth(), validate("query", MyThreadsQuery), async (c) => c.json(await listMyThreads(await resolve(c), c.req.valid("query"), submitter(c))));
+		app.get(`${base}/feedback/:id`, describeRoute({
+			summary: "Read one of the caller's own support requests.",
+			verification: ["bearer", "session"],
+			responses: { 200: SupportMyThreadResponse }
+		}), requireAuth(), validate("param", ThreadIdParam), async (c) => c.json(await readMyThread(await resolve(c), c.req.valid("param").id, submitter(c))));
 	};
 }
 //#endregion

package/dist/inbound/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/inbound/handler.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAEvF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAMnD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,aAAa,GAAG,sBAAsB,CAkEvF"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/inbound/handler.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAEvF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAMnD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,aAAa,GAAG,sBAAsB,CAiEvF"}

package/dist/inbound/handler.js

@@ -57,7 +57,6 @@ function createSupportEmailHandler(wiring) {
 				db: supportDatabase(d1),
 				config: wiring.config,
 				bucket: bindings.SUPPORT_BUCKET,
-				fts: wiring.config.search.fts,
 				dispatchClassify: makeClassifyDispatcher(env, log),
 				linkSender: (address) => resolveSenderUserId(d1, address, wiring.peers),
 				emit: wiring.emit,

package/dist/inbound/ingest.d.ts

@@ -72,8 +72,6 @@ export interface IngestDeps {
     config: SupportConfig;
     /** The R2 bucket raw messages and attachments are written to. Absent means neither is kept. */
     bucket?: R2Bucket;
-    /** Whether the FTS5 index is composed. False means search runs as a `LIKE` scan and nothing is indexed. */
-    fts: boolean;
     /**
      * Start the classification Workflow for a stored message. Allowed to fail and allowed to decline —
      * an unprovisioned project has no binding, and a thread that stays `uncategorized` is a legitimate

package/dist/inbound/ingest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ingest.d.ts","sourceRoot":"","sources":["../../src/inbound/ingest.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAG/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AAWxB;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,uBAAuB;AACvB,MAAM,MAAM,aAAa;AACvB,oFAAoF;AAClF;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE;AAC7C,wDAAwD;GACtD;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAC3D,yEAAyE;GACvE;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AACzE,cAAc;GACZ;IACE,OAAO,EAAE,IAAI,CAAC;IACd,SAAS,EAAE,KAAK,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,SAAS,EAAE,OAAO,CAAC;IACnB,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,iGAAiG;IACjG,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAEN,+CAA+C;AAC/C,MAAM,WAAW,UAAU;IACzB,0BAA0B;IAC1B,EAAE,EAAE,eAAe,CAAC;IACpB,2BAA2B;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB,+FAA+F;IAC/F,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,2GAA2G;IAC3G,GAAG,EAAE,OAAO,CAAC;IACb;;;;;OAKG;IACH,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,oFAAoF;IACpF,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxD,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,qCAAqC;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,yBAAyB;IACzB,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,WAAW;IACX,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC1B,0BAA0B;IAC1B,GAAG,EAAE,WAAW,CAAC;IACjB,wGAAwG;IACxG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8FAA8F;IAC9F,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AA0ID,kCAAkC;AAClC,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAsShG"}
+{"version":3,"file":"ingest.d.ts","sourceRoot":"","sources":["../../src/inbound/ingest.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAG/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AAUxB;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,uBAAuB;AACvB,MAAM,MAAM,aAAa;AACvB,oFAAoF;AAClF;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE;AAC7C,wDAAwD;GACtD;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAC3D,yEAAyE;GACvE;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AACzE,cAAc;GACZ;IACE,OAAO,EAAE,IAAI,CAAC;IACd,SAAS,EAAE,KAAK,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,SAAS,EAAE,OAAO,CAAC;IACnB,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,iGAAiG;IACjG,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAEN,+CAA+C;AAC/C,MAAM,WAAW,UAAU;IACzB,0BAA0B;IAC1B,EAAE,EAAE,eAAe,CAAC;IACpB,2BAA2B;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB,+FAA+F;IAC/F,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB;;;;;OAKG;IACH,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,oFAAoF;IACpF,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxD,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,qCAAqC;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,yBAAyB;IACzB,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,WAAW;IACX,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC1B,0BAA0B;IAC1B,GAAG,EAAE,WAAW,CAAC;IACjB,wGAAwG;IACxG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8FAA8F;IAC9F,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AA0ID,kCAAkC;AAClC,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CA2RhG"}

package/dist/inbound/ingest.js

@@ -7,7 +7,6 @@ import { SUPPORT_ATTACHMENTS_TABLE, SUPPORT_MESSAGES_TABLE, SUPPORT_THREADS_TABL
 import { attachmentKey, putAttachment, rawMessageKey, sha256Hex } from "../attachment/store.js";
 import { SupportAuditActions } from "../audit/actions.js";
 import { parentCandidates } from "../mime/threading.js";
-import { indexMessage } from "../store/search.js";
 import { truncateToBytes } from "../mime/truncate.js";
 import { MAX_TEXT_BODY, parseInbound } from "../mime/parse.js";
 import { checkRates, checkSize } from "./guard.js";
@@ -283,19 +282,6 @@ async function ingestInbound(deps, input) {
 		});
 		throw error;
 	}
-	if (deps.fts) try {
-		await indexMessage(deps.db, {
-			threadId,
-			messageId,
-			subject,
-			body: text
-		});
-	} catch (error) {
-		deps.log.warn("support message not indexed", {
-			messageId,
-			error
-		});
-	}
 	let attachments = 0;
 	try {
 		attachments = await storeAttachments(deps, parsed, threadId, messageId, now);

package/dist/provision/provisionSupport.d.ts

@@ -69,17 +69,25 @@ export interface SupportProvisioner {
     /** Deploy the prebuilt classification worker for this environment. */
     deployWorker(env: ManagedEnvironment): Promise<void>;
     /**
-     * Create or drop the full-text index in this environment's app database, to match `search.fts`.
+     * Create or drop the full-text index **and its triggers** in this environment's app database, to
+     * match `search.fts`.
      *
      * A provisioning step rather than a migration, because the index is **derived** — every row in it
      * comes from `pithy_support_messages` and `reindexThread` rebuilds it on demand. That is the line a
      * migration is for: schema whose loss loses data. Keeping it here is also what makes the flag safe
      * to toggle at all, since a config-conditional migration removed from the set is corruption to
-     * Kysely and blocks `pithy migrate` for every capability sharing the database.
+     * Kysely and blocks `pithy migrate` for every capability sharing the database. The triggers inherit
+     * that constraint exactly: they exist only where the table does, so they are provisioning too.
+     *
+     * **Three outcomes, not two.** `repaired` is a database whose table was already there and whose
+     * triggers were not — an adopter who took the release that moved the index onto triggers and deployed
+     * without re-provisioning. Nothing in the kit maintains that index, so the run creates the triggers
+     * and backfills the gap, and says which of the three it did.
      */
     ensureSearchIndex(env: ManagedEnvironment): Promise<{
         created: boolean;
         dropped: boolean;
+        repaired: boolean;
     }>;
     /**
      * Ensure the inbound Email Routing rule that delivers the support address to the app worker.
@@ -100,11 +108,12 @@ export interface SupportProvisionResult {
     };
     /** The environments a classification worker was deployed for. */
     environments: ManagedEnvironment[];
-    /** What the full-text index did, per environment — created, dropped, or already correct. */
+    /** What the full-text index did, per environment — created, dropped, repaired, or already correct. */
     search: Array<{
         env: ManagedEnvironment;
         created: boolean;
         dropped: boolean;
+        repaired: boolean;
     }>;
     /** Whether the inbound routing rule was created, already present, or skipped. */
     routing: {

package/dist/provision/provisionSupport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provisionSupport.d.ts","sourceRoot":"","sources":["../../src/provision/provisionSupport.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAIlF,OAAO,EAEL,KAAK,iBAAiB,EAEtB,KAAK,kBAAkB,EAExB,MAAM,6BAA6B,CAAC;AAGrC;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,GAAG,MAAM,CAElF;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B;;;;;OAKG;IACH,YAAY,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAChF,sEAAsE;IACtE,YAAY,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD;;;;;;;;OAQG;IACH,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC5F;;;OAGG;IACH,iBAAiB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACtE;AAED,kCAAkC;AAClC,MAAM,WAAW,sBAAsB;IACrC,uDAAuD;IACvD,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAC/D,iEAAiE;IACjE,YAAY,EAAE,kBAAkB,EAAE,CAAC;IACnC,4FAA4F;IAC5F,MAAM,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,kBAAkB,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC/E,iFAAiF;IACjF,OAAO,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CACjD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,kBAAkB,EAC/B,YAAY,EAAE,oBAAoB,GAAG,SAAS,MAAM,EAAE,GACrD,OAAO,CAAC,sBAAsB,CAAC,CAiBjC;AAED,4FAA4F;AAC5F,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,SAAS,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,0DAA0D;IAC1D,YAAY,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD;;;OAGG;IACH,iBAAiB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACnD;;;OAGG;IACH,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED,+FAA+F;AAC/F,MAAM,WAAW,yBAAyB;IACxC,sGAAsG;IACtG,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gGAAgG;IAChG,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,mCAAmC;AACnC,MAAM,WAAW,wBAAwB;IACvC,qCAAqC;IACrC,GAAG,EAAE,kBAAkB,CAAC;IACxB,yDAAyD;IACzD,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,oBAAoB,EACnC,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAUnC"}
+{"version":3,"file":"provisionSupport.d.ts","sourceRoot":"","sources":["../../src/provision/provisionSupport.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAIlF,OAAO,EAEL,KAAK,iBAAiB,EAEtB,KAAK,kBAAkB,EAExB,MAAM,6BAA6B,CAAC;AAGrC;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,GAAG,MAAM,CAElF;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B;;;;;OAKG;IACH,YAAY,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAChF,sEAAsE;IACtE,YAAY,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD;;;;;;;;;;;;;;;OAeG;IACH,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC/G;;;OAGG;IACH,iBAAiB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACtE;AAED,kCAAkC;AAClC,MAAM,WAAW,sBAAsB;IACrC,uDAAuD;IACvD,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAC/D,iEAAiE;IACjE,YAAY,EAAE,kBAAkB,EAAE,CAAC;IACnC,sGAAsG;IACtG,MAAM,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,kBAAkB,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAClG,iFAAiF;IACjF,OAAO,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CACjD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,kBAAkB,EAC/B,YAAY,EAAE,oBAAoB,GAAG,SAAS,MAAM,EAAE,GACrD,OAAO,CAAC,sBAAsB,CAAC,CAiBjC;AAED,4FAA4F;AAC5F,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,SAAS,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,0DAA0D;IAC1D,YAAY,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD;;;OAGG;IACH,iBAAiB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACnD;;;OAGG;IACH,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED,+FAA+F;AAC/F,MAAM,WAAW,yBAAyB;IACxC,sGAAsG;IACtG,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gGAAgG;IAChG,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,mCAAmC;AACnC,MAAM,WAAW,wBAAwB;IACvC,qCAAqC;IACrC,GAAG,EAAE,kBAAkB,CAAC;IACxB,yDAAyD;IACzD,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,EAAE,oBAAoB,EACnC,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAUnC"}

package/dist/reply/send.d.ts

@@ -78,8 +78,6 @@ export interface ReplyDeps {
     }) => Promise<{
         jobId: string;
     }>;
-    /** Whether the full-text index is in use. */
-    fts: boolean;
     /** The audit seam. */
     emit: AuditEmit;
     /** The request logger. */

package/dist/reply/send.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"send.d.ts","sourceRoot":"","sources":["../../src/reply/send.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAE/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EAAiD,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAKrG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,0CAA0C;AAC1C,MAAM,WAAW,SAAS;IACxB,0BAA0B;IAC1B,EAAE,EAAE,eAAe,CAAC;IACpB,2BAA2B;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QAChB,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,+FAA+F;QAC/F,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjC,6CAA6C;IAC7C,GAAG,EAAE,OAAO,CAAC;IACb,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,yBAAyB;IACzB,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,WAAW;IACX,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,oCAAoC;AACpC,MAAM,WAAW,UAAU;IACzB,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GACnB;IACE,0DAA0D;IAC1D,OAAO,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;CACf,GACD;IACE,0FAA0F;IAC1F,OAAO,EAAE,KAAK,CAAC;IACf,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEN,gCAAgC;AAChC,wBAAsB,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CA2LxF"}
+{"version":3,"file":"send.d.ts","sourceRoot":"","sources":["../../src/reply/send.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAE/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EAAiD,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAIrG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,0CAA0C;AAC1C,MAAM,WAAW,SAAS;IACxB,0BAA0B;IAC1B,EAAE,EAAE,eAAe,CAAC;IACpB,2BAA2B;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QAChB,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,+FAA+F;QAC/F,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjC,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,yBAAyB;IACzB,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,WAAW;IACX,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,oCAAoC;AACpC,MAAM,WAAW,UAAU;IACzB,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GACnB;IACE,0DAA0D;IAC1D,OAAO,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;CACf,GACD;IACE,0FAA0F;IAC1F,OAAO,EAAE,KAAK,CAAC;IACf,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEN,gCAAgC;AAChC,wBAAsB,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAkLxF"}

package/dist/reply/send.js

@@ -5,7 +5,7 @@ import { SupportMessage } from "../data/message.js";
 import { SUPPORT_MESSAGES_TABLE, SUPPORT_THREADS_TABLE } from "../data/tables.js";
 import { SupportAuditActions } from "../audit/actions.js";
 import { buildReferencesHeader, replySubject } from "../mime/threading.js";
-import { indexMessage } from "../store/search.js";
+import { commandName } from "@pithy-sh/core/src/cli/command";
 //#region src/reply/send.ts
 /** Send a reply on a thread. */
 async function sendReply(deps, input) {
@@ -60,7 +60,7 @@ async function sendReply(deps, input) {
 	if (!inApp) {
 		if (!enqueue) throw new SupportReplyFailedError({
 			message: "This deployment cannot send mail.",
-			action: "Add the email capability (`pithy add email`) and provision it, then retry.",
+			action: `Compose the email capability into this Worker with \`${commandName("add")}\` and provision it, then retry.`,
 			detail: `thread ${input.threadId} needs a mailed reply and no email capability is composed`
 		});
 		if (!replyTo) throw new SupportReplyFailedError({
@@ -110,19 +110,6 @@ async function sendReply(deps, input) {
 		createdAt: now
 	};
 	await deps.db.insertInto(SUPPORT_MESSAGES_TABLE).values(SupportMessage.encode(message)).execute();
-	if (deps.fts) try {
-		await indexMessage(deps.db, {
-			threadId: input.threadId,
-			messageId,
-			subject,
-			body: input.body
-		});
-	} catch (error) {
-		deps.log.warn("support reply not indexed", {
-			messageId,
-			error
-		});
-	}
 	await deps.db.updateTable(SUPPORT_THREADS_TABLE).set((eb) => ({
 		messageCount: eb("messageCount", "+", 1),
 		lastMessageAt: now.getTime(),

package/dist/store/search.d.ts

@@ -26,16 +26,23 @@ export declare function searchPredicate(term: string, options: {
 /**
  * Add a message to the full-text index, replacing any row already there for it.
  *
- * **Remove-then-insert, not a bare insert** — the same shape the CMS `syncFts` uses, and for the
- * reason application-managed indexes always need it: an FTS5 table has no primary key and no unique
- * constraint to lean on, so a second call for the same message would silently add a second copy and
- * the thread would start appearing twice in its own search results. Making the write idempotent means
- * a retry, a reindex, and a first index are all the same operation, which is the property every other
- * write path in this repo is built on.
+ * **No write path calls this any more.** The index is maintained by the triggers `createSearchIndex`
+ * provisions (`store/searchIndex.ts`), so a message is indexed because it was written rather than
+ * because the code that wrote it remembered. This is the **repair** primitive now: {@link reindexThread}
+ * and {@link reindexAll} are its only callers in the kit, and it stays exported because
+ * `package.json` exports `./src/*`, so an adopter may be reaching it.
  *
- * Best-effort by contract: a failed index write must never lose a customer's message, so the caller
- * logs and carries on — the row is still there, still readable, still repairable by
- * {@link reindexThread}, and only missing from one search box.
+ * **Remove-then-insert, not a bare insert** — the same shape the trigger bodies use, and for the
+ * reason an FTS5 table always needs it: it has no primary key and no unique constraint to lean on, so
+ * a second call for the same message would silently add a second copy and the thread would start
+ * appearing twice in its own search results. Making the write idempotent means a retry, a reindex, and
+ * a first index are all the same operation.
+ *
+ * **It no longer carries a swallow contract, because it is no longer on a message write.** A failure
+ * here is a failed repair, and the caller is a command or a route that can say so. The durability
+ * question moved with the index itself: a trigger runs inside the message's own statement, so a
+ * failure in its body takes the message write down with it — which is what `searchIndex.ts` documents
+ * and what the triggers' own tests hold.
  */
 export declare function indexMessage(db: SupportDatabase, entry: {
     threadId: string;

package/dist/store/search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/store/search.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,OAAO,EAAO,MAAM,QAAQ,CAAC;AAC5D,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AA+B9E;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAS7C;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAEhE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,GAAG,EAAE,OAAO,CAAA;CAAE,GAAG,UAAU,CAAC,OAAO,CAAC,CAkB5F;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,YAAY,CAChC,EAAE,EAAE,eAAe,EACnB,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5E,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAkB1F;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAC9B,EAAE,EAAE,eAAe,EACnB,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GAC1E,OAAO,CAAC,MAAM,CAAC,CA4CjB"}
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/store/search.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,OAAO,EAAO,MAAM,QAAQ,CAAC;AAC5D,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AA+B9E;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAS7C;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAEhE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,GAAG,EAAE,OAAO,CAAA;CAAE,GAAG,UAAU,CAAC,OAAO,CAAC,CAkB5F;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,YAAY,CAChC,EAAE,EAAE,eAAe,EACnB,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5E,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAkB1F;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAC9B,EAAE,EAAE,eAAe,EACnB,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GAC1E,OAAO,CAAC,MAAM,CAAC,CA4CjB"}

package/dist/store/search.js

@@ -67,16 +67,23 @@ function searchPredicate(term, options) {
 /**
 * Add a message to the full-text index, replacing any row already there for it.
 *
-* **Remove-then-insert, not a bare insert** — the same shape the CMS `syncFts` uses, and for the
-* reason application-managed indexes always need it: an FTS5 table has no primary key and no unique
-* constraint to lean on, so a second call for the same message would silently add a second copy and
-* the thread would start appearing twice in its own search results. Making the write idempotent means
-* a retry, a reindex, and a first index are all the same operation, which is the property every other
-* write path in this repo is built on.
+* **No write path calls this any more.** The index is maintained by the triggers `createSearchIndex`
+* provisions (`store/searchIndex.ts`), so a message is indexed because it was written rather than
+* because the code that wrote it remembered. This is the **repair** primitive now: {@link reindexThread}
+* and {@link reindexAll} are its only callers in the kit, and it stays exported because
+* `package.json` exports `./src/*`, so an adopter may be reaching it.
 *
-* Best-effort by contract: a failed index write must never lose a customer's message, so the caller
-* logs and carries on — the row is still there, still readable, still repairable by
-* {@link reindexThread}, and only missing from one search box.
+* **Remove-then-insert, not a bare insert** — the same shape the trigger bodies use, and for the
+* reason an FTS5 table always needs it: it has no primary key and no unique constraint to lean on, so
+* a second call for the same message would silently add a second copy and the thread would start
+* appearing twice in its own search results. Making the write idempotent means a retry, a reindex, and
+* a first index are all the same operation.
+*
+* **It no longer carries a swallow contract, because it is no longer on a message write.** A failure
+* here is a failed repair, and the caller is a command or a route that can say so. The durability
+* question moved with the index itself: a trigger runs inside the message's own statement, so a
+* failure in its body takes the message write down with it — which is what `searchIndex.ts` documents
+* and what the triggers' own tests hold.
 */
 async function indexMessage(db, entry) {
 	await sql`delete from pithy_support_search where message_id = ${entry.messageId}`.execute(db);

package/dist/store/searchIndex.d.ts

@@ -3,8 +3,8 @@
 import { type Kysely } from "kysely";
 import type { SupportDatabase } from "../data/tables";
 /**
- * The FTS5 index's lifecycle — created and dropped by `pithy support provision`, **not by a
- * migration**.
+ * The FTS5 index's lifecycle — the virtual table **and the three triggers that keep it in step**,
+ * created and dropped by `pithy support provision`, **not by a migration**.
  *
  * ## Why this is not a migration
  *
@@ -26,13 +26,128 @@ import type { SupportDatabase } from "../data/tables";
  * config flag, fixable only by knowing to roll back first. Out of the ledger, there is nothing to
  * corrupt and toggling either way is just a re-provision.
  *
- * Both statements are idempotent, so provisioning stays safe to re-run — the property every other
+ * **The triggers inherit that constraint exactly.** They exist only where the table exists, so they
+ * are provisioning and not schema — a `CREATE TRIGGER` composed conditionally on `search.fts` would
+ * corrupt the ledger for exactly the same reason the table's own statement did. `migrations.workers.test.ts`
+ * keeps proving the migration set carries none.
+ *
+ * ## Why triggers at all
+ *
+ * The index used to be written by hand at every message write — three call sites, each best-effort —
+ * and correctness depended on every future author remembering. There is no shared message-write
+ * helper, so a fourth path that forgot produced a thread nobody could search, with nothing failing,
+ * nothing logging and no test catching it.
+ *
+ * `CREATE TRIGGER` was in an undocumented middle on D1 when that was decided: D1 runs an authorizer
+ * that rejects SQLite constructs workerd permits (`fts5vocab` is refused where plain FTS5 succeeds),
+ * so a trigger passing under Miniflare proved nothing about the deployment that matters. That is
+ * settled — the Leed CMS ships a `BEFORE UPDATE … BEGIN SELECT RAISE(ABORT, …); END` trigger in a
+ * production migration, so the authorizer permits both the statement and a body that aborts.
+ *
+ * **The durability contract inverts, deliberately.** A trigger runs inside the message's own
+ * statement, so a failure in its body takes the message write down with it — where the old call sites
+ * logged and carried on. That swallow existed because a second round trip to a separate table can
+ * fail on its own; inside one statement it cannot. The body is a `DELETE` plus an `INSERT` of values
+ * already present in `NEW.*`, with no conversion, no constraint and no foreign key, so what remains is
+ * the FTS table being absent — which is what {@link SEARCH_TRIGGERS} cannot outlive, since
+ * {@link dropSearchIndex} drops the pair together — or disk and corruption, which would have failed the
+ * message insert anyway.
+ *
+ * The one gap the kit cannot close from here is an adopter who upgrades and deploys without re-running
+ * `pithy support provision`: the calls are gone, the triggers were never created, and messages
+ * silently stop being indexed. `pithy doctor` reports a provisioned table with no triggers as drift
+ * and names that command, per environment.
+ *
+ * Every statement here is idempotent, so provisioning stays safe to re-run — the property every other
  * step of `pithy support provision` already has.
  */
 /** The virtual table's name. Snake_case because nothing translates it — every statement here is hand-written. */
 export declare const SEARCH_TABLE = "pithy_support_search";
 /**
- * Create the full-text index if it is not already there.
+ * The three triggers, in create order — `_ai`, `_au`, `_ad` after SQLite's own FTS5 naming for the
+ * insert, update and delete hooks.
+ *
+ * Exported because two other places need the exact names and may not re-derive them: `pithy doctor`
+ * asks a deployed database whether they are there, and {@link dropSearchIndex} drops them. They carry
+ * the `pithy_support_` prefix every table in this capability does, for the same reason — `sqlite_master`
+ * is one flat namespace per database and the prefix is the only partition.
+ */
+export declare const SEARCH_TRIGGERS: readonly ["pithy_support_search_ai", "pithy_support_search_au", "pithy_support_search_ad"];
+/**
+ * Every name a provisioner or `pithy doctor` asks `sqlite_master` about — the table and its triggers.
+ *
+ * One list, read by both, because the two have to agree about what "provisioned" means. A doctor that
+ * looked for two triggers while the provisioner created three would report drift nothing could clear.
+ */
+export declare const SEARCH_OBJECTS: readonly string[];
+/** What is actually in a database: the virtual table, and how much of the trigger set. */
+export interface SearchIndexState {
+    /** Whether `pithy_support_search` exists. */
+    table: boolean;
+    /** How many of the three triggers exist — `"some"` is drift, not a pass. */
+    triggers: "all" | "some" | "none";
+}
+/**
+ * Read a `sqlite_master` name listing into the two facts anything acts on.
+ *
+ * **The trigger count is three-valued, and `"some"` is why.** A partial set means one `CREATE TRIGGER`
+ * failed or one was dropped by hand, and the consequence is per statement kind — two of three leaves
+ * updates or deletes going unindexed while inserts look fine, which is the worst way round. Folding it
+ * into `"none"` would also hide it from a teardown: `search.fts: false` has to clear a stray trigger,
+ * because a trigger whose table is gone fails every write to `pithy_support_messages`.
+ */
+export declare function searchIndexState(names: readonly string[]): SearchIndexState;
+/** What a provision run has to do to one environment's index. */
+export type SearchIndexAction = 
+/** Already in the state `search.fts` asks for. */
+"none"
+/** The table is not there: create it, its triggers, and backfill. */
+ | "create"
+/** The table is there and its triggers are not: create them, and backfill the gap they left. */
+ | "repair"
+/** `search.fts` is off and something is there: drop the triggers and the table. */
+ | "drop";
+/**
+ * Decide what `pithy support provision` does to one environment's index.
+ *
+ * **`repair` is the member this release exists for.** A run used to compare one boolean against one
+ * boolean — table present against flag set — and return early when they matched. That is exactly the
+ * state an adopter is in after upgrading and deploying: the table is present, the flag is set, the
+ * `indexMessage` calls are gone from every write path, and the triggers were never created. The old
+ * comparison read that as nothing to do, so the command `pithy doctor` names would not have been the
+ * command that fixes it.
+ *
+ * A repair backfills as a create does, because the gap is real: messages written between the deploy
+ * and the re-provision had no trigger to fire for them and no application call either.
+ *
+ * `drop` fires on triggers alone as well as on the table. A trigger body resolves its table at run
+ * time, so a trigger outlives a hand-dropped table — and while it does, every write to
+ * `pithy_support_messages` fails. Turning the flag off has to clear that rather than read it as a
+ * database with no index.
+ */
+export declare function searchIndexAction(state: SearchIndexState, wanted: boolean): SearchIndexAction;
+/**
+ * The `CREATE TRIGGER` statements, one per {@link SEARCH_TRIGGERS} entry and in that order.
+ *
+ * **`BEGIN` and `END` are uppercase, and that is load-bearing.** Miniflare accepts a lowercase
+ * compound-statement body; remote D1 rejects it as `incomplete input [code: 7500]`, so a lowercased
+ * body passes every local test in this repository and fails on deploy. `searchIndex.test.ts` fails on
+ * the lowercase form, because no Workers test can.
+ *
+ * **Every column is the physical snake_case name.** `CamelCasePlugin` snake-cases the identifiers the
+ * query builder emits and never touches a string inside a `sql` template, so this is the one place in
+ * the package that has to spell them itself: `NEW.id`, `NEW.thread_id`, `NEW.subject`, `NEW.text_body`
+ * — never the camelCase keys `data/tables.ts` declares.
+ *
+ * **Insert and update both delete first.** An FTS5 table has no primary key and no unique constraint
+ * to lean on, so a bare insert on a second write for the same message would add a second copy and the
+ * thread would start appearing twice in its own search results — the same reason `indexMessage` is
+ * remove-then-insert. The update body keys its delete on `OLD.id`, so a row whose id changed takes its
+ * old index entry with it.
+ */
+export declare function searchTriggerStatements(): string[];
+/**
+ * Create the full-text index and its triggers if they are not already there.
  *
  * A standalone (not external-content) FTS5 table. External content would store the text once rather
  * than twice, but it requires the indexed column names to exist verbatim on the content table, and
@@ -42,14 +157,25 @@ export declare const SEARCH_TABLE = "pithy_support_search";
  * `thread_id` and `message_id` are UNINDEXED: they are carried so a match resolves straight to a
  * conversation and so one message's rows can be replaced, and tokenizing a UUID would only add noise
  * to every query.
+ *
+ * **The triggers are dropped and recreated rather than guarded with `IF NOT EXISTS`**, which is what
+ * makes re-provisioning after a kit upgrade actually converge. `IF NOT EXISTS` is idempotent in the
+ * weak sense — it leaves a trigger whose body this release has changed exactly as it was, so a fixed
+ * body would reach nobody who already had the old one, and the command `pithy doctor` names would not
+ * be the command that fixes it. The pair is ordered so the table is always there before a body refers
+ * to it.
  */
 export declare function createSearchIndex(db: SupportDatabase | Kysely<unknown>): Promise<void>;
 /**
- * Drop the full-text index if it is there.
+ * Drop the full-text index and its triggers if they are there.
  *
  * Safe by construction: the index is derived, so this costs a rebuild rather than a restore. It is
  * what `pithy support provision` runs when `search.fts` goes back to false — and the reason turning
  * the feature off is now a one-command operation instead of a migration rollback.
+ *
+ * **The triggers go first, and the order is the whole point.** A trigger whose body inserts into a
+ * table that is gone fails every write to `pithy_support_messages`, so dropping the table out from
+ * under them would turn a feature flag into an outage on the capability's main write path.
  */
 export declare function dropSearchIndex(db: SupportDatabase | Kysely<unknown>): Promise<void>;
 //# sourceMappingURL=searchIndex.d.ts.map