@pithy-sh/support 0.5.0 → 0.6.0

package/dist/data/thread.d.ts

@@ -6,10 +6,11 @@ import { z } from "zod";
  *
  * **Everything on it is derived from immutable inbound mail.** The classification is recomputed, never
  * repaired; the user link is a lookup, not a decision; the counters are facts about the messages
- * below. There is no assignee and no status, because a status field is a state machine and a state
- * machine attracts SLAs, escalation, and reporting — which is a ticketing product and explicitly not
- * this. The two exceptions are deliberate and named: `archived` (one shared boolean meaning done) and
- * the per-viewer flags, which live in their own table because nobody coordinates around them.
+ * below. There is no status, because a status field is a state machine and a state machine attracts
+ * SLAs, escalation, and reporting — which is a ticketing product and explicitly not this. The
+ * exceptions are deliberate and named: `archived` (one shared boolean meaning done), the assignee (one
+ * fact, who has this, with its history in `pithy_support_assignments` — #816), and the per-viewer
+ * flags, which live in their own table because nobody coordinates around them.
  *
  * The classification axes are **denormalized onto the thread** rather than joined from
  * `pithy_support_classifications`. The whole dashboard interaction is "newest first, filtered by
@@ -52,6 +53,10 @@ export declare const SupportThread: z.ZodObject<{
     archived: z.ZodCodec<z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<1>, z.ZodBoolean, z.ZodString]>, z.ZodBoolean>;
     archivedAt: z.ZodOptional<z.ZodNullable<z.ZodCodec<z.ZodUnion<readonly [z.ZodNumber, z.ZodString, z.ZodDate]>, z.ZodDate>>>;
     archivedBy: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    assigneeRef: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    assigneeName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    assignedAt: z.ZodOptional<z.ZodNullable<z.ZodCodec<z.ZodUnion<readonly [z.ZodNumber, z.ZodString, z.ZodDate]>, z.ZodDate>>>;
+    assignedBy: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     messageCount: z.ZodNumber;
     firstMessageAt: z.ZodCodec<z.ZodUnion<readonly [z.ZodNumber, z.ZodString, z.ZodDate]>, z.ZodDate>;
     lastMessageAt: z.ZodCodec<z.ZodUnion<readonly [z.ZodNumber, z.ZodString, z.ZodDate]>, z.ZodDate>;

package/dist/data/thread.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"thread.d.ts","sourceRoot":"","sources":["../../src/data/thread.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4FmF,CAAC;AAC9G,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY;;uBAEb,QAAQ;wBACP,SAAS;;;;CAOrB,CAAC"}
+{"version":3,"file":"thread.d.ts","sourceRoot":"","sources":["../../src/data/thread.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiHmF,CAAC;AAC9G,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY;;uBAEb,QAAQ;wBACP,SAAS;;;;CAOrB,CAAC"}

package/dist/data/thread.js

@@ -9,10 +9,11 @@ import { SQLiteBoolean, SQLiteDate } from "@pithy-sh/core/src/data/codecs";
 *
 * **Everything on it is derived from immutable inbound mail.** The classification is recomputed, never
 * repaired; the user link is a lookup, not a decision; the counters are facts about the messages
-* below. There is no assignee and no status, because a status field is a state machine and a state
-* machine attracts SLAs, escalation, and reporting — which is a ticketing product and explicitly not
-* this. The two exceptions are deliberate and named: `archived` (one shared boolean meaning done) and
-* the per-viewer flags, which live in their own table because nobody coordinates around them.
+* below. There is no status, because a status field is a state machine and a state machine attracts
+* SLAs, escalation, and reporting — which is a ticketing product and explicitly not this. The
+* exceptions are deliberate and named: `archived` (one shared boolean meaning done), the assignee (one
+* fact, who has this, with its history in `pithy_support_assignments` — #816), and the per-viewer
+* flags, which live in their own table because nobody coordinates around them.
 *
 * The classification axes are **denormalized onto the thread** rather than joined from
 * `pithy_support_classifications`. The whole dashboard interaction is "newest first, filtered by
@@ -40,6 +41,10 @@ const SupportThread = z.object({
 	archived: SQLiteBoolean.describe("Done. One shared boolean, not per viewer, because if one person resolves a thread another should not still see it open. The mildest possible coordination state: no transitions to get wrong, nothing can be stuck, and unarchiving undoes a mistake instantly."),
 	archivedAt: SQLiteDate.nullish().describe("When the thread was last archived; null while it is open."),
 	archivedBy: z.string().nullish().describe("The control-plane subject that archived it. Recorded for the dashboard's convenience only — the answer to 'who marked this done' comes from the audit trail, which is why this is not an ownership column."),
+	assigneeRef: z.string().nullish().describe("**Who has this thread** — an opaque reference to the person or agent it is assigned to, or null when nobody has it. Opaque on purpose: a dashboard member, a user of the app and an agent are all assignable, and support never needs to know which. Not a status: there are no transitions to get wrong, and unassigning is one write. Every change is kept in `pithy_support_assignments`. Added by `0002_assignment`, so a row written before it reads null."),
+	assigneeName: z.string().nullish().describe("How the assignee is shown, as the assigner named them. Null exactly when `assigneeRef` is. Display text, never an identity: two refs may share a name, and the ref is what a filter matches."),
+	assignedAt: SQLiteDate.nullish().describe("When the current assignment was made; null while the thread has no assignee."),
+	assignedBy: z.string().nullish().describe("Who made the current assignment — the control-plane subject, or the signed-in user's id. Null while the thread has no assignee. The full answer, with every earlier change, is the history table and the audit trail."),
 	messageCount: z.number().int().describe("How many messages the thread holds, inbound and outbound together."),
 	firstMessageAt: SQLiteDate.describe("When the thread opened — the receive time of its first message."),
 	lastMessageAt: SQLiteDate.describe("When the thread last moved. The inbox sorts on this, and it is the `receivedAt` half of every composite index and of the pagination cursor."),

package/dist/http/guards.d.ts

@@ -2,35 +2,43 @@
 // SPDX-License-Identifier: MIT
 import type { PithyHonoEnv } from "@pithy-sh/core/src/capability/capability";
 import type { MiddlewareHandler } from "hono";
+import type { SupportStaffConfig } from "../config/config";
 /**
- * Support's identity gates: the copied `requireAuth()` its in-app submission routes wear, and the
- * control-plane gate its management routes take from core's seam.
+ * Support's identity gates: the copied `requireAuth()` its in-app routes wear, the control-plane gate its
+ * management routes take from core's seam, and `requireStaff()`, which lets the adopter's own staff onto a
+ * slice of the management side through their session (#816).
  *
  * **The scope constants moved to `./scopes`** (#315). A management client reads them to render what a
  * connection may do, and it reads them in a browser — so they cannot live in a module that imports
  * Hono middleware and `PithyHonoEnv`. The gates stayed here; the names they demand are next door, and
  * the routes import both.
  *
- * ## Two surfaces, and the split is the whole shape of this file
+ * ## Three doors, and the split is the whole shape of this file
  *
  * **The management surface is `control-plane` and default-denied.** It reads and acts on every
- * customer's private correspondence, so it answers to a credential the adopter issued and to nothing
- * else. The seam's gate is imported from core rather than copied — core is a hard dependency of every
- * capability, so importing its gate cannot leave a deployment without one, and with the seam
- * uncomposed `requireControlPlane` raises `controlplane/not_connected` rather than passing.
+ * customer's private correspondence, so it answers to a credential the adopter issued. The seam's gate is
+ * imported from core rather than copied — core is a hard dependency of every capability, so importing its
+ * gate cannot leave a deployment without one, and with the seam uncomposed `requireControlPlane` raises
+ * `controlplane/not_connected` rather than passing.
  *
  * **The submission surface is `bearer`/`session` and is the adopter's own signed-in user.** It exists
  * because a product with a logged-in user, a session, and a support console should not have to ask
  * that user to open their mail client — and because the hardest problem on the mail path, proving a
  * `From:` header, does not exist on a request whose session was already proved.
  *
- * **`requireAuth()` never appears on a management route, and `requireControlPlane` never appears on a
- * submission route.** They are not two strengths of the same gate. A management client holds no
- * session and owns no account row — core leaves `c.var.auth` null for one deliberately — so stacking
- * them would deny every legitimate call on both surfaces, permanently, with no credential able to fix
- * it. What each route may *see* follows from which gate it wears: an operator reads a thread with its
- * classification and its sender's purchases, and a submitter reads their own words back and nothing
- * else.
+ * **The staff door is a session, and it reaches management work.** `requireAuth()` then `requireStaff()`
+ * admit a signed-in user whose role, in the organization the request acts for, holds one of the powers
+ * `support({ staff })` names — and nobody at all when `staff` is absent. It opens two things and no more:
+ * assigning a thread, at its own `/staff/` path, and joining a thread's presence room. Everything else on
+ * the management side still answers to the control plane alone.
+ *
+ * **`requireAuth()` never appears on a control-plane route, and `requireControlPlane` never appears on a
+ * session route.** They are not two strengths of the same gate. A management client holds no session and
+ * owns no account row — core leaves `c.var.auth` null for one deliberately — so stacking them would deny
+ * every legitimate call on both, permanently, with no credential able to fix it. That is why staff
+ * assignment is a second route beside the control-plane one rather than a second gate on it. What each
+ * route may *see* follows from which gate it wears: an operator reads a thread with its classification and
+ * its sender's purchases, and a submitter reads their own words back and nothing else.
  */
 /**
  * Require an authenticated caller — core's `AuthContext` seam, and the gate on every in-app route.
@@ -43,4 +51,14 @@ import type { MiddlewareHandler } from "hono";
  * gate is somebody's support history.
  */
 export declare function requireAuth(): MiddlewareHandler<PithyHonoEnv>;
+/**
+ * Require one of support's staff powers in the organization this request acts for (#816) — the gate on
+ * the staff session routes, after `requireAuth()`.
+ *
+ * With no `staff` configured, or no organization composed, or no organization in force, every caller is
+ * refused: the inbox is every customer's correspondence, and the absence of a policy is never an open one.
+ * The refusal names no power and no organization, because which power reaches the inbox is the adopter's
+ * internal arrangement and a caller who does not hold it has no use for the name.
+ */
+export declare function requireStaff(staff: SupportStaffConfig | undefined, power: keyof SupportStaffConfig): MiddlewareHandler<PithyHonoEnv>;
 //# sourceMappingURL=guards.d.ts.map

package/dist/http/guards.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../src/http/guards.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAE7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH;;;;;;;;;GASG;AACH,wBAAgB,WAAW,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAU7D"}
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../src/http/guards.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAE7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAG3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH;;;;;;;;;GASG;AACH,wBAAgB,WAAW,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAU7D;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,kBAAkB,GAAG,SAAS,EACrC,KAAK,EAAE,MAAM,kBAAkB,GAC9B,iBAAiB,CAAC,YAAY,CAAC,CAcjC"}

package/dist/http/guards.js

@@ -1,36 +1,44 @@
 // SPDX-FileCopyrightText: 2026 Pithy
 // SPDX-License-Identifier: MIT
-import { UnauthorizedError } from "@pithy-sh/core/src/error/pithyError";
+import { staffMay } from "../staff/staff.js";
+import { ForbiddenError, UnauthorizedError } from "@pithy-sh/core/src/error/pithyError";
 //#region src/http/guards.ts
 /**
-* Support's identity gates: the copied `requireAuth()` its in-app submission routes wear, and the
-* control-plane gate its management routes take from core's seam.
+* Support's identity gates: the copied `requireAuth()` its in-app routes wear, the control-plane gate its
+* management routes take from core's seam, and `requireStaff()`, which lets the adopter's own staff onto a
+* slice of the management side through their session (#816).
 *
 * **The scope constants moved to `./scopes`** (#315). A management client reads them to render what a
 * connection may do, and it reads them in a browser — so they cannot live in a module that imports
 * Hono middleware and `PithyHonoEnv`. The gates stayed here; the names they demand are next door, and
 * the routes import both.
 *
-* ## Two surfaces, and the split is the whole shape of this file
+* ## Three doors, and the split is the whole shape of this file
 *
 * **The management surface is `control-plane` and default-denied.** It reads and acts on every
-* customer's private correspondence, so it answers to a credential the adopter issued and to nothing
-* else. The seam's gate is imported from core rather than copied — core is a hard dependency of every
-* capability, so importing its gate cannot leave a deployment without one, and with the seam
-* uncomposed `requireControlPlane` raises `controlplane/not_connected` rather than passing.
+* customer's private correspondence, so it answers to a credential the adopter issued. The seam's gate is
+* imported from core rather than copied — core is a hard dependency of every capability, so importing its
+* gate cannot leave a deployment without one, and with the seam uncomposed `requireControlPlane` raises
+* `controlplane/not_connected` rather than passing.
 *
 * **The submission surface is `bearer`/`session` and is the adopter's own signed-in user.** It exists
 * because a product with a logged-in user, a session, and a support console should not have to ask
 * that user to open their mail client — and because the hardest problem on the mail path, proving a
 * `From:` header, does not exist on a request whose session was already proved.
 *
-* **`requireAuth()` never appears on a management route, and `requireControlPlane` never appears on a
-* submission route.** They are not two strengths of the same gate. A management client holds no
-* session and owns no account row — core leaves `c.var.auth` null for one deliberately — so stacking
-* them would deny every legitimate call on both surfaces, permanently, with no credential able to fix
-* it. What each route may *see* follows from which gate it wears: an operator reads a thread with its
-* classification and its sender's purchases, and a submitter reads their own words back and nothing
-* else.
+* **The staff door is a session, and it reaches management work.** `requireAuth()` then `requireStaff()`
+* admit a signed-in user whose role, in the organization the request acts for, holds one of the powers
+* `support({ staff })` names — and nobody at all when `staff` is absent. It opens two things and no more:
+* assigning a thread, at its own `/staff/` path, and joining a thread's presence room. Everything else on
+* the management side still answers to the control plane alone.
+*
+* **`requireAuth()` never appears on a control-plane route, and `requireControlPlane` never appears on a
+* session route.** They are not two strengths of the same gate. A management client holds no session and
+* owns no account row — core leaves `c.var.auth` null for one deliberately — so stacking them would deny
+* every legitimate call on both, permanently, with no credential able to fix it. That is why staff
+* assignment is a second route beside the control-plane one rather than a second gate on it. What each
+* route may *see* follows from which gate it wears: an operator reads a thread with its classification and
+* its sender's purchases, and a submitter reads their own words back and nothing else.
 */
 /**
 * Require an authenticated caller — core's `AuthContext` seam, and the gate on every in-app route.
@@ -51,5 +59,25 @@ function requireAuth() {
 		await next();
 	};
 }
+/**
+* Require one of support's staff powers in the organization this request acts for (#816) — the gate on
+* the staff session routes, after `requireAuth()`.
+*
+* With no `staff` configured, or no organization composed, or no organization in force, every caller is
+* refused: the inbox is every customer's correspondence, and the absence of a policy is never an open one.
+* The refusal names no power and no organization, because which power reaches the inbox is the adopter's
+* internal arrangement and a caller who does not hold it has no use for the name.
+*/
+function requireStaff(staff, power) {
+	return async (c, next) => {
+		const acting = await c.var.actingOrganization();
+		if (!staffMay(acting, staff, power)) throw new ForbiddenError({
+			message: "You do not work this support inbox.",
+			action: staff ? `Give the user an unassignable role holding \`${staff[power]}\`, through the control plane.` : "Name staff powers in support({ staff }) to let signed-in users work the inbox.",
+			detail: `user ${c.var.auth?.userId ?? "unknown"} holds no ${power} for support in ${acting?.organizationId ?? "no organization"}`
+		});
+		await next();
+	};
+}
 //#endregion
-export { requireAuth };
+export { requireAuth, requireStaff };

package/dist/http/handlers.d.ts

@@ -4,14 +4,18 @@ import type { D1Database, R2Bucket } from "@cloudflare/workers-types";
 import type { AuditEmit } from "@pithy-sh/core/src/audit/recorder";
 import type { Logger } from "@pithy-sh/core/src/logger/logger";
 import type { ObjectStore } from "@pithy-sh/storage/src/object/store";
+import type { VectorIndexConfig } from "@pithy-sh/vector/src/config/config";
+import type { VectorAi } from "@pithy-sh/vector/src/embed/embed";
+import type { VectorStore } from "@pithy-sh/vector/src/index/index";
 import type { SupportConfig } from "../config/config";
+import type { SupportAssignmentActorType } from "../data/assignment";
 import type { SupportCategories } from "../data/categories";
 import type { SupportDatabase } from "../data/tables";
 import { type SenderPeers } from "../link/sender";
 import { sendReply } from "../reply/send";
 import type { SupportReplySnippets } from "../reply/snippets";
-import type { SupportFlagsResponse, SupportMyThreadResponse, SupportMyThreadsResponse, SupportReclassifiedResponse, SupportReplySentResponse, SupportReplyView, SupportSubmissionResponse, SupportThreadResponse, SupportThreadsResponse, SupportThreadView } from "./responses";
-import type { ArchiveThreadInput, FlagsInput, ListThreadsQuery, MyThreadsQuery, RepliesQuery, ReplyInput, SubmitFeedbackInput } from "./schemas";
+import type { SupportAssignResponse, SupportFlagsResponse, SupportMyThreadResponse, SupportMyThreadsResponse, SupportReclassifiedResponse, SupportReplySentResponse, SupportReplyView, SupportSearchResponse, SupportSubmissionResponse, SupportThreadResponse, SupportThreadsResponse, SupportThreadView } from "./responses";
+import type { ArchiveThreadInput, AssignThreadInput, FlagsInput, ListThreadsQuery, MyThreadsQuery, RepliesQuery, ReplyInput, SearchThreadsQuery, SubmitFeedbackInput } from "./schemas";
 /**
  * The support handlers — every one of them behind the `control-plane` gate, and every one of them
  * taking already-validated values.
@@ -33,6 +37,15 @@ export interface HandlerDeps {
     snippets: SupportReplySnippets;
     /** Whether the FTS5 index is composed. */
     fts: boolean;
+    /**
+     * The semantic message index and the bindings it runs on. `index` is absent when `search.semantic` is
+     * off; `ai` and `store` are absent when this Worker was not given them — until `pithy support provision`.
+     */
+    semantic: {
+        index?: VectorIndexConfig;
+        ai?: VectorAi;
+        store?: VectorStore;
+    };
     /** The attachment bucket, when one is bound. */
     bucket?: R2Bucket;
     /** The object store attachment URLs are signed through, when credentials are available. */
@@ -54,10 +67,30 @@ export interface HandlerDeps {
 }
 /** List the inbox. */
 export declare function listInbox(deps: HandlerDeps, query: ListThreadsQuery, viewer: string): Promise<SupportThreadsResponse>;
+/**
+ * Search the inbox: keyword and semantic, ranked as one. The semantic seams are whatever this Worker
+ * was given — absent bindings skip that backend and say so, rather than failing the search.
+ */
+export declare function searchInbox(deps: HandlerDeps, query: SearchThreadsQuery, viewer: string): Promise<SupportSearchResponse>;
 /** Read one conversation in full. */
 export declare function readConversation(deps: HandlerDeps, threadId: string): Promise<SupportThreadResponse>;
 /** Mark a conversation done, or reopen it. */
 export declare function archiveConversation(deps: HandlerDeps, threadId: string, input: ArchiveThreadInput, viewer: string): Promise<SupportThreadView>;
+/** Who is assigning: how they were verified, and their id under it. */
+export interface Assigner {
+    /** `control-plane` for a management client, `user` for a signed-in user holding support's staff power. */
+    type: SupportAssignmentActorType;
+    /** The control-plane subject, or the user's id. */
+    id: string;
+}
+/**
+ * Assign a conversation to somebody, or to nobody — the one handler behind both doors.
+ *
+ * The audit event is emitted **only when something changed**. The current assignee again, or unassigning
+ * a thread nobody has, wrote nothing to the thread or its history, so an event would record a handover
+ * that did not happen.
+ */
+export declare function assignConversation(deps: HandlerDeps, threadId: string, input: AssignThreadInput, assigner: Assigner): Promise<SupportAssignResponse>;
 /** Answer the customer. */
 export declare function replyToConversation(deps: HandlerDeps, threadId: string, input: ReplyInput, viewer: string): Promise<SupportReplySentResponse>;
 /** Re-run the classifier over a conversation's latest inbound message. */

package/dist/http/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/http/handlers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAGnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAGtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAM9D,OAAO,KAAK,EAEV,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,EACxB,gBAAgB,EAChB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,UAAU,EACV,mBAAmB,EACpB,MAAM,WAAW,CAAC;AAGnB;;;;;;GAMG;AAEH,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,0BAA0B;IAC1B,EAAE,EAAE,eAAe,CAAC;IACpB,wFAAwF;IACxF,EAAE,EAAE,UAAU,CAAC;IACf,2BAA2B;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB,8BAA8B;IAC9B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,0CAA0C;IAC1C,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,0CAA0C;IAC1C,GAAG,EAAE,OAAO,CAAC;IACb,gDAAgD;IAChD,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,2FAA2F;IAC3F,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrD,8FAA8F;IAC9F,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,8GAA8G;IAC9G,KAAK,EAAE,WAAW,CAAC;IACnB,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,yBAAyB;IACzB,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,WAAW;IACX,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,sBAAsB;AACtB,wBAAsB,SAAS,CAC7B,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sBAAsB,CAAC,CAkBjC;AAqCD,qCAAqC;AACrC,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA0B1G;AAED,8CAA8C;AAC9C,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,kBAAkB,EACzB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AAED,2BAA2B;AAC3B,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAiBnC;AAED,0EAA0E;AAC1E,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,2BAA2B,CAAC,CAkCtC;AAED,sCAAsC;AACtC,wBAAsB,WAAW,CAC/B,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,oBAAoB,CAAC,CAa/B;AAED,gCAAgC;AAChC,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,GAAG,gBAAgB,EAAE,CAEtF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,yBAAyB,CAAC,CAsEpC;AAED,kDAAkD;AAClD,wBAAsB,aAAa,CACjC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAGnC;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,uBAAuB,CAAC,CAgBlC"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/http/handlers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAGnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAGpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAErE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAQ9D,OAAO,KAAK,EACV,qBAAqB,EAErB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,WAAW,CAAC;AAYnB;;;;;;GAMG;AAEH,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,0BAA0B;IAC1B,EAAE,EAAE,eAAe,CAAC;IACpB,wFAAwF;IACxF,EAAE,EAAE,UAAU,CAAC;IACf,2BAA2B;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB,8BAA8B;IAC9B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,0CAA0C;IAC1C,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,0CAA0C;IAC1C,GAAG,EAAE,OAAO,CAAC;IACb;;;OAGG;IACH,QAAQ,EAAE;QAAE,KAAK,CAAC,EAAE,iBAAiB,CAAC;QAAC,EAAE,CAAC,EAAE,QAAQ,CAAC;QAAC,KAAK,CAAC,EAAE,WAAW,CAAA;KAAE,CAAC;IAC5E,gDAAgD;IAChD,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,2FAA2F;IAC3F,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrD,8FAA8F;IAC9F,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,8GAA8G;IAC9G,KAAK,EAAE,WAAW,CAAC;IACnB,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,yBAAyB;IACzB,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,WAAW;IACX,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,sBAAsB;AACtB,wBAAsB,SAAS,CAC7B,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sBAAsB,CAAC,CAkBjC;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,kBAAkB,EACzB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CA0BhC;AAqCD,qCAAqC;AACrC,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA4B1G;AAED,8CAA8C;AAC9C,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,kBAAkB,EACzB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AAED,uEAAuE;AACvE,MAAM,WAAW,QAAQ;IACvB,0GAA0G;IAC1G,IAAI,EAAE,0BAA0B,CAAC;IACjC,mDAAmD;IACnD,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,iBAAiB,EACxB,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,qBAAqB,CAAC,CA4BhC;AAED,2BAA2B;AAC3B,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAiBnC;AAED,0EAA0E;AAC1E,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,2BAA2B,CAAC,CA2CtC;AAED,sCAAsC;AACtC,wBAAsB,WAAW,CAC/B,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,oBAAoB,CAAC,CAa/B;AAED,gCAAgC;AAChC,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,GAAG,gBAAgB,EAAE,CAEtF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,yBAAyB,CAAC,CAsEpC;AAED,kDAAkD;AAClD,wBAAsB,aAAa,CACjC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAGnC;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,uBAAuB,CAAC,CAgBlC"}

package/dist/http/handlers.js

@@ -6,11 +6,13 @@ import { attachmentUrl } from "../attachment/store.js";
 import { SupportAuditActions } from "../audit/actions.js";
 import { resolveSenderContext, resolveSubmitterAccount, resolveSubmitterContext } from "../link/sender.js";
 import { sendReply } from "../reply/send.js";
+import { assignThread, listAssignments } from "../store/assignment.js";
 import { listOwnThreads, listThreads, readOwnThread, readThread, setArchived, setFlags } from "../store/threads.js";
+import { searchThreads } from "../store/hybrid.js";
 import { decodeBase64 } from "../submission/encoding.js";
 import { submitFeedback } from "../submission/submit.js";
 import { latestInboundMessageId } from "../workflows/classify.js";
-import { listedThreadView, messageView, myMessageView, myThreadView, senderView, threadView } from "./views.js";
+import { assignmentView, listedThreadView, messageView, myMessageView, myThreadView, searchView, senderView, threadView } from "./views.js";
 import { ValidationError } from "@pithy-sh/core/src/error/pithyError";
 import { pithyCommandOf } from "@pithy-sh/core/src/cli/command";
 //#region src/http/handlers.ts
@@ -24,14 +26,12 @@ async function listInbox(deps, query, viewer) {
 		sentiment: query.sentiment,
 		channel: query.channel,
 		inbox: query.inbox,
-		q: query.q,
+		assignee: query.assignee,
 		cursor: query.cursor,
 		limit: query.limit
 	}, {
-		fts: deps.fts,
 		viewer,
-		now: deps.now(),
-		log: deps.log
+		now: deps.now()
 	});
 	return {
 		threads: page.threads.map(listedThreadView),
@@ -39,6 +39,34 @@ async function listInbox(deps, query, viewer) {
 	};
 }
 /**
+* Search the inbox: keyword and semantic, ranked as one. The semantic seams are whatever this Worker
+* was given — absent bindings skip that backend and say so, rather than failing the search.
+*/
+async function searchInbox(deps, query, viewer) {
+	const outcome = await searchThreads({
+		db: deps.db,
+		fts: deps.fts,
+		...deps.semantic.index ? { index: deps.semantic.index } : {},
+		...deps.semantic.ai ? { ai: deps.semantic.ai } : {},
+		...deps.semantic.store ? { store: deps.semantic.store } : {},
+		viewer,
+		log: deps.log
+	}, {
+		q: query.q,
+		...query.mode !== void 0 ? { mode: query.mode } : {},
+		...query.limit !== void 0 ? { limit: query.limit } : {},
+		archived: query.archived === "true",
+		category: query.category,
+		declaredCategory: query.declaredCategory,
+		priority: query.priority,
+		sentiment: query.sentiment,
+		channel: query.channel,
+		inbox: query.inbox,
+		assignee: query.assignee
+	});
+	return searchView(outcome);
+}
+/**
 * Present an attachment.
 *
 * The `storageKey` is **never** in the response. It is server-derived and opaque precisely so a
@@ -70,13 +98,18 @@ async function presentAttachments(deps, attachments) {
 /** Read one conversation in full. */
 async function readConversation(deps, threadId) {
 	const detail = await readThread(deps.db, threadId);
-	const [attachments, sender] = await Promise.all([presentAttachments(deps, detail.attachments), detail.thread.accountLinkSource === "session" && detail.thread.userId ? resolveSubmitterContext(deps.d1, detail.thread.userId, deps.now(), deps.peers) : resolveSenderContext(deps.d1, detail.thread.fromAddress, deps.now(), { authenticated: detail.thread.senderAuthenticated }, deps.peers)]);
+	const [attachments, sender, assignments] = await Promise.all([
+		presentAttachments(deps, detail.attachments),
+		detail.thread.accountLinkSource === "session" && detail.thread.userId ? resolveSubmitterContext(deps.d1, detail.thread.userId, deps.now(), deps.peers) : resolveSenderContext(deps.d1, detail.thread.fromAddress, deps.now(), { authenticated: detail.thread.senderAuthenticated }, deps.peers),
+		listAssignments(deps.db, threadId)
+	]);
 	return {
 		thread: threadView(detail.thread),
 		messages: detail.messages.map(messageView),
 		attachments,
 		sender: senderView(sender),
-		replies: repliesForCategory(deps.snippets, detail.thread.category)
+		replies: repliesForCategory(deps.snippets, detail.thread.category),
+		assignments: assignments.map(assignmentView)
 	};
 }
 /** Mark a conversation done, or reopen it. */
@@ -93,6 +126,41 @@ async function archiveConversation(deps, threadId, input, viewer) {
 	});
 	return threadView(thread);
 }
+/**
+* Assign a conversation to somebody, or to nobody — the one handler behind both doors.
+*
+* The audit event is emitted **only when something changed**. The current assignee again, or unassigning
+* a thread nobody has, wrote nothing to the thread or its history, so an event would record a handover
+* that did not happen.
+*/
+async function assignConversation(deps, threadId, input, assigner) {
+	const result = await assignThread(deps.d1, {
+		threadId,
+		assignee: input.assignee,
+		actorType: assigner.type,
+		assignedBy: assigner.id,
+		note: input.note,
+		newId: deps.newId,
+		now: deps.now()
+	});
+	if (result.changed) await deps.emit({
+		action: input.assignee ? SupportAuditActions.threadAssigned : SupportAuditActions.threadUnassigned,
+		outcome: "success",
+		actorType: assigner.type,
+		actorId: assigner.id,
+		resourceType: "support_thread",
+		resourceId: threadId,
+		metadata: {
+			previousAssignee: result.previous,
+			assignee: input.assignee,
+			note: input.note ?? null
+		}
+	});
+	return {
+		thread: threadView(result.thread),
+		changed: result.changed
+	};
+}
 /** Answer the customer. */
 async function replyToConversation(deps, threadId, input, viewer) {
 	return sendReply({
@@ -112,6 +180,11 @@ async function replyToConversation(deps, threadId, input, viewer) {
 }
 /** Re-run the classifier over a conversation's latest inbound message. */
 async function reclassifyConversation(deps, threadId, viewer) {
+	if (!deps.config.ai.enabled) throw new SupportClassificationError({
+		message: "Classification is off for this project.",
+		action: `Turn on \`ai.enabled\` in the support config, run \`${pithyCommandOf("support provision", {}, { runtime: true })}\`, then retry.`,
+		detail: `ai.enabled is false, so no instance was started for thread ${threadId}`
+	});
 	const messageId = await latestInboundMessageId(deps.db, threadId);
 	if (!messageId) throw new SupportNotFoundError({
 		message: "That conversation has nothing to classify.",
@@ -246,4 +319,4 @@ async function readMyThread(deps, threadId, userId) {
 	};
 }
 //#endregion
-export { archiveConversation, listInbox, listMyThreads, listReplies, readConversation, readMyThread, reclassifyConversation, replyToConversation, submitFeedbackRequest, updateFlags };
+export { archiveConversation, assignConversation, listInbox, listMyThreads, listReplies, readConversation, readMyThread, reclassifyConversation, replyToConversation, searchInbox, submitFeedbackRequest, updateFlags };

package/dist/http/resolve.d.ts

@@ -7,6 +7,7 @@ import type { SecretsStoreEnv } from "@pithy-sh/secrets/src/env/bindings";
 import { objectStore } from "@pithy-sh/storage/src/object/store";
 import type { Context } from "hono";
 import type { SupportWiring } from "../capability";
+import type { SupportConfig } from "../config/config";
 import type { HandlerDeps } from "./handlers";
 /**
  * Turning a Worker env into the dependencies the handlers take.
@@ -41,6 +42,13 @@ export declare function makeClassifyDispatcher(env: Record<string, unknown>, log
  * inside the seam, so this costs nothing until something is actually signed.
  */
 export declare function resolveStore(env: SupportEnv): ReturnType<typeof objectStore> | undefined;
+/**
+ * The semantic index and the two bindings it runs on, as this Worker has them.
+ *
+ * Absent rather than refused: a project that turned `search.semantic` on and has not provisioned yet still
+ * serves every route, and the search route names the backend it skipped.
+ */
+export declare function resolveSemantic(env: Record<string, unknown>, config: SupportConfig): HandlerDeps["semantic"];
 /** Build the per-request handler dependencies. */
 export declare function makeResolveDeps(wiring: SupportWiring): (c: Context<PithyHonoEnv>) => Promise<HandlerDeps>;
 //# sourceMappingURL=resolve.d.ts.map

package/dist/http/resolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/http/resolve.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAE7E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAInD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;GAMG;AAEH,kCAAkC;AAClC,MAAM,WAAW,UAAW,SAAQ,eAAe;IACjD,qDAAqD;IACrD,EAAE,EAAE,UAAU,CAAC;IACf,mGAAmG;IACnG,cAAc,CAAC,EAAE,QAAQ,CAAC;CAC3B;AAED,iGAAiG;AACjG,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAUlE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,GAAG,EAAE,MAAM,GACV,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAUzC;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,CAAC,OAAO,WAAW,CAAC,GAAG,SAAS,CAGxF;AAED,kDAAkD;AAClD,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,CA8BzG"}
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/http/resolve.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAE7E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAGjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAKtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;GAMG;AAEH,kCAAkC;AAClC,MAAM,WAAW,UAAW,SAAQ,eAAe;IACjD,qDAAqD;IACrD,EAAE,EAAE,UAAU,CAAC;IACf,mGAAmG;IACnG,cAAc,CAAC,EAAE,QAAQ,CAAC;CAC3B;AAED,iGAAiG;AACjG,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAUlE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,GAAG,EAAE,MAAM,GACV,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAUzC;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,CAAC,OAAO,WAAW,CAAC,GAAG,SAAS,CAGxF;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,GAAG,WAAW,CAAC,UAAU,CAAC,CAM5G;AAED,kDAAkD;AAClD,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,CA+BzG"}

package/dist/http/resolve.js

@@ -2,6 +2,7 @@
 // SPDX-License-Identifier: MIT
 import { supportDatabase } from "../data/tables.js";
 import { SUPPORT_R2_SECRET } from "../secret/registry.js";
+import { SUPPORT_VECTORIZE_BINDING, supportMessageIndex } from "../semantic/messageIndex.js";
 import { supportWorkflowRegistry, supportWorkflows } from "../workflows/specs.js";
 import { InternalError } from "@pithy-sh/core/src/error/pithyError";
 import { objectStore } from "@pithy-sh/storage/src/object/store";
@@ -46,6 +47,23 @@ function resolveStore(env) {
 		secretName: SUPPORT_R2_SECRET
 	});
 }
+/**
+* The semantic index and the two bindings it runs on, as this Worker has them.
+*
+* Absent rather than refused: a project that turned `search.semantic` on and has not provisioned yet still
+* serves every route, and the search route names the backend it skipped.
+*/
+function resolveSemantic(env, config) {
+	const index = supportMessageIndex(config.search);
+	if (!index) return {};
+	const ai = env["AI"];
+	const store = env[SUPPORT_VECTORIZE_BINDING];
+	return {
+		index,
+		...ai ? { ai } : {},
+		...store ? { store } : {}
+	};
+}
 /** Build the per-request handler dependencies. */
 function makeResolveDeps(wiring) {
 	return async (c) => {
@@ -59,6 +77,7 @@ function makeResolveDeps(wiring) {
 			categories: wiring.categories,
 			snippets: wiring.snippets,
 			fts: wiring.config.search.fts,
+			semantic: resolveSemantic(env, wiring.config),
 			bucket: env.SUPPORT_BUCKET,
 			store: resolveStore(env),
 			enqueue: wiring.enqueueEmail ? (input) => wiring.enqueueEmail?.(env, input) : void 0,
@@ -72,4 +91,4 @@ function makeResolveDeps(wiring) {
 	};
 }
 //#endregion
-export { makeClassifyDispatcher, makeResolveDeps, resolveDb, resolveStore };
+export { makeClassifyDispatcher, makeResolveDeps, resolveDb, resolveSemantic, resolveStore };