@promptev/context-engine 0.0.0

package/dist/skills/context-engine/SKILL.md

@@ -0,0 +1,160 @@
+---
+name: context-engine
+description: Use when writing code against the @promptev/context-engine library — retrieval, ACLs/principals, ingestion, redaction, governed tools, or mounting its HTTP/MCP surfaces. Covers the access-control semantics that cause silent data leaks when guessed.
+---
+
+# context-engine (JavaScript / TypeScript)
+
+Governed retrieval over your own Postgres. Access control is enforced inside
+the SQL predicate of every retrieval leg, before ranking — not applied to
+results afterwards.
+
+Import `@promptev/context-engine`. Full guide: https://promptev.ai/documentation/context-engine/
+
+## The one that leaks data
+
+`principals` is a **trichotomy**, and the dangerous value is the one that
+looks like an absence:
+
+| value | meaning |
+|---|---|
+| `principals=TRUSTED` | Trusted caller — ACL filtering is **DISABLED**. Returns everything. Import it: `import { TRUSTED } from "@promptev/context-engine"`. |
+| `principals=[]` | Anonymous — matches only documents with no ACL. |
+| `principals=["group:hr", ...]` | Matches unrestricted documents plus any whose ACL overlaps the list. |
+| `principals=null` | **DEPRECATED.** Same as `TRUSTED` today, warns, and raises in 1.0. |
+
+**Never pass `null` because a request had no authenticated user.** That is the
+opposite of what it means and it returns the entire corpus. Unauthenticated
+means `[]`.
+
+```ts
+// WRONG — leaks every document to an anonymous caller
+const principals = user ? user.groups : null;
+
+// RIGHT
+const principals = user ? user.groups : [];
+```
+
+The reason `null` is being retired: it is falsy, so it is what every accessor
+degrades to — `user.groups || null`, a missing dict key, `user ? user.groups : null`.
+The unauthenticated path silently became the maximum-privilege path. `TRUSTED`
+cannot be produced by a null-coalesce; reaching it requires typing it.
+
+Use `TRUSTED` for genuinely trusted in-process callers — a backfill script, an
+admin job — never for anything derived from a request.
+
+```ts
+import { TRUSTED } from "@promptev/context-engine";
+
+await engine.search(q, { principals: TRUSTED });   // explicit: skip ACL
+await engine.search(q, { principals: [] });        // anonymous
+await engine.search(q, { principals: user.groups }); // scoped
+```
+
+## Rules that prevent the other silent failures
+
+- **Never read `principals` from a request body or query string.** On remote
+  surfaces they are injection-only: derive them server-side from the
+  authenticated session. A caller who can name their own principals has no
+  access control.
+- **`auth` and `principals` are REQUIRED** on `createHonoRouter`,
+  `createExpressRouter`, `createFastifyPlugin` and `createMcpApp`. There is
+  no default. If you hit a `TypeError`, supply real ones — do **not** silence
+  it with `principals: () => null`, which disables access control on a public
+  port. Anonymous is `() => []`. Trusted is `() => TRUSTED`.
+- **`acl=null` on `updateDocument` UNRESTRICTS the document.** "Leave it
+  alone" is expressed by omitting the argument (the `UNSET` sentinel), because
+  `null` already means unrestricted and cannot also mean absent. Same for
+  `metaData`, which merges rather than replaces.
+- **Requires pgvector 0.8 or newer.** Below that, ACL-filtered vector search
+  silently loses recall — queries return fewer rows than match, or none, with
+  no error. The library cannot compensate.
+- **`config.enableCodeExecution` is `false` on purpose.** `engine.compute()`
+  executes generated code. Turn it on only deliberately.
+- Filing a document under an ACL the caller does not hold returns **403**, on
+  ingest and on PATCH alike.
+
+## Search
+
+```ts
+const result = await engine.search("how much annual leave do I get", {
+  principals: ["group:hr"],     // from the session, never the request body
+  sourceIds: ["hr-handbook"],   // optional scope
+  topK: 8,
+});
+for (const hit of result.hits) {
+  console.log(hit.chunkText, hit.meta);
+}
+```
+
+Hybrid full-text + trigram + vector, fused with RRF. `mode: "graph"` switches
+to the graph leg when the graph subsystem is configured.
+
+## Ingest
+
+```ts
+const report = await engine.ingest({
+  content: fs.readFileSync("handbook.pdf"),
+  filename: "handbook.pdf",
+  sourceId: "hr-handbook",
+  acl: ["group:hr"],            // omit for an unrestricted document
+});
+```
+
+Accepts `file`, `content` + `filename`, or `text`. Re-ingesting identical
+content is deduplicated by hash; ACL changes on re-ingest are applied.
+
+## Mounting the HTTP surface
+
+Framework adapters live on **subpath exports**, not the main package entry
+(so `import "@promptev/context-engine"` never pulls Hono/Express/Fastify):
+
+```ts
+import { createHonoRouter } from "@promptev/context-engine/hono";
+import { TRUSTED } from "@promptev/context-engine";
+
+app.route(
+  "/context",
+  createHonoRouter(engine, {
+    auth: async (c) => { /* raise / return 401 on anonymous */ },
+    principals: (c) => c.get("user")?.groups ?? [],
+  }),
+);
+```
+
+`createExpressRouter` (`@promptev/context-engine/express`),
+`createFastifyPlugin` (`@promptev/context-engine/fastify`) and
+`createMcpApp` (`@promptev/context-engine/mcp`) take the same two
+arguments. MCP has no request object: `principals` is a zero-argument
+callable resolved fresh on every tool call. The CLI `context-engine mcp`
+binds `127.0.0.1` and answers as anonymous (`principals=[]`).
+
+Not on a supported framework? Call `engine.search()` / `engine.ingest()`
+from your own handler — the routers are thin wrappers over the same core.
+
+## Lifecycle
+
+Construction is lazy; close the engine to tear down only what was built. A
+process-lifetime singleton can skip it, but anything that builds engines
+repeatedly (worker per job, test per case) must close them or it accumulates
+connection pools.
+
+## Redaction
+
+Rules with `applyAt: "ingest"` run **before chunks are embedded**, so masked
+text is what reaches the embedding provider. `applyAt: "output"` masks on the
+way out and leaves stored text intact. Use `unless: [...]` to let named
+principals see through a rule.
+
+Presidio NER is an HTTP adapter (`@promptev/context-engine/presidio`): set
+`CE_PRESIDIO_URL` or `PRESIDIO_URL` to a Presidio Analyzer endpoint.
+
+## Don't
+
+- Don't add a `WHERE` clause of your own on top of a retrieval call to filter
+  by tenant — pass `principals`/`sourceIds` and let it go into the indexed
+  predicate. Filtering after the fact is what loses recall.
+- Don't cache a `SearchResult` across users. Results are ACL-scoped to the
+  caller who requested them.
+- Don't expect `engine.search()` to enforce anything about *writes*; ingest
+  and PATCH authorisation is separate and already handled.

package/package.json

@@ -0,0 +1,184 @@
+{
+  "name": "@promptev/context-engine",
+  "version": "0.0.0",
+  "description": "Promptev Context Engine — language-agnostic ingestion + hybrid retrieval (TypeScript)",
+  "license": "Apache-2.0",
+  "author": "Promptev Inc",
+  "homepage": "https://promptev.ai/documentation/context-engine/",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/promptev/context-engine.git",
+    "directory": "js"
+  },
+  "bugs": {
+    "url": "https://github.com/promptev/context-engine/issues"
+  },
+  "keywords": [
+    "rag",
+    "retrieval",
+    "hybrid-search",
+    "graph-rag",
+    "vector-search",
+    "embeddings",
+    "llm",
+    "pii-redaction",
+    "mcp"
+  ],
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "context-engine": "dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./hono": {
+      "types": "./dist/hono.d.ts",
+      "import": "./dist/hono.js",
+      "require": "./dist/hono.cjs"
+    },
+    "./express": {
+      "types": "./dist/express.d.ts",
+      "import": "./dist/express.js",
+      "require": "./dist/express.cjs"
+    },
+    "./fastify": {
+      "types": "./dist/fastify.d.ts",
+      "import": "./dist/fastify.js",
+      "require": "./dist/fastify.cjs"
+    },
+    "./mcp": {
+      "types": "./dist/mcp.d.ts",
+      "import": "./dist/mcp.js",
+      "require": "./dist/mcp.cjs"
+    },
+    "./graph": {
+      "types": "./dist/graph/index.d.ts",
+      "import": "./dist/graph/index.js",
+      "require": "./dist/graph/index.cjs"
+    },
+    "./presidio": {
+      "types": "./dist/redaction-presidio.d.ts",
+      "import": "./dist/redaction-presidio.js",
+      "require": "./dist/redaction-presidio.cjs"
+    }
+  },
+  "files": [
+    "dist",
+    "src/migrations/sql",
+    "src/skills",
+    "LICENSE.md",
+    "NOTICE"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "lint": "biome check src tests",
+    "lint:fix": "biome check --write src tests",
+    "context-engine": "node dist/cli.js"
+  },
+  "dependencies": {
+    "cheerio": "^1.1.0",
+    "commander": "^14.0.0",
+    "exceljs": "^4.4.0",
+    "franc": "^6.2.0",
+    "js-tiktoken": "^1.0.21",
+    "jsonrepair": "^3.13.0",
+    "jszip": "^3.10.1",
+    "mammoth": "^1.9.1",
+    "openai": "^5.12.0",
+    "postal-mime": "^2.4.4",
+    "unpdf": "^1.1.0",
+    "zod": "^3.25.0"
+  },
+  "peerDependencies": {
+    "@aws-sdk/client-bedrock-runtime": "^3.800.0",
+    "@fastify/multipart": "^9.0.0",
+    "@google/genai": "^1.24.0",
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "danfojs-node": "^1.1.2",
+    "express": "^5.1.0",
+    "fastify": "^5.3.0",
+    "graphology": "^0.25.4",
+    "graphology-communities-louvain": "^2.0.1",
+    "hono": "^4.7.0",
+    "isolated-vm": "^5.0.0",
+    "neo4j-driver": "^5.28.0",
+    "pdfjs-dist": "^5.3.0",
+    "pg": "^8.16.0",
+    "sharp": "^0.34.0",
+    "tesseract.js": "^6.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@aws-sdk/client-bedrock-runtime": {
+      "optional": true
+    },
+    "@fastify/multipart": {
+      "optional": true
+    },
+    "@google/genai": {
+      "optional": true
+    },
+    "@modelcontextprotocol/sdk": {
+      "optional": true
+    },
+    "danfojs-node": {
+      "optional": true
+    },
+    "express": {
+      "optional": true
+    },
+    "fastify": {
+      "optional": true
+    },
+    "graphology": {
+      "optional": true
+    },
+    "graphology-communities-louvain": {
+      "optional": true
+    },
+    "hono": {
+      "optional": true
+    },
+    "isolated-vm": {
+      "optional": true
+    },
+    "neo4j-driver": {
+      "optional": true
+    },
+    "pdfjs-dist": {
+      "optional": true
+    },
+    "pg": {
+      "optional": true
+    },
+    "sharp": {
+      "optional": true
+    },
+    "tesseract.js": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.1.0",
+    "@testcontainers/postgresql": "^11.0.0",
+    "@types/express": "^5.0.0",
+    "@types/node": "^22.16.0",
+    "@types/pg": "^8.15.0",
+    "pg": "^8.23.0",
+    "tsup": "^8.5.0",
+    "typescript": "^5.8.0",
+    "vitest": "^3.2.0"
+  }
+}

package/src/migrations/sql/0001.sql

@@ -0,0 +1,119 @@
+-- 0001_initial — documents, chunks, meta, structured_keys
+-- dim is substituted by the migrator (default 1536)
+
+CREATE EXTENSION IF NOT EXISTS vector;
+CREATE EXTENSION IF NOT EXISTS pg_trgm;
+CREATE EXTENSION IF NOT EXISTS unaccent;
+
+CREATE OR REPLACE FUNCTION immutable_unaccent(text)
+RETURNS text
+LANGUAGE sql
+IMMUTABLE
+STRICT
+PARALLEL SAFE
+AS $fn$
+  SELECT unaccent($1)
+$fn$;
+
+CREATE TABLE context_engine_documents (
+  id UUID PRIMARY KEY,
+  source_id TEXT,
+  external_id TEXT,
+  name TEXT,
+  description TEXT,
+  meta_data JSONB NOT NULL DEFAULT '{}'::jsonb,
+  acl TEXT[],
+  mode TEXT NOT NULL DEFAULT 'hybrid',
+  mime_type TEXT,
+  lang TEXT,
+  text TEXT,
+  text_search TSVECTOR GENERATED ALWAYS AS (
+    to_tsvector('simple'::regconfig,
+      left(coalesce(name,'') || ' ' || coalesce(description,'') || ' ' || coalesce(text,''), 500000))
+  ) STORED,
+  modified_time TIMESTAMPTZ,
+  revision TEXT,
+  ingest_hash BYTEA,
+  status TEXT NOT NULL DEFAULT 'queued',
+  error TEXT,
+  started_at TIMESTAMPTZ,
+  completed_at TIMESTAMPTZ,
+  document_type TEXT,
+  structured_data JSONB,
+  structured_keys TEXT[],
+  structured_quality JSONB,
+  extraction_version TEXT,
+  media_bytes BYTEA,
+  media_size BIGINT,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+CREATE INDEX ix_context_engine_documents_source_id ON context_engine_documents (source_id);
+CREATE INDEX ix_context_engine_documents_status ON context_engine_documents (status);
+CREATE INDEX ix_context_engine_documents_meta_data_gin ON context_engine_documents USING gin (meta_data);
+CREATE INDEX ix_context_engine_documents_text_search ON context_engine_documents USING gin (text_search);
+
+CREATE UNIQUE INDEX ix_context_engine_documents_uniq_source_external
+  ON context_engine_documents (COALESCE(source_id, ''), external_id)
+  WHERE external_id IS NOT NULL;
+
+CREATE UNIQUE INDEX ix_context_engine_documents_uniq_source_name
+  ON context_engine_documents (COALESCE(source_id, ''), name)
+  WHERE external_id IS NULL;
+
+CREATE TABLE context_engine_chunks (
+  id UUID PRIMARY KEY,
+  document_id UUID NOT NULL REFERENCES context_engine_documents(id) ON DELETE CASCADE,
+  source_id TEXT,
+  acl TEXT[],
+  idx INTEGER,
+  text TEXT,
+  meta_data JSONB NOT NULL DEFAULT '{}'::jsonb,
+  text_trgm_norm TEXT GENERATED ALWAYS AS (coalesce(text, '')) STORED,
+  text_search TSVECTOR GENERATED ALWAYS AS (
+    to_tsvector('simple'::regconfig, left(coalesce(text,''), 500000))
+  ) STORED,
+  lang TEXT,
+  embedding vector(__DIM__),
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+CREATE INDEX ix_context_engine_chunks_document_id ON context_engine_chunks (document_id);
+CREATE INDEX ix_context_engine_chunks_source_id ON context_engine_chunks (source_id);
+CREATE INDEX ix_context_engine_chunks_text_search ON context_engine_chunks USING gin (text_search) WHERE text IS NOT NULL;
+CREATE INDEX ix_context_engine_chunks_text_trgm_norm ON context_engine_chunks USING gin (text_trgm_norm gin_trgm_ops) WHERE text IS NOT NULL;
+CREATE INDEX ix_context_engine_chunks_embedding_hnsw ON context_engine_chunks USING hnsw (embedding vector_cosine_ops) WHERE embedding IS NOT NULL;
+
+CREATE TABLE context_engine_meta (
+  id INTEGER PRIMARY KEY,
+  embedding_provider TEXT,
+  embedding_model TEXT,
+  embedding_dim INTEGER,
+  schema_version INTEGER NOT NULL DEFAULT 1,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  CONSTRAINT chk_context_engine_meta_singleton CHECK (id = 1)
+);
+
+CREATE TABLE context_engine_structured_keys (
+  id UUID PRIMARY KEY,
+  source_id TEXT,
+  doc_type TEXT NOT NULL,
+  key_norm TEXT NOT NULL,
+  synonyms TEXT[] NOT NULL DEFAULT '{}',
+  data_type TEXT NOT NULL,
+  example_values TEXT[],
+  frequency INTEGER NOT NULL DEFAULT 1,
+  embedding vector(__DIM__),
+  co_occurrence_fields JSONB NOT NULL DEFAULT '{}'::jsonb,
+  value_stats JSONB NOT NULL DEFAULT '{}'::jsonb,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  CONSTRAINT uq_context_engine_structured_keys_norm UNIQUE (source_id, doc_type, key_norm)
+);
+
+CREATE INDEX ix_context_engine_structured_keys_source_doctype ON context_engine_structured_keys (source_id, doc_type);
+CREATE INDEX ix_context_engine_structured_keys_synonyms_gin ON context_engine_structured_keys USING gin (synonyms);
+CREATE INDEX ix_context_engine_structured_keys_co_occurrence_gin ON context_engine_structured_keys USING gin (co_occurrence_fields);
+CREATE INDEX ix_context_engine_structured_keys_value_stats_gin ON context_engine_structured_keys USING gin (value_stats);
+CREATE INDEX ix_context_engine_structured_keys_embedding_hnsw ON context_engine_structured_keys USING hnsw (embedding vector_cosine_ops) WHERE embedding IS NOT NULL;

package/src/migrations/sql/0002_graph.sql

@@ -0,0 +1,48 @@
+-- 0002_graph — entities, relationships, chunk_entities, communities
+
+CREATE TABLE context_engine_entities (
+  id UUID PRIMARY KEY,
+  name TEXT NOT NULL,
+  normalized_name TEXT NOT NULL,
+  type TEXT NOT NULL,
+  frequency INTEGER NOT NULL DEFAULT 1,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  CONSTRAINT uq_context_engine_entities_normalized_name UNIQUE (normalized_name)
+);
+CREATE INDEX ix_context_engine_entities_type ON context_engine_entities (type);
+
+CREATE TABLE context_engine_entity_relationships (
+  id UUID PRIMARY KEY,
+  source_entity_id UUID NOT NULL REFERENCES context_engine_entities(id) ON DELETE CASCADE,
+  target_entity_id UUID NOT NULL REFERENCES context_engine_entities(id) ON DELETE CASCADE,
+  category TEXT NOT NULL,
+  label TEXT NOT NULL,
+  evidence TEXT,
+  chunk_id UUID REFERENCES context_engine_chunks(id) ON DELETE CASCADE,
+  confidence DOUBLE PRECISION NOT NULL DEFAULT 1.0,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX ix_context_engine_entity_rel_source ON context_engine_entity_relationships (source_entity_id);
+CREATE INDEX ix_context_engine_entity_rel_target ON context_engine_entity_relationships (target_entity_id);
+CREATE INDEX ix_context_engine_entity_rel_category ON context_engine_entity_relationships (category);
+CREATE INDEX ix_context_engine_entity_rel_chunk ON context_engine_entity_relationships (chunk_id);
+
+CREATE TABLE context_engine_chunk_entities (
+  chunk_id UUID NOT NULL REFERENCES context_engine_chunks(id) ON DELETE CASCADE,
+  entity_id UUID NOT NULL REFERENCES context_engine_entities(id) ON DELETE CASCADE,
+  PRIMARY KEY (chunk_id, entity_id)
+);
+CREATE INDEX ix_context_engine_chunk_entities_entity ON context_engine_chunk_entities (entity_id);
+
+CREATE TABLE context_engine_communities (
+  id UUID PRIMARY KEY,
+  level INTEGER NOT NULL DEFAULT 0,
+  entity_ids JSONB NOT NULL DEFAULT '[]'::jsonb,
+  entity_count INTEGER NOT NULL DEFAULT 0,
+  relationship_count INTEGER NOT NULL DEFAULT 0,
+  summary TEXT,
+  embedding vector(__DIM__),
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX ix_context_engine_communities_level ON context_engine_communities (level);

package/src/migrations/sql/0003_tools.sql

@@ -0,0 +1,61 @@
+-- 0003_tools — tools, approvals, calls, oauth pending
+
+CREATE TABLE context_engine_tools (
+  id UUID PRIMARY KEY,
+  name TEXT NOT NULL,
+  kind TEXT NOT NULL,
+  description TEXT NOT NULL DEFAULT '',
+  source_id TEXT,
+  acl TEXT[],
+  config_encrypted TEXT,
+  requires_approval BOOLEAN NOT NULL DEFAULT false,
+  approval_policy JSONB NOT NULL DEFAULT '{}'::jsonb,
+  enabled BOOLEAN NOT NULL DEFAULT true,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX ix_context_engine_tools_source_id ON context_engine_tools (source_id);
+
+CREATE TABLE context_engine_tool_approvals (
+  id UUID PRIMARY KEY,
+  tool_name TEXT NOT NULL,
+  tool_args_frozen JSONB NOT NULL DEFAULT '{}'::jsonb,
+  source_id TEXT,
+  principals JSONB,
+  status TEXT NOT NULL DEFAULT 'pending',
+  approver TEXT,
+  approver_meta JSONB,
+  expires_at TIMESTAMPTZ,
+  resolved_at TIMESTAMPTZ,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX ix_context_engine_tool_approvals_status ON context_engine_tool_approvals (status);
+
+CREATE TABLE context_engine_tool_calls (
+  id UUID PRIMARY KEY,
+  tool_id UUID REFERENCES context_engine_tools(id) ON DELETE SET NULL,
+  tool_name TEXT NOT NULL,
+  kind TEXT NOT NULL,
+  actor_type TEXT,
+  actor_id TEXT,
+  source TEXT,
+  input_args JSONB NOT NULL DEFAULT '{}'::jsonb,
+  output_result JSONB,
+  output_truncated BOOLEAN NOT NULL DEFAULT false,
+  success BOOLEAN,
+  error_message TEXT,
+  duration_ms INTEGER,
+  units INTEGER,
+  approval_id UUID REFERENCES context_engine_tool_approvals(id) ON DELETE SET NULL,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX ix_context_engine_tool_calls_tool_id ON context_engine_tool_calls (tool_id);
+CREATE INDEX ix_context_engine_tool_calls_created_at ON context_engine_tool_calls (created_at);
+
+CREATE TABLE context_engine_oauth_pending (
+  state TEXT PRIMARY KEY,
+  data JSONB NOT NULL,
+  expires_at TIMESTAMPTZ NOT NULL,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX ix_context_engine_oauth_pending_expires_at ON context_engine_oauth_pending (expires_at);

package/src/migrations/sql/0004_acl_indexes.sql

@@ -0,0 +1,4 @@
+-- 0004_acl_indexes
+
+CREATE INDEX ix_context_engine_chunks_acl_gin ON context_engine_chunks USING gin (acl);
+CREATE INDEX ix_context_engine_documents_acl_gin ON context_engine_documents USING gin (acl);