@rubytech/create-maxy-code 0.1.592 → 0.1.594

package/payload/platform/lib/anthropic-key/dist/index.js

@@ -1,232 +0,0 @@
-"use strict";
-/**
- * Centralised Anthropic API key management.
- *
- * Provides read/write/validate operations for the Anthropic API key
- * used by the public agent. All consumers import from this module
- * instead of inlining the env-var-then-file lookup pattern.
- *
- * Follows the same shape as cloudflare/mcp/src/lib/cloudflared.ts
- * (readToken, writeToken, hasToken, validateToken).
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.readKey = readKey;
-exports.writeKey = writeKey;
-exports.hasKey = hasKey;
-exports.deleteKey = deleteKey;
-exports.validateKey = validateKey;
-exports.keyFilePath = keyFilePath;
-const index_js_1 = require("../../models/dist/index.js");
-const node_fs_1 = require("node:fs");
-const node_path_1 = require("node:path");
-const node_os_1 = require("node:os");
-// ---------------------------------------------------------------------------
-// Path resolution — lazy, cached
-//
-// The key file lives at ~/{configDir}/.anthropic-api-key where configDir
-// is read from brand.json. Resolution strategy:
-//   1. PLATFORM_ROOT env var → brand.json → configDir  (MCP servers)
-//   2. MAXY_PLATFORM_ROOT env var → brand.json → configDir  (UI/Next.js)
-//   3. Fall back to .maxy  (dev environment, neither env var set)
-// ---------------------------------------------------------------------------
-let cachedKeyFilePath = null;
-function resolveKeyFilePath() {
-    if (cachedKeyFilePath)
-        return cachedKeyFilePath;
-    let configDirName = ".maxy"; // default for dev
-    const platformRoot = process.env.PLATFORM_ROOT ?? process.env.MAXY_PLATFORM_ROOT;
-    if (platformRoot) {
-        const brandPath = (0, node_path_1.join)(platformRoot, "config", "brand.json");
-        if (!(0, node_fs_1.existsSync)(brandPath)) {
-            throw new Error(`brand.json not found at ${brandPath} — platform not properly installed`);
-        }
-        try {
-            const brand = JSON.parse((0, node_fs_1.readFileSync)(brandPath, "utf-8"));
-            if (!brand.configDir) {
-                throw new Error(`brand.json at ${brandPath} is missing the configDir field`);
-            }
-            configDirName = brand.configDir;
-        }
-        catch (err) {
-            if (err instanceof SyntaxError) {
-                throw new Error(`brand.json at ${brandPath} is not valid JSON: ${err.message}`);
-            }
-            throw err;
-        }
-    }
-    cachedKeyFilePath = (0, node_path_1.resolve)((0, node_os_1.homedir)(), configDirName, ".anthropic-api-key");
-    return cachedKeyFilePath;
-}
-// ---------------------------------------------------------------------------
-// readKey — two-tier lookup: env var → file
-//
-// Returns the key string or null if unavailable. Never throws on
-// missing/unreadable key — callers handle null per their context.
-// ---------------------------------------------------------------------------
-function readKey() {
-    const envKey = process.env.ANTHROPIC_API_KEY;
-    if (envKey && envKey.trim()) {
-        return envKey.trim();
-    }
-    let keyFilePath;
-    try {
-        keyFilePath = resolveKeyFilePath();
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        console.error(`[anthropic-key] path resolution failed: ${msg}`);
-        return null;
-    }
-    if (envKey !== undefined) {
-        // env var was set but empty — log and fall through to file
-        console.error(`[anthropic-key] ANTHROPIC_API_KEY env var is set but empty, falling back to file`);
-    }
-    try {
-        const raw = (0, node_fs_1.readFileSync)(keyFilePath, "utf-8").trim();
-        if (!raw) {
-            console.error(`[anthropic-key] key file exists but is empty: ${keyFilePath}`);
-            return null;
-        }
-        return raw;
-    }
-    catch (err) {
-        const code = err instanceof Error && "code" in err
-            ? err.code
-            : undefined;
-        if (code === "ENOENT") {
-            // File does not exist — expected on fresh installs
-            console.error(`[anthropic-key] no key available (env var unset, file not found: ${keyFilePath})`);
-        }
-        else {
-            const msg = err instanceof Error ? err.message : String(err);
-            console.error(`[anthropic-key] failed to read key file ${keyFilePath}: ${msg}`);
-        }
-        return null;
-    }
-}
-// ---------------------------------------------------------------------------
-// writeKey — validate format and write with restricted permissions
-// ---------------------------------------------------------------------------
-function writeKey(key) {
-    const trimmed = key.trim();
-    if (!trimmed.startsWith("sk-ant-")) {
-        throw new Error("Invalid key format. Must start with sk-ant-.");
-    }
-    if (trimmed.length < 90) {
-        throw new Error("Invalid key format. Must be at least 90 characters.");
-    }
-    const keyFilePath = resolveKeyFilePath();
-    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(keyFilePath), { recursive: true });
-    (0, node_fs_1.writeFileSync)(keyFilePath, trimmed, { mode: 0o600 });
-    console.error(`[anthropic-key] key written to ${keyFilePath}`);
-}
-// ---------------------------------------------------------------------------
-// hasKey — thin check, no validation
-// ---------------------------------------------------------------------------
-function hasKey() {
-    return readKey() !== null;
-}
-// ---------------------------------------------------------------------------
-// deleteKey — remove the stored key file; idempotent on ENOENT
-//
-// Throws on unexpected fs errors (EACCES, EBUSY, EPERM) so callers can
-// surface a structured failure. ENOENT is treated as a no-op because the
-// intended post-condition ("no key file on disk") is already satisfied.
-// Per Task 531 learning, never use `{ force: true }` — it swallows the
-// error classes that matter (permission, busy) and leaves the caller
-// believing removal succeeded.
-// ---------------------------------------------------------------------------
-function deleteKey() {
-    const keyFilePath = resolveKeyFilePath();
-    try {
-        (0, node_fs_1.unlinkSync)(keyFilePath);
-        console.error(`[anthropic-key] deleteKey: removed ${keyFilePath}`);
-    }
-    catch (err) {
-        const code = err instanceof Error && "code" in err
-            ? err.code
-            : undefined;
-        if (code === "ENOENT") {
-            console.error(`[anthropic-key] deleteKey: nothing to remove (ENOENT): ${keyFilePath}`);
-            return;
-        }
-        const msg = err instanceof Error ? err.message : String(err);
-        console.error(`[anthropic-key] deleteKey: failed to remove ${keyFilePath}: ${msg}`);
-        throw err;
-    }
-}
-async function validateKey(key) {
-    const effectiveKey = key ?? readKey();
-    if (!effectiveKey) {
-        return {
-            status: "missing",
-            message: "No API key available (env var unset, file missing or empty).",
-        };
-    }
-    const start = Date.now();
-    try {
-        const res = await fetch("https://api.anthropic.com/v1/messages", {
-            method: "POST",
-            headers: {
-                "Content-Type": "application/json",
-                "x-api-key": effectiveKey,
-                "anthropic-version": "2023-06-01",
-            },
-            body: JSON.stringify({
-                model: index_js_1.HAIKU_MODEL,
-                max_tokens: 1,
-                messages: [{ role: "user", content: "hi" }],
-            }),
-            signal: AbortSignal.timeout(10000),
-        });
-        const latency = Date.now() - start;
-        if (res.ok || res.status === 429) {
-            // Consume the response body to release the connection back to the pool.
-            await res.text();
-            console.error(`[anthropic-key] validate: valid (${res.status}, ${latency}ms)`);
-            return {
-                status: "valid",
-                message: "API key is working. Credits available.",
-            };
-        }
-        const body = await res.text();
-        if (/credit balance|billing|purchase credits/i.test(body)) {
-            console.error(`[anthropic-key] validate: billing (${res.status}, ${latency}ms)`);
-            return {
-                status: "billing",
-                message: "API key is valid but credit balance is too low. The user must add credits at console.anthropic.com under Plans & Billing, or enable auto-top-up.",
-            };
-        }
-        if (res.status === 401 ||
-            res.status === 403 ||
-            /authentication_error|permission_error/i.test(body)) {
-            console.error(`[anthropic-key] validate: auth_error (${res.status}, ${latency}ms)`);
-            return {
-                status: "auth_error",
-                message: "API key was rejected. It may be invalid, revoked, or expired. The user should create a new key at console.anthropic.com/settings/keys.",
-            };
-        }
-        console.error(`[anthropic-key] validate: error (${res.status}, ${latency}ms)`);
-        return {
-            status: "error",
-            message: `Could not verify API key. Anthropic returned ${res.status}. This may be a temporary outage — try again later.`,
-        };
-    }
-    catch (err) {
-        const latency = Date.now() - start;
-        const msg = err instanceof Error ? err.message : String(err);
-        console.error(`[anthropic-key] validate: error (network failure, ${latency}ms): ${msg}`);
-        return {
-            status: "error",
-            message: `Could not reach the Anthropic API: ${msg}. Check network connectivity.`,
-        };
-    }
-}
-// ---------------------------------------------------------------------------
-// keyFilePath — expose the resolved path for callers that need it
-// (e.g., existsSync checks, user-facing messages about the key location)
-// ---------------------------------------------------------------------------
-function keyFilePath() {
-    return resolveKeyFilePath();
-}
-//# sourceMappingURL=index.js.map

package/payload/platform/lib/anthropic-key/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;AAoEH,0BAiDC;AAMD,4BAiBC;AAMD,wBAEC;AAaD,8BAsBC;AAiBD,kCAsFC;AAOD,kCAEC;AArSD,yDAAyD;AACzD,qCAMiB;AACjB,yCAAmD;AACnD,qCAAkC;AAElC,8EAA8E;AAC9E,iCAAiC;AACjC,EAAE;AACF,yEAAyE;AACzE,gDAAgD;AAChD,qEAAqE;AACrE,yEAAyE;AACzE,kEAAkE;AAClE,8EAA8E;AAE9E,IAAI,iBAAiB,GAAkB,IAAI,CAAC;AAE5C,SAAS,kBAAkB;IACzB,IAAI,iBAAiB;QAAE,OAAO,iBAAiB,CAAC;IAEhD,IAAI,aAAa,GAAG,OAAO,CAAC,CAAC,kBAAkB;IAC/C,MAAM,YAAY,GAChB,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAE9D,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAA,oBAAU,EAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,2BAA2B,SAAS,oCAAoC,CACzE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,iBAAiB,SAAS,iCAAiC,CAC5D,CAAC;YACJ,CAAC;YACD,aAAa,GAAG,KAAK,CAAC,SAAS,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,iBAAiB,SAAS,uBAAuB,GAAG,CAAC,OAAO,EAAE,CAC/D,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,iBAAiB,GAAG,IAAA,mBAAO,EAAC,IAAA,iBAAO,GAAE,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAC5E,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,8EAA8E;AAC9E,4CAA4C;AAC5C,EAAE;AACF,iEAAiE;AACjE,kEAAkE;AAClE,8EAA8E;AAE9E,SAAgB,OAAO;IACrB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC7C,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,kBAAkB,EAAE,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,2CAA2C,GAAG,EAAE,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,2DAA2D;QAC3D,OAAO,CAAC,KAAK,CACX,kFAAkF,CACnF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,KAAK,CACX,iDAAiD,WAAW,EAAE,CAC/D,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,IAAI,GACR,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG;YACnC,CAAC,CAAE,GAA6B,CAAC,IAAI;YACrC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,mDAAmD;YACnD,OAAO,CAAC,KAAK,CACX,oEAAoE,WAAW,GAAG,CACnF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CACX,2CAA2C,WAAW,KAAK,GAAG,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E,SAAgB,QAAQ,CAAC,GAAW;IAClC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,qDAAqD,CACtD,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;IACzC,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,IAAA,uBAAa,EAAC,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,CAAC,kCAAkC,WAAW,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,8EAA8E;AAC9E,qCAAqC;AACrC,8EAA8E;AAE9E,SAAgB,MAAM;IACpB,OAAO,OAAO,EAAE,KAAK,IAAI,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAC9E,+DAA+D;AAC/D,EAAE;AACF,uEAAuE;AACvE,yEAAyE;AACzE,wEAAwE;AACxE,uEAAuE;AACvE,qEAAqE;AACrE,+BAA+B;AAC/B,8EAA8E;AAE9E,SAAgB,SAAS;IACvB,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,IAAA,oBAAU,EAAC,WAAW,CAAC,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,sCAAsC,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,IAAI,GACR,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG;YACnC,CAAC,CAAE,GAA6B,CAAC,IAAI;YACrC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CACX,0DAA0D,WAAW,EAAE,CACxE,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CACX,+CAA+C,WAAW,KAAK,GAAG,EAAE,CACrE,CAAC;QACF,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAiBM,KAAK,UAAU,WAAW,CAAC,GAAY;IAC5C,MAAM,YAAY,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;IACtC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,8DAA8D;SACxE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,uCAAuC,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,YAAY;gBACzB,mBAAmB,EAAE,YAAY;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,sBAAW;gBAClB,UAAU,EAAE,CAAC;gBACb,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;aAC5C,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAEnC,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACjC,wEAAwE;YACxE,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CACX,oCAAoC,GAAG,CAAC,MAAM,KAAK,OAAO,KAAK,CAChE,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,wCAAwC;aAClD,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAE9B,IAAI,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,KAAK,CACX,sCAAsC,GAAG,CAAC,MAAM,KAAK,OAAO,KAAK,CAClE,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,OAAO,EACL,kJAAkJ;aACrJ,CAAC;QACJ,CAAC;QAED,IACE,GAAG,CAAC,MAAM,KAAK,GAAG;YAClB,GAAG,CAAC,MAAM,KAAK,GAAG;YAClB,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,EACnD,CAAC;YACD,OAAO,CAAC,KAAK,CACX,yCAAyC,GAAG,CAAC,MAAM,KAAK,OAAO,KAAK,CACrE,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,YAAY;gBACpB,OAAO,EACL,wIAAwI;aAC3I,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,KAAK,CACX,oCAAoC,GAAG,CAAC,MAAM,KAAK,OAAO,KAAK,CAChE,CAAC;QACF,OAAO;YACL,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,gDAAgD,GAAG,CAAC,MAAM,qDAAqD;SACzH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACnC,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CACX,qDAAqD,OAAO,QAAQ,GAAG,EAAE,CAC1E,CAAC;QACF,OAAO;YACL,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,sCAAsC,GAAG,+BAA+B;SAClF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,kEAAkE;AAClE,yEAAyE;AACzE,8EAA8E;AAE9E,SAAgB,WAAW;IACzB,OAAO,kBAAkB,EAAE,CAAC;AAC9B,CAAC"}

package/payload/platform/lib/graph-search/dist/query-expansion.d.ts

@@ -1,37 +0,0 @@
-/**
- * Multi-query expansion via Haiku (Task 308).
- *
- * Generates 3-5 paraphrases of the user query so the hybrid pipeline runs
- * each paraphrase against vector + BM25 in parallel and unions the
- * candidate sets before fusion. Recovers recall on terse queries where the
- * embedding's nearest-neighbour is unstable.
- *
- * The expansion runs through `@rubytech/oauth-llm` against Claude Haiku —
- * the same OAuth-bearer path the admin classifiers use; no new SDK
- * dependency and no Anthropic-API-key path. Cache is in-process, keyed by
- * (accountId, normalisedQuery, retrievalClass), with a 1-hour TTL.
- *
- * Graceful degrade: if the LLM call fails, returns just the original
- * query. The caller's hybrid pipeline still runs — just on one query
- * instead of N — so missing paraphrases are a recall regression, not a
- * fault.
- */
-export declare function clearExpansionCache(): void;
-export interface ExpandQueryParams {
-    query: string;
-    retrievalClass?: string;
-    accountId?: string;
-    /**
-     * Override the cache or skip it entirely (useful in tests). When
-     * `false`, the cache is read but never written; when `true` (default),
-     * both reads and writes are active.
-     */
-    useCache?: boolean;
-}
-/**
- * Return `[query, ...paraphrases]` (original always first). On LLM
- * failure returns `[query]` only and writes a single stderr line so the
- * operator can see expansion is degrading without breaking search.
- */
-export declare function expandQuery(params: ExpandQueryParams): Promise<string[]>;
-//# sourceMappingURL=query-expansion.d.ts.map

package/payload/platform/lib/graph-search/dist/query-expansion.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"query-expansion.d.ts","sourceRoot":"","sources":["../src/query-expansion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAeH,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,MAAM,EAAE,CAAC,CAyEnB"}

package/payload/platform/lib/graph-search/dist/query-expansion.js

@@ -1,101 +0,0 @@
-"use strict";
-/**
- * Multi-query expansion via Haiku (Task 308).
- *
- * Generates 3-5 paraphrases of the user query so the hybrid pipeline runs
- * each paraphrase against vector + BM25 in parallel and unions the
- * candidate sets before fusion. Recovers recall on terse queries where the
- * embedding's nearest-neighbour is unstable.
- *
- * The expansion runs through `@rubytech/oauth-llm` against Claude Haiku —
- * the same OAuth-bearer path the admin classifiers use; no new SDK
- * dependency and no Anthropic-API-key path. Cache is in-process, keyed by
- * (accountId, normalisedQuery, retrievalClass), with a 1-hour TTL.
- *
- * Graceful degrade: if the LLM call fails, returns just the original
- * query. The caller's hybrid pipeline still runs — just on one query
- * instead of N — so missing paraphrases are a recall regression, not a
- * fault.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.clearExpansionCache = clearExpansionCache;
-exports.expandQuery = expandQuery;
-const index_js_1 = require("../../oauth-llm/dist/index.js");
-const CACHE_TTL_MS = 60 * 60 * 1000;
-const HAIKU_MODEL = "claude-haiku-4-5";
-const MAX_PARAPHRASES = 5;
-const cache = new Map();
-function clearExpansionCache() {
-    cache.clear();
-}
-/**
- * Return `[query, ...paraphrases]` (original always first). On LLM
- * failure returns `[query]` only and writes a single stderr line so the
- * operator can see expansion is degrading without breaking search.
- */
-async function expandQuery(params) {
-    const { query, retrievalClass = "general", accountId = "", useCache = true } = params;
-    const normalised = query.trim().toLowerCase();
-    const cacheKey = `${accountId}::${retrievalClass}::${normalised}`;
-    if (useCache) {
-        const hit = cache.get(cacheKey);
-        if (hit && hit.expiresAt > Date.now()) {
-            return [query, ...hit.expansions];
-        }
-    }
-    const systemPrompt = [
-        "You generate paraphrases of a user query for hybrid graph search.",
-        "Return 3-5 alternative phrasings that preserve the user's intent but vary the surface form (synonyms, word order, entity-vs-attribute framing).",
-        "Do not change the entity names. Do not invent constraints the user did not state.",
-        "Output ONLY a JSON object via the provided tool; never free text.",
-    ].join("\n");
-    const classHint = retrievalClass === "general"
-        ? ""
-        : `The retrieval class is '${retrievalClass}' — tailor paraphrases accordingly.`;
-    const userMessage = [
-        `Original query: ${query}`,
-        classHint,
-    ].filter((s) => s.length > 0).join("\n");
-    const result = await (0, index_js_1.callOauthLlm)({
-        model: HAIKU_MODEL,
-        system: systemPrompt,
-        userMessage,
-        maxTokens: 512,
-        timeoutMs: 15_000,
-        tools: [
-            {
-                name: "emit_paraphrases",
-                description: "Emit 3-5 paraphrases of the user query.",
-                input_schema: {
-                    type: "object",
-                    properties: {
-                        paraphrases: {
-                            type: "array",
-                            items: { type: "string" },
-                            minItems: 3,
-                            maxItems: MAX_PARAPHRASES,
-                        },
-                    },
-                    required: ["paraphrases"],
-                },
-            },
-        ],
-        toolChoiceName: "emit_paraphrases",
-    });
-    if (result.kind !== "ok-tool") {
-        process.stderr.write(`[graph-search:expansion-failed] cause=${result.kind === "fallback" ? result.cause : "unexpected"} query=${query.slice(0, 60).replace(/\s+/g, " ")}\n`);
-        return [query];
-    }
-    const raw = result.input.paraphrases;
-    if (!Array.isArray(raw))
-        return [query];
-    const expansions = raw
-        .filter((p) => typeof p === "string" && p.trim().length > 0)
-        .map((p) => p.trim())
-        .slice(0, MAX_PARAPHRASES);
-    if (useCache) {
-        cache.set(cacheKey, { expansions, expiresAt: Date.now() + CACHE_TTL_MS });
-    }
-    return [query, ...expansions];
-}
-//# sourceMappingURL=query-expansion.js.map

package/payload/platform/lib/graph-search/dist/query-expansion.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"query-expansion.js","sourceRoot":"","sources":["../src/query-expansion.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;AAeH,kDAEC;AAmBD,kCA2EC;AA7GD,4DAA6D;AAE7D,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACpC,MAAM,WAAW,GAAG,kBAAkB,CAAC;AACvC,MAAM,eAAe,GAAG,CAAC,CAAC;AAO1B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;AAE5C,SAAgB,mBAAmB;IACjC,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAcD;;;;GAIG;AACI,KAAK,UAAU,WAAW,CAC/B,MAAyB;IAEzB,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,SAAS,EAAE,SAAS,GAAG,EAAE,EAAE,QAAQ,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IACtF,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,GAAG,SAAS,KAAK,cAAc,KAAK,UAAU,EAAE,CAAC;IAElE,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG;QACnB,mEAAmE;QACnE,iJAAiJ;QACjJ,mFAAmF;QACnF,mEAAmE;KACpE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,SAAS,GAAG,cAAc,KAAK,SAAS;QAC5C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,2BAA2B,cAAc,qCAAqC,CAAC;IACnF,MAAM,WAAW,GAAG;QAClB,mBAAmB,KAAK,EAAE;QAC1B,SAAS;KACV,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEzC,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAY,EAAC;QAChC,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,YAAY;QACpB,WAAW;QACX,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,MAAM;QACjB,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,kBAAkB;gBACxB,WAAW,EAAE,yCAAyC;gBACtD,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,WAAW,EAAE;4BACX,IAAI,EAAE,OAAO;4BACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACzB,QAAQ,EAAE,CAAC;4BACX,QAAQ,EAAE,eAAe;yBAC1B;qBACF;oBACD,QAAQ,EAAE,CAAC,aAAa,CAAC;iBAC1B;aACF;SACF;QACD,cAAc,EAAE,kBAAkB;KACnC,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yCAAyC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,UAAU,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CACvJ,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,GAAG,GAAI,MAAM,CAAC,KAAmC,CAAC,WAAW,CAAC;IACpE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,GAAG;SACnB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SACxE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAE7B,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,CAAC,KAAK,EAAE,GAAG,UAAU,CAAC,CAAC;AAChC,CAAC"}

package/payload/platform/lib/oauth-llm/dist/index.d.ts

@@ -1,116 +0,0 @@
-/**
- * OAuth-bearer LLM calls for admin-side classifiers.
- *
- * Every admin-side classifier (memory-classify, memory-rank, commitment,
- * inbound-gateway, query classifier, summarisation, email
- * screening) uses Claude Code OAuth credentials — never the Anthropic
- * API key. The API-key path is reserved for the public agent.
- *
- * Mechanism: read the access token from ~/.claude/.credentials.json,
- * refresh it via the standard refresh-token grant if expired, then call
- * api.anthropic.com with `Authorization: Bearer <token>` and the
- * `anthropic-beta: oauth-2025-04-20` header. Billed against the operator's
- * Claude Code subscription, not the API-key key. Refresh uses a
- * module-level mutex so concurrent classifier calls during expiry don't
- * race and invalidate each other's tokens (Anthropic rotates both tokens
- * on refresh).
- *
- * Implementation note: this lib uses raw fetch() so the maxy-code tree
- * carries no Anthropic SDK dependency at all. The Messages API surface
- * we use (model + system + one user message + max_tokens) is small and
- * stable.
- *
- * Failure modes are surfaced as a structured `Result` so callers can
- * pattern-match without parsing error strings. The skill / agent layer
- * is responsible for translating `fallback` results into operator-visible
- * blocker messages (loud failure doctrine).
- */
-declare const OAUTH_BETA_HEADER = "oauth-2025-04-20";
-/** Anthropic tool definition — structural-output enforcement via function calling. */
-export interface OauthLlmTool {
-    name: string;
-    description: string;
-    input_schema: Record<string, unknown>;
-}
-export interface CallOauthLlmParams {
-    /** Anthropic model id (e.g. claude-haiku-4-5). */
-    model: string;
-    /** System prompt — the classifier instructions. */
-    system: string;
-    /** User message — the input to classify / rank / etc. */
-    userMessage: string;
-    /** Max output tokens. Default 4096. */
-    maxTokens?: number;
-    /**
-     * Hard timeout in ms for the model call. Default 60_000.
-     *
-     * 60s fits short admin classifiers (commitment, query,
-     * inbound-gateway, screening, summary — all <2K input, <500 output).
-     * Long-output callers MUST override per-call: `memory-classify` runs at
-     * 8K maxTokens against documents up to 20K chars and has been observed
-     * at 56s p99 on Haiku 4.5, so it passes `timeoutMs: 180_000`.
-     * Do not raise this default — short classifiers rely on the 60s safety
-     * net to surface transient stalls instead of disguising them as latency.
-     */
-    timeoutMs?: number;
-    /**
-     * Optional tools for structured output. When provided with a forced
-     * `toolChoiceName`, the model returns a `tool_use` block whose `input` is
-     * a structured object matching the tool's `input_schema` — strictly typed
-     * JSON without the parsing brittleness of free-form text output.
-     */
-    tools?: OauthLlmTool[];
-    /** Force the model to call this tool. Required when `tools` is provided. */
-    toolChoiceName?: string;
-}
-/** Result when the call did not declare any tool — only text or fallback.
- *  `stopReason` and `outputTokens` are exposed so callers can
- *  distinguish a `max_tokens`-truncated response (which can produce a
- *  one-sided fence) from a clean `end_turn`. */
-export type CallOauthLlmTextResult = {
-    kind: "ok";
-    text: string;
-    stopReason?: string;
-    outputTokens?: number;
-} | CallOauthLlmFallback;
-/** Result when the call forced a tool — only the tool input or fallback. */
-export type CallOauthLlmToolResult = {
-    kind: "ok-tool";
-    toolName: string;
-    input: Record<string, unknown>;
-    stopReason?: string;
-    outputTokens?: number;
-} | CallOauthLlmFallback;
-/** Discriminated union of every possible result. Returned by the no-overload form. */
-export type CallOauthLlmResult = CallOauthLlmTextResult | CallOauthLlmToolResult;
-export interface CallOauthLlmFallback {
-    kind: "fallback";
-    /** Human-readable single-line reason (for operator-visible blocker). */
-    reason: string;
-    /** Stable classifier — callers can pattern-match for retry/abort policy. */
-    cause: "missing-creds" | "dead-token" | "refresh-failed" | "auth-error" | "rate-limit" | "server-error" | "network-error" | "timeout" | "empty-response" | "malformed-response" | "input-too-large" | "unexpected";
-}
-/**
- * Call an Anthropic model via OAuth bearer auth.
- *
- * Returns:
- *   { kind: "ok", text }                   — model's text response
- *   { kind: "ok-tool", toolName, input }   — when `tools` + `toolChoiceName` provided
- *   { kind: "fallback", reason, cause }    — caller decides whether to abort
- *
- * The caller is responsible for translating fallback results into
- * operator-visible blocker messages — this wrapper never silently
- * substitutes a degraded response.
- *
- * Overloads narrow the return type by call shape: text-only callers (no
- * `tools`) statically rule out `ok-tool`; tool callers statically rule out
- * `ok`. Mixed callers get the full union.
- */
-export declare function callOauthLlm(params: Omit<CallOauthLlmParams, "tools" | "toolChoiceName">): Promise<CallOauthLlmTextResult>;
-export declare function callOauthLlm(params: CallOauthLlmParams & {
-    tools: OauthLlmTool[];
-    toolChoiceName: string;
-}): Promise<CallOauthLlmToolResult>;
-export declare function callOauthLlm(params: CallOauthLlmParams): Promise<CallOauthLlmResult>;
-export { OAUTH_BETA_HEADER };
-//# sourceMappingURL=index.d.ts.map

package/payload/platform/lib/oauth-llm/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AA0BH,QAAA,MAAM,iBAAiB,qBAAqB,CAAC;AAe7C,sFAAsF;AACtF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;gDAGgD;AAChD,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACxE,oBAAoB,CAAC;AAEzB,4EAA4E;AAC5E,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACjH,oBAAoB,CAAC;AAEzB,sFAAsF;AACtF,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,GAAG,sBAAsB,CAAC;AAEjF,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,UAAU,CAAC;IACjB,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,KAAK,EACD,eAAe,GACf,YAAY,GACZ,gBAAgB,GAChB,YAAY,GACZ,YAAY,GACZ,cAAc,GACd,eAAe,GACf,SAAS,GACT,gBAAgB,GAChB,oBAAoB,GACpB,iBAAiB,GACjB,YAAY,CAAC;CAClB;AA8OD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,OAAO,GAAG,gBAAgB,CAAC,GAC3D,OAAO,CAAC,sBAAsB,CAAC,CAAC;AACnC,wBAAgB,YAAY,CAC1B,MAAM,EAAE,kBAAkB,GAAG;IAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC7E,OAAO,CAAC,sBAAsB,CAAC,CAAC;AACnC,wBAAgB,YAAY,CAC1B,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAoL/B,OAAO,EAAE,iBAAiB,EAAE,CAAC"}