bunnyquery 1.12.1 → 1.14.0

package/dist/engine.cjs

@@ -45,6 +45,134 @@ async function parseAttachmentContent(file, name, mime) {
   return text;
 }
 
+// src/engine/project_settings.ts
+var UPLOAD_ACCESS_GROUPS = ["public", "authorized", "private"];
+var DEFAULT_UPLOAD_ACCESS_GROUP = "authorized";
+var PROJECT_SETTINGS_TABLE = "__SETTINGS__";
+var PROJECT_SETTINGS_UNIQUE_ID = "bq::settings";
+var PROJECT_SETTINGS_ACCESS_GROUP = "public";
+var UPLOAD_ACCESS_LABELS = {
+  public: "Public",
+  authorized: "Signed in users",
+  private: "Only me"
+};
+var UPLOAD_ACCESS_HINTS = {
+  public: "Anyone can ask about this file, including visitors who are not logged in.",
+  authorized: "Only users signed in to this project can ask about this file.",
+  private: "Only you can ask about this file."
+};
+var UPLOAD_ACCESS_OPTIONS = UPLOAD_ACCESS_GROUPS.map((value) => ({
+  value,
+  label: UPLOAD_ACCESS_LABELS[value],
+  hint: UPLOAD_ACCESS_HINTS[value]
+}));
+var DEFAULT_WEB_ACCESS = false;
+function normalizeWebAccess(value) {
+  return value === true;
+}
+function webAccessFrom(data) {
+  return data ? normalizeWebAccess(data.web_access) : DEFAULT_WEB_ACCESS;
+}
+var CHAT_GREETING_MAX_LENGTH = 400;
+function normalizeChatGreeting(value) {
+  if (typeof value !== "string") return "";
+  const trimmed = value.replace(/\r\n?/g, "\n").replace(/\n{3,}/g, "\n\n").trim();
+  return trimmed.slice(0, CHAT_GREETING_MAX_LENGTH);
+}
+function chatGreetingFrom(data) {
+  return normalizeChatGreeting(data?.chat_greeting);
+}
+function normalizeUploadAccessGroup(value) {
+  return UPLOAD_ACCESS_GROUPS.indexOf(value) === -1 ? DEFAULT_UPLOAD_ACCESS_GROUP : value;
+}
+function normalizeProjectAccessSetting(value) {
+  if (value === "ask") return "ask";
+  return UPLOAD_ACCESS_GROUPS.indexOf(value) === -1 ? null : value;
+}
+function accessSettingFrom(data) {
+  return normalizeProjectAccessSetting(data?.upload_access_group);
+}
+function uploadAccessGroupFrom(data) {
+  const v = accessSettingFrom(data);
+  return v && v !== "ask" ? v : DEFAULT_UPLOAD_ACCESS_GROUP;
+}
+function asksUploadAccessFrom(data) {
+  return accessSettingFrom(data) === "ask";
+}
+var reader = null;
+var cache = /* @__PURE__ */ new Map();
+function configureProjectSettings(fn) {
+  reader = fn;
+}
+function entry(service) {
+  let e = cache.get(service);
+  if (!e) {
+    e = { data: null, settled: false, inflight: null };
+    cache.set(service, e);
+  }
+  return e;
+}
+function loadProjectSettings(service) {
+  if (!service) return Promise.resolve(null);
+  const e = entry(service);
+  if (e.settled) return Promise.resolve(e.data);
+  if (e.inflight) return e.inflight;
+  if (!reader) return Promise.resolve(null);
+  const run = reader(service).then((data) => data && typeof data === "object" ? data : null).catch(() => null).then((data) => {
+    const cur = entry(service);
+    if (cur.inflight === run) {
+      cur.data = data;
+      cur.settled = true;
+      cur.inflight = null;
+    }
+    return data;
+  });
+  e.inflight = run;
+  return run;
+}
+function primeProjectSettings(service) {
+  void loadProjectSettings(service);
+}
+function readyProjectSettings(service) {
+  return loadProjectSettings(service);
+}
+function cachedProjectSettings(service) {
+  const e = cache.get(service);
+  return e && e.settled ? e.data : null;
+}
+function projectSettingsSettled(service) {
+  const e = cache.get(service);
+  return !!e && e.settled;
+}
+function projectAccessSetting(service) {
+  return accessSettingFrom(cachedProjectSettings(service));
+}
+function projectUploadAccessGroup(service) {
+  return uploadAccessGroupFrom(cachedProjectSettings(service));
+}
+function projectAsksUploadAccess(service) {
+  return asksUploadAccessFrom(cachedProjectSettings(service));
+}
+function projectChatGreeting(service) {
+  return chatGreetingFrom(cachedProjectSettings(service));
+}
+function projectWebAccess(service) {
+  return webAccessFrom(cachedProjectSettings(service));
+}
+function setProjectSettings(service, data) {
+  if (!service) return;
+  cache.set(service, { data: data || null, settled: true, inflight: null });
+}
+function patchProjectSettings(service, patch) {
+  if (!service) return;
+  const cur = cachedProjectSettings(service) || {};
+  setProjectSettings(service, Object.assign({}, cur, patch));
+}
+function clearProjectSettings(service) {
+  if (service) cache.delete(service);
+  else cache.clear();
+}
+
 // src/engine/config.ts
 var _config = null;
 function configureChatEngine(config) {
@@ -110,6 +238,17 @@ function liveStreamingRealtimeEnabled() {
 function liveStreamingEnabled() {
   return _config?.liveStreaming === true;
 }
+function webAccessEnabled(service) {
+  const opt = _config ? _config.webAccess : void 0;
+  if (typeof opt === "boolean") return opt;
+  return webAccessFrom(service ? cachedProjectSettings(service) : null);
+}
+function resolveWebAccess(service) {
+  const opt = _config ? _config.webAccess : void 0;
+  if (typeof opt === "boolean") return Promise.resolve(opt);
+  if (!service) return Promise.resolve(false);
+  return loadProjectSettings(service).then(webAccessFrom, () => false);
+}
 function streamRecoveryEnabled() {
   if (!_config) return false;
   if (_config.streamRecovery === false) return false;
@@ -357,22 +496,30 @@ function groupAttachmentFailures(attachments) {
 // src/engine/prompts/chat_system_prompt.ts
 function buildChatSystemPrompt(params) {
   const { projectId, serviceName, serviceDescription, greeting, canUpload, client } = params;
+  const webAccess = params.webAccess === true;
   const g = params.indexAccessGroup;
   const indexGroupLiteral = typeof g === "number" ? String(g) : g === "public" || g === "private" || g === "authorized" || g === "admin" ? `"${g}"` : '"authorized"';
+  const groundingRules = `ANSWER ONLY FROM THE DATA. Every fact you state about this project's data - a name, a number, a date, a status, what a document says, whether something exists - must come from one of four places: a tool result returned in THIS conversation, a file or image attached to it (including one you read through its attachment link), the project description at the end of this prompt, or what the user told you themselves in this chat. Your general knowledge, the open internet and a plausible guess are NOT sources. Never use them to answer a question about the user's data, to fill a gap in it, or to complete a record that came back partial. A value that is not in what you retrieved is unknown: say it is not in the data instead of supplying a likely one.
+WHEN THE DATA DOES NOT HAVE IT, SAY SO. Once you have searched the way these rules require and nothing answers the question, tell the user plainly, in their language, that this project's data does not contain it, and say what you searched (the tables, files or terms) so they can tell missing data from a missed search. Do not answer from memory instead, and do not turn a missing answer into a general explanation of the topic. Offer what would let you answer it: ${canUpload === false ? `another name or file to look under, or asking the project's owner to add it` : `the document to upload, or another name or file to look under`}.
+KEEP WHAT THE DATA SAYS APART FROM WHAT YOU WORKED OUT. A total you computed, a comparison, a trend, an interpretation or a recommendation is yours, not the data's: label it as such ("calculated from...", "this suggests...") and name the rows or files it was made from. Never present an estimate, an assumption or an inference as something the data states.
+These three rules govern every claim about the project's data. They do not limit the About BunnyQuery section (answer product questions from it), a greeting, or text the user explicitly asks you to write.`;
+  const documentRules = `DOCUMENTS (a contract, a report, a manual, a letter, any uploaded file the user asks about the content of): FIRST FIND THE FILE, with getFileOutline when you know its storage path, otherwise with getUniqueId using unique_id "src::" and condition "gte" (narrow it by the name the user used). THEN FIND THE PAGE: call searchText with the file's path and the words the user asked about; it returns the file, the page and the matching excerpt. QUOTE THE EXACT TEXT it returned and CITE THE FILE AND THE PAGE ("report.pdf, page 7"); never present a paraphrase as a quote. If searchText answers no_page_text, the file was indexed before page text existed: read it with readFileContent instead, paging with the cursor until END OF FILE, and cite the file. When searchText and the file's records come back empty over files that HAVE page text, say that the data does not have it and name the files and the terms you searched. Never fill the gap from your general knowledge, and never from the web${webAccess ? ` without saying so. WEB ACCESS IS ON for this project: when the user asks for something that is not in the project's data, you may search the web for it, but every such fact must be marked as coming from the web (name the site), kept apart from what the project's data says, and never used to fill in or complete a document's content. This is the one exception to the four sources named above.` : `: this chat has no web tool.`}`;
   let systemPrompt = `
 You are a dedicated assistant for the project ID: "${projectId}".
 Scope: Only answer questions about this project and its data. Do not answer questions about other projects or topics unrelated to this project. When the user refers to "my database", "my data", or "my files", treat those as references to this project's database and file storage. The ONE exception is BunnyQuery itself - what this app is, what it can do, and how to use it - which is always in scope: answer it from the "About BunnyQuery" section at the end of this prompt.
 Knowledge lookup: Before saying you don't know or that something isn't in the chat history, ALWAYS query this project's database through the available MCP tools to look for the answer. The user's data is the source of truth - the chat transcript is not. Only respond with "I don't know" or "I couldn't find that" after you have actually searched the project's data and come back empty.
+${groundingRules}
 NUMBERS FROM A SPREADSHEET: use queryGrid, never mental arithmetic over records. A total, a count, an average, a "how many mention X", a "which one is biggest" - all of those are computed server-side over EVERY row of the file and come back with the sheet, the row count and the row numbers they were made from. Records are a SAMPLE, and a sample added up is a confident wrong number. Quote the row count and the sheet alongside the figure so the reader can check it.
 CALL queryGrid describe FIRST, before any figure. Workbooks routinely state the same money more than once: a detail sheet, then per-song, per-album and per-artist sheets that each re-total it, plus a summary sheet whose bottom row is the file total. Those look like four different answers and are one. describe names which sheets restate which, and which rows are totals. Pick ONE sheet, say which you picked, and never add figures across a sheet and its summary. If the reply carries a warning about restatement, repeat it to the user.
 A FILE TOTAL IS NOT A ROW'S TOTAL. The biggest number on a summary sheet is the whole file, not the thing that was asked about. Before quoting any figure, check it is scoped to what the question named: filter by the column that identifies it and report how many rows matched.
+${documentRules}
 Complete answers over stored data: The database holds one record per spreadsheet row, and each uploaded file becomes many records. ONE file is routinely SPLIT ACROSS SEVERAL TABLES - a summary row in one table, its page or row content in another, its extracted photos and other media in "__MEDIA__", and the indexer often invents a differently-named table on each pass. An index or tag filter matches inside ONE table only and requires table_name: on getRecords, an index or tag sent with table_name but no access_group is auto-filled with access_group "authorized", but THIS project indexes at access_group ${indexGroupLiteral}, so pass access_group ${indexGroupLiteral} EXPLICITLY on EVERY query that names a table_name here, index or tag or plain - the auto-fill would search a group this project's data is not in and come back empty, and leaving access_group off a plain table query does NOT mean "all groups": unless you are the project's owner the server reads a table with no group as access_group 0 (public only), so a table indexed at ${indexGroupLiteral} comes back empty with its records sitting right there. Files uploaded before the project's setting changed may sit at another group, so when a scoped query comes back empty, retry it across the other groups (0, 1, "private") before concluding there is nothing, while an index or tag WITHOUT table_name FAILS with an error instead of answering, so read the error rather than guessing. Reference is the exception: reference ALONE spans EVERY table and EVERY access group, so getRecords with reference "src::<the file's storage path>" is the one call that returns a whole file's records wherever the indexer put them. Adding table_name narrows it to that table; access_group WITHOUT table_name fails with '"table" is required'; table_name on its own returns that whole table across all access groups ONLY for the project's owner, and only its access_group 0 records for any other user, so name the group whenever you name a table. For anything NOT scoped to a single file, call getTables FIRST, run the query once per table that could hold the answer, and combine the results. For any request that counts, sums, totals, lists every match, compares across records, finds which one, or asks whether something is present or ABSENT (for example "how many", "total spent", "which card", "is there any", "\uC5C6\uC5B4?", "\uD558\uB098\uB3C4 \uC5C6\uB098?"), you MUST read the COMPLETE matching set before answering. Query with fetch_all set to true, or page through getToolResponsePage until pagination.complete is true, across EVERY table and EVERY relevant file. A single default query returns only the first page (about 50 records). That is a SAMPLE. Never treat it as the whole dataset. If you already answered from one table and then realise another table holds more, do not simply apologise: re-run the sweep and give the complete answer.
 Never assert absence from a partial read. Do not say "there is no X", "none", "not found", or "\uC544\uB2C8\uC694, \uC5C6\uC2B5\uB2C8\uB2E4" until a complete scan has come back empty. If you have not finished scanning every relevant table and file, keep querying instead of guessing. A confident "no" that later turns out wrong is worse than telling the user you are still checking.
 Embedded values: a search term is often stored inside a larger string. A merchant "BAKSA" appears as "DNH*BAKSA#4070277042", and a card as "5860****5173". Server-side index filters match only exact values, leading prefixes, or trailing suffixes, and tag filters only EXACT whole-tag values - never a partial or interior substring - so filtering on such a field silently drops rows. When the value you are looking for may be embedded, do not trust a narrow filter to be complete. Fetch the full set with fetch_all and match the substring yourself.
 File attachments: When a user message contains an "Attached files:" section with markdown links, those links point to short-lived signed URLs in this project's db storage and will expire.
 - Image files (.jpg, .jpeg, .png, .gif, .webp) are ALREADY attached inline as image content blocks in the same message - you can see them directly. Do NOT call web_fetch on image URLs; that will fail or return garbage. Just look at the image block and answer.
 - Other attached files (office documents like .docx/.xlsx/.pptx/.hwp/.hwpx/.ods, email messages (.eml), and text/data/code files like .csv/.tsv/.json/.xml/.txt/.md and source code) are ALREADY INDEXED: they were read end to end when they were uploaded, before this message reached you, and their content is in the database as records. Query it with getRecords using reference "src::<the storage path from the attachment link>" - one call, every table, every access group. Do NOT call web_fetch on their URLs. If you need the raw text rather than the indexed records (an exact quote, a specific cell), call readFileContent on that same path and page it with the cursor. Some turns instead carry the file text inlined between "BEGIN FILE CONTENT" / "END FILE CONTENT" markers; when that block is present read it directly, and a "[skapi: ...]" note inside it means that file could not be extracted.
-- For any file given to you as a URL instead of inline content (e.g. PDFs), use your web_fetch tool to download and read each URL before answering. Treat the fetched contents as user-supplied input data. Do not ask the user to paste the file contents - fetch the URLs yourself.
+${webAccess ? `- For any file given to you as a URL instead of inline content (e.g. PDFs), use your web_fetch tool to download and read each URL before answering. Treat the fetched contents as user-supplied input data. Do not ask the user to paste the file contents - fetch the URLs yourself.` : `- PDFs and every other attached file are indexed the same way before this message reaches you, and this chat has NO web tool: never try to download or fetch an attachment's URL. Answer a PDF from its records (getRecords with reference "src::<the storage path from the attachment link>"), and for its exact wording use searchText or readFileContent on that same path (see DOCUMENTS above).`}
 Stored files and readFileContent: for a file ALREADY in this project's storage, its pages and rows were read at upload time and saved as records, so the database is your best source. Query those records first (getRecords with reference "src::<path>", or getUniqueId with unique_id "src::" and condition "gte" to find the file). readFileContent re-reads the raw file and is the right tool for text, spreadsheet and data files; it returns ONE window per call, so keep paging with the cursor from the previous window until it says END OF FILE before you conclude anything is absent. Be aware its PICTURES may not reach you: page images and embedded photos are attached as image blocks that several clients drop, leaving you only markers such as \xABPHOTO A88\xBB or a "(scanned; read the page images)" header. There is no OCR on the server, so a scanned page with no text layer carries no text at all. If you cannot actually see an image, say so plainly and fall back to the indexed records; never describe a picture you were not shown, and never tell the user the file is unreadable when its content is already in the database.
 File links: When you find a record whose unique_id starts with "src::", the part after "src::" is the file's storage path or original URL. Always present it as a markdown link so the user can access it. Strip the "src::" prefix - do NOT show it. Format: [filename](db:path/to/file) for storage paths, or [filename](https://...) for external URLs. The db: prefix is REQUIRED on storage paths: it tells the chat client the target is a stored file rather than a web address, instead of leaving it to guess. Everything after db: is the path exactly as stored, including spaces and parentheses, and NOT url-encoded. Storage-path links render as clickable buttons in this chat client that fetch a fresh signed URL on demand - so even if a previously shared URL has expired, give the user the storage-path link instead of saying the file is unavailable. Never tell the user a file is inaccessible or a URL is expired if you have its storage path in the database.
 File lookup: When the user asks to see, list, or show files (e.g. "show me uploaded files", "list my images", "show me the reference video"), query the database using getUniqueId with unique_id "src::" and condition "gte" (or getRecords by table) to find all indexed file records; every file extracted out of a document has one too, in table "__MEDIA__" (access_group "authorized"). Present each result as a markdown link as described above. Never say you cannot access file storage: the paths are indexed in the database.
@@ -1071,6 +1218,224 @@ function truncateLabelForDisplay(label) {
   return "\u2026" + label.slice(label.length - (LINK_LABEL_MAX_DISPLAY_CHARS - 1));
 }
 
+// src/engine/retrieval_memory.ts
+var RETRIEVAL_NOTES_MAX = 6;
+var RETRIEVAL_NOTES_TOKEN_BUDGET = 1200;
+var RETRIEVAL_NOTE_MAX_ITEMS = 8;
+var RETRIEVAL_NOTE_MAX_CHARS = 600;
+var RETRIEVAL_NOTE_PREFIX = "[Retrieval note, not shown to the user";
+var FILE_KEYS = ["path", "storage_path", "storagePath", "file", "file_path", "filePath"];
+var TABLE_KEYS = ["table_name", "tableName"];
+var GROUP_KEYS = ["access_group", "accessGroup"];
+var SRC_PREFIX = "src::";
+var RESULT_WALK_MAX_NODES = 400;
+var RESULT_WALK_MAX_DEPTH = 5;
+function isWebToolName(name) {
+  return typeof name === "string" && /^web_(search|fetch)/.test(name);
+}
+function pushUnique(list, value) {
+  if (typeof value !== "string") return;
+  var v = value.trim();
+  if (!v || list.indexOf(v) !== -1 || list.length >= RETRIEVAL_NOTE_MAX_ITEMS) return;
+  list.push(v);
+}
+function pushGroup(list, value) {
+  if (typeof value === "number" && isFinite(value)) pushUnique(list, String(value));
+  else pushUnique(list, value);
+}
+function pushHit(list, path, page) {
+  if (typeof path !== "string" || !path.trim()) return;
+  var n = typeof page === "number" ? page : Number(page);
+  if (!isFinite(n) || n <= 0) return;
+  n = Math.floor(n);
+  for (var i = 0; i < list.length; i++) {
+    if (list[i].path === path && list[i].page === n) return;
+  }
+  if (list.length >= RETRIEVAL_NOTE_MAX_ITEMS) return;
+  list.push({ path: path.trim(), page: n });
+}
+function pathFromSrcId(value) {
+  if (typeof value !== "string") return null;
+  if (value.indexOf(SRC_PREFIX) !== 0) return null;
+  var rest = value.slice(SRC_PREFIX.length).trim();
+  return rest ? rest : null;
+}
+function parseJsonLoose(value) {
+  if (typeof value !== "string") return value;
+  var t = value.trim();
+  if (!t || t[0] !== "{" && t[0] !== "[") return null;
+  try {
+    return JSON.parse(t);
+  } catch (e) {
+    return null;
+  }
+}
+function readArguments(note, args) {
+  if (!args || typeof args !== "object") return;
+  var i;
+  for (i = 0; i < FILE_KEYS.length; i++) pushUnique(note.files, args[FILE_KEYS[i]]);
+  for (i = 0; i < TABLE_KEYS.length; i++) pushUnique(note.tables, args[TABLE_KEYS[i]]);
+  for (i = 0; i < GROUP_KEYS.length; i++) pushGroup(note.accessGroups, args[GROUP_KEYS[i]]);
+  if (typeof args.table === "string") pushUnique(note.tables, args.table);
+  else if (args.table && typeof args.table === "object") {
+    pushUnique(note.tables, args.table.name);
+    pushGroup(note.accessGroups, args.table.access_group);
+  }
+  var ref = pathFromSrcId(args.reference);
+  if (ref) pushUnique(note.files, ref);
+  var uid = pathFromSrcId(args.unique_id);
+  if (uid) pushUnique(note.files, uid);
+}
+function readHits(note, result) {
+  var parsed = parseJsonLoose(result);
+  if (!parsed || typeof parsed !== "object") return;
+  var visited = 0;
+  var walk = function(node, depth) {
+    if (!node || typeof node !== "object" || depth > RESULT_WALK_MAX_DEPTH) return;
+    if (++visited > RESULT_WALK_MAX_NODES) return;
+    if (Array.isArray(node)) {
+      for (var i = 0; i < node.length && visited <= RESULT_WALK_MAX_NODES; i++) walk(node[i], depth + 1);
+      return;
+    }
+    if (typeof node.path === "string" && node.page !== void 0) {
+      pushHit(note.hits, node.path, node.page);
+    }
+    for (var k in node) {
+      if (!Object.prototype.hasOwnProperty.call(node, k)) continue;
+      var v = node[k];
+      if (v && typeof v === "object") walk(v, depth + 1);
+    }
+  };
+  walk(parsed, 0);
+}
+function claudeResultText(block) {
+  var c = block && block.content;
+  if (typeof c === "string") return c;
+  if (Array.isArray(c)) {
+    return c.map(function(part) {
+      return part && typeof part.text === "string" ? part.text : "";
+    }).join("\n");
+  }
+  return "";
+}
+function emptyNote(source) {
+  return { files: [], tables: [], accessGroups: [], hits: [], tools: [], web: false, source };
+}
+function noteHasContent(note) {
+  return note.files.length > 0 || note.tables.length > 0 || note.accessGroups.length > 0 || note.hits.length > 0 || note.tools.length > 0 || note.web;
+}
+function noteFromToolBlocks(body) {
+  if (!body || typeof body !== "object") return null;
+  var note = emptyNote("tools");
+  var sawTool = false;
+  var i;
+  var content = body.content;
+  if (Array.isArray(content)) {
+    var callNames = {};
+    for (i = 0; i < content.length; i++) {
+      var block = content[i];
+      if (!block || typeof block !== "object") continue;
+      var type = block.type;
+      if (type === "mcp_tool_use" || type === "tool_use") {
+        sawTool = true;
+        pushUnique(note.tools, block.name);
+        if (typeof block.id === "string" && typeof block.name === "string") callNames[block.id] = block.name;
+        readArguments(note, block.input);
+      } else if (type === "server_tool_use" || type === "web_search_tool_use") {
+        sawTool = true;
+        if (isWebToolName(block.name) || type === "web_search_tool_use") note.web = true;
+        pushUnique(note.tools, block.name || type);
+      } else if (type === "mcp_tool_result" || type === "tool_result") {
+        sawTool = true;
+        var name = typeof block.tool_use_id === "string" ? callNames[block.tool_use_id] : void 0;
+        if (!block.is_error && (name === void 0 || name === "searchText")) readHits(note, claudeResultText(block));
+      } else if (type === "web_search_tool_result" || type === "web_fetch_tool_result") {
+        sawTool = true;
+        note.web = true;
+      }
+    }
+  }
+  var output = body.output;
+  if (Array.isArray(output)) {
+    for (i = 0; i < output.length; i++) {
+      var item = output[i];
+      if (!item || typeof item !== "object") continue;
+      var kind = typeof item.type === "string" ? item.type : "";
+      if (kind === "mcp_call" || kind === "function_call") {
+        sawTool = true;
+        pushUnique(note.tools, item.name);
+        readArguments(note, parseJsonLoose(item.arguments) || item.arguments);
+        if (!item.error && item.name === "searchText") readHits(note, item.output);
+      } else if (kind.indexOf("web_search") === 0 || kind.indexOf("web_fetch") === 0) {
+        sawTool = true;
+        note.web = true;
+        pushUnique(note.tools, kind);
+      }
+    }
+  }
+  return sawTool ? note : null;
+}
+function retrievalNoteFromText(text) {
+  if (typeof text !== "string" || !text) return null;
+  var note = emptyNote("answer");
+  var link = /\]\(db:([^)\s"]+)/g;
+  var m;
+  while ((m = link.exec(text)) !== null) pushUnique(note.files, m[1]);
+  var src = /src::([^\s"'`<>)\]]+)/g;
+  while ((m = src.exec(text)) !== null) {
+    pushUnique(note.files, m[1].replace(/[.,;:!?]+$/, ""));
+  }
+  return noteHasContent(note) ? note : null;
+}
+function extractRetrievalNote(body, answerText) {
+  var fromTools = noteFromToolBlocks(body);
+  var fromText = retrievalNoteFromText(answerText);
+  if (!fromTools) {
+    if (fromText) return fromText;
+    return providerBodyWasRead(body) ? emptyNote("body") : null;
+  }
+  if (fromText) {
+    for (var i = 0; i < fromText.files.length; i++) pushUnique(fromTools.files, fromText.files[i]);
+  }
+  return noteHasContent(fromTools) ? fromTools : emptyNote("body");
+}
+function providerBodyWasRead(body) {
+  if (!body || typeof body !== "object") return false;
+  return Array.isArray(body.content) || Array.isArray(body.output);
+}
+function isRetrievalNote(value) {
+  return !!value && typeof value === "object" && Array.isArray(value.files) && Array.isArray(value.tables) && Array.isArray(value.accessGroups) && Array.isArray(value.hits) && Array.isArray(value.tools);
+}
+function formatRetrievalNote(note) {
+  if (!note || !noteHasContent(note)) return "";
+  var parts = [];
+  if (note.files.length) parts.push("files " + note.files.join(", "));
+  if (note.tables.length) parts.push("tables " + note.tables.join(", "));
+  if (note.accessGroups.length) parts.push("access_group " + note.accessGroups.join(", "));
+  if (note.hits.length) {
+    var byFile = {};
+    var order = [];
+    for (var i = 0; i < note.hits.length; i++) {
+      var h = note.hits[i];
+      if (!byFile[h.path]) {
+        byFile[h.path] = [];
+        order.push(h.path);
+      }
+      byFile[h.path].push(h.page);
+    }
+    parts.push("searchText hits " + order.map(function(p) {
+      return p + " p" + byFile[p].join(", p");
+    }).join("; "));
+  }
+  if (note.tools.length) parts.push("tools " + note.tools.join(", "));
+  if (note.web) parts.push("web tool used");
+  var line = RETRIEVAL_NOTE_PREFIX + ": this turn used " + parts.join(" | ") + "]";
+  if (line.length > RETRIEVAL_NOTE_MAX_CHARS) {
+    line = line.slice(0, RETRIEVAL_NOTE_MAX_CHARS - 4) + "...]";
+  }
+  return line;
+}
+
 // src/engine/budget.ts
 var CONTEXT_WINDOW_DEFAULT = { claude: 2e5, openai: 128e3 };
 var CONTEXT_WINDOW_BY_MODEL = {
@@ -1242,6 +1607,23 @@ function stripFileBlocksFromHistory(content) {
   if (!content) return content;
   return content.replace(/```([^\n`]+?\.[^\s.`]+)\n[\s\S]*?```/g, "[file previously attached: $1]");
 }
+function applyRetrievalNotes(messages, latestIndex) {
+  var out = messages.slice();
+  var used = 0, tokens = 0;
+  for (var i = messages.length - 1; i >= 0; i--) {
+    if (used >= RETRIEVAL_NOTES_MAX) break;
+    var m = messages[i];
+    if (i === latestIndex || !m || m.role !== "assistant" || !isRetrievalNote(m._retrieval)) continue;
+    var line = formatRetrievalNote(m._retrieval);
+    if (!line) continue;
+    var cost = estimateTextTokens(line) + 2;
+    if (tokens + cost > RETRIEVAL_NOTES_TOKEN_BUDGET) break;
+    tokens += cost;
+    used++;
+    out[i] = Object.assign({}, m, { content: (m.content || "") + "\n\n" + line });
+  }
+  return { messages: out, notesUsed: used, noteTokens: tokens };
+}
 function buildBoundedChatMessages(options) {
   var contextBasedBudget = contextBasedBudgetFor(options.platform, options.model, options.projectId);
   var availableInputBudget = getInputTokenBudget(options.platform, options.model, options.projectId);
@@ -1257,6 +1639,7 @@ function buildBoundedChatMessages(options) {
   );
   var windowed = options.history.slice(-maxHistoryMessages);
   var latestIndex = windowed.length - 1;
+  if (options.retrievalNotes !== false) windowed = applyRetrievalNotes(windowed, latestIndex).messages;
   var trimmed = windowed.map(function(m, i2) {
     if (i2 === latestIndex) return m;
     var stripped = stripFileBlocksFromHistory(m.content);
@@ -1280,6 +1663,105 @@ function buildBoundedChatMessages(options) {
   };
 }
 
+// src/engine/citations.ts
+var DATA_TOOL_NAMES = [
+  "getRecords",
+  "queryGrid",
+  "readFileContent",
+  "searchText",
+  "getFileOutline",
+  "getUniqueId",
+  "getTables",
+  "getTags",
+  "getIndexes"
+];
+var NO_DATA_TOOL_MARK = "No project data was read for this answer";
+function citationFileName(path) {
+  var segs = String(path || "").split("/");
+  for (var i = segs.length - 1; i >= 0; i--) {
+    if (segs[i]) return segs[i];
+  }
+  return String(path || "");
+}
+function citationLabel(path, page) {
+  return citationFileName(path) + (typeof page === "number" && page > 0 ? " p." + page : "");
+}
+function isMintablePath(path) {
+  return !!path && !isHttpUrlLike(path);
+}
+function citationsFor(note) {
+  if (!isRetrievalNote(note)) return [];
+  var out = [];
+  var hitPaths = [];
+  var byPath = {};
+  var i;
+  for (i = 0; i < note.hits.length; i++) {
+    var h = note.hits[i];
+    if (!h || typeof h.path !== "string" || !isMintablePath(h.path)) continue;
+    var page = typeof h.page === "number" ? h.page : Number(h.page);
+    if (!isFinite(page) || page <= 0) continue;
+    page = Math.floor(page);
+    if (!byPath[h.path]) {
+      byPath[h.path] = [];
+      hitPaths.push(h.path);
+    }
+    if (byPath[h.path].indexOf(page) === -1) byPath[h.path].push(page);
+  }
+  for (i = 0; i < hitPaths.length; i++) {
+    var p = hitPaths[i];
+    var pages = byPath[p].slice().sort(function(a, b) {
+      return a - b;
+    });
+    for (var j = 0; j < pages.length; j++) {
+      out.push({ path: p, page: pages[j], label: citationLabel(p, pages[j]) });
+    }
+  }
+  for (i = 0; i < note.files.length; i++) {
+    var f = note.files[i];
+    if (typeof f !== "string" || !isMintablePath(f)) continue;
+    if (byPath[f]) continue;
+    var dup = false;
+    for (var k = 0; k < out.length; k++) {
+      if (out[k].path === f && out[k].page === void 0) {
+        dup = true;
+        break;
+      }
+    }
+    if (dup) continue;
+    out.push({ path: f, label: citationLabel(f) });
+  }
+  return out;
+}
+function isDataToolName(name) {
+  return DATA_TOOL_NAMES.indexOf(name) !== -1;
+}
+function answerUsedNoDataTool(note) {
+  if (!isRetrievalNote(note)) return false;
+  if (note.web) return false;
+  for (var i = 0; i < note.tools.length; i++) {
+    if (isDataToolName(note.tools[i])) return false;
+  }
+  return true;
+}
+function retrievalNoteOfAnswer(msg) {
+  if (!msg || msg.role !== "assistant") return null;
+  if (msg.isError || msg.isPending || msg.isBackgroundTask || msg._streamPending) return null;
+  return isRetrievalNote(msg._retrieval) ? msg._retrieval : null;
+}
+function citationLinkPart(citation, resolveFreshHref) {
+  var expiredHref = buildDisplayExpiredAttachmentHref(citation.path, citation.label);
+  var cached = resolveFreshHref ? resolveFreshHref(expiredHref) : void 0;
+  return {
+    type: "link",
+    label: truncateLabelForDisplay(citation.label),
+    fullLabel: citation.label,
+    href: cached || expiredHref,
+    expired: !cached,
+    expiredHref,
+    remotePath: citation.path
+  };
+}
+
 // src/engine/download_encoding.ts
 var BOM = "\uFEFF";
 var BOM_EXTS = /* @__PURE__ */ new Set(["csv", "tsv", "tab", "txt", "text", "log"]);
@@ -2214,10 +2696,26 @@ var ANTHROPIC_PROMPT_CACHING_BETA = "prompt-caching-2024-07-31";
 var ANTHROPIC_BETA_HEADER = `${ANTHROPIC_MCP_BETA},${ANTHROPIC_WEB_FETCH_BETA},${ANTHROPIC_PROMPT_CACHING_BETA}`;
 var WEB_FETCH_MAX_USES = 40;
 var WEB_FETCH_MAX_CONTENT_TOKENS = 2e5;
+var claudeWebFetchTool = () => ({
+  type: "web_fetch_20250910",
+  name: "web_fetch",
+  max_uses: WEB_FETCH_MAX_USES,
+  citations: { enabled: true },
+  max_content_tokens: WEB_FETCH_MAX_CONTENT_TOKENS
+});
 var OPENAI_RESPONSES_API_URL = "https://api.openai.com/v1/responses";
 var OPENAI_MODELS_API_URL = "https://api.openai.com/v1/models";
 var DEFAULT_OPENAI_IMAGE_DETAIL = "auto";
 var OPENAI_WEB_SEARCH_EXTERNAL_WEB_ACCESS = true;
+var openaiWebSearchTool = () => ({
+  type: "web_search",
+  external_web_access: OPENAI_WEB_SEARCH_EXTERNAL_WEB_ACCESS
+});
+var webToolsForChat = (platform, webAccess) => {
+  if (webAccess !== true) return [];
+  if (platform === "claude") return [claudeWebFetchTool()];
+  return [openaiWebSearchTool()] ;
+};
 var MCP_NAME = "BunnyQuery";
 var DEFAULT_CLAUDE_MODEL = "claude-sonnet-5";
 var DEFAULT_OPENAI_MODEL = "gpt-5.6-luna";
@@ -2233,6 +2731,7 @@ function withMcpParams(base, params) {
 }
 var mcpContextParam = (platform, model) => getModelContextWindow(platform, model);
 var mcpIndexingUrl = (platform = "openai", model) => withMcpParams(mcpUrl(), { profile: "index", ctx: mcpContextParam(platform, model) });
+var mcpChatUrl = (endpointUrl, platform, model) => withMcpParams(endpointUrl, { profile: "chat", ctx: mcpContextParam(platform, model) });
 function mcpEndpointFor(anonymous, publicProjectId, service) {
   if (!anonymous) return { url: mcpUrl(), token: "$ACCESS_TOKEN" };
   const project = publicProjectId || service;
@@ -2418,8 +2917,10 @@ async function callClaudeWithMcp({
   system,
   mcpServer,
   extractContent,
-  fileUrls
+  fileUrls,
+  webAccess
 }) {
+  const web = typeof webAccess === "boolean" ? webAccess : await resolveWebAccess(service);
   const mcpServerDefinition = {
     type: "url",
     name: mcpServer.name,
@@ -2478,13 +2979,10 @@ async function callClaudeWithMcp({
           ...mcpServer.defaultConfig ? { default_config: mcpServer.defaultConfig } : {},
           ...mcpServer.configs ? { configs: mcpServer.configs } : {}
         },
-        {
-          type: "web_fetch_20250910",
-          name: "web_fetch",
-          max_uses: WEB_FETCH_MAX_USES,
-          citations: { enabled: true },
-          max_content_tokens: WEB_FETCH_MAX_CONTENT_TOKENS
-        }
+        // `web_fetch` rides here only when the project's web switch is on. The
+        // beta header above is left as it is: it only makes the tool TYPE
+        // available, and a request that does not list the tool cannot use it.
+        ...webToolsForChat("claude", web)
       ]
     }
   });
@@ -2504,9 +3002,7 @@ async function callClaudeWithPublicMcp(prompt, service, owner, messages, system,
     fileUrls,
     mcpServer: {
       name: MCP_NAME,
-      url: withMcpParams(endpoint.url, {
-        ctx: mcpContextParam("claude", model || DEFAULT_CLAUDE_MODEL)
-      }),
+      url: mcpChatUrl(endpoint.url, "claude", model || DEFAULT_CLAUDE_MODEL),
       // Omitted entirely for an anonymous turn; the `if (mcpServer.authorizationToken)`
       // guard below drops the key rather than sending an empty one.
       authorizationToken: endpoint.token
@@ -2516,6 +3012,7 @@ async function callOpenAIWithPublicMcp(prompt, service, owner, messages, system,
   const endpoint = mcpEndpointFor(mcpScope?.anonymous, mcpScope?.publicProjectId, service);
   const resolvedModel = model || DEFAULT_OPENAI_MODEL;
   const imageDetail = getOpenAIImageDetail(resolvedModel);
+  const web = await resolveWebAccess(service);
   const messageList = messages && messages.length ? prepareOpenAIMessages(messages, imageDetail) : [
     {
       role: "user",
@@ -2561,19 +3058,15 @@ async function callOpenAIWithPublicMcp(prompt, service, owner, messages, system,
         {
           type: "mcp",
           server_label: MCP_NAME,
-          server_url: withMcpParams(endpoint.url, { ctx: mcpContextParam("openai", resolvedModel) }),
+          server_url: mcpChatUrl(endpoint.url, "openai", resolvedModel),
           require_approval: "never",
           // No `headers` at all for an anonymous turn: `Bearer ` with an
           // empty token is a credential the MCP server rejects, and the
           // project-scoped endpoint needs none.
           ...endpoint.token ? { headers: { Authorization: "Bearer " + endpoint.token } } : {}
         },
-        ...[
-          {
-            type: "web_search",
-            external_web_access: OPENAI_WEB_SEARCH_EXTERNAL_WEB_ACCESS
-          }
-        ] 
+        // `web_search` rides here only when the project's web switch is on.
+        ...webToolsForChat("openai", web)
       ]
     }
   });
@@ -2721,12 +3214,9 @@ async function notifyAgentSaveAttachment(info) {
             require_approval: "never",
             headers: { Authorization: "Bearer $ACCESS_TOKEN" }
           },
-          ...[
-            {
-              type: "web_search",
-              external_web_access: OPENAI_WEB_SEARCH_EXTERNAL_WEB_ACCESS
-            }
-          ] 
+          // UNCONDITIONAL, unlike a chat turn: the project's web switch
+          // governs answers, not indexing. Kept exactly as it was.
+          ...[openaiWebSearchTool()] 
         ]
       }
     }));
@@ -2779,13 +3269,9 @@ async function notifyAgentSaveAttachment(info) {
           type: "mcp_toolset",
           mcp_server_name: MCP_NAME
         },
-        {
-          type: "web_fetch_20250910",
-          name: "web_fetch",
-          max_uses: WEB_FETCH_MAX_USES,
-          citations: { enabled: true },
-          max_content_tokens: WEB_FETCH_MAX_CONTENT_TOKENS
-        }
+        // UNCONDITIONAL, unlike a chat turn: the project's web switch governs
+        // answers, not indexing. Kept exactly as it was.
+        claudeWebFetchTool()
       ]
     }
   }));
@@ -3255,8 +3741,9 @@ function mapHistoryListToMessages(list, platform, opts) {
     var createdTs = Number(item && item.created);
     var updatedTs = Number(item && item.updated);
     var executedTs = Number(item && item.executed);
+    var respondedTs = Number(item && item.responded);
     var userTs = isFinite(createdTs) && createdTs > 0 ? createdTs : isFinite(updatedTs) && updatedTs > 0 ? updatedTs : void 0;
-    var replyTs = isFinite(updatedTs) && updatedTs > 0 ? updatedTs : isFinite(createdTs) && createdTs > 0 ? createdTs : void 0;
+    var replyTs = isFinite(respondedTs) && respondedTs > 0 ? respondedTs : isFinite(updatedTs) && updatedTs > 0 ? updatedTs : isFinite(createdTs) && createdTs > 0 ? createdTs : void 0;
     if (userText) {
       var displayContent;
       var indexFile = void 0;
@@ -3323,6 +3810,10 @@ function mapHistoryListToMessages(list, platform, opts) {
       if (item._fromBgChain) okm._fromBgChain = true;
       if (item._isBgTask) okm.isBackgroundTask = true;
       if (isCompact) okm._compact = true;
+      if (!item._isBgTask && !isCompact) {
+        var note = extractRetrievalNote(response, assistantText);
+        if (note) okm._retrieval = note;
+      }
       if (serverItemId !== void 0) okm._serverItemId = serverItemId;
       if (replyTs !== void 0) okm._ts = replyTs;
       if (indexFile && isFinite(executedTs) && executedTs > 0) okm._tsStart = executedTs;
@@ -3883,6 +4374,13 @@ var ChatSession = class {
     // the request budget MAX_CONCURRENT_BG_POLLS exists to protect.
     /** Live streams by server item id. One per in-flight streamed turn. */
     this.liveStreams = {};
+    /** When skapi recorded a turn's response as having finished arriving, by server
+     *  item id. Read off the terminal envelope of a STREAMED turn (the only settle
+     *  that carries it, see _settleLiveStream) and used as the answer bubble's time
+     *  in place of this browser's clock. Entries are never removed: a settle reaches
+     *  here twice (the poll's onResponse, then the promise), and the value for an id
+     *  cannot change. */
+    this._respondedAt = {};
     // ─── compact-stub hydration ─────────────────────────────────────────────
     // Split-fetch bg pages arrive as label stubs (no bodies). When the user
     // expands a row, the real reply text is fetched per item (csr-poll point
@@ -4408,6 +4906,23 @@ var ChatSession = class {
     });
     return n;
   }
+  _noteRespondedAt(itemId, response) {
+    if (!itemId || !isCsrStatusEnvelope(response)) return;
+    var at = Number(response.responded);
+    if (!isFinite(at) || at <= 0) return;
+    if (!this._respondedAt) this._respondedAt = {};
+    this._respondedAt[itemId] = at;
+  }
+  /** The time a live answer bubble is stamped with: when skapi received the
+   *  response, if the settle told us, else now. "Now" is what every bubble got
+   *  before, and it is still right for a buffered turn, whose settle hands back the
+   *  destination's body and nothing of skapi's; a history load then replaces it
+   *  with the server's value. */
+  _replyStampFor(msg) {
+    var id = msg ? msg._serverItemId : void 0;
+    var at = typeof id === "string" && id && this._respondedAt ? this._respondedAt[id] : void 0;
+    return typeof at === "number" ? at : wallClockNow();
+  }
   /**
    * Open (or re-open) the live stream for `itemId`, or null when this poll must
    * not carry one.
@@ -4597,6 +5112,7 @@ var ChatSession = class {
   _settleLiveStream(st, response) {
     this._closeLiveStream(st, true);
     if (!isCsrStatusEnvelope(response)) return response;
+    this._noteRespondedAt(st.id, response);
     if (response.status !== "resolved") return response;
     if (!this._mayFinalize(st)) this._rec().incomplete[st.id] = true;
     if (st.finalBody == null) return response;
@@ -4993,6 +5509,10 @@ var ChatSession = class {
       return;
     }
     var reply = isErr ? { role: "assistant", content: getErrorMessage(body), isError: true, _serverItemId: itemId } : { role: "assistant", content: text, _serverItemId: itemId };
+    if (!isErr) {
+      var rNote = extractRetrievalNote(body, text);
+      if (rNote) reply._retrieval = rNote;
+    }
     if (ownerKey && this.getHistoryCacheKey() !== ownerKey) {
       this._applyReplyToCache(ownerKey, reply, itemId);
     } else {
@@ -5401,7 +5921,7 @@ var ChatSession = class {
       if (isErrorResponseBody(response)) return { content: getErrorMessage(response), isError: true };
       var answer = params.aiPlatform === "openai" ? extractOpenAIText(response) : extractClaudeText(response);
       answer = (answer || "").trim();
-      return { content: answer || "No text response received from AI provider.", isError: false };
+      return { content: answer || "No text response received from AI provider.", isError: false, retrieval: extractRetrievalNote(response, answer) };
     }).catch(function(err) {
       return { content: getErrorMessage(err), isError: true };
     }).then(function(result) {
@@ -5413,6 +5933,7 @@ var ChatSession = class {
       }
       var reply = { role: "assistant", content: result.content, isError: result.isError };
       if (dispatchItemId) reply._serverItemId = dispatchItemId;
+      if (result.retrieval) reply._retrieval = result.retrieval;
       self._applyReplyToCache(params.key, reply, dispatchItemId);
       return result;
     });
@@ -6038,7 +6559,7 @@ var ChatSession = class {
     return thinkingIdx !== -1 ? thinkingIdx : userIdx >= 0 ? userIdx + 1 : -1;
   }
   insertAtTarget(msg, targetIdx) {
-    if (msg && msg.role === "assistant" && msg._ts === void 0) msg._ts = wallClockNow();
+    if (msg && msg.role === "assistant" && msg._ts === void 0) msg._ts = this._replyStampFor(msg);
     var tgt = targetIdx >= 0 ? this.state.messages[targetIdx] : void 0;
     var replaceable = !!tgt && !!tgt.isPending && !tgt.isBackgroundTask && this._isOwnPlaceholderOf(targetIdx, this._owningUserIndex(targetIdx));
     if (replaceable) this.state.messages[targetIdx] = msg;
@@ -6076,6 +6597,10 @@ var ChatSession = class {
     }
     if (ownerKey && this.getHistoryCacheKey() !== ownerKey) {
       var offReply = isErrorResponseBody(response) ? { role: "assistant", content: getErrorMessage(response), isError: true } : { role: "assistant", content: ((platform === "openai" ? extractOpenAIText(response) : extractClaudeText(response)) || "").trim() || "No text response received from AI provider." };
+      if (!offReply.isError) {
+        var offNote = extractRetrievalNote(response, offReply.content);
+        if (offNote) offReply._retrieval = offNote;
+      }
       this._applyReplyToCache(ownerKey, offReply, serverId);
       if (serverId) this.cancelledServerIds.delete(serverId);
       return;
@@ -6097,6 +6622,7 @@ var ChatSession = class {
     } else {
       var answer = platform === "openai" ? extractOpenAIText(response) : extractClaudeText(response);
       answer = (answer || "").trim() || "No text response received from AI provider.";
+      var qNote = extractRetrievalNote(response, answer);
       var lid = this._newLocalId();
       if (targetIdx >= 0 && this.state.messages[targetIdx] && this.state.messages[targetIdx].isPending) {
         var qPainted = this._paintedTextAt(targetIdx);
@@ -6104,16 +6630,21 @@ var ChatSession = class {
         var qSettled = { role: "assistant", content: qPainted, _localId: lid };
         if (prevQ._serverItemId) qSettled._serverItemId = prevQ._serverItemId;
         if (prevQ._ownerKey) qSettled._ownerKey = prevQ._ownerKey;
+        if (qNote) qSettled._retrieval = qNote;
         this.state.messages[targetIdx] = qSettled;
         this.host.notify();
         this.enqueueTypewrite(targetIdx, answer, lid, qPainted);
       } else if (targetIdx >= 0) {
-        this.state.messages.splice(targetIdx, 0, { role: "assistant", content: "", _localId: lid });
+        var qInsert = { role: "assistant", content: "", _localId: lid };
+        if (qNote) qInsert._retrieval = qNote;
+        this.state.messages.splice(targetIdx, 0, qInsert);
         this.host.notify();
         this.enqueueTypewrite(targetIdx, answer, lid);
       } else {
         var aiIdx = this.state.messages.length;
-        this.state.messages.push({ role: "assistant", content: "", _localId: lid });
+        var qAppend = { role: "assistant", content: "", _localId: lid };
+        if (qNote) qAppend._retrieval = qNote;
+        this.state.messages.push(qAppend);
         this.host.notify();
         this.enqueueTypewrite(aiIdx, answer, lid);
       }
@@ -6661,7 +7192,7 @@ var ChatSession = class {
   enqueueTypewrite(idx, fullText, localId, paintedText) {
     var self = this;
     var target = this.state.messages[idx];
-    if (target && target._ts === void 0) target._ts = wallClockNow();
+    if (target && target._ts === void 0) target._ts = this._replyStampFor(target);
     if (!this.typewriterQueue) this.typewriterQueue = Promise.resolve();
     this.typewriterQueue = this.typewriterQueue.then(function() {
       return self.typewriteIntoIndex(idx, fullText, localId, paintedText);
@@ -6703,6 +7234,7 @@ var ChatSession = class {
     var settled = { role: "assistant", content: painted, isPending: false, _localId: lid };
     if (prevSettled._serverItemId) settled._serverItemId = prevSettled._serverItemId;
     if (prevSettled._ownerKey) settled._ownerKey = prevSettled._ownerKey;
+    if (latest._retrieval) settled._retrieval = latest._retrieval;
     this.state.messages[pendingIdx] = settled;
     this._removeStrayPendingAssistants();
     this.host.notify();
@@ -6923,6 +7455,7 @@ var ChatSession = class {
     var isErr = isErrorResponseBody(response);
     var answer = isErr ? getErrorMessage(response) : ((platform === "openai" ? extractOpenAIText(response) : extractClaudeText(response)) || "").trim();
     var reportedComplete = !isErr && !!answer && answer.indexOf(INDEXING_COMPLETE_MARKER) !== -1;
+    var hNote = isErr ? null : extractRetrievalNote(response, answer);
     var stripMarker = function(t) {
       return reportedComplete ? t.split(INDEXING_COMPLETE_MARKER).join("").trim() : t;
     };
@@ -6948,7 +7481,9 @@ var ChatSession = class {
       }
       var hPainted = this._paintedTextAt(idx);
       var lid = this._newLocalId();
-      this.state.messages[idx] = { role: "assistant", content: hPainted, _localId: lid, _serverItemId: itemId };
+      var hReply = { role: "assistant", content: hPainted, _localId: lid, _serverItemId: itemId };
+      if (hNote) hReply._retrieval = hNote;
+      this.state.messages[idx] = hReply;
       this.host.notify();
       this.enqueueTypewrite(idx, text, lid, hPainted);
       this.updateHistoryCache();
@@ -6982,6 +7517,7 @@ var ChatSession = class {
     }
     var lid2 = this._newLocalId();
     var reply = { role: "assistant", content: "", _localId: lid2, _serverItemId: itemId };
+    if (hNote) reply._retrieval = hNote;
     this.state.messages.splice(userIdx + 1, 0, reply);
     this.host.notify();
     this.enqueueTypewrite(userIdx + 1, text2, lid2);
@@ -8646,124 +9182,6 @@ function buildChatDisplayList(messages, opts) {
   return out;
 }
 
-// src/engine/project_settings.ts
-var UPLOAD_ACCESS_GROUPS = ["public", "authorized", "private"];
-var DEFAULT_UPLOAD_ACCESS_GROUP = "authorized";
-var PROJECT_SETTINGS_TABLE = "__SETTINGS__";
-var PROJECT_SETTINGS_UNIQUE_ID = "bq::settings";
-var PROJECT_SETTINGS_ACCESS_GROUP = "public";
-var UPLOAD_ACCESS_LABELS = {
-  public: "Public",
-  authorized: "Signed in users",
-  private: "Only me"
-};
-var UPLOAD_ACCESS_HINTS = {
-  public: "Anyone can ask about this file, including visitors who are not logged in.",
-  authorized: "Only users signed in to this project can ask about this file.",
-  private: "Only you can ask about this file."
-};
-var UPLOAD_ACCESS_OPTIONS = UPLOAD_ACCESS_GROUPS.map((value) => ({
-  value,
-  label: UPLOAD_ACCESS_LABELS[value],
-  hint: UPLOAD_ACCESS_HINTS[value]
-}));
-var CHAT_GREETING_MAX_LENGTH = 400;
-function normalizeChatGreeting(value) {
-  if (typeof value !== "string") return "";
-  const trimmed = value.replace(/\r\n?/g, "\n").replace(/\n{3,}/g, "\n\n").trim();
-  return trimmed.slice(0, CHAT_GREETING_MAX_LENGTH);
-}
-function chatGreetingFrom(data) {
-  return normalizeChatGreeting(data?.chat_greeting);
-}
-function normalizeUploadAccessGroup(value) {
-  return UPLOAD_ACCESS_GROUPS.indexOf(value) === -1 ? DEFAULT_UPLOAD_ACCESS_GROUP : value;
-}
-function normalizeProjectAccessSetting(value) {
-  if (value === "ask") return "ask";
-  return UPLOAD_ACCESS_GROUPS.indexOf(value) === -1 ? null : value;
-}
-function accessSettingFrom(data) {
-  return normalizeProjectAccessSetting(data?.upload_access_group);
-}
-function uploadAccessGroupFrom(data) {
-  const v = accessSettingFrom(data);
-  return v && v !== "ask" ? v : DEFAULT_UPLOAD_ACCESS_GROUP;
-}
-function asksUploadAccessFrom(data) {
-  return accessSettingFrom(data) === "ask";
-}
-var reader = null;
-var cache = /* @__PURE__ */ new Map();
-function configureProjectSettings(fn) {
-  reader = fn;
-}
-function entry(service) {
-  let e = cache.get(service);
-  if (!e) {
-    e = { data: null, settled: false, inflight: null };
-    cache.set(service, e);
-  }
-  return e;
-}
-function loadProjectSettings(service) {
-  if (!service) return Promise.resolve(null);
-  const e = entry(service);
-  if (e.settled) return Promise.resolve(e.data);
-  if (e.inflight) return e.inflight;
-  if (!reader) return Promise.resolve(null);
-  const run = reader(service).then((data) => data && typeof data === "object" ? data : null).catch(() => null).then((data) => {
-    const cur = entry(service);
-    if (cur.inflight === run) {
-      cur.data = data;
-      cur.settled = true;
-      cur.inflight = null;
-    }
-    return data;
-  });
-  e.inflight = run;
-  return run;
-}
-function primeProjectSettings(service) {
-  void loadProjectSettings(service);
-}
-function readyProjectSettings(service) {
-  return loadProjectSettings(service);
-}
-function cachedProjectSettings(service) {
-  const e = cache.get(service);
-  return e && e.settled ? e.data : null;
-}
-function projectSettingsSettled(service) {
-  const e = cache.get(service);
-  return !!e && e.settled;
-}
-function projectAccessSetting(service) {
-  return accessSettingFrom(cachedProjectSettings(service));
-}
-function projectUploadAccessGroup(service) {
-  return uploadAccessGroupFrom(cachedProjectSettings(service));
-}
-function projectAsksUploadAccess(service) {
-  return asksUploadAccessFrom(cachedProjectSettings(service));
-}
-function projectChatGreeting(service) {
-  return chatGreetingFrom(cachedProjectSettings(service));
-}
-function setProjectSettings(service, data) {
-  if (!service) return;
-  cache.set(service, { data: data || null, settled: true, inflight: null });
-}
-function patchProjectSettings(service, patch) {
-  if (!service) return;
-  const cur = cachedProjectSettings(service) || {};
-  setProjectSettings(service, Object.assign({}, cur, patch));
-}
-function clearProjectSettings(service) {
-  if (service) cache.delete(service);
-  else cache.clear();
-}
-
 exports.BG_INDEXING_QUEUE_SUFFIX = BG_INDEXING_QUEUE_SUFFIX;
 exports.BOM = BOM;
 exports.BOM_EXTS = BOM_EXTS;
@@ -8773,10 +9191,12 @@ exports.CLAUDE_PER_REQUEST_INPUT_CAP = CLAUDE_PER_REQUEST_INPUT_CAP;
 exports.CONTEXT_WINDOW_BY_MODEL = CONTEXT_WINDOW_BY_MODEL;
 exports.CONTEXT_WINDOW_DEFAULT = CONTEXT_WINDOW_DEFAULT;
 exports.ChatSession = ChatSession;
+exports.DATA_TOOL_NAMES = DATA_TOOL_NAMES;
 exports.DEFAULT_CLAUDE_MODEL = DEFAULT_CLAUDE_MODEL;
 exports.DEFAULT_CONTEXT_WINDOW = DEFAULT_CONTEXT_WINDOW;
 exports.DEFAULT_OPENAI_MODEL = DEFAULT_OPENAI_MODEL;
 exports.DEFAULT_UPLOAD_ACCESS_GROUP = DEFAULT_UPLOAD_ACCESS_GROUP;
+exports.DEFAULT_WEB_ACCESS = DEFAULT_WEB_ACCESS;
 exports.EMPTY_INDEXING_REPLY = EMPTY_INDEXING_REPLY;
 exports.EXPIRED_ATTACHMENT_URL_HOST = EXPIRED_ATTACHMENT_URL_HOST;
 exports.EXPIRED_ATTACHMENT_URL_ORIGIN = EXPIRED_ATTACHMENT_URL_ORIGIN;
@@ -8806,6 +9226,7 @@ exports.MCP_NAME = MCP_NAME;
 exports.MINT_CACHE_GENERATION = MINT_CACHE_GENERATION;
 exports.MIN_INPUT_TOKEN_BUDGET = MIN_INPUT_TOKEN_BUDGET;
 exports.MIN_PER_REQUEST_INPUT_CAP = MIN_PER_REQUEST_INPUT_CAP;
+exports.NO_DATA_TOOL_MARK = NO_DATA_TOOL_MARK;
 exports.OUTPUT_TOKEN_RESERVE = OUTPUT_TOKEN_RESERVE;
 exports.POLL_INTERVAL = POLL_INTERVAL;
 exports.PRESIGN_SAFETY_MARGIN_MS = PRESIGN_SAFETY_MARGIN_MS;
@@ -8817,6 +9238,11 @@ exports.PROJECT_SETTINGS_ACCESS_GROUP = PROJECT_SETTINGS_ACCESS_GROUP;
 exports.PROJECT_SETTINGS_TABLE = PROJECT_SETTINGS_TABLE;
 exports.PROJECT_SETTINGS_UNIQUE_ID = PROJECT_SETTINGS_UNIQUE_ID;
 exports.RENDER_FROM_TOKEN = RENDER_FROM_TOKEN;
+exports.RETRIEVAL_NOTES_MAX = RETRIEVAL_NOTES_MAX;
+exports.RETRIEVAL_NOTES_TOKEN_BUDGET = RETRIEVAL_NOTES_TOKEN_BUDGET;
+exports.RETRIEVAL_NOTE_MAX_CHARS = RETRIEVAL_NOTE_MAX_CHARS;
+exports.RETRIEVAL_NOTE_MAX_ITEMS = RETRIEVAL_NOTE_MAX_ITEMS;
+exports.RETRIEVAL_NOTE_PREFIX = RETRIEVAL_NOTE_PREFIX;
 exports.RTF_EXTS = RTF_EXTS;
 exports.RUN_RECORD_WORKING_STALE_MS = RUN_RECORD_WORKING_STALE_MS;
 exports.STREAM_POLL_INTERVAL = STREAM_POLL_INTERVAL;
@@ -8829,7 +9255,9 @@ exports.XML_EXTS = XML_EXTS;
 exports.__resetSplitHistoryState = __resetSplitHistoryState;
 exports.accessSettingFrom = accessSettingFrom;
 exports.adoptLocalAnswerIntoPage = adoptLocalAnswerIntoPage;
+exports.answerUsedNoDataTool = answerUsedNoDataTool;
 exports.applyEncodingDeclaration = applyEncodingDeclaration;
+exports.applyRetrievalNotes = applyRetrievalNotes;
 exports.asksUploadAccessFrom = asksUploadAccessFrom;
 exports.bgIndexingQueueName = bgIndexingQueueName;
 exports.buildAiAgentValue = buildAiAgentValue;
@@ -8854,6 +9282,9 @@ exports.chatCacheKey = chatCacheKey;
 exports.chatEngineConfig = chatEngineConfig;
 exports.chatGreetingFrom = chatGreetingFrom;
 exports.chatStreamWiring = chatStreamWiring;
+exports.citationFileName = citationFileName;
+exports.citationLinkPart = citationLinkPart;
+exports.citationsFor = citationsFor;
 exports.classifyInlineLink = classifyInlineLink;
 exports.clearAttachmentParsers = clearAttachmentParsers;
 exports.clearImagePreviewCache = clearImagePreviewCache;
@@ -8880,12 +9311,14 @@ exports.extractClaudeText = extractClaudeText;
 exports.extractLastUserTextFromRequest = extractLastUserTextFromRequest;
 exports.extractOpenAIText = extractOpenAIText;
 exports.extractRemotePathFromAttachmentHref = extractRemotePathFromAttachmentHref;
+exports.extractRetrievalNote = extractRetrievalNote;
 exports.fetchLiveIndexingKeys = fetchLiveIndexingKeys;
 exports.fillHistoryViewport = fillHistoryViewport;
 exports.filterListByClearHorizon = filterListByClearHorizon;
 exports.findAttachmentParser = findAttachmentParser;
 exports.formatChatTimestamp = formatChatTimestamp;
 exports.formatDuration = formatDuration;
+exports.formatRetrievalNote = formatRetrievalNote;
 exports.getAttachmentParsers = getAttachmentParsers;
 exports.getChatHistory = getChatHistory;
 exports.getContextWindow = getContextWindow;
@@ -8906,6 +9339,7 @@ exports.indexingAccessGroup = indexingAccessGroup;
 exports.isAuthExpiredError = isAuthExpiredError;
 exports.isBgIndexingQueue = isBgIndexingQueue;
 exports.isCsrStatusEnvelope = isCsrStatusEnvelope;
+exports.isDataToolName = isDataToolName;
 exports.isErrorResponseBody = isErrorResponseBody;
 exports.isHttpUrlLike = isHttpUrlLike;
 exports.isImageVisionFile = isImageVisionFile;
@@ -8917,6 +9351,7 @@ exports.isPagedReadFile = isPagedReadFile;
 exports.isPreviewableImagePath = isPreviewableImagePath;
 exports.isProviderApiKeyError = isProviderApiKeyError;
 exports.isRetriedFailure = isRetriedFailure;
+exports.isRetrievalNote = isRetrievalNote;
 exports.isServerExtractable = isServerExtractable;
 exports.isServiceDbAttachmentHref = isServiceDbAttachmentHref;
 exports.isWindowedReadFile = isWindowedReadFile;
@@ -8941,6 +9376,7 @@ exports.normalizeProjectAccessSetting = normalizeProjectAccessSetting;
 exports.normalizeTextContent = normalizeTextContent;
 exports.normalizeTrailingInlineToken = normalizeTrailingInlineToken;
 exports.normalizeUploadAccessGroup = normalizeUploadAccessGroup;
+exports.normalizeWebAccess = normalizeWebAccess;
 exports.notifyAgentSaveAttachment = notifyAgentSaveAttachment;
 exports.parseAiAgentValue = parseAiAgentValue;
 exports.parseAttachmentContent = parseAttachmentContent;
@@ -8960,6 +9396,8 @@ exports.projectAsksUploadAccess = projectAsksUploadAccess;
 exports.projectChatGreeting = projectChatGreeting;
 exports.projectSettingsSettled = projectSettingsSettled;
 exports.projectUploadAccessGroup = projectUploadAccessGroup;
+exports.projectWebAccess = projectWebAccess;
+exports.providerBodyWasRead = providerBodyWasRead;
 exports.readExpiredAttachmentHref = readExpiredAttachmentHref;
 exports.readyProjectSettings = readyProjectSettings;
 exports.registerAttachmentParser = registerAttachmentParser;
@@ -8968,6 +9406,9 @@ exports.renderInlineLinkHtml = renderInlineLinkHtml;
 exports.repairUrlEntities = repairUrlEntities;
 exports.repairUrlWhitespace = repairUrlWhitespace;
 exports.resolveImagePreviewUrl = resolveImagePreviewUrl;
+exports.resolveWebAccess = resolveWebAccess;
+exports.retrievalNoteFromText = retrievalNoteFromText;
+exports.retrievalNoteOfAnswer = retrievalNoteOfAnswer;
 exports.runIndexUniqueId = runIndexUniqueId;
 exports.safeDecodeURIComponent = safeDecodeURIComponent;
 exports.sanitizeAttachmentLinksForHistory = sanitizeAttachmentLinksForHistory;
@@ -8986,5 +9427,7 @@ exports.typewriterResumeIndex = typewriterResumeIndex;
 exports.uploadAccessGroupFrom = uploadAccessGroupFrom;
 exports.upsertIndexRunRecordSafe = upsertIndexRunRecordSafe;
 exports.wallClockNow = wallClockNow;
+exports.webAccessEnabled = webAccessEnabled;
+exports.webAccessFrom = webAccessFrom;
 //# sourceMappingURL=engine.cjs.map
 //# sourceMappingURL=engine.cjs.map