bunnyquery 1.9.1 → 1.9.5

package/dist/engine.d.mts

@@ -279,6 +279,18 @@ type ChatSystemPromptParams = {
      * given when the caller says which one this is.
      */
     client?: 'console' | 'widget';
+    /**
+     * The access group THIS project's indexer writes its records at, from the
+     * project's `default_access_group` setting.
+     *
+     * The MCP auto-fills an index/tag query that names a table but no group with
+     * "authorized", which used to be right because every BunnyQuery record was
+     * hardcoded to it. Now a project can index at "public" (so an anonymous
+     * visitor can read it) or "private", and on those projects the auto-fill
+     * silently searches a group the data is not in and answers "nothing found".
+     * Defaults to 'authorized', which is what an unset project still uses.
+     */
+    indexAccessGroup?: string;
 };
 declare function buildChatSystemPrompt(params: ChatSystemPromptParams): string;
 
@@ -297,6 +309,13 @@ type IndexingSystemPromptParams = {
     serviceName?: string;
     /** Project description. When present, name + description are appended. */
     serviceDescription?: string;
+    /**
+     * Access group every record written during this run must carry. Chosen by the
+     * uploader (project default, or a per-upload prompt) and already applied to
+     * the "src::" file record before indexing starts. Defaults to "authorized",
+     * which is what every record written before this setting existed used.
+     */
+    accessGroup?: 'public' | 'authorized' | 'private';
 };
 declare function buildIndexingSystemPrompt(params: IndexingSystemPromptParams): string;
 
@@ -321,6 +340,18 @@ type IndexingAttachmentInfo = {
     size?: number;
     /** Temporary signed URL the agent/MCP fetches to read the file contents. */
     url: string;
+    /**
+     * Access group every record extracted from this file must be written at.
+     *
+     * The uploader chooses it (project default, or a per-upload prompt), and the
+     * `src::` file record is already created at this group before indexing starts.
+     * The rows, chapters and summaries the agent writes have to MATCH it: skapi's
+     * access group is part of a record's table key, so a public file whose rows
+     * were saved as "authorized" is a file an anonymous visitor can see the name
+     * of and none of the contents of. Omitted means "authorized", which is what
+     * every record written before this setting existed used.
+     */
+    accessGroup?: 'public' | 'authorized' | 'private';
 };
 type BuildIndexingUserMessageOptions = {
     /**
@@ -343,6 +374,13 @@ type BuildIndexingUserMessageOptions = {
      */
     pagedRead?: boolean;
 };
+/**
+ * The access group to write this file's records at. One place, so the user
+ * message, the continue message and the system prompt cannot disagree.
+ */
+declare function indexingAccessGroup(attachment: {
+    accessGroup?: string;
+}): 'public' | 'authorized' | 'private';
 declare function buildIndexingUserMessage(attachment: IndexingAttachmentInfo, options?: BuildIndexingUserMessageOptions): string;
 /**
  * Token the WORKER substitutes with the 1-based first page of the window it is about to
@@ -1248,8 +1286,14 @@ type CallClaudeWithMcpParams = {
 declare const POLL_INTERVAL = 3000;
 declare const MAX_CONCURRENT_BG_POLLS = 6;
 declare function callClaudeWithMcp({ prompt, messages, service, owner, userId, model, maxTokens, system, mcpServer, extractContent, fileUrls, }: CallClaudeWithMcpParams): Promise<any>;
-declare function callClaudeWithPublicMcp(prompt: string, service: string, owner: string, messages?: ClaudeMessage[], system?: string, model?: string, userId?: string, extractContent?: ExtractDirective[], fileUrls?: FileUrlDirective[], onResponse?: (res: any) => void, onError?: (err: any) => void): Promise<any>;
-declare function callOpenAIWithPublicMcp(prompt: string, service: string, owner: string, messages?: OpenAIMessage[], system?: string, model?: string, userId?: string, extractContent?: ExtractDirective[], fileUrls?: FileUrlDirective[], onResponse?: (res: any) => void, onError?: (err: any) => void): Promise<any>;
+declare function callClaudeWithPublicMcp(prompt: string, service: string, owner: string, messages?: ClaudeMessage[], system?: string, model?: string, userId?: string, extractContent?: ExtractDirective[], fileUrls?: FileUrlDirective[], onResponse?: (res: any) => void, onError?: (err: any) => void, mcpScope?: {
+    anonymous?: boolean;
+    publicProjectId?: string;
+}): Promise<any>;
+declare function callOpenAIWithPublicMcp(prompt: string, service: string, owner: string, messages?: OpenAIMessage[], system?: string, model?: string, userId?: string, extractContent?: ExtractDirective[], fileUrls?: FileUrlDirective[], onResponse?: (res: any) => void, onError?: (err: any) => void, mcpScope?: {
+    anonymous?: boolean;
+    publicProjectId?: string;
+}): Promise<any>;
 type AttachmentSaveInfo = {
     platform: 'claude' | 'openai';
     model?: string;
@@ -1276,6 +1320,13 @@ type AttachmentSaveInfo = {
         mime?: string;
         size?: number;
         url: string;
+        /**
+         * Access group this file's records are written at (the uploader's choice,
+         * already applied to the "src::" record). Threaded into the indexing
+         * prompts so the agent's own records land in the same group; omitted
+         * means "authorized", the group everything used before the setting existed.
+         */
+        accessGroup?: 'public' | 'authorized' | 'private';
     };
     /**
      * Content parsed CLIENT-SIDE by an attachment-parser plugin (e.g. an .hwp
@@ -1453,6 +1504,19 @@ interface ChatIdentity {
     owner: string;
     /** Per-user queue name (falls back to projectId). */
     userId: string;
+    /**
+     * This chat is being used by a visitor with NO account, on a project whose
+     * owner allows that.
+     *
+     * It changes where the MCP tools point. A signed-in turn goes to the MCP
+     * server's root endpoint and authenticates with the caller's own token; an
+     * anonymous turn has no token to send, and an EMPTY one is worse than none
+     * (the server cannot identify a project from it, and an empty credential may
+     * be rejected by the provider before the request is even made). So an
+     * anonymous turn goes to the project-scoped endpoint instead, which is
+     * read-only, restricted to public records, and needs no credential at all.
+     */
+    anonymous?: boolean;
     platform: 'claude' | 'openai' | 'none';
     model?: string;
     serviceName?: string;
@@ -1676,6 +1740,22 @@ interface ChatHost {
         mime?: string;
         size?: number;
     }): Promise<any>;
+    /**
+     * The access group this file's records must be written at: the uploader's
+     * choice, which is the project default or a per-upload answer.
+     *
+     * Asked PER FILE, and asked AFTER ensureFileIndexRecord has run, because the
+     * host is what actually creates the "src::" record and it must report the
+     * group it really used. The engine threads the answer into the indexing
+     * prompts so the agent's own records land in the same group; a record saved
+     * under a different group is in a different table and never comes back with
+     * the rest of the file.
+     *
+     * Optional and may return a promise. A host without it (or one that returns
+     * nothing) gets "authorized", which is what every record used before the
+     * setting existed.
+     */
+    uploadAccessGroup?(storagePath: string): 'public' | 'authorized' | 'private' | undefined | Promise<'public' | 'authorized' | 'private' | undefined>;
     /** Map a relative path to the consumer's db storage key (e.g. uid-prefixed). */
     storagePathFor(relPath: string): string;
     getMimeType(name: string): string | null;
@@ -1773,12 +1853,63 @@ declare function getSplitChatHistory(params: {
     owner: string;
     platform: 'claude' | 'openai';
     userId?: string;
+    /**
+     * Scope the SURFACE fetch to this chat's own queue instead of "everything
+     * that is not the bg queue".
+     *
+     * Set for an ANONYMOUS visitor, and only for one. The backend identifies an
+     * unauthenticated caller as `ip + "(" + user_agent + ")"`, and the default
+     * surface fetch (queue_exclude, no queue) is scoped by exactly that string
+     * server side - so two anonymous visitors behind one NAT on the same browser
+     * build read each other's transcript, which is the thing per-device history
+     * exists to prevent. Reading the device's own queue instead scopes it by a
+     * value the client controls and the other device does not share.
+     *
+     * NOT used for a signed-in caller. Their turns are already scoped by their
+     * `sub`, and queue_exact would additionally hide any history sent under a
+     * different queue name than the current userId (an older fallback, a
+     * pre-rename row), which queue_exclude still returns.
+     *
+     * The queue name is unguessable but NOT secret: it travels on every request
+     * and queue listings are not user-scoped server side. Anonymous transcripts
+     * are non-confidential by construction.
+     */
+    scopeSurfaceToQueue?: boolean;
 }, fetchOptions: Record<string, any>, 
 /** Test seam: replaces getChatHistory. Not for production callers. */
 _fetchImpl?: typeof getChatHistory): Promise<SplitHistoryResult>;
+/**
+ * THE chat key. Every cache, every ownership stamp and every "is this turn for
+ * the chat on screen?" comparison is built here and nowhere else.
+ *
+ * It used to be written out by hand in four places. When a third segment was
+ * added for the chat identity - a browser can hold an anonymous conversation and
+ * a signed-in one on the SAME project, and the two must not share a cache - only
+ * one of those four was updated. The rest kept producing the two-segment form,
+ * so `key !== getHistoryCacheKey()` became permanently true: every send was
+ * treated as belonging to another project, the optimistic bubble and the
+ * "Thinking..." placeholder were never pushed, and nothing appeared until the
+ * server history caught up. One function, so a twin cannot drift again.
+ */
+declare function chatCacheKey(projectId: string | undefined, platform: string | undefined, userId?: string): string;
+/**
+ * The INDEXING scope key: project + platform, deliberately WITHOUT the identity.
+ *
+ * Claiming, stopping and cancelling a file's indexing are scoped per project and
+ * platform because a storage path is project-relative and one ChatSession serves
+ * every project. They are NOT per user: an anonymous visitor cannot upload or
+ * index at all, so there is no second identity to separate, and folding the
+ * identity in here would only have to be threaded through BgTaskEntry to no end.
+ *
+ * Kept separate from chatCacheKey ON PURPOSE. These two were the same string
+ * once, which is exactly how adding a segment to one silently broke the other.
+ */
+declare function indexScopeKey(projectId: string | undefined, platform: string | undefined): string;
 type MapHistoryOptions = {
     clearedAt: number;
     projectId: string;
+    /** Chat identity, so the `_ownerKey` stamp matches chatCacheKey(). */
+    userId?: string;
     /** View-side display formatter for "Indexing:/Reindexing: …" bubbles. */
     formatIndexingLabel: (name: string, mime?: string, size?: number | null, storagePath?: string, reindex?: boolean, continued?: boolean) => string;
 };
@@ -2714,6 +2845,19 @@ declare class ChatSession {
      */
     resumePolling(reason: string): Promise<void>;
     private _newLocalId;
+    /**
+     * The key every per-chat cache hangs off: the restored message cache, the
+     * hydrated-body memo, the live-index key and the per-file storage-path key.
+     *
+     * It carries the IDENTITY as well as the project and platform. A single
+     * browser can hold more than one conversation on one project without a
+     * reload — an anonymous visitor who signs in, or a dashboard user who logs
+     * out and back in as someone else — and with an identity-free key the
+     * previous conversation stayed in the cache and was re-rendered, and written
+     * back, as the new one's. `userId` is the same value the request queue is
+     * named after, so two identities that share a queue share a cache, which is
+     * exactly right.
+     */
     getHistoryCacheKey(): string;
     private _hydratedBodies;
     private _hydratingItems;
@@ -3120,4 +3264,4 @@ declare class ChatSession {
     bumpGate(): void;
 }
 
-export { type AiAgentPlatform, type AnchorBoxEl, type AnchorRowEl, type AttachmentFailureGroup, type AttachmentParser, type AttachmentSaveInfo, BG_INDEXING_QUEUE_SUFFIX, BOM, BOM_EXTS, type BgTaskEntry, type BoundedChatOptions, type BuildDisplayListOptions, type BuildIndexingUserMessageOptions, CLAUDE_INPUT_CAP_RATIO, CLAUDE_PER_REQUEST_INPUT_CAP, CONTEXT_WINDOW_BY_MODEL, CONTEXT_WINDOW_DEFAULT, type CallClaudeWithMcpParams, type ChatEngineConfig, type ChatGreetingParams, type ChatGreetingParts, type ChatHost, type ChatIdentity, type ChatMessage, ChatSession, type ChatState, type ChatSystemPromptParams, type ClaudeMcpServerRequest, type ClaudeMcpToolConfig, type ClaudeMessage, type ClaudeRole, type ComposedUserMessage, DEFAULT_CLAUDE_MODEL, DEFAULT_CONTEXT_WINDOW, DEFAULT_OPENAI_MODEL, type DisplayEntry, EMPTY_INDEXING_REPLY, EXPIRED_ATTACHMENT_URL_HOST, EXPIRED_ATTACHMENT_URL_ORIGIN, EXPIRED_LINK_REFRESH_EXPIRES_SECONDS, EXT_CONTENT_TYPES, type EncodingClass, type ExtractDirective, type FillHistoryViewportOptions, HISTORY_BUDGET_RATIO, HISTORY_FILL_SLACK_PX, HISTORY_TOKEN_BUDGET, HTML_EXTS, HTML_HEAD_WINDOW, IMAGE_PREVIEWS_PER_MESSAGE, INDEXING_COMPLETE_MARKER, INLINE_LINK_GLYPH, INLINE_LINK_UNAVAILABLE_GLYPH, INLINE_LINK_UNAVAILABLE_SUFFIX, INPUT_CAP_RATIO, type ImagePreviewContext, type IndexRunPatch, type IndexRunStatus, type IndexingAttachmentInfo, type IndexingFileRef, type IndexingGroup, type IndexingGroupStatus, type IndexingRequestRef, type IndexingSystemPromptParams, type InlineLinkContext, type InlineLinkMarkupOptions, type InlineLinkPart, LINK_LABEL_MAX_DISPLAY_CHARS, LINK_REFRESH_WINDOW_MS, MAX_CONCURRENT_BG_POLLS, MAX_HISTORY_FILL_PAGES, MAX_HISTORY_MESSAGES, MAX_OUTPUT_BY_MODEL, MAX_OUTPUT_TOKENS, MAX_PARSED_CONTENT_CHARS, MCP_NAME, MINT_CACHE_GENERATION, MIN_INPUT_TOKEN_BUDGET, MIN_PER_REQUEST_INPUT_CAP, type MapHistoryOptions, OUTPUT_TOKEN_RESERVE, type OpenAIMessage, POLL_INTERVAL, PRESIGN_SAFETY_MARGIN_MS, PREVIEWABLE_IMAGE_CONTENT_TYPES, PREVIEW_BROWSER_CACHE_SECONDS, PREVIEW_LAYOUT_BOX_SELECTOR, PREVIEW_URL_EXPIRES_SECONDS, type ParsedAiAgent, type PinnedDispatchContext, type PreviewImageEl, RENDER_FROM_TOKEN, RTF_EXTS, RUN_RECORD_WORKING_STALE_MS, type RenderableInlineLink, type RescueDecisionContext, type RowAnchor, type RunStubInfo, type ScrollAnchor, type ScrollAnchorOptions, TOOL_AND_RESPONSE_BUFFER, type VisionProfile, XML_EXTS, __resetSplitHistoryState, applyEncodingDeclaration, bgIndexingQueueName, buildAiAgentValue, buildBoundedChatMessages, buildChatDisplayList, buildChatGreeting, buildChatSystemPrompt, buildDisplayExpiredAttachmentHref, buildHistoryItemFullId, buildIndexingContinueMessage, buildIndexingRenderContinueTemplate, buildIndexingRenderMessage, buildIndexingSystemPrompt, buildIndexingUserMessage, buildIndexingWindowMessage, callClaudeWithMcp, callClaudeWithPublicMcp, callOpenAIWithPublicMcp, canonicalizePathForm, chatEngineConfig, classifyInlineLink, clearAttachmentParsers, clearImagePreviewCache, composeUserMessage, configureChatEngine, contentTypeForExt, createHistoryFiller, createInlineLinkRegex, createScrollAnchor, encodePathSegments, encodingClassForExt, ensureHtmlCharset, ensureXmlEncoding, escapeInlineHtml, escapeRtfNonAscii, estimateMessageTokens, estimateTextTokens, extOf, extractClaudeText, extractLastUserTextFromRequest, extractOpenAIText, extractRemotePathFromAttachmentHref, fetchLiveIndexingKeys, fillHistoryViewport, filterListByClearHorizon, findAttachmentParser, formatChatTimestamp, getAttachmentParsers, getChatHistory, getContextWindow, getErrorMessage, getExpiredAttachmentVisiblePath, getInputTokenBudget, getMaxOutputTokens, getModelContextWindow, getProjectContextWindow, getSplitChatHistory, getVisionProfile, groupAttachmentFailures, hasBom, hydrateImagePreviews, indexDoneUniqueId, isAuthExpiredError, isBgIndexingQueue, isErrorResponseBody, isHttpUrlLike, isIndexingRequestText, isLinkUnavailable, isNonRetryableRequestError, isOfficeFile, isPreviewableImagePath, isProviderApiKeyError, isServerExtractable, isServiceDbAttachmentHref, linkUnavailableKeyForHref, linkUnavailableKeyForPath, linkUnavailableKeysForPath, listClaudeModels, listOpenAIModels, looksLikeRtf, makeExtractPlaceholder, mapHistoryListToMessages, markImagePreviewStale, mintCacheBustStamp, needsBomForExt, normalizeAttachmentPathCandidate, normalizeExt, normalizeTextContent, normalizeTrailingInlineToken, notifyAgentSaveAttachment, parseAiAgentValue, parseAttachmentContent, parseIndexingLabel, parseIndexingRequestText, peekImagePreviewUrl, prepareDownloadText, presignExpiryEpochMs, previewImageContentType, previewLayoutBox, previewMintCacheToken, previewableExtOf, readExpiredAttachmentHref, registerAttachmentParser, registerModelContextWindows, renderInlineLinkHtml, repairUrlEntities, repairUrlWhitespace, resolveImagePreviewUrl, runIndexUniqueId, safeDecodeURIComponent, sanitizeAttachmentLinksForHistory, setProjectContextWindow, shouldRescueInFlightMessage, stripFileBlocksFromHistory, transformContentWithImages, transformContentWithOpenAIImages, truncateLabelForDisplay, upsertIndexRunRecordSafe, wallClockNow };
+export { type AiAgentPlatform, type AnchorBoxEl, type AnchorRowEl, type AttachmentFailureGroup, type AttachmentParser, type AttachmentSaveInfo, BG_INDEXING_QUEUE_SUFFIX, BOM, BOM_EXTS, type BgTaskEntry, type BoundedChatOptions, type BuildDisplayListOptions, type BuildIndexingUserMessageOptions, CLAUDE_INPUT_CAP_RATIO, CLAUDE_PER_REQUEST_INPUT_CAP, CONTEXT_WINDOW_BY_MODEL, CONTEXT_WINDOW_DEFAULT, type CallClaudeWithMcpParams, type ChatEngineConfig, type ChatGreetingParams, type ChatGreetingParts, type ChatHost, type ChatIdentity, type ChatMessage, ChatSession, type ChatState, type ChatSystemPromptParams, type ClaudeMcpServerRequest, type ClaudeMcpToolConfig, type ClaudeMessage, type ClaudeRole, type ComposedUserMessage, DEFAULT_CLAUDE_MODEL, DEFAULT_CONTEXT_WINDOW, DEFAULT_OPENAI_MODEL, type DisplayEntry, EMPTY_INDEXING_REPLY, EXPIRED_ATTACHMENT_URL_HOST, EXPIRED_ATTACHMENT_URL_ORIGIN, EXPIRED_LINK_REFRESH_EXPIRES_SECONDS, EXT_CONTENT_TYPES, type EncodingClass, type ExtractDirective, type FillHistoryViewportOptions, HISTORY_BUDGET_RATIO, HISTORY_FILL_SLACK_PX, HISTORY_TOKEN_BUDGET, HTML_EXTS, HTML_HEAD_WINDOW, IMAGE_PREVIEWS_PER_MESSAGE, INDEXING_COMPLETE_MARKER, INLINE_LINK_GLYPH, INLINE_LINK_UNAVAILABLE_GLYPH, INLINE_LINK_UNAVAILABLE_SUFFIX, INPUT_CAP_RATIO, type ImagePreviewContext, type IndexRunPatch, type IndexRunStatus, type IndexingAttachmentInfo, type IndexingFileRef, type IndexingGroup, type IndexingGroupStatus, type IndexingRequestRef, type IndexingSystemPromptParams, type InlineLinkContext, type InlineLinkMarkupOptions, type InlineLinkPart, LINK_LABEL_MAX_DISPLAY_CHARS, LINK_REFRESH_WINDOW_MS, MAX_CONCURRENT_BG_POLLS, MAX_HISTORY_FILL_PAGES, MAX_HISTORY_MESSAGES, MAX_OUTPUT_BY_MODEL, MAX_OUTPUT_TOKENS, MAX_PARSED_CONTENT_CHARS, MCP_NAME, MINT_CACHE_GENERATION, MIN_INPUT_TOKEN_BUDGET, MIN_PER_REQUEST_INPUT_CAP, type MapHistoryOptions, OUTPUT_TOKEN_RESERVE, type OpenAIMessage, POLL_INTERVAL, PRESIGN_SAFETY_MARGIN_MS, PREVIEWABLE_IMAGE_CONTENT_TYPES, PREVIEW_BROWSER_CACHE_SECONDS, PREVIEW_LAYOUT_BOX_SELECTOR, PREVIEW_URL_EXPIRES_SECONDS, type ParsedAiAgent, type PinnedDispatchContext, type PreviewImageEl, RENDER_FROM_TOKEN, RTF_EXTS, RUN_RECORD_WORKING_STALE_MS, type RenderableInlineLink, type RescueDecisionContext, type RowAnchor, type RunStubInfo, type ScrollAnchor, type ScrollAnchorOptions, TOOL_AND_RESPONSE_BUFFER, type VisionProfile, XML_EXTS, __resetSplitHistoryState, applyEncodingDeclaration, bgIndexingQueueName, buildAiAgentValue, buildBoundedChatMessages, buildChatDisplayList, buildChatGreeting, buildChatSystemPrompt, buildDisplayExpiredAttachmentHref, buildHistoryItemFullId, buildIndexingContinueMessage, buildIndexingRenderContinueTemplate, buildIndexingRenderMessage, buildIndexingSystemPrompt, buildIndexingUserMessage, buildIndexingWindowMessage, callClaudeWithMcp, callClaudeWithPublicMcp, callOpenAIWithPublicMcp, canonicalizePathForm, chatCacheKey, chatEngineConfig, classifyInlineLink, clearAttachmentParsers, clearImagePreviewCache, composeUserMessage, configureChatEngine, contentTypeForExt, createHistoryFiller, createInlineLinkRegex, createScrollAnchor, encodePathSegments, encodingClassForExt, ensureHtmlCharset, ensureXmlEncoding, escapeInlineHtml, escapeRtfNonAscii, estimateMessageTokens, estimateTextTokens, extOf, extractClaudeText, extractLastUserTextFromRequest, extractOpenAIText, extractRemotePathFromAttachmentHref, fetchLiveIndexingKeys, fillHistoryViewport, filterListByClearHorizon, findAttachmentParser, formatChatTimestamp, getAttachmentParsers, getChatHistory, getContextWindow, getErrorMessage, getExpiredAttachmentVisiblePath, getInputTokenBudget, getMaxOutputTokens, getModelContextWindow, getProjectContextWindow, getSplitChatHistory, getVisionProfile, groupAttachmentFailures, hasBom, hydrateImagePreviews, indexDoneUniqueId, indexScopeKey, indexingAccessGroup, isAuthExpiredError, isBgIndexingQueue, isErrorResponseBody, isHttpUrlLike, isIndexingRequestText, isLinkUnavailable, isNonRetryableRequestError, isOfficeFile, isPreviewableImagePath, isProviderApiKeyError, isServerExtractable, isServiceDbAttachmentHref, linkUnavailableKeyForHref, linkUnavailableKeyForPath, linkUnavailableKeysForPath, listClaudeModels, listOpenAIModels, looksLikeRtf, makeExtractPlaceholder, mapHistoryListToMessages, markImagePreviewStale, mintCacheBustStamp, needsBomForExt, normalizeAttachmentPathCandidate, normalizeExt, normalizeTextContent, normalizeTrailingInlineToken, notifyAgentSaveAttachment, parseAiAgentValue, parseAttachmentContent, parseIndexingLabel, parseIndexingRequestText, peekImagePreviewUrl, prepareDownloadText, presignExpiryEpochMs, previewImageContentType, previewLayoutBox, previewMintCacheToken, previewableExtOf, readExpiredAttachmentHref, registerAttachmentParser, registerModelContextWindows, renderInlineLinkHtml, repairUrlEntities, repairUrlWhitespace, resolveImagePreviewUrl, runIndexUniqueId, safeDecodeURIComponent, sanitizeAttachmentLinksForHistory, setProjectContextWindow, shouldRescueInFlightMessage, stripFileBlocksFromHistory, transformContentWithImages, transformContentWithOpenAIImages, truncateLabelForDisplay, upsertIndexRunRecordSafe, wallClockNow };

package/dist/engine.d.ts

@@ -279,6 +279,18 @@ type ChatSystemPromptParams = {
      * given when the caller says which one this is.
      */
     client?: 'console' | 'widget';
+    /**
+     * The access group THIS project's indexer writes its records at, from the
+     * project's `default_access_group` setting.
+     *
+     * The MCP auto-fills an index/tag query that names a table but no group with
+     * "authorized", which used to be right because every BunnyQuery record was
+     * hardcoded to it. Now a project can index at "public" (so an anonymous
+     * visitor can read it) or "private", and on those projects the auto-fill
+     * silently searches a group the data is not in and answers "nothing found".
+     * Defaults to 'authorized', which is what an unset project still uses.
+     */
+    indexAccessGroup?: string;
 };
 declare function buildChatSystemPrompt(params: ChatSystemPromptParams): string;
 
@@ -297,6 +309,13 @@ type IndexingSystemPromptParams = {
     serviceName?: string;
     /** Project description. When present, name + description are appended. */
     serviceDescription?: string;
+    /**
+     * Access group every record written during this run must carry. Chosen by the
+     * uploader (project default, or a per-upload prompt) and already applied to
+     * the "src::" file record before indexing starts. Defaults to "authorized",
+     * which is what every record written before this setting existed used.
+     */
+    accessGroup?: 'public' | 'authorized' | 'private';
 };
 declare function buildIndexingSystemPrompt(params: IndexingSystemPromptParams): string;
 
@@ -321,6 +340,18 @@ type IndexingAttachmentInfo = {
     size?: number;
     /** Temporary signed URL the agent/MCP fetches to read the file contents. */
     url: string;
+    /**
+     * Access group every record extracted from this file must be written at.
+     *
+     * The uploader chooses it (project default, or a per-upload prompt), and the
+     * `src::` file record is already created at this group before indexing starts.
+     * The rows, chapters and summaries the agent writes have to MATCH it: skapi's
+     * access group is part of a record's table key, so a public file whose rows
+     * were saved as "authorized" is a file an anonymous visitor can see the name
+     * of and none of the contents of. Omitted means "authorized", which is what
+     * every record written before this setting existed used.
+     */
+    accessGroup?: 'public' | 'authorized' | 'private';
 };
 type BuildIndexingUserMessageOptions = {
     /**
@@ -343,6 +374,13 @@ type BuildIndexingUserMessageOptions = {
      */
     pagedRead?: boolean;
 };
+/**
+ * The access group to write this file's records at. One place, so the user
+ * message, the continue message and the system prompt cannot disagree.
+ */
+declare function indexingAccessGroup(attachment: {
+    accessGroup?: string;
+}): 'public' | 'authorized' | 'private';
 declare function buildIndexingUserMessage(attachment: IndexingAttachmentInfo, options?: BuildIndexingUserMessageOptions): string;
 /**
  * Token the WORKER substitutes with the 1-based first page of the window it is about to
@@ -1248,8 +1286,14 @@ type CallClaudeWithMcpParams = {
 declare const POLL_INTERVAL = 3000;
 declare const MAX_CONCURRENT_BG_POLLS = 6;
 declare function callClaudeWithMcp({ prompt, messages, service, owner, userId, model, maxTokens, system, mcpServer, extractContent, fileUrls, }: CallClaudeWithMcpParams): Promise<any>;
-declare function callClaudeWithPublicMcp(prompt: string, service: string, owner: string, messages?: ClaudeMessage[], system?: string, model?: string, userId?: string, extractContent?: ExtractDirective[], fileUrls?: FileUrlDirective[], onResponse?: (res: any) => void, onError?: (err: any) => void): Promise<any>;
-declare function callOpenAIWithPublicMcp(prompt: string, service: string, owner: string, messages?: OpenAIMessage[], system?: string, model?: string, userId?: string, extractContent?: ExtractDirective[], fileUrls?: FileUrlDirective[], onResponse?: (res: any) => void, onError?: (err: any) => void): Promise<any>;
+declare function callClaudeWithPublicMcp(prompt: string, service: string, owner: string, messages?: ClaudeMessage[], system?: string, model?: string, userId?: string, extractContent?: ExtractDirective[], fileUrls?: FileUrlDirective[], onResponse?: (res: any) => void, onError?: (err: any) => void, mcpScope?: {
+    anonymous?: boolean;
+    publicProjectId?: string;
+}): Promise<any>;
+declare function callOpenAIWithPublicMcp(prompt: string, service: string, owner: string, messages?: OpenAIMessage[], system?: string, model?: string, userId?: string, extractContent?: ExtractDirective[], fileUrls?: FileUrlDirective[], onResponse?: (res: any) => void, onError?: (err: any) => void, mcpScope?: {
+    anonymous?: boolean;
+    publicProjectId?: string;
+}): Promise<any>;
 type AttachmentSaveInfo = {
     platform: 'claude' | 'openai';
     model?: string;
@@ -1276,6 +1320,13 @@ type AttachmentSaveInfo = {
         mime?: string;
         size?: number;
         url: string;
+        /**
+         * Access group this file's records are written at (the uploader's choice,
+         * already applied to the "src::" record). Threaded into the indexing
+         * prompts so the agent's own records land in the same group; omitted
+         * means "authorized", the group everything used before the setting existed.
+         */
+        accessGroup?: 'public' | 'authorized' | 'private';
     };
     /**
      * Content parsed CLIENT-SIDE by an attachment-parser plugin (e.g. an .hwp
@@ -1453,6 +1504,19 @@ interface ChatIdentity {
     owner: string;
     /** Per-user queue name (falls back to projectId). */
     userId: string;
+    /**
+     * This chat is being used by a visitor with NO account, on a project whose
+     * owner allows that.
+     *
+     * It changes where the MCP tools point. A signed-in turn goes to the MCP
+     * server's root endpoint and authenticates with the caller's own token; an
+     * anonymous turn has no token to send, and an EMPTY one is worse than none
+     * (the server cannot identify a project from it, and an empty credential may
+     * be rejected by the provider before the request is even made). So an
+     * anonymous turn goes to the project-scoped endpoint instead, which is
+     * read-only, restricted to public records, and needs no credential at all.
+     */
+    anonymous?: boolean;
     platform: 'claude' | 'openai' | 'none';
     model?: string;
     serviceName?: string;
@@ -1676,6 +1740,22 @@ interface ChatHost {
         mime?: string;
         size?: number;
     }): Promise<any>;
+    /**
+     * The access group this file's records must be written at: the uploader's
+     * choice, which is the project default or a per-upload answer.
+     *
+     * Asked PER FILE, and asked AFTER ensureFileIndexRecord has run, because the
+     * host is what actually creates the "src::" record and it must report the
+     * group it really used. The engine threads the answer into the indexing
+     * prompts so the agent's own records land in the same group; a record saved
+     * under a different group is in a different table and never comes back with
+     * the rest of the file.
+     *
+     * Optional and may return a promise. A host without it (or one that returns
+     * nothing) gets "authorized", which is what every record used before the
+     * setting existed.
+     */
+    uploadAccessGroup?(storagePath: string): 'public' | 'authorized' | 'private' | undefined | Promise<'public' | 'authorized' | 'private' | undefined>;
     /** Map a relative path to the consumer's db storage key (e.g. uid-prefixed). */
     storagePathFor(relPath: string): string;
     getMimeType(name: string): string | null;
@@ -1773,12 +1853,63 @@ declare function getSplitChatHistory(params: {
     owner: string;
     platform: 'claude' | 'openai';
     userId?: string;
+    /**
+     * Scope the SURFACE fetch to this chat's own queue instead of "everything
+     * that is not the bg queue".
+     *
+     * Set for an ANONYMOUS visitor, and only for one. The backend identifies an
+     * unauthenticated caller as `ip + "(" + user_agent + ")"`, and the default
+     * surface fetch (queue_exclude, no queue) is scoped by exactly that string
+     * server side - so two anonymous visitors behind one NAT on the same browser
+     * build read each other's transcript, which is the thing per-device history
+     * exists to prevent. Reading the device's own queue instead scopes it by a
+     * value the client controls and the other device does not share.
+     *
+     * NOT used for a signed-in caller. Their turns are already scoped by their
+     * `sub`, and queue_exact would additionally hide any history sent under a
+     * different queue name than the current userId (an older fallback, a
+     * pre-rename row), which queue_exclude still returns.
+     *
+     * The queue name is unguessable but NOT secret: it travels on every request
+     * and queue listings are not user-scoped server side. Anonymous transcripts
+     * are non-confidential by construction.
+     */
+    scopeSurfaceToQueue?: boolean;
 }, fetchOptions: Record<string, any>, 
 /** Test seam: replaces getChatHistory. Not for production callers. */
 _fetchImpl?: typeof getChatHistory): Promise<SplitHistoryResult>;
+/**
+ * THE chat key. Every cache, every ownership stamp and every "is this turn for
+ * the chat on screen?" comparison is built here and nowhere else.
+ *
+ * It used to be written out by hand in four places. When a third segment was
+ * added for the chat identity - a browser can hold an anonymous conversation and
+ * a signed-in one on the SAME project, and the two must not share a cache - only
+ * one of those four was updated. The rest kept producing the two-segment form,
+ * so `key !== getHistoryCacheKey()` became permanently true: every send was
+ * treated as belonging to another project, the optimistic bubble and the
+ * "Thinking..." placeholder were never pushed, and nothing appeared until the
+ * server history caught up. One function, so a twin cannot drift again.
+ */
+declare function chatCacheKey(projectId: string | undefined, platform: string | undefined, userId?: string): string;
+/**
+ * The INDEXING scope key: project + platform, deliberately WITHOUT the identity.
+ *
+ * Claiming, stopping and cancelling a file's indexing are scoped per project and
+ * platform because a storage path is project-relative and one ChatSession serves
+ * every project. They are NOT per user: an anonymous visitor cannot upload or
+ * index at all, so there is no second identity to separate, and folding the
+ * identity in here would only have to be threaded through BgTaskEntry to no end.
+ *
+ * Kept separate from chatCacheKey ON PURPOSE. These two were the same string
+ * once, which is exactly how adding a segment to one silently broke the other.
+ */
+declare function indexScopeKey(projectId: string | undefined, platform: string | undefined): string;
 type MapHistoryOptions = {
     clearedAt: number;
     projectId: string;
+    /** Chat identity, so the `_ownerKey` stamp matches chatCacheKey(). */
+    userId?: string;
     /** View-side display formatter for "Indexing:/Reindexing: …" bubbles. */
     formatIndexingLabel: (name: string, mime?: string, size?: number | null, storagePath?: string, reindex?: boolean, continued?: boolean) => string;
 };
@@ -2714,6 +2845,19 @@ declare class ChatSession {
      */
     resumePolling(reason: string): Promise<void>;
     private _newLocalId;
+    /**
+     * The key every per-chat cache hangs off: the restored message cache, the
+     * hydrated-body memo, the live-index key and the per-file storage-path key.
+     *
+     * It carries the IDENTITY as well as the project and platform. A single
+     * browser can hold more than one conversation on one project without a
+     * reload — an anonymous visitor who signs in, or a dashboard user who logs
+     * out and back in as someone else — and with an identity-free key the
+     * previous conversation stayed in the cache and was re-rendered, and written
+     * back, as the new one's. `userId` is the same value the request queue is
+     * named after, so two identities that share a queue share a cache, which is
+     * exactly right.
+     */
     getHistoryCacheKey(): string;
     private _hydratedBodies;
     private _hydratingItems;
@@ -3120,4 +3264,4 @@ declare class ChatSession {
     bumpGate(): void;
 }
 
-export { type AiAgentPlatform, type AnchorBoxEl, type AnchorRowEl, type AttachmentFailureGroup, type AttachmentParser, type AttachmentSaveInfo, BG_INDEXING_QUEUE_SUFFIX, BOM, BOM_EXTS, type BgTaskEntry, type BoundedChatOptions, type BuildDisplayListOptions, type BuildIndexingUserMessageOptions, CLAUDE_INPUT_CAP_RATIO, CLAUDE_PER_REQUEST_INPUT_CAP, CONTEXT_WINDOW_BY_MODEL, CONTEXT_WINDOW_DEFAULT, type CallClaudeWithMcpParams, type ChatEngineConfig, type ChatGreetingParams, type ChatGreetingParts, type ChatHost, type ChatIdentity, type ChatMessage, ChatSession, type ChatState, type ChatSystemPromptParams, type ClaudeMcpServerRequest, type ClaudeMcpToolConfig, type ClaudeMessage, type ClaudeRole, type ComposedUserMessage, DEFAULT_CLAUDE_MODEL, DEFAULT_CONTEXT_WINDOW, DEFAULT_OPENAI_MODEL, type DisplayEntry, EMPTY_INDEXING_REPLY, EXPIRED_ATTACHMENT_URL_HOST, EXPIRED_ATTACHMENT_URL_ORIGIN, EXPIRED_LINK_REFRESH_EXPIRES_SECONDS, EXT_CONTENT_TYPES, type EncodingClass, type ExtractDirective, type FillHistoryViewportOptions, HISTORY_BUDGET_RATIO, HISTORY_FILL_SLACK_PX, HISTORY_TOKEN_BUDGET, HTML_EXTS, HTML_HEAD_WINDOW, IMAGE_PREVIEWS_PER_MESSAGE, INDEXING_COMPLETE_MARKER, INLINE_LINK_GLYPH, INLINE_LINK_UNAVAILABLE_GLYPH, INLINE_LINK_UNAVAILABLE_SUFFIX, INPUT_CAP_RATIO, type ImagePreviewContext, type IndexRunPatch, type IndexRunStatus, type IndexingAttachmentInfo, type IndexingFileRef, type IndexingGroup, type IndexingGroupStatus, type IndexingRequestRef, type IndexingSystemPromptParams, type InlineLinkContext, type InlineLinkMarkupOptions, type InlineLinkPart, LINK_LABEL_MAX_DISPLAY_CHARS, LINK_REFRESH_WINDOW_MS, MAX_CONCURRENT_BG_POLLS, MAX_HISTORY_FILL_PAGES, MAX_HISTORY_MESSAGES, MAX_OUTPUT_BY_MODEL, MAX_OUTPUT_TOKENS, MAX_PARSED_CONTENT_CHARS, MCP_NAME, MINT_CACHE_GENERATION, MIN_INPUT_TOKEN_BUDGET, MIN_PER_REQUEST_INPUT_CAP, type MapHistoryOptions, OUTPUT_TOKEN_RESERVE, type OpenAIMessage, POLL_INTERVAL, PRESIGN_SAFETY_MARGIN_MS, PREVIEWABLE_IMAGE_CONTENT_TYPES, PREVIEW_BROWSER_CACHE_SECONDS, PREVIEW_LAYOUT_BOX_SELECTOR, PREVIEW_URL_EXPIRES_SECONDS, type ParsedAiAgent, type PinnedDispatchContext, type PreviewImageEl, RENDER_FROM_TOKEN, RTF_EXTS, RUN_RECORD_WORKING_STALE_MS, type RenderableInlineLink, type RescueDecisionContext, type RowAnchor, type RunStubInfo, type ScrollAnchor, type ScrollAnchorOptions, TOOL_AND_RESPONSE_BUFFER, type VisionProfile, XML_EXTS, __resetSplitHistoryState, applyEncodingDeclaration, bgIndexingQueueName, buildAiAgentValue, buildBoundedChatMessages, buildChatDisplayList, buildChatGreeting, buildChatSystemPrompt, buildDisplayExpiredAttachmentHref, buildHistoryItemFullId, buildIndexingContinueMessage, buildIndexingRenderContinueTemplate, buildIndexingRenderMessage, buildIndexingSystemPrompt, buildIndexingUserMessage, buildIndexingWindowMessage, callClaudeWithMcp, callClaudeWithPublicMcp, callOpenAIWithPublicMcp, canonicalizePathForm, chatEngineConfig, classifyInlineLink, clearAttachmentParsers, clearImagePreviewCache, composeUserMessage, configureChatEngine, contentTypeForExt, createHistoryFiller, createInlineLinkRegex, createScrollAnchor, encodePathSegments, encodingClassForExt, ensureHtmlCharset, ensureXmlEncoding, escapeInlineHtml, escapeRtfNonAscii, estimateMessageTokens, estimateTextTokens, extOf, extractClaudeText, extractLastUserTextFromRequest, extractOpenAIText, extractRemotePathFromAttachmentHref, fetchLiveIndexingKeys, fillHistoryViewport, filterListByClearHorizon, findAttachmentParser, formatChatTimestamp, getAttachmentParsers, getChatHistory, getContextWindow, getErrorMessage, getExpiredAttachmentVisiblePath, getInputTokenBudget, getMaxOutputTokens, getModelContextWindow, getProjectContextWindow, getSplitChatHistory, getVisionProfile, groupAttachmentFailures, hasBom, hydrateImagePreviews, indexDoneUniqueId, isAuthExpiredError, isBgIndexingQueue, isErrorResponseBody, isHttpUrlLike, isIndexingRequestText, isLinkUnavailable, isNonRetryableRequestError, isOfficeFile, isPreviewableImagePath, isProviderApiKeyError, isServerExtractable, isServiceDbAttachmentHref, linkUnavailableKeyForHref, linkUnavailableKeyForPath, linkUnavailableKeysForPath, listClaudeModels, listOpenAIModels, looksLikeRtf, makeExtractPlaceholder, mapHistoryListToMessages, markImagePreviewStale, mintCacheBustStamp, needsBomForExt, normalizeAttachmentPathCandidate, normalizeExt, normalizeTextContent, normalizeTrailingInlineToken, notifyAgentSaveAttachment, parseAiAgentValue, parseAttachmentContent, parseIndexingLabel, parseIndexingRequestText, peekImagePreviewUrl, prepareDownloadText, presignExpiryEpochMs, previewImageContentType, previewLayoutBox, previewMintCacheToken, previewableExtOf, readExpiredAttachmentHref, registerAttachmentParser, registerModelContextWindows, renderInlineLinkHtml, repairUrlEntities, repairUrlWhitespace, resolveImagePreviewUrl, runIndexUniqueId, safeDecodeURIComponent, sanitizeAttachmentLinksForHistory, setProjectContextWindow, shouldRescueInFlightMessage, stripFileBlocksFromHistory, transformContentWithImages, transformContentWithOpenAIImages, truncateLabelForDisplay, upsertIndexRunRecordSafe, wallClockNow };
+export { type AiAgentPlatform, type AnchorBoxEl, type AnchorRowEl, type AttachmentFailureGroup, type AttachmentParser, type AttachmentSaveInfo, BG_INDEXING_QUEUE_SUFFIX, BOM, BOM_EXTS, type BgTaskEntry, type BoundedChatOptions, type BuildDisplayListOptions, type BuildIndexingUserMessageOptions, CLAUDE_INPUT_CAP_RATIO, CLAUDE_PER_REQUEST_INPUT_CAP, CONTEXT_WINDOW_BY_MODEL, CONTEXT_WINDOW_DEFAULT, type CallClaudeWithMcpParams, type ChatEngineConfig, type ChatGreetingParams, type ChatGreetingParts, type ChatHost, type ChatIdentity, type ChatMessage, ChatSession, type ChatState, type ChatSystemPromptParams, type ClaudeMcpServerRequest, type ClaudeMcpToolConfig, type ClaudeMessage, type ClaudeRole, type ComposedUserMessage, DEFAULT_CLAUDE_MODEL, DEFAULT_CONTEXT_WINDOW, DEFAULT_OPENAI_MODEL, type DisplayEntry, EMPTY_INDEXING_REPLY, EXPIRED_ATTACHMENT_URL_HOST, EXPIRED_ATTACHMENT_URL_ORIGIN, EXPIRED_LINK_REFRESH_EXPIRES_SECONDS, EXT_CONTENT_TYPES, type EncodingClass, type ExtractDirective, type FillHistoryViewportOptions, HISTORY_BUDGET_RATIO, HISTORY_FILL_SLACK_PX, HISTORY_TOKEN_BUDGET, HTML_EXTS, HTML_HEAD_WINDOW, IMAGE_PREVIEWS_PER_MESSAGE, INDEXING_COMPLETE_MARKER, INLINE_LINK_GLYPH, INLINE_LINK_UNAVAILABLE_GLYPH, INLINE_LINK_UNAVAILABLE_SUFFIX, INPUT_CAP_RATIO, type ImagePreviewContext, type IndexRunPatch, type IndexRunStatus, type IndexingAttachmentInfo, type IndexingFileRef, type IndexingGroup, type IndexingGroupStatus, type IndexingRequestRef, type IndexingSystemPromptParams, type InlineLinkContext, type InlineLinkMarkupOptions, type InlineLinkPart, LINK_LABEL_MAX_DISPLAY_CHARS, LINK_REFRESH_WINDOW_MS, MAX_CONCURRENT_BG_POLLS, MAX_HISTORY_FILL_PAGES, MAX_HISTORY_MESSAGES, MAX_OUTPUT_BY_MODEL, MAX_OUTPUT_TOKENS, MAX_PARSED_CONTENT_CHARS, MCP_NAME, MINT_CACHE_GENERATION, MIN_INPUT_TOKEN_BUDGET, MIN_PER_REQUEST_INPUT_CAP, type MapHistoryOptions, OUTPUT_TOKEN_RESERVE, type OpenAIMessage, POLL_INTERVAL, PRESIGN_SAFETY_MARGIN_MS, PREVIEWABLE_IMAGE_CONTENT_TYPES, PREVIEW_BROWSER_CACHE_SECONDS, PREVIEW_LAYOUT_BOX_SELECTOR, PREVIEW_URL_EXPIRES_SECONDS, type ParsedAiAgent, type PinnedDispatchContext, type PreviewImageEl, RENDER_FROM_TOKEN, RTF_EXTS, RUN_RECORD_WORKING_STALE_MS, type RenderableInlineLink, type RescueDecisionContext, type RowAnchor, type RunStubInfo, type ScrollAnchor, type ScrollAnchorOptions, TOOL_AND_RESPONSE_BUFFER, type VisionProfile, XML_EXTS, __resetSplitHistoryState, applyEncodingDeclaration, bgIndexingQueueName, buildAiAgentValue, buildBoundedChatMessages, buildChatDisplayList, buildChatGreeting, buildChatSystemPrompt, buildDisplayExpiredAttachmentHref, buildHistoryItemFullId, buildIndexingContinueMessage, buildIndexingRenderContinueTemplate, buildIndexingRenderMessage, buildIndexingSystemPrompt, buildIndexingUserMessage, buildIndexingWindowMessage, callClaudeWithMcp, callClaudeWithPublicMcp, callOpenAIWithPublicMcp, canonicalizePathForm, chatCacheKey, chatEngineConfig, classifyInlineLink, clearAttachmentParsers, clearImagePreviewCache, composeUserMessage, configureChatEngine, contentTypeForExt, createHistoryFiller, createInlineLinkRegex, createScrollAnchor, encodePathSegments, encodingClassForExt, ensureHtmlCharset, ensureXmlEncoding, escapeInlineHtml, escapeRtfNonAscii, estimateMessageTokens, estimateTextTokens, extOf, extractClaudeText, extractLastUserTextFromRequest, extractOpenAIText, extractRemotePathFromAttachmentHref, fetchLiveIndexingKeys, fillHistoryViewport, filterListByClearHorizon, findAttachmentParser, formatChatTimestamp, getAttachmentParsers, getChatHistory, getContextWindow, getErrorMessage, getExpiredAttachmentVisiblePath, getInputTokenBudget, getMaxOutputTokens, getModelContextWindow, getProjectContextWindow, getSplitChatHistory, getVisionProfile, groupAttachmentFailures, hasBom, hydrateImagePreviews, indexDoneUniqueId, indexScopeKey, indexingAccessGroup, isAuthExpiredError, isBgIndexingQueue, isErrorResponseBody, isHttpUrlLike, isIndexingRequestText, isLinkUnavailable, isNonRetryableRequestError, isOfficeFile, isPreviewableImagePath, isProviderApiKeyError, isServerExtractable, isServiceDbAttachmentHref, linkUnavailableKeyForHref, linkUnavailableKeyForPath, linkUnavailableKeysForPath, listClaudeModels, listOpenAIModels, looksLikeRtf, makeExtractPlaceholder, mapHistoryListToMessages, markImagePreviewStale, mintCacheBustStamp, needsBomForExt, normalizeAttachmentPathCandidate, normalizeExt, normalizeTextContent, normalizeTrailingInlineToken, notifyAgentSaveAttachment, parseAiAgentValue, parseAttachmentContent, parseIndexingLabel, parseIndexingRequestText, peekImagePreviewUrl, prepareDownloadText, presignExpiryEpochMs, previewImageContentType, previewLayoutBox, previewMintCacheToken, previewableExtOf, readExpiredAttachmentHref, registerAttachmentParser, registerModelContextWindows, renderInlineLinkHtml, repairUrlEntities, repairUrlWhitespace, resolveImagePreviewUrl, runIndexUniqueId, safeDecodeURIComponent, sanitizeAttachmentLinksForHistory, setProjectContextWindow, shouldRescueInFlightMessage, stripFileBlocksFromHistory, transformContentWithImages, transformContentWithOpenAIImages, truncateLabelForDisplay, upsertIndexRunRecordSafe, wallClockNow };