create-windy 0.9.1 → 0.10.0

package/template/apps/server/src/agent/session-runtime-composition.ts

@@ -1,6 +1,5 @@
+import { invalidateActorAuthorization } from "./session-invalidation/authorization-revocation.js";
 import type { ModuleManifest } from "@southwind-ai/modules";
-import { agentSourceInvalidations } from "@southwind-ai/database";
-import { and, desc, eq } from "drizzle-orm";
 import type { NodePgDatabase } from "drizzle-orm/node-postgres";
 import type { RequestActor } from "../guards.js";
 import type { createServerRuntime } from "../runtime.js";
@@ -30,7 +29,6 @@ import type { AgentRunAuthorizationStore } from "./run-authorization.js";
 import { AgentRunSessionBindingAuthorizer } from "./run-session-authorization.js";
 import { DrizzleSessionAuthoritativeSourceAccess } from "./session-context-source.js";
 import {
-  authorizationCoordinateForActor,
   ResolvingCurrentSourceAuthorizationPort,
   SessionProjectionSourceAuthorizer,
 } from "./session-projection-access.js";
@@ -215,51 +213,3 @@ export function composeAgentLongSessionRuntime(input: {
     },
   };
 }
-
-async function invalidateActorAuthorization(
-  input: AgentAuthorizationInvalidationInput,
-  sources: ModuleAuthoritativeSourceAccessRegistry,
-  outbox: DrizzleSessionInvalidationOutbox,
-) {
-  const authorization = authorizationCoordinateForActor(input.previousActor);
-  const sourceKind = "authorization-scope";
-  const [latest] = await input.database
-    .select({ sequence: agentSourceInvalidations.sequence })
-    .from(agentSourceInvalidations)
-    .where(
-      and(
-        eq(agentSourceInvalidations.sourceModuleKey, "system.agent"),
-        eq(agentSourceInvalidations.sourceKind, sourceKind),
-        eq(agentSourceInvalidations.sourceId, authorization.actorId),
-      ),
-    )
-    .orderBy(desc(agentSourceInvalidations.sequence))
-    .limit(1);
-  const occurredAt = Date.parse(input.occurredAt);
-  if (!Number.isSafeInteger(occurredAt) || occurredAt < 1) {
-    throw new Error("Agent 授权失效时间坐标无效");
-  }
-  const sequence = Math.max(occurredAt, (latest?.sequence ?? 0) + 1);
-  const producer = sources.bindInvalidationProducer({
-    moduleKey: "system.agent",
-    authorization,
-    append: {
-      append: (envelope) =>
-        outbox.appendInTransaction(input.database, envelope),
-    },
-  });
-  const result = await producer.authorizationRevoked({
-    source: {
-      sourceKind,
-      sourceId: authorization.actorId,
-      version: authorization.scopeDigest,
-      sequence,
-    },
-    event: {
-      eventId: input.eventId,
-      eventSequence: sequence,
-      occurredAt: input.occurredAt,
-    },
-  });
-  if (result === "stale") throw new Error("Agent 授权失效序列未收敛");
-}

package/template/apps/server/src/agent/unavailable-routes.ts

@@ -63,8 +63,19 @@ const unavailableRoutes = [
   ["GET", "/system/ai-runtime/actors"],
 ] as const;
 
-export function registerUnavailableAiRoutes(app: RouteApp): void {
-  registerUnavailableRoutes(app, unavailableRoutes, "AI Runtime 未启用");
+export function registerUnavailableAiRoutes(
+  app: RouteApp,
+  options?: { mediaAvailable: boolean },
+): void {
+  const routes = options?.mediaAvailable
+    ? unavailableRoutes.filter(
+        ([, path]) =>
+          path.startsWith("/agent/") ||
+          path.startsWith("/internal/agent/") ||
+          path.startsWith("/system/ai-runtime/"),
+      )
+    : unavailableRoutes;
+  registerUnavailableRoutes(app, routes, "AI Runtime 未启用");
   registerUnavailableRoutes(
     app,
     longSessionUnavailableRoutes,

package/template/apps/server/src/agent-workflow/runtime-composition.ts

@@ -98,6 +98,7 @@ export function composeProductionAgentWorkflowRuntime(input: {
   )
     return undefined;
   const resolveActor = input.resolveActor;
+  const agentFacade = input.agentFacade;
   const repository = new DrizzleAgentWorkflowRepository(input.db);
   const effectFence = new DrizzleWorkflowEffectCommandFence(input.db);
   const budgetLedger = new DrizzleWorkflowBudgetLedger(input.db);
@@ -105,6 +106,8 @@ export function composeProductionAgentWorkflowRuntime(input: {
     repository,
     effectFence,
     budgetLedger,
+    (operationKey) =>
+      agentFacade.operationPolicy(operationKey)?.release?.promptVersion,
   );
   const query = new AgentWorkflowQueryService(repository);
   const waitSignals = new AgentWorkflowWaitSignalService(repository);

package/template/apps/server/src/agent-workflow/service.ts

@@ -1,3 +1,4 @@
+import { AgentWorkflowCommandError } from "./command-error.js";
 import {
   budgetFitsWithin,
   type AgentWorkflowArtifactRef,
@@ -74,10 +75,25 @@ export class AgentWorkflowService {
     private readonly repository: AgentWorkflowRepository,
     private readonly effectFence: WorkflowEffectCommandFencePort,
     private readonly budgetLedger: WorkflowBudgetLedgerPort,
+    private readonly resolvePromptVersion?: (
+      operationKey: string,
+    ) => string | undefined,
   ) {}
 
   publish(input: PublishAgentWorkflowReleaseInput) {
-    return this.repository.publishRelease(buildAgentWorkflowRelease(input));
+    const release = buildAgentWorkflowRelease(input);
+    for (const node of release.definition.nodes) {
+      if (
+        node.type === "model" &&
+        this.resolvePromptVersion?.(node.operationKey) !== node.promptKey
+      ) {
+        throw new AgentWorkflowCommandError(
+          "MODEL_PROMPT_RELEASE_MISMATCH",
+          400,
+        );
+      }
+    }
+    return this.repository.publishRelease(release);
   }
 
   async createRun(input: CreateAgentWorkflowRunRequest) {

package/template/apps/server/src/ai-artifact/media-resource-route.test.ts

@@ -0,0 +1,134 @@
+import { createHash } from "node:crypto";
+import { systemModuleManifest } from "@southwind-ai/modules";
+import { expect, test } from "bun:test";
+import { initializeModuleHosts } from "../module-host/initialize.js";
+import {
+  restartActor,
+  restartModuleManifest,
+  restartUploadPolicy,
+} from "../module-host/storage-restart-fixture.test-support.js";
+import { createServerRuntime } from "../runtime.js";
+import { createStorageRuntime } from "../storage/runtime.js";
+import { createPlatformHttpApp } from "../http-app.js";
+import {
+  createManifestAuthorizedRouteApp,
+  createStaticRouteAuthorizer,
+} from "../module-host/static-route-authorization.js";
+import { createPlatformObservability } from "../observability/bootstrap.js";
+import { AiArtifactCodec } from "./codec.js";
+import { registerAiArtifactRoutes } from "./routes.js";
+import { AiArtifactRuntime } from "./runtime.js";
+
+test("关闭 Agent 后媒体 Artifact 仍读取受授权的上传文件，并在撤权后拒绝", async () => {
+  const actor = restartActor();
+  const manifest = {
+    ...restartModuleManifest,
+    apiPermissions: [],
+    tasks: [],
+    auditActions: [...restartModuleManifest.auditActions, "evidence.file.read"],
+  };
+  let active = true;
+  const hosts = await initializeModuleHosts({
+    modules: [manifest],
+    installations: [
+      {
+        manifest,
+        setup(host) {
+          host.registerUploadPolicy(restartUploadPolicy);
+          host.registerResourceFileAccessPolicies([
+            {
+              purpose: restartUploadPolicy.purpose,
+              resourceType: "evidence.document",
+              featureKey: "evidence.generate",
+              permissionKey: "evidence.generate.manage",
+              auditAction: "evidence.file.read",
+              authorize: () => active,
+            },
+          ]);
+        },
+      },
+    ],
+  });
+  const storage = createStorageRuntime({}, undefined, [restartUploadPolicy]);
+  const bytes = new TextEncoder().encode("synthetic OCR input");
+  const sha256 = createHash("sha256").update(bytes).digest("hex");
+  const session = await storage.uploads.create({
+    ownerId: actor.id,
+    purpose: restartUploadPolicy.purpose,
+    filename: "fixture.txt",
+    mimeType: "text/plain",
+    expectedByteSize: bytes.byteLength,
+  });
+  await storage.uploads.appendPart({
+    sessionId: session.id,
+    ownerId: actor.id,
+    partNumber: 0,
+    byteOffset: 0,
+    byteSize: bytes.byteLength,
+    sha256,
+    body: new Blob([bytes]).stream(),
+  });
+  const file = await storage.uploads.complete(session.id, actor.id);
+  const modules = [manifest, systemModuleManifest("system.media-runtime")];
+  const features = modules.flatMap((module) => module.features);
+  const runtime = createServerRuntime(
+    { NODE_ENV: "test" },
+    {
+      featureCatalog: features,
+      disabledFeatureKeys: new Set(["system.agent"]),
+      licenseEnforced: false,
+    },
+  );
+  const request = new Request("http://localhost/api/evidence");
+  const context = await runtime.createGuardContextForActor(request, actor);
+  const artifacts = new AiArtifactRuntime(
+    new AiArtifactCodec("test-media-secret".repeat(3)),
+    hosts,
+    runtime,
+    features,
+    storage,
+    async () => actor,
+  );
+  const reference = await artifacts
+    .createModulePort(manifest.name, context, request.signal)
+    .issue({
+      fileId: file.id,
+      purpose: restartUploadPolicy.purpose,
+      resourceType: "evidence.document",
+      resourceId: "synthetic",
+    });
+  const app = createPlatformHttpApp(
+    runtime,
+    createPlatformObservability({
+      databaseRequired: false,
+      auditStatus: () => runtime.auditSink.status(),
+      logger: { info() {} },
+    }),
+  );
+  registerAiArtifactRoutes(
+    createManifestAuthorizedRouteApp(
+      app,
+      createStaticRouteAuthorizer(runtime, modules),
+    ),
+    artifacts,
+    "internal-test-token",
+  );
+  const open = (token: string) =>
+    app.handle(
+      new Request("http://localhost/api/internal/ai/artifacts", {
+        headers: {
+          authorization: `Bearer ${token}`,
+          "x-ai-artifact-ref": reference.value,
+        },
+      }),
+    );
+
+  expect((await open("wrong-token")).status).toBe(403);
+  const opened = await open("internal-test-token");
+  expect(opened.status).toBe(200);
+  expect(opened.headers.get("x-content-sha256")).toBe(sha256);
+  expect(new Uint8Array(await opened.arrayBuffer())).toEqual(bytes);
+
+  active = false;
+  expect((await open("internal-test-token")).status).toBe(404);
+});

package/template/apps/server/src/ai-artifact/routes.ts

@@ -1,5 +1,5 @@
 import type { RouteApp } from "../system/route-types.js";
-import { validInternalToken } from "../agent/run-routes.js";
+import { validInternalToken } from "../ai-runtime-security/internal-token.js";
 import type { AiArtifactRuntime } from "./runtime.js";
 
 interface RouteContext {

package/template/apps/server/src/ai-artifact/runtime.ts

@@ -1,3 +1,4 @@
+import { evaluateFeatureGuard } from "../guards.js";
 import {
   ModuleAiArtifactError,
   type ModuleAiArtifactPort,
@@ -251,6 +252,17 @@ export class AiArtifactRuntime {
       request,
       actor,
     );
+    if (claims.source.resourceType === "agent-screenshot") {
+      const agent = this.features.find(({ key }) => key === "system.agent");
+      if (
+        !agent ||
+        !evaluateFeatureGuard(
+          guardContext,
+          await this.runtime.resolveFeature(guardContext, agent),
+        ).allowed
+      )
+        throw forbidden();
+    }
     const opened =
       claims.source.resourceType === "agent-screenshot"
         ? await openedScreenshot(

package/template/apps/server/src/ai-runtime-readiness/operation-port.test-support.ts

@@ -66,7 +66,7 @@ export function degradedSnapshot(capabilities = ["document.ocr"]) {
   };
 }
 
-function readinessManifest(): ModuleManifest {
+export function readinessManifest(): ModuleManifest {
   const manifest = documentManifest();
   const operation = manifest.aiOperations?.[0];
   if (!operation) throw new Error("测试 Manifest 缺少 Operation");

package/template/apps/server/src/ai-runtime-readiness/operation-port.ts

@@ -32,6 +32,7 @@ export function createModuleAiOperationReadinessPort(input: {
   readonly now?: () => Date;
   /** Tests may shorten the bound; production defaults to five seconds. */
   readonly probeTimeoutMs?: number;
+  readonly runtimeAllowed?: (kind: AiRuntimeKindV1) => Promise<boolean>;
   readonly trustStore?: AiRuntimeReadinessTrustStoreV1;
 }): ModuleAiOperationReadinessPortV1 {
   const operations = new Map(
@@ -92,6 +93,13 @@ export function createModuleAiOperationReadinessPort(input: {
             "RUNTIME_NOT_CONFIGURED",
           );
       }
+      if (input.runtimeAllowed && !(await input.runtimeAllowed(operation.kind)))
+        return unavailable(
+          operationKey,
+          operation.kind,
+          now(),
+          "RUNTIME_NOT_CONFIGURED",
+        );
       const deadlineController = new AbortController();
       const deadline = setTimeout(
         () => deadlineController.abort("ai-runtime-health-deadline"),

package/template/apps/server/src/ai-runtime-security/internal-token.ts

@@ -0,0 +1,14 @@
+import { timingSafeEqual } from "node:crypto";
+
+export function validInternalToken(
+  request: Request,
+  expected: string,
+): boolean {
+  const provided = request.headers
+    .get("authorization")
+    ?.replace(/^Bearer /, "");
+  if (!provided || !expected) return false;
+  const left = Buffer.from(provided);
+  const right = Buffer.from(expected);
+  return left.length === right.length && timingSafeEqual(left, right);
+}

package/template/apps/server/src/app/antivirus-composition.test.ts

@@ -0,0 +1,63 @@
+import { expect, test } from "bun:test";
+import { parseEnvironmentPolicy } from "@southwind-ai/shared";
+import { configureProjectAntivirus } from "./antivirus-composition.js";
+
+test("病毒扫描必须已交付且实际就绪", async () => {
+  const base = { schemaVersion: 1, build: { modules: [] }, features: [] };
+  expect(() =>
+    parseEnvironmentPolicy({
+      ...base,
+      antivirus: { packaged: false, enabled: true },
+    }),
+  ).toThrow("病毒扫描未随项目交付");
+  const { antivirus } = parseEnvironmentPolicy({
+    ...base,
+    antivirus: { packaged: true, enabled: true },
+  });
+  await expect(configureProjectAntivirus(antivirus)).rejects.toThrow(
+    "项目未装配扫描器",
+  );
+  await expect(
+    configureProjectAntivirus(antivirus, {
+      packaged: true,
+      configure: async () => "disabled",
+    }),
+  ).rejects.toThrow("未达到环境预设要求");
+  await configureProjectAntivirus(antivirus, {
+    packaged: true,
+    async configure(mode) {
+      expect(mode).toBe("required");
+      return "ready";
+    },
+  });
+});
+
+test("关闭扫描仍显式通知已交付的扫描执行器", async () => {
+  await configureProjectAntivirus(
+    { packaged: true, enabled: false },
+    {
+      packaged: true,
+      async configure(mode) {
+        expect(mode).toBe("disabled");
+        return "disabled";
+      },
+    },
+  );
+});
+
+test("扫描交付声明与项目装配不一致时拒绝启动", async () => {
+  let configured = false;
+  await expect(
+    configureProjectAntivirus(
+      { packaged: false, enabled: false },
+      {
+        packaged: true,
+        async configure() {
+          configured = true;
+          return "disabled";
+        },
+      },
+    ),
+  ).rejects.toThrow("项目已装配扫描器");
+  expect(configured).toBe(false);
+});

package/template/apps/server/src/app/antivirus-composition.ts

@@ -0,0 +1,29 @@
+import type { AntivirusEnvironmentPolicy } from "@southwind-ai/shared";
+
+export interface ProjectAntivirusBinding {
+  readonly packaged: boolean;
+  configure(mode: "disabled" | "required"): Promise<"disabled" | "ready">;
+}
+
+// Project composition supplies the scanner wired to its protected ingestion path.
+const projectAntivirusBinding: ProjectAntivirusBinding | undefined = undefined;
+
+export async function configureProjectAntivirus(
+  policy: AntivirusEnvironmentPolicy | undefined,
+  binding: ProjectAntivirusBinding | undefined = projectAntivirusBinding,
+): Promise<void> {
+  if (!policy) return;
+  if (policy.enabled && !policy.packaged)
+    throw new Error("病毒扫描未随项目交付，不能启用");
+  if (policy.packaged && !binding?.packaged)
+    throw new Error("环境预设声明了病毒扫描交付，但项目未装配扫描器");
+  if (!policy.packaged && binding?.packaged)
+    throw new Error("环境预设声明未交付病毒扫描，但项目已装配扫描器");
+  if (!binding?.packaged) return;
+  const state = await binding.configure(
+    policy.enabled ? "required" : "disabled",
+  );
+  if (state !== (policy.enabled ? "ready" : "disabled")) {
+    throw new Error("项目病毒扫描器未达到环境预设要求的状态");
+  }
+}

package/template/apps/server/src/app/dsh-workbench-socket-audit.test.ts

@@ -9,7 +9,8 @@ function opened(socket: WebSocket): Promise<void> {
       clearTimeout(timer);
       resolve();
     });
-    socket.once("error", () => {
+    // Bun can emit another error while tearing down a rejected upgrade.
+    socket.on("error", () => {
       clearTimeout(timer);
       reject(new Error("Socket rejected"));
     });

package/template/apps/server/src/configuration/definition.ts

@@ -93,9 +93,9 @@ export class PlatformConfigApplyAdapter {
         {
           path: "enableAI",
           label: "AI 能力总开关",
-          description: "控制 foundation 快照中的平台 AI 能力声明。",
+          description: "控制 AI 与 Agent 服务的装配。",
           input: "boolean",
-          applyMode: "live",
+          applyMode: "restart",
         },
         {
           path: "cache.healthTimeoutMs",
@@ -134,13 +134,16 @@ export class PlatformConfigApplyAdapter {
           1024,
           10 * 1024 ** 3,
         ),
-        integerField(
-          "storage.brandingLogoMaxByteSize",
-          "品牌 Logo 文件上限",
-          "品牌 Logo 上传的最大字节数。",
-          1024,
-          50 * 1024 ** 2,
-        ),
+        {
+          ...integerField(
+            "storage.brandingLogoMaxByteSize",
+            "品牌 Logo 上传上限",
+            "限制单个 Logo 文件的大小，控制上传流量和存储占用。",
+            1024,
+            50 * 1024 ** 2,
+          ),
+          unit: "bytes",
+        },
         restartBooleanField(
           "mail.enabled",
           "启用邮件传输配置",
@@ -174,8 +177,9 @@ export class PlatformConfigApplyAdapter {
         {
           path: "regional.timeZone",
           label: "显示时区",
-          description: "平台日期时间展示使用的 IANA 时区，例如 Asia/Shanghai。",
-          input: "text",
+          description:
+            "用于显示平台日期和时间。下拉选项显示当前 UTC 偏移，偏移可能随夏令时变化。",
+          input: "time-zone",
           applyMode: "live",
         },
       ],

package/template/apps/server/src/document/facade-support.ts

@@ -15,11 +15,11 @@ import type { createServerRuntime } from "../runtime.js";
 import {
   governProviderInput,
   ProviderInputGovernanceError,
-} from "../agent/provider-input-governance.js";
+} from "../ai-runtime-security/provider-input-governance.js";
 import {
   ExecutionGrantStore,
   type ExecutionGrant,
-} from "../agent/execution-grants.js";
+} from "../ai-runtime-security/execution-grants.js";
 import { DocumentRuntimeError } from "./contracts.js";
 import type { DocumentRuntimePort } from "./contracts.js";
 import { DocumentFacadeError } from "./errors.js";

package/template/apps/server/src/document/facade.ts

@@ -10,8 +10,8 @@ import type {
 } from "@southwind-ai/server-sdk";
 import { evaluateAccessGuards } from "../access-guards.js";
 import type { AiArtifactRuntime } from "../ai-artifact/runtime.js";
-import { ExecutionGrantStore } from "../agent/execution-grants.js";
-import { scopedRuntimeIdempotencyKey } from "../agent/idempotency-key.js";
+import { ExecutionGrantStore } from "../ai-runtime-security/execution-grants.js";
+import { scopedRuntimeIdempotencyKey } from "../ai-runtime-security/idempotency-key.js";
 import type { RequestGuardContext } from "../guards.js";
 import type { InitializedModuleHosts } from "../module-host.js";
 import { toModuleActor } from "../module-host.js";

package/template/apps/server/src/document/output-artifact-composition.ts

@@ -15,16 +15,20 @@ export function createDocumentOutputRuntime(input: {
   storage: ReturnType<typeof createStorageRuntime>;
   resolveActor: (actorId: string) => Promise<RequestActor | undefined>;
   db?: NodePgDatabase;
+  documentEnabled?: boolean;
+  speechEnabled?: boolean;
 }) {
   const referenceSecret =
     process.env.AI_OUTPUT_ARTIFACT_REFERENCE_SECRET?.trim();
   const identity = process.env.DOCUMENT_OUTPUT_ARTIFACT_SINK_IDENTITY?.trim();
   const releaseDigest =
     process.env.DOCUMENT_OUTPUT_ARTIFACT_SINK_RELEASE_DIGEST?.trim();
+  const bindings =
+    input.documentEnabled === false ? [] : documentOutputArtifactBindings;
+  const speechBindings =
+    input.speechEnabled === false ? [] : speechOutputArtifactBindings;
   const composition = {
-    bindingCount:
-      documentOutputArtifactBindings.length +
-      speechOutputArtifactBindings.length,
+    bindingCount: bindings.length + speechBindings.length,
     db: input.db,
     referenceSecret,
     sinkIdentity: identity,
@@ -33,8 +37,8 @@ export function createDocumentOutputRuntime(input: {
   if (!documentOutputCompositionReady(composition)) return undefined;
   return createDocumentOutputArtifactRuntime({
     modules: input.modules,
-    bindings: documentOutputArtifactBindings,
-    speechBindings: speechOutputArtifactBindings,
+    bindings,
+    speechBindings,
     readiness: input.readiness,
     runtime: input.runtime,
     storage: input.storage,

package/template/apps/server/src/document/output-artifact.test-support.ts

@@ -4,7 +4,7 @@ import type {
   ModuleAiOperationReadyV1,
 } from "@southwind-ai/server-sdk";
 import type { AiArtifactRuntime } from "../ai-artifact/runtime.js";
-import { ExecutionGrantStore } from "../agent/execution-grants.js";
+import { ExecutionGrantStore } from "../ai-runtime-security/execution-grants.js";
 import { buildScopeContext } from "../data-access/context.js";
 import { createRequestGuardContext, type RequestActor } from "../guards.js";
 import { initializeModuleHosts } from "../module-host.js";

package/template/apps/server/src/embedding/facade.ts

@@ -3,7 +3,7 @@ import type { ModuleManifest } from "@southwind-ai/modules";
 import { resolveProviderEgress } from "@southwind-ai/modules";
 import type { ModuleAiJsonValue } from "@southwind-ai/server-sdk";
 import type { AiArtifactRuntime } from "../ai-artifact/runtime.js";
-import { scopedRuntimeIdempotencyKey } from "../agent/idempotency-key.js";
+import { scopedRuntimeIdempotencyKey } from "../ai-runtime-security/idempotency-key.js";
 import type { RequestGuardContext } from "../guards.js";
 import type { InitializedModuleHosts } from "../module-host.js";
 import { toModuleActor } from "../module-host.js";

package/template/apps/server/src/embedding/input.ts

@@ -8,7 +8,7 @@ import type { RequestGuardContext } from "../guards.js";
 import {
   governProviderInput,
   ProviderInputGovernanceError,
-} from "../agent/provider-input-governance.js";
+} from "../ai-runtime-security/provider-input-governance.js";
 import type { EmbeddingRuntimeItem } from "./contracts.js";
 import { EmbeddingFacadeError } from "./error.js";
 

package/template/apps/server/src/embedding/routes.ts

@@ -5,7 +5,7 @@ import type {
 import type { RequestGuardContext } from "../guards.js";
 import type { RouteApp } from "../system/route-types.js";
 import { EmbeddingFacadeError } from "./error.js";
-import { validInternalToken } from "../agent/run-routes.js";
+import { validInternalToken } from "../ai-runtime-security/internal-token.js";
 import type { EmbeddingFacade } from "./facade.js";
 import type { EmbeddingFacadeItem } from "./input.js";