.github/9
ISSUE_TEMPLATE/3bug_report.md config.yml feature_request.md
workflows/3ci.yml clean-clone.yml release.yml
CODEOWNERS dependabot.yml pull_request_template.md
apps/630
api/250
src/243
common/30
__tests__/3authorize.test.ts bigint-serialization.interceptor.test.ts files-limits.test.ts
filters/1all-exceptions.filter.ts
guards/3auth.guard.ts internal-service.guard.ts rate-limit.guard.ts
interceptors/2actor-context.interceptor.ts bigint-serialization.interceptor.ts
middleware/2idempotency.test.ts idempotency.ts
pipes/1zod-validation.pipe.ts
actor-context.ts audit.service.ts cache.test.ts cache.ts cookies.ts core.module.ts deprecation.ts email.service.ts errors.ts event-bus.ts log-scrubber.test.ts log-scrubber.ts logger.ts permission-cache-bridge.ts prisma.service.ts redis.service.ts trace-metadata.ts types.ts
config/1env.ts
lib/11
__tests__/5crypto.test.ts filter-builder.test.ts jwt.test.ts pagination.test.ts positions.test.ts
authorize.ts crypto.ts filter-builder.ts jwt.ts pagination.ts positions.ts
modules/197
ai/28
__tests__/4ai-writing.test.ts database-ai.test.ts generate-executor.test.ts prompts.test.ts
generator/4executor.ts generate.controller.ts generate.dto.ts generate.service.ts
ai-chat.service.ts ai-rate-limit.ts ai-writing.controller.ts ai-writing.dto.ts ai-writing.service.ts ai.controller.ts ai.module.ts ai.service.ts budget-guard.service.ts database-ai.controller.ts database-ai.dto.ts database-ai.service.ts db-prompts.ts dto.ts gateway-provider.ts ledger.service.ts prompts.ts rag.controller.ts rag.dto.ts rag.service.ts
api-keys/3api-keys.controller.ts api-keys.module.ts api-keys.service.ts
audit/2audit-log.controller.ts audit.module.ts
auth/4auth.controller.ts auth.module.ts auth.service.ts dto.ts
automations/5automations.controller.ts automations.module.ts automations.service.ts dto.ts webhook-incoming.controller.ts
blocks/5
__tests__/1batch-version-cas.test.ts
block.service.ts blocks.controller.ts blocks.module.ts dto.ts
comments/4comments.controller.ts comments.module.ts comments.service.ts dto.ts
databases/9
__tests__/3normalize-select-options.test.ts option-id-canonicalization.test.ts record-open-query-shape.test.ts
database.service.ts databases.controller.ts databases.module.ts dto.ts property-cache-schema.ts query.service.ts
docs/2docs.controller.ts docs.module.ts
files/10
__tests__/1quota.test.ts
dto.ts files.controller.ts files.module.ts files.service.ts quota.ts record.ts s3.ts uploads.controller.ts uploads.service.ts
forms/18debug.controller.ts form.dto.ts forms.controller.ts forms.module.ts forms.service.ts markdown.test.ts markdown.ts optional-auth.guard.ts public-forms.controller.ts public-forms.service.ts question.dto.ts questions.service.ts rate-limit.ts recaptcha.ts slug.ts submissions.controller.ts submissions.service.ts submit-schema.ts
health/3health.controller.ts health.module.ts health.service.ts
integrations/3integrations.controller.ts integrations.module.ts integrations.service.ts
internal/12
__tests__/2flush-query-shape.test.ts internal.endpoints.test.ts
ai-test-seam.controller.ts ai-test-seam.dto.ts ai-test-seam.service.ts internal.controller.ts internal.dto.ts internal.module.ts internal.service.ts test-seam.controller.ts test-seam.dto.ts test-seam.service.ts
notifications/3notifications.controller.ts notifications.module.ts notifications.service.ts
oauth/6
__tests__/1oauth.scopes.test.ts
oauth.controller.ts oauth.module.ts oauth.service.ts scopes.ts token-keys.ts
org/15audit.service.ts embed-preview.controller.ts guards.ts members.service.ts org-admin.controller.ts org-policy.service.ts org.module.ts overview.service.ts policy-effective.controller.ts policy.schema.ts policy.test.ts retention.service.ts totp.test.ts totp.ts two-factor.service.ts
orgs/5dto.ts orgs.controller.ts orgs.module.ts orgs.service.ts util.ts
pages/4dto.ts page.service.ts pages.controller.ts pages.module.ts
scim/15
__tests__/3email-mapping.test.ts etag.test.ts filters.test.ts
etag.ts filters.ts groups.service.ts schemas.ts scim-admin.controller.ts scim-admin.service.ts scim-auth.guard.ts scim-auth.service.ts scim-errors.ts scim.controller.ts scim.module.ts users.service.ts
search/4
__tests__/1search.service.test.ts
search.controller.ts search.module.ts search.service.ts
sessions/3sessions.controller.ts sessions.module.ts sessions.service.ts
share/3share.controller.ts share.module.ts share.service.ts
sso/16
__tests__/4enforcement.test.ts oidc.verify.test.ts provisioning.test.ts saml.validate.test.ts
enforcement.ts oidc.controller.ts oidc.service.ts oidc.ts provisioning.service.ts saml.controller.ts saml.ts schemas.ts sso-admin.controller.ts sso-admin.service.ts sso-secrets.ts sso.module.ts
teams/4dto.ts teams.controller.ts teams.module.ts teams.service.ts
users/4dto.ts users.controller.ts users.module.ts users.service.ts
webhooks/3webhooks.controller.ts webhooks.module.ts webhooks.service.ts
workspaces/4dto.ts workspaces.controller.ts workspaces.module.ts workspaces.service.ts
types/1xmldom.d.ts
app.module.ts constants.ts main.ts
_probe_rawbody.cjs .env.example Dockerfile package.json README.md tsconfig.json vitest.config.ts
realtime/33
src/17auth.ts comments.ts config.ts event-source.ts http-store.ts index.ts metrics.ts notifications.ts page-updated-source.ts presence.ts prisma-store.ts protocol.ts rate-limit.ts room-key.ts rooms.ts server.ts update-log.ts
test/11auth.test.ts config.test.ts event-source.test.ts http-store.test.ts metrics-merge.test.ts page-updated-source.test.ts presence.test.ts protocol.test.ts rate-limit.test.ts rooms.test.ts task-0094-builders.test.ts
.env.example Dockerfile package.json README.md tsconfig.json
web/255
src/244
app/45
__tests__/1theme-tokens.test.ts
(app)/26
w/25
[workspace]/25
ask/1page.tsx
databases/1
[id]/1page.tsx
favorites/1page.tsx
files/1page.tsx
notifications/1page.tsx
page/4
[id]/4
[block]/1page.tsx
share/1page.tsx
layout.tsx page.tsx
search/1page.tsx
settings/10
appearance/1page.tsx
automations/3
[id]/1page.tsx
new/1page.tsx
page.tsx
billing/1page.tsx
developers/1page.tsx
members/1page.tsx
permissions/1page.tsx
teams/1page.tsx
page.tsx
shared/1page.tsx
templates/1page.tsx
trash/1page.tsx
layout.tsx page.tsx
layout.tsx
(auth)/4
login/1page.tsx
register/1page.tsx
reset-password/1page.tsx
layout.tsx
api/2
metrics/1route.ts
v1/1
health/1route.ts
f/1
[slug]/1page.tsx
health/1
ready/1route.ts
org/2
[orgId]/2
admin/2
integrations/1page.tsx
page.tsx
share/1
[id]/1page.tsx
error.tsx global-error.tsx globals.css layout.tsx not-found.tsx page.tsx providers.tsx
components/118
admin/10
org-admin/8ApiKeysTab.tsx AuditTab.tsx MembersTab.tsx OverviewTab.tsx PoliciesTab.tsx RetentionTab.tsx WebhooksTab.tsx WorkspacePicker.tsx
ScimCard.tsx SsoTabs.tsx
ai/6ai-panel.tsx ask-ai-submenu.tsx db-ai-dialog.tsx generate-page-dialog.tsx writing-actions-menu.tsx writing-diff.tsx
automations/5action-editor.tsx condition-editor.tsx lib.ts run-history.tsx trigger-editor.tsx
collaboration/6CursorLayer.tsx OfflineBanner.tsx PresenceBar.tsx README.md ReviewFailedDialog.tsx StatusChip.tsx
comments/3comment-panel.tsx comment-thread.tsx mention-input.tsx
database/27
__tests__/2cell-editor.test.tsx cell-renderer.test.tsx
AiExtractDialog.tsx AiFormulaDialog.tsx AiGenerateDialog.tsx board-view.tsx buttons-panel.tsx calendar-view.tsx cell-editor.tsx cell-renderer.tsx chart-view.tsx database-page-view.tsx database-toolbar.tsx database-view-renderer.tsx db-embedded.tsx filter-builder.tsx form-builder-view.tsx formula-editor.tsx gallery-view.tsx group-builder.tsx list-view.tsx property-editor.tsx record-header.tsx record-panel.tsx sort-builder.tsx table-view.tsx timeline-view.tsx
dialogs/7
__tests__/1move-to-dialog.test.tsx
create-dialog.tsx dialog.tsx file-permissions-dialog.tsx invite-dialog.tsx move-to-dialog.tsx share-dialog.tsx
editor/19
__tests__/3code-block-text.test.ts code-block.test.tsx expandable.test.tsx
block-card.tsx block-renderer.tsx block-save-queue.ts block-toolbar.tsx context-menu.tsx expandable.tsx history-popover.tsx inline-editor.tsx insert-dialog.tsx page-canvas.tsx page-spinner.tsx page-view.tsx selection-toolbar.tsx slash-menu.tsx template-dialog.tsx type-menu.tsx
files/4FileBlock.tsx FileBrowser.tsx FilePicker.tsx PreviewModal.tsx
form/4form-field.tsx form-renderer.tsx form-responses-view.tsx form-view.tsx
layout/8
__tests__/1page-tree-icon.test.tsx
command-palette.tsx factory-logo.tsx page-tree-node.tsx sidebar.tsx theme-provider.tsx topbar.tsx workspace-shell.tsx
mentions/3
__tests__/1mention-model.test.ts
mention-model.ts MentionPopup.tsx
search/3ask-ai-search.tsx results-list.tsx search-dialog.tsx
settings/10
api-keys/4ApiKeyCreateDialog.tsx ApiKeyRevealDialog.tsx ApiKeyTable.tsx ScopesBadge.tsx
webhooks/5CurlExamples.tsx DeliveryInspector.tsx EventExplorer.tsx OverviewTab.tsx WebhooksTab.tsx
settings-shell.tsx
ui/3confirm-dialog.tsx form.tsx toaster.tsx
hooks/21
__tests__/4realtime-frame-handler.test.ts use-blocks.test.ts use-database-options.test.ts use-workspace.test.tsx
realtime-frame-handler.ts use-ai-stream.ts use-auth.ts use-blocks.ts use-database.ts use-db-ai-stream.ts use-forms.ts use-members.ts use-mention-sources.ts use-notifications.ts use-offline-status.ts use-pages.ts use-presence-announcer.ts use-presence-toasts.ts use-presence.ts use-realtime.ts use-workspace.ts
lib/50
__tests__/21ai-database.test.ts ai-generate.test.ts ai-sse.test.ts ai-writing.test.ts api-keys.test.ts api-members.test.ts auth-refresh.test.ts auth-store.test.ts batch-queue-drop.test.ts block-content.test.ts clipboard-import.test.ts code-highlight.test.ts offline-status.test.ts presence-announcer.test.ts presence-color.test.ts presence-cursor.test.ts presence-emitter.test.ts realtime-url.test.ts search.test.ts utils.test.ts writing-diff.test.ts
files/7
__tests__/2picker.test.ts upload.test.ts
api.ts picker.ts upload-store.ts upload.ts use-file-uploads.ts
ai-database.ts ai.ts api-keys.ts api.ts auth-store.ts batch-queue.ts block-content.ts clipboard-import.ts code-highlight.ts constants.ts offline-status.ts org-admin.ts presence-announcer.ts presence-color.ts presence-cursor.ts presence-editor-views.ts presence-emitter.ts query-client.ts realtime.ts search.ts types.ts utils.ts
stores/8
__tests__/1block-patch-store.test.ts
block-patch-store.ts comment-pill-store.ts database-store.ts editor-store.ts offlineQueue.ts presence-store.ts ui-store.ts
instrumentation.ts middleware.ts
.env.example Dockerfile next-env.d.ts next.config.mjs package.json postcss.config.mjs README.md tailwind.config.ts tsconfig.json tsconfig.tsbuildinfo vitest.config.ts
worker/92
src/87
__tests__/13ai-embedding.test.ts ai-request.test.ts ai-usage-budget.test.ts audit-export.test.ts email-decision.test.ts encrypt.test.ts health-search-index-lag.test.ts mime.test.ts retention.test.ts s3-sign.test.ts search-index.test.ts smtp.test.ts webhook-sign.test.ts
health/1server.ts
lib/12
__tests__/1clamav.test.ts
clamav.ts encrypt.ts job-otel.ts mime.ts notify.ts prisma.ts redis-stream.ts redis.ts s3.ts sharp.ts smtp.ts
processors/56
automations/28
__tests__/3condition-evaluator.spec.ts executors.spec.ts run-pipeline.spec.ts
executors/17assign-user.ts call-integration.ts change-status.ts classify.ts create-notification.ts create-page.ts email-cap.ts helpers.ts integration-registry.ts permission.ts record-write.ts registry.ts run-ai-action.ts send-email.ts send-webhook.ts types.ts update-record.ts
condition-evaluator.ts dead-letter.ts log.ts matcher.ts pipeline.ts run-state.ts schedule.ts watchdog.ts
files/15
__tests__/4errors.test.ts scan-gate.test.ts status.test.ts temp.test.ts
steps/4finalize.ts metadata.ts scan.ts thumbnails.ts
cleanup.ts errors.ts generateThumbs.ts processor.ts status.ts temp.ts types.ts
search-index/4builders.ts grants.ts index.ts processor.ts
ai-embedding.ts ai.processor.ts audit-export.ts automations.processor.ts email-decision.processor.ts email.processor.ts maintenance.processor.ts retention.ts webhooks.processor.ts
config.ts events.ts index.ts logger.ts queues.ts
.env.example Dockerfile package.json README.md tsconfig.json
docs/73
api/17ai.md authentication.md automations.md blocks.md comments.md databases.md files.md forms.md openapi.yaml org-admin.md pages.md scim.md search.md sso.md versioning.md webhooks.md workspaces.md
architecture/10ai-architecture.md automation.md backend-architecture.md database-architecture.md frontend-architecture.md realtime-architecture.md search-architecture.md security-architecture.md storage.md system-architecture.md
database/2database-architecture.md redis-keys.md
development/8admin-guide.md coding-standards.md deployment.md development-guide.md files-pipeline.md perf-report.md performance.md testing.md
product/4functional-requirements.md non-functional-requirements.md product-requirements.md ux-requirements.md
requirements/1requirements-matrix.md
security/5audit-report.md files.md forms.md license-allowlist.md security-architecture.md
tasks/16phase-00-foundation.md phase-01-authentication.md phase-02-workspace.md phase-03-pages.md phase-04-editor.md phase-05-databases.md phase-06-relations.md phase-07-collaboration.md phase-08-search.md phase-09-files.md phase-10-forms.md phase-11-automation.md phase-12-ai.md phase-13-api.md phase-14-enterprise.md phase-15-production.md
ui/9ai.md automations.md design-system.md developers.md files.md forms.md org-admin.md scim.md sso.md
support-matrix.md
infrastructure/71
caddy/1Caddyfile
docker/6
init/101-extensions.sql
opensearch/1init-indices.json
.env.docker docker-compose.yml opensearch-init.sh README.md
kubernetes/40
observability/20
alertmanager/1alertmanager.yaml
grafana/8
dashboards/6ai.json api-overview.json infra.json realtime.json search.json workers-queues.json
provisioning/2
dashboards/1dashboards.yaml
datasources/1datasource.yaml
prometheus/3alerts.yaml recording-rules.yaml scrape.yaml
scripts/1sync-sources.mjs
alertmanager.yaml grafana.yaml kustomization.yaml namespace.yaml node-exporter.yaml otel-collector.yaml prometheus.yaml
postgres/7configmap.yaml cronjob-backup.yaml cronjob-opensearch-snapshot.yaml pgbouncer.yaml replica.yaml statefulset.yaml walg-iam-policy.yaml
api.yaml configmap.yaml ingress.yaml kustomization.yaml namespace.yaml networkpolicy.yaml pdb.yaml README.md realtime.yaml redis.yaml secret.example.yaml web.yaml worker.yaml
nginx/2nginx.conf README.md
observability/14
alertmanager/1alertmanager.yaml
grafana/8
dashboards/6ai.json api-overview.json infra.json realtime.json search.json workers-queues.json
provisioning/2
dashboards/1dashboards.yaml
datasources/1datasource.yaml
prometheus/3alerts.yaml recording-rules.yaml scrape.yaml
scripts/1dashboard-completeness.mjs
README.md
terraform/8compute.tf data.tf main.tf network.tf outputs.tf README.md security.tf variables.tf
packages/289
ai/24
src/20
providers/7anthropic.ts google.ts http.ts index.ts openai-compatible.ts rag.test.ts writing.test.ts
schemas/2database.ts generate.ts
adapters.test.ts config.test.ts config.ts gateway.test.ts gateway.ts index.ts tools.test.ts tools.ts types.ts usage.test.ts usage.ts
package.json README.md tsconfig.json vitest.config.ts
auth/11
src/7index.ts passwords.test.ts passwords.ts sessions.test.ts sessions.ts tokens.test.ts tokens.ts
package.json README.md tsconfig.json vitest.config.ts
collaboration/17
src/13awareness.ts codec.test.ts codec.ts index.ts lww.test.ts lww.ts mapping.ts offline.ts outbox.test.ts outbox.ts provider.test.ts provider.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
config/7
src/4eslint.base.js index.ts prettier.base.json tsconfig.base.json
package.json README.md tsconfig.json
database-client/5
src/2index.test.ts index.ts
package.json README.md tsconfig.json
database-engine/33
src/29
filter/2filter.test.ts index.ts
formula/8evaluator.ts formula.test.ts functions.ts index.ts lexer.ts parser.ts types.ts validate.ts
query/6group.ts index.ts paginate.ts pivot.ts query.test.ts sort.ts
relations/2index.ts relations.test.ts
rollups/2index.ts rollups.test.ts
values/5dates.ts index.ts registry.ts types.ts values.test.ts
views/3buttons.ts index.ts views.test.ts
index.ts
package.json README.md tsconfig.json vitest.config.ts
editor/25
src/21
marks/1highlight.ts
nodes/2equation.ts mention.ts
autosave.test.ts autosave.ts clipboard.test.ts clipboard.ts codec.test.ts codec.ts context-menu.test.ts context-menu.ts diff.test.ts diff.ts factory.ts history.test.ts history.ts index.ts positions.ts slash.test.ts slash.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
observability/20
src/16
__tests__/8db-redis-metrics.test.ts metrics.test.ts otel.test.ts pino-otel.test.ts prometheus.test.ts resource.test.ts scrubber.test.ts traceparent.test.ts
index.ts metrics.ts otel.ts pino-otel.ts prometheus.ts resource.ts scrubber.ts traceparent.ts
package.json README.md tsconfig.json vitest.config.ts
permissions/11
src/7index.ts levels.test.ts levels.ts resolve.test.ts resolve.ts rules.test.ts rules.ts
package.json README.md tsconfig.json vitest.config.ts
search/22
src/18chunking.test.ts chunking.ts client.test.ts client.ts embeddings.test.ts embeddings.ts hybrid.test.ts hybrid.ts index.ts indexer.test.ts indexer.ts mapping.test.ts mapping.ts queries.test.ts queries.ts rrf.test.ts rrf.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
shared/61
src/57
dto/17ai.dto.ts auth.dto.test.ts auth.dto.ts block.dto.ts browser-safety.test.ts comment.dto.ts database.dto.test.ts database.dto.ts file.dto.ts formula-ast.ts index.ts notification.dto.ts page.dto.ts search.dto.ts share.dto.ts webhook.dto.ts workspace.dto.ts
events/8audit-catalog.test.ts audit-catalog.ts audit-csv.test.ts audit-csv.ts audit-scope.test.ts audit-scope.ts catalog.test.ts catalog.ts
realtime/6comment-events.ts frames.test.ts frames.ts notification-policy.ts notification-prefs.ts task-0094.test.ts
automation.test.ts automation.ts constants.ts crypto.test.ts crypto.ts env.ts errors.ts events.test.ts events.ts forms.test.ts forms.ts index.ts markdown.test.ts markdown.ts mentions.test.ts mentions.ts net.test.ts net.ts positions.test.ts positions.ts presence.test.ts presence.ts security-headers.ts webhook-delivery.test.ts webhook-delivery.ts webhook-events.ts
package.json README.md tsconfig.json vitest.config.ts
storage/16
src/12client.test.ts client.ts index.ts keys.test.ts keys.ts mime.test.ts mime.ts presign.test.ts presign.ts thumbnails.test.ts thumbnails.ts types.ts
package.json README.md tsconfig.json vitest.config.ts
ui/37
src/33
components/19avatar.tsx badge.tsx button.tsx checkbox.tsx command.tsx context-menu.tsx dialog.tsx dropdown-menu.tsx empty-state.tsx index.ts popover.tsx separator.tsx skeleton.tsx slider.tsx spinner.tsx switch.tsx tabs.tsx toast.tsx tooltip.tsx
color.ts command-filter.test.ts command-filter.ts focus.test.ts focus.ts formatters.test.ts formatters.ts index.ts theme.test.ts theme.ts toast-store.test.ts toast-store.ts tokens.test.ts tokens.ts
package.json README.md tsconfig.json vitest.config.ts
prisma/16
migrations/13
20260927000000_init/1migration.sql
20260928000000_search_documents_content_hash/1migration.sql
20260929000000_workspace_usage_storage_bytes/1migration.sql
20260930000000_form_submitted_notification_type/1migration.sql
20261001000000_ai_phase12/1migration.sql
20261002000000_webhooks_secret_encrypted_dlq/1migration.sql
20261002111436_webhook_delivery_latency/1migration.sql
20261002120000_org_admin_2fa_retention_unique/1migration.sql
20261002215124_audit_export/1migration.sql
20261003210000_perf_indexes_hot_paths/1migration.sql
20261004004500_perf_indexes_hot_paths_2/1migration.sql
migration_lock.toml README.md
schema.prisma seed.ts verify.ts
scripts/7backup-health.ts docs-completeness.mjs generate-openapi.mjs minio-init.ts opensearch-reindex.ts storage-orphans.ts verify-clean-clone.sh
tests/169
e2e/63
.auth/1user.json
fixtures/7
files/6clip.mp4 clip.wav clip.webm hero-1400.png note.docx note.txt
realtime.ts
mocks/2oidc-issuer.ts saml-idp.ts
playwright-report/3
data/2a6557bae9c2714a658968d4eb8534195c08ebda8.png e3092d07d00a16063e46385c02a559a9054fa847.webm
index.html
reports/1files-security.json
specs/34ai-database.spec.ts ai-generate.spec.ts ai-rag.spec.ts ai-security.spec.ts ai-writing.spec.ts ai.spec.ts api-keys.spec.ts appearance-theme.spec.ts auth.spec.ts automation.spec.ts collab-two-tab.spec.ts comments.spec.ts databases.spec.ts default-workspace-alias.spec.ts developers.spec.ts editor.spec.ts files.spec.ts final-flow.spec.ts forms.spec.ts oauth.spec.ts org-admin.spec.ts pages.spec.ts performance.spec.ts presence-cursors.spec.ts qa-paste-toggle.spec.ts realtime.spec.ts scim.spec.ts search-index-lag.spec.ts search.spec.ts sharing.spec.ts sso.spec.ts task-0094-comments-notifications.spec.ts webhooks.spec.ts workspace.spec.ts
test-results-final-flow/3
final-flow-Release-v1-0-fi-6c06b-w-state-carries-sequential--chromium-desktop/2test-failed-1.png trace.zip
.last-run.json
utils/4api.ts dnd.ts search-lag.ts wait.ts
.gitignore fixtures.ts global-setup.ts package.json playwright.config.ts playwright.final-flow.config.ts README.md tsconfig.json
fixtures/1
files/1make-sparse.ts
integration/60
ai-capability/2ai-app.capability.test.ts gateway.capability.test.ts
drill/2seed-drill.mjs verify-restore.mjs
fixtures/5
files/5clip.mp4 clip.wav doc.pdf hero-1400.png note.txt
helpers/3api.ts containers.ts seed.ts
realtime/11control-channel.test.ts convergence.test.ts flush-rebase-http.test.ts handshake.test.ts heartbeat-limits.test.ts lifecycle.test.ts presence.test.ts rebase.test.ts resume.test.ts rt-helpers.ts task-0094-fanout.test.ts
ai-chat.integration.test.ts ai-database.integration.test.ts ai-generate.integration.test.ts ai-rag.integration.test.ts ai-writing.integration.test.ts api-keys.integration.test.ts audit-completeness.integration.test.ts audit-export-s3.integration.test.ts auth.integration.test.ts automation-pipeline.integration.test.ts automations.integration.test.ts blocks.integration.test.ts cache-invalidation.integration.test.ts comments.integration.test.ts databases.integration.test.ts files-lifecycle.integration.test.ts files-pipeline.integration.test.ts files-security.integration.test.ts files.integration.test.ts forms-responses.integration.test.ts forms.integration.test.ts oauth.integration.test.ts openapi.contract.test.ts org-admin.integration.test.ts package.json pages.integration.test.ts permissions.integration.test.ts README.md replica-routing.integration.test.ts retention-engine.integration.test.ts scim.integration.test.ts search.integration.test.ts sso.integration.test.ts tsconfig.json vitest.config.ts webhooks.integration.test.ts workspace.integration.test.ts
performance/28
fixtures/1search-100k.ts
helpers/2seed-100k.mjs seed-1k-load.mjs
reports/7api-load-smoke.json database-load-smoke.json editor-local.json realtime-load.json search-full.json search-last.json search-reduced.json
api-load.js api.js archive.tar database-load.js database.js editor-local.mjs extract-100k-env.mjs package.json README.md realtime-1k.js realtime-load.js realtime.js run-realtime-load.sh search-search.k6.js search-summary.json seed-100k.mjs threshold-breach-demo.js verify-zero-op-loss.mjs
security/16
helpers/1app.ts
audit-report.test.ts auth-paths.test.ts deps.test.ts formula-fuzz.test.ts gitleaks-config.test.ts headers.test.ts images.test.ts oracle.ts package.json permission-fuzz.test.ts rate-limits.test.ts README.md tsconfig.json upload-abuse.test.ts vitest.config.ts
README.md
.dockerignore .env .env.bak-task0125 .env.example .eslintrc.json .gitignore .npmrc .prettierignore .prettierrc.json AGENTS.md ARCHITECTURE.md CHANGELOG.md CONTRIBUTING.md gitleaks.toml LICENSE package.json pnpm-lock.yaml pnpm-workspace.yaml PRODUCT-SPEC.md README.md ROADMAP.md SECURITY.md tsconfig.json turbo.json
client.tspackages/search/src/client.tsraw← src21,291 B← Back to the app
1/**
2 * @factory/search — thin OpenSearch client over an injectable fetch
3 * (mirrors the `@factory/storage` S3 client pattern: pure transport, no SDK).
4 *
5 * The client knows the OpenSearch HTTP API only; query shapes come from
6 * `queries.ts`, fusion from `rrf.ts`. Failures surface as `ApiError` with
7 * `SEARCH_UNAVAILABLE` (503) for transport/429/5xx errors.
8 *
9 * Hybrid search (search-architecture §4.5) is executed as TWO requests —
10 * BM25 (`_search` with the full-text body) and kNN (`_search` with a kNN-only
11 * body) — and the two rank lists are fused client-side with RRF (k = 60).
12 * Recorded decision: separate requests over the combined `query + knn` body,
13 * because the combined body's `_score` is BM25-dominated and the kNN ranking
14 * is not recoverable from it; two requests also make the two RRF inputs exact.
15 */
16 
17// NOTE: the API consumes this package under `node10` module resolution,
18// which only sees the package ROOT (no subpaths) — hence `@factory/shared`
19// (root re-export), not `@factory/shared/errors`. See the Node10 note in
20// packages/shared/src/index.ts.
21import { ApiError, ErrorCodes } from "@factory/shared";
22 
23import {
24  CONTENT_INDEX_ALIAS,
25  buildFullTextBody,
26  buildHybridKnnOnlyBody,
27  buildHybridBody,
28  buildPrefixBody,
29  contentIndex,
30  dateSortField,
31  decodeCursor,
32  decodeDateCursor,
33  encodeCursor,
34  encodeDateCursor,
35  withDateSort,
36  withSearchAfter,
37} from "./queries.js";
38import { fuseHybrid } from "./rrf.js";
39import { CHUNK_DOC_TYPE, displayType } from "./types.js";
40import type {
41  AnswerCitation,
42  SearchDoc,
43  SearchQuery,
44  SearchResult,
45  SearchResponse,
46  Suggestion,
47  ViewerContext,
48} from "./types.js";
49 
50export interface SearchClientOptions {
51  /** Base URL, e.g. `http://opensearch:9200`. */
52  baseUrl: string;
53  /** Injectable fetch (defaults to global fetch) — enables offline tests. */
54  fetchImpl?: typeof fetch;
55  /** Basic auth (dev); production uses IAM/signing at the network edge. */
56  auth?: { username: string; password: string };
57  /** Request timeout in ms (default 5000). */
58  timeoutMs?: number;
59  now?: () => number;
60  /** kNN list depth per hybrid pass (default 50, per search §4.5 `k: 50`). */
61  knnK?: number;
62}
63 
64interface OsHit {
65  _id: string;
66  _score?: number;
67  _source: SearchDoc & { highlight?: { title?: string[]; body?: string[] } };
68}
69 
70interface OsResponse {
71  hits?: {
72    total?: { value?: number };
73    hits?: OsHit[];
74  };
75}
76 
77export class SearchClient {
78  readonly baseUrl: string;
79  readonly fetchImpl: typeof fetch;
80  private readonly headers: Record<string, string>;
81  private readonly timeoutMs: number;
82  private readonly now: () => number;
83  private readonly knnK: number;
84 
85  constructor(options: SearchClientOptions) {
86    this.baseUrl = options.baseUrl.replace(/\/+$/, "");
87    this.fetchImpl = options.fetchImpl ?? fetch;
88    this.headers = { "content-type": "application/json" };
89    if (options.auth) {
90      this.headers.authorization =
91        "Basic " + Buffer.from(`${options.auth.username}:${options.auth.password}`).toString("base64");
92    }
93    this.timeoutMs = options.timeoutMs ?? 5000;
94    this.now = options.now ?? Date.now;
95    this.knnK = options.knnK ?? 50;
96  }
97 
98  /** Index one (or many chunked) documents via `_bulk` (single content index). */
99  async indexDocs(docs: SearchDoc[]): Promise<{ indexed: number }> {
100    if (docs.length === 0) return { indexed: 0 };
101    const lines: string[] = [];
102    for (const doc of docs) {
103      lines.push(JSON.stringify({ index: { _index: contentIndex(), _id: doc.docId } }));
104      lines.push(JSON.stringify(doc));
105    }
106    const res = await this.request("/_bulk", { method: "POST", body: lines.join("\n") + "\n" });
107    const parsed = (await res.json()) as { errors?: boolean; items?: { index?: { status?: number } }[] };
108    let indexed = 0;
109    for (const item of parsed.items ?? []) {
110      if (item.index && (item.index.status ?? 200) < 300) indexed++;
111    }
112    return { indexed };
113  }
114 
115  /** Delete one document by doc id (single content index). */
116  async deleteDoc(docId: string): Promise<void> {
117    await this.request(`/${contentIndex()}/_doc/${encodeURIComponent(docId)}`, { method: "DELETE" });
118  }
119 
120  /**
121   * Delete ALL chunk docs belonging to the given parent doc id(s) (TASK-0099 §3).
122   * Chunk docs have no `search_documents` mirror rows, so the worker cannot
123   * enumerate them by id (a shrunk body changes the count) — it deletes them in
124   * a parent-driven pass instead, matching on `parentDocId` AND
125   * `type: "chunk"` (both keyword fields in the mapping). One request handles
126   * any number of parents. A missing parent (404) is a no-op, like
127   * {@link deleteDoc}; 0 deletes is fine (idempotent).
128   */
129  async deleteChunksOf(parentDocIds: string | string[]): Promise<number> {
130    const ids = Array.isArray(parentDocIds) ? parentDocIds : [parentDocIds];
131    if (ids.length === 0) return 0;
132    const parentClause =
133      ids.length === 1
134        ? { term: { parentDocId: ids[0]! } }
135        : { terms: { parentDocId: ids } };
136    const body = JSON.stringify({
137      query: {
138        bool: {
139          filter: [parentClause, { term: { type: CHUNK_DOC_TYPE } }],
140        },
141      },
142    });
143    const res = await this.request(`/${contentIndex()}/_delete_by_query?conflicts=proceed`, {
144      method: "POST",
145      body,
146    });
147    const parsed = (await res.json()) as { deleted?: number };
148    return parsed.deleted ?? 0;
149  }
150 
151  /**
152   * Partial merge-update of one document by doc id (e.g. the AI `vector`
153   * field on a chunk doc — a full PUT would clobber title/body/grants).
154   */
155  async updateDoc(docId: string, doc: Record<string, unknown>): Promise<void> {
156    await this.request(`/${contentIndex()}/_update/${encodeURIComponent(docId)}`, {
157      method: "POST",
158      body: JSON.stringify({ doc }),
159    });
160  }
161 
162  /** True when the content index/alias exists. */
163  async indexExists(indexOrAlias: string = contentIndex()): Promise<boolean> {
164    try {
165      await this.request(`/${indexOrAlias}`, {});
166      return true;
167    } catch {
168      return false;
169    }
170  }
171 
172  /**
173   * T-177 (search health) — the document count of the content index,
174   * optionally scoped to a set of tenant workspaces. Counts ONLY whole docs
175   * (`type != "chunk"` — chunk docs are the RAG expansion of a parent doc and
176   * would double-count content). `size: 0` (no hits returned). A missing
177   * index resolves to 0 (the alias is created lazily on first write — 0 is
178   * the honest "nothing indexed yet", distinct from `indexExists` which is a
179   * separate probe). A 5xx/network failure throws `SEARCH_UNAVAILABLE` (via
180   * {@link request}) — the caller maps that to `healthy: false`, never to a
181   * guessed count.
182   */
183  async countDocs(workspaceIds?: string[]): Promise<number> {
184    const filter: Record<string, unknown>[] = [{
185      bool: { must_not: [{ term: { type: CHUNK_DOC_TYPE } }] },
186    }];
187    if (workspaceIds && workspaceIds.length > 0) {
188      filter.push({ terms: { workspaceId: workspaceIds } });
189    }
190    const out = await this.osRequest<OsResponse>(
191      `/${contentIndex()}/_search`,
192      { query: { bool: { filter } }, size: 0 }
193    );
194    return out.hits?.total?.value ?? 0;
195  }
196 
197  /**
198   * Create the content index (behind the alias) if missing (idempotent startup
199   * path). `mappings` is the full `{settings, mappings}` body from
200   * `contentMapping()`.
201   */
202  async createIndexIfMissing(
203    indexName: string,
204    body: { settings?: Record<string, unknown>; mappings?: Record<string, unknown> },
205  ): Promise<boolean> {
206    try {
207      await this.request(`/${indexName}`, { method: "PUT", body: JSON.stringify(body) });
208      return true;
209    } catch (err) {
210      // resource_already_exists_engine_exception → already there (idempotent).
211      if (err instanceof ApiError && /resource_already_exists/.test(err.message)) return false;
212      throw err;
213    }
214  }
215 
216  /**
217   * Create the content index AND point the alias at it (used by the
218   * `scripts/opensearch-reindex.ts` rollover). `actions` swap is atomic.
219   */
220  async createAlias(indexName: string, alias: string = CONTENT_INDEX_ALIAS): Promise<void> {
221    await this.request("/_aliases", {
222      method: "POST",
223      body: JSON.stringify({
224        actions: [
225          { remove: { index: indexName, alias } },
226          { add: { index: indexName, alias } },
227        ],
228      }),
229    });
230  }
231 
232  /**
233   * Whether `name` is an ALIAS (as opposed to a real index). 200 → alias,
234   * 404 → not an alias (either a real index, or nothing). Used by the
235   * self-heal path to detect the corrupted "alias name became a real index"
236   * state (OpenSearch was down at boot; the first `_bulk` auto-created a bare
237   * real index behind the alias name).
238   */
239  async isAlias(name: string = contentIndex()): Promise<boolean> {
240    try {
241      await this.request(`/_alias/${name}`, {});
242      return true;
243    } catch (err) {
244      if (err instanceof ApiError && err.status === 404) return false;
245      throw err; // 5xx / transport → treat as a real failure.
246    }
247  }
248 
249  /** Delete an index by name (the self-heal path rebuilds it with a mapping). */
250  async deleteIndex(name: string): Promise<void> {
251    await this.request(`/${name}`, { method: "DELETE" });
252  }
253 
254  /** Force a refresh (make recent writes queryable — tests / immediate lag). */
255  async refresh(indexOrAlias: string = contentIndex()): Promise<void> {
256    await this.request(`/${indexOrAlias}/_refresh`, {});
257  }
258 
259  /** The live index's `dense_vector` dimension (rollover guard, search §7.3). */
260  async getVectorDimension(indexOrAlias: string = contentIndex()): Promise<number | null> {
261    const res = await this.request(`/${indexOrAlias}/_mapping`, {});
262    const parsed = (await res.json()) as Record<string, { mappings?: { properties?: { vector?: { dimension?: number } } } }>;
263    for (const key of Object.keys(parsed)) {
264      const dim = parsed[key]?.mappings?.properties?.vector?.dimension;
265      if (typeof dim === "number") return dim;
266    }
267    return null;
268  }
269 
270  /**
271   * Which of `docIds` exist in the index (batched `_mget`, one request per 500).
272   * Returns a Set of the PRESENT ids. Used by the reconcile sweep to detect
273   * docs deleted/lost in the index (the contentHash sweep alone only catches
274   * SOURCE drift, not index loss).
275   */
276  async docExists(docIds: string[]): Promise<Set<string>> {
277    const present = new Set<string>();
278    if (docIds.length === 0) return present;
279    for (let i = 0; i < docIds.length; i += 500) {
280      const chunk = docIds.slice(i, i + 500);
281      const res = await this.request(`/${contentIndex()}/_mget`, {
282        method: "POST",
283        body: JSON.stringify({ ids: chunk }),
284      });
285      const parsed = (await res.json()) as { docs?: Array<{ found?: boolean; _id?: string }> };
286      for (const d of parsed.docs ?? []) {
287        if (d.found && d._id) present.add(d._id);
288      }
289    }
290    return present;
291  }
292 
293  /**
294   * TASK-0125 — fetch the `_source` of explicit doc ids (mget, 500-batched).
295   * The RAG query path uses it for the FULL chunk text (the search API's
296   * 160-char snippet is too thin for prompt context). Missing docs (deleted
297   * between retrieval and context assembly) are silently omitted — the
298   * caller drops their context block and keeps the answer consistent.
299   */
300  async getDocs(docIds: string[]): Promise<Array<{ docId: string; source: Record<string, unknown> }>> {
301    const out: Array<{ docId: string; source: Record<string, unknown> }> = [];
302    if (docIds.length === 0) return out;
303    for (let i = 0; i < docIds.length; i += 500) {
304      const chunk = docIds.slice(i, i + 500);
305      const res = await this.request(`/${contentIndex()}/_mget`, {
306        method: "POST",
307        body: JSON.stringify({ ids: chunk }),
308      });
309      const parsed = (await res.json()) as {
310        docs?: Array<{ found?: boolean; _id?: string; _source?: Record<string, unknown> }>;
311      };
312      for (const d of parsed.docs ?? []) {
313        if (d.found && d._id && d._source) out.push({ docId: d._id, source: d._source });
314      }
315    }
316    return out;
317  }
318 
319  /**
320   * Execute a search query. `fulltext` mode (default) is one request;
321   * `hybrid` runs BM25 + kNN and fuses with RRF. The query is tenant-scoped by
322   * the viewer's `workspaceIds` (single-index model — no index param).
323   *
324   * @param queryVector required for hybrid mode — the embedded query.
325   */
326  async search(
327    query: SearchQuery,
328    viewer: ViewerContext,
329    queryVector?: number[],
330  ): Promise<SearchResponse> {
331    const started = this.now();
332    const mode = query.mode ?? "fulltext";
333    if (mode === "hybrid" && !queryVector) {
334      throw new ApiError(ErrorCodes.AI_ERROR, { message: "hybrid search requires queryVector" });
335    }
336    if (mode === "hybrid") {
337      return this.hybridSearch(query, viewer, queryVector!, started);
338    }
339    return this.fullTextSearch(query, viewer, started);
340  }
341 
342  /**
343   * Prefix suggestions ("search as you type", search-architecture §4.2):
344   * prefix match on `title.keyword` (or the doc id) over the SAME
345   * mandatory tenant + permission filters as full-text search, no highlight,
346   * small size (default 10, cap 20). Returns minimal `{ id, type, title }`
347   * items (the source row id, not the `docId` — the UI deep-links by row id).
348   *
349   * The API's `GET /search/suggest` endpoint wraps this (TASK-0097 S3).
350   */
351  async suggest(prefix: string, viewer: ViewerContext, size = 10): Promise<Suggestion[]> {
352    const capped = Math.max(1, Math.min(size, 20));
353    const body = buildPrefixBody(prefix, viewer, capped);
354    const os = await this.osRequest<OsResponse>(`/${contentIndex()}/_search`, body);
355    const hits = os.hits?.hits ?? [];
356    const seen = new Set<string>();
357    const out: Suggestion[] = [];
358    for (const h of hits) {
359      const s = h._source;
360      // De-dupe by (type, id): chunk docs share the parent's title, so the
361      // display type (chunk → parent kind) makes a chunk hit collapse into
362      // its parent's suggestion.
363      const type = displayType(s);
364      if (seen.has(`${type}:${s.id}`)) continue;
365      seen.add(`${type}:${s.id}`);
366      out.push({ id: s.id, type, title: s.title });
367      if (out.length >= capped) break;
368    }
369    return out;
370  }
371 
372  private async fullTextSearch(
373    query: SearchQuery,
374    viewer: ViewerContext,
375    started: number,
376  ): Promise<SearchResponse> {
377    // T-155 date sorts are an ADDITIVE branch — `undefined`/`"relevance"` falls
378    // through to the original `_score` path below, byte-for-byte unchanged.
379    if (query.sortBy === "createdAt" || query.sortBy === "updatedAt") {
380      return this.dateSortedSearch(query, viewer, started);
381    }
382    let body: Record<string, unknown> = buildFullTextBody(query, viewer);
383    if (query.page) body = withSearchAfter(body, decodeCursor(query.page));
384    const os = await this.osRequest<OsResponse>(`/${contentIndex()}/_search`, body);
385    const hits = os.hits?.hits ?? [];
386    const pageSize = query.pageSize ?? 25;
387    const results = hits.map((h) => this.mapHit(h, "bm25"));
388    const last = hits[hits.length - 1];
389    const cursor =
390      hits.length >= pageSize && last ? encodeCursor([last._score ?? 0, last._source.updatedAt, last._id]) : undefined;
391    return {
392      results,
393      total: os.hits?.total?.value ?? hits.length,
394      ...(cursor !== undefined ? { cursor } : {}),
395      latencyMs: this.now() - started,
396    };
397  }
398 
399  /**
400   * T-155 — date-ordered search (`sortBy: "createdAt" | "updatedAt"`):
401   * newest-first on the stored date field (`_id` ascending tiebreak), with its
402   * own `(dateIso, id)` cursor. The relevance path is deliberately not touched
403   * (see `fullTextSearch`). The same mandatory tenant + permission + type +
404   * chip filters apply — `buildFullTextBody` builds them.
405   */
406  private async dateSortedSearch(
407    query: SearchQuery,
408    viewer: ViewerContext,
409    started: number,
410  ): Promise<SearchResponse> {
411    const field = dateSortField(query.sortBy!);
412    let body: Record<string, unknown> = buildFullTextBody(query, viewer);
413    if (query.page) body = withDateSort(body, query.sortBy!, decodeDateCursor(query.page));
414    else body = withDateSort(body, query.sortBy!);
415    const os = await this.osRequest<OsResponse>(`/${contentIndex()}/_search`, body);
416    const hits = os.hits?.hits ?? [];
417    const pageSize = query.pageSize ?? 25;
418    const results = hits.map((h) => this.mapHit(h, "bm25"));
419    const last = hits[hits.length - 1];
420    const lastDate = last?._source[field];
421    const cursor =
422      hits.length >= pageSize && last && lastDate
423        ? encodeDateCursor([lastDate, last._id])
424        : undefined;
425    return {
426      results,
427      total: os.hits?.total?.value ?? hits.length,
428      ...(cursor !== undefined ? { cursor } : {}),
429      latencyMs: this.now() - started,
430    };
431  }
432 
433  private async hybridSearch(
434    query: SearchQuery,
435    viewer: ViewerContext,
436    queryVector: number[],
437    started: number,
438  ): Promise<SearchResponse> {
439    const pageSize = query.pageSize ?? 25;
440    // Pass 1: BM25 (full-text body, sized to the fusion depth). TASK-0125:
441    // pass 1 is BM25-only — OpenSearch 2.15's `query.knn` cannot share a
442    // request body with a `bool`/full-text query, so the vector leg is its
443    // own request (pass 2) and the two are fused client-side with RRF.
444    const bm25Body: Record<string, unknown> = {
445      ...buildHybridBody(query, viewer, queryVector),
446      size: this.knnK,
447    };
448    // Pass 2: kNN-only (`query.knn`, pre-filtered), same mandatory filters.
449    const knnBody = buildHybridKnnOnlyBody(queryVector, viewer, this.knnK);
450    const [bm25Os, knnOs] = await Promise.all([
451      this.osRequest<OsResponse>(`/${contentIndex()}/_search`, bm25Body),
452      this.osRequest<OsResponse>(`/${contentIndex()}/_search`, knnBody),
453    ]);
454    const bm25Hits = bm25Os.hits?.hits ?? [];
455    const knnHits = knnOs.hits?.hits ?? [];
456    const bm25List = bm25Hits.map((h) => h._id);
457    const vecList = knnHits.map((h) => h._id);
458    const fused = fuseHybrid(bm25List, vecList);
459    const byId = new Map<string, OsHit>();
460    for (const h of bm25Hits) byId.set(h._id, h);
461    for (const h of knnHits) if (!byId.has(h._id)) byId.set(h._id, h);
462    const results: SearchResult[] = [];
463    for (const f of fused) {
464      const hit = byId.get(f.docId);
465      if (!hit) continue;
466      const source: SearchResult["source"] =
467        f.sources.includes("bm25") && f.sources.includes("vec") ? "bm25+vec" : f.sources.includes("vec") ? "vec" : "bm25";
468      results.push({ ...this.mapHit(hit, source), score: f.score });
469      if (results.length >= pageSize) break;
470    }
471    return {
472      results,
473      total: bm25Os.hits?.total?.value ?? results.length,
474      latencyMs: this.now() - started,
475    };
476  }
477 
478  private mapHit(hit: OsHit, source: SearchResult["source"]): SearchResult {
479    const s = hit._source;
480    const hl = s.highlight;
481    const snippet = hl?.body?.[0] ?? s.body.slice(0, 160);
482    const result: SearchResult = {
483      docId: hit._id,
484      // Chunk docs surface as their parent's public kind (displayType);
485      // whole docs map to themselves.
486      type: displayType(s),
487      id: s.id,
488      title: s.title,
489      snippet,
490      url: s.url,
491      updatedAt: s.updatedAt,
492      workspaceId: s.workspaceId,
493      score: hit._score ?? 0,
494      source,
495    };
496    if (s.icon !== undefined) result.icon = s.icon;
497    if (s.createdByName !== undefined) result.createdByName = s.createdByName;
498    if (s.pageId !== undefined) result.pageId = s.pageId;
499    if (s.blockId !== undefined) result.blockId = s.blockId;
500    if (s.databaseId !== undefined) result.databaseId = s.databaseId;
501    if (s.recordId !== undefined) result.recordId = s.recordId;
502    return result;
503  }
504 
505  private async request(path: string, init: { method?: string; body?: string }): Promise<Response> {
506    const controller = new AbortController();
507    const timer = setTimeout(() => controller.abort(), this.timeoutMs);
508    try {
509      const res = await this.fetchImpl(this.baseUrl + path, {
510        method: init.method ?? "GET",
511        headers: this.headers,
512        body: init.body ?? null,
513        signal: controller.signal,
514      });
515      if (!res.ok) {
516        throw new ApiError(ErrorCodes.SEARCH_UNAVAILABLE, {
517          message: `OpenSearch ${res.status} on ${path}`,
518          status: res.status,
519        });
520      }
521      return res;
522    } catch (err) {
523      if (err instanceof ApiError) throw err;
524      throw new ApiError(ErrorCodes.SEARCH_UNAVAILABLE, {
525        message: err instanceof Error ? err.message : "search request failed",
526      });
527    } finally {
528      clearTimeout(timer);
529    }
530  }
531 
532  private async osRequest<T>(path: string, body: Record<string, unknown>): Promise<T> {
533    const res = await this.request(path, { method: "POST", body: JSON.stringify(body) });
534    return (await res.json()) as T;
535  }
536}
537 
538/** Build RAG citations from the top search results (ai-architecture §6). */
539export function citationsFromResults(results: SearchResult[], limit = 5): AnswerCitation[] {
540  return results.slice(0, limit).map((r) => ({
541    docId: r.docId,
542    title: r.title,
543    url: r.url,
544    quote: r.snippet ?? "",
545    relevance: Math.min(1, r.score),
546  }));
547}
548