feat: SWIRL federated search and document import

backend/.env.example

@@ -12,3 +12,11 @@ GEMINI_API_KEY=your-gemini-key
 ANTHROPIC_API_KEY=your-anthropic-key
 OPENROUTER_API_KEY=your-openrouter-key
 RESEND_API_KEY=your-resend-key
+
+# SWIRL federated search (optional — enables the search_external and import_document tools)
+# SWIRL_URL=http://localhost:8000
+# Authenticate with a DRF token:
+# SWIRL_TOKEN=your-swirl-api-token
+# Or with username/password Basic auth (takes precedence over SWIRL_TOKEN if both are set):
+# SWIRL_USERNAME=admin
+# SWIRL_PASSWORD=your-swirl-password

backend/src/lib/access.ts

@@ -135,7 +135,7 @@ export async function listAccessibleProjectIds(
             ? db
                   .from("projects")
                   .select("id")
-                  .contains("shared_with", [userEmail])
+                  .filter("shared_with", "cs", JSON.stringify([userEmail]))
                   .neq("user_id", userId)
             : Promise.resolve({ data: [] as { id: string }[] }),
     ]);