@bevel-software/platform-core-backend 0.22.0 → 0.24.0

package/dist/modules/workspace/session-ontology.gate.js

@@ -1,161 +0,0 @@
-/**
- * Ontology-session boundary — the per-call gate used by the agent tool handlers.
- *
- * One decision fn, called by every gated file/graph handler:
- *   READS  (isWrite=false) record the touched ontology and always allow.
- *   WRITES (isWrite=true)  run the registered BLOCKING `preWrite` hooks
- *                          (`WorkflowHooks`), then record. The core registers
- *                          no hook, so core alone only TRACKS; the enterprise
- *                          overlay registers the ontology block (see
- *                          `modules/kb/ontology-block.hook.ts`), restoring
- *                          "allowed only while the session is confined to a
- *                          single ontology; once it has touched ≥2, all
- *                          writes are blocked".
- *
- * Skips entirely when: the flag is off, the path is neutral (`ontologyOf` →
- * null), the caller is not an agent, or the caller is the recovery bot. Fails
- * CLOSED for an agent named-path operation that carries no `sessionId`.
- *
- * Lives beside `assertCanRead` in the workspace tools — it does NOT touch
- * `acquireLock` (that gate is protected-branch-only; this boundary applies on
- * all branches and to reads). See `docs/rp4-ontology-boundary-plan-v2.md`.
- */
-import { ontologyOf } from '../../shared/kb-layout.js';
-import { ToolError } from '../tool-helpers/tool.contract.js';
-/**
- * The `sessionId` input the ontology-session boundary reads: the agent run /
- * conversation id. The in-process agent supplies its thread id automatically
- * (via its per-run internal token); an external agent has no ambient run id,
- * so it must first mint one with the `start_session` tool and then pass it
- * EXPLICITLY on every gated call — the MCP proxy is a pure passthrough and
- * never injects args.
- */
-export const SESSION_ID_INPUT = {
-    type: 'string',
-    description: 'The KnowledgeBase session id that scopes this run to one ontology. External agents (direct MCP calls and `call_tool_chain` alike): call the `start_session` tool ONCE at the very start of your work to obtain it, then pass that id here on EVERY gated call. The in-process agent runtime supplies this automatically (do not set it yourself).',
-};
-/**
- * Boundary warning appended to ontology-gated tool descriptions so the agent
- * knows the restriction before it calls one. Action-then-why phrasing per
- * docs/glossary.md.
- */
-export const ONTOLOGY_BOUNDARY_NOTE = ' Stay within one KnowledgeBase ontology per conversation: once this run has read or written files in two different ontologies, every later content write (write_file/edit_file/mkdir/unzip, and both endpoints of move_file/copy_file) is blocked with a 403 and no override. Reads, delete_file and delete_folder never block — but each one records the ontology it touched and can poison a later content write, so do broad cross-ontology exploration only when you do not intend to write. Note move_file/copy_file are blocked outright when source and destination are different ontologies, since they would carry content across.';
-/** Thrown when a write is refused because the session has crossed ontologies. */
-export class OntologyWriteBlockedError extends ToolError {
-    constructor(touched, attempted, reason) {
-        const msg = reason === 'multi-ontology'
-            ? `This conversation has already read across multiple ontologies (${touched.join(', ')}), so writing is no longer allowed. Start a new conversation to write to "${attempted}".`
-            : `This conversation is working in ${touched.join(', ')}, so it can't write to a different ontology ("${attempted}"). Start a new conversation to work in "${attempted}".`;
-        super(msg, 403);
-        this.name = 'OntologyWriteBlockedError';
-    }
-}
-/** Thrown when an agent op on a named ontology carries no session id (fail closed). */
-export class MissingSessionError extends ToolError {
-    constructor() {
-        super('This operation needs a KnowledgeBase session id and none was provided. Call the `start_session` tool once at the start of your work to obtain a sessionId, then pass it explicitly as `sessionId` on every gated call (direct MCP calls and `call_tool_chain` alike).', 403);
-        this.name = 'MissingSessionError';
-    }
-}
-/** Only internal/external agent callers are gated; `session` (browser JWT) and humans are not. */
-function isAgentSource(ctx) {
-    return ctx.source === 'internal' || ctx.source === 'external';
-}
-/**
- * Shared gate preamble for the two per-path operations below. Returns `'skip'`
- * when the boundary doesn't apply to this call (flag off, neutral path,
- * non-agent caller, or recovery bot), otherwise the session id to evaluate
- * against — throwing `MissingSessionError` (fail closed) when an agent op on a
- * named ontology carries none.
- */
-function resolveGatedSession(gate, ctx, wsPath) {
-    if (!gate.enabled)
-        return 'skip';
-    // Neutral paths never pin/record/block — skip before any identity work.
-    if (ontologyOf(wsPath, gate.kb.layout, gate.kb.kbDirName) === null)
-        return 'skip';
-    // Humans (UI routes) and browser-JWT callers never hit these tools; only
-    // agent tool calls are gated.
-    if (!isAgentSource(ctx))
-        return 'skip';
-    // The recovery/merge bot legitimately spans ontologies — exempt by identity.
-    if (ctx.user.email.toLowerCase() === gate.recoveryBotEmail)
-        return 'skip';
-    // Fail closed: an agent operation on a named ontology must carry a session id.
-    if (!ctx.sessionId)
-        throw new MissingSessionError();
-    return ctx.sessionId;
-}
-/**
- * Record a read of `wsPath`'s ontology into the session's touched set. Reads are
- * always allowed — recording is the only effect — but each one widens the
- * touched set and so can poison a later write (see {@link assertOntologyWriteAllowed}).
- * Fails closed (`MissingSessionError`) for an agent read of a named ontology
- * with no session id.
- */
-export async function recordOntologyRead(gate, ctx, wsPath) {
-    const sessionId = resolveGatedSession(gate, ctx, wsPath);
-    if (sessionId === 'skip')
-        return;
-    // checkOperation(isWrite=false) records the touch and always allows.
-    await gate.service.checkOperation(sessionId, wsPath, false, gate.kb.kbDirName);
-}
-/**
- * Assert a write to `wsPath` is allowed, then record it. A write that would
- * carry information into a second ontology is the thing the boundary blocks:
- * permitted only while the session stays confined to the target ontology, and
- * refused with `OntologyWriteBlockedError` once it has touched ≥2. Note `delete`
- * is NOT a write here — removing a node propagates no cross-ontology
- * information, so it goes through {@link recordOntologyRead}.
- *
- * The BLOCKING decision itself lives behind the `preWrite` hooks: the
- * enterprise-registered ontology block evaluates-and-records atomically via
- * `checkOperation(isWrite=true)` and throws to refuse (identical behavior to
- * the previous in-gate decision). Core registers no hook, so with none the
- * write is allowed and only the touch is recorded (tracking stays core). The
- * follow-up read-record after the hooks is idempotent — a no-op when a hook
- * already recorded the allowed write.
- */
-export async function assertOntologyWriteAllowed(gate, ctx, wsPath) {
-    const sessionId = resolveGatedSession(gate, ctx, wsPath);
-    if (sessionId === 'skip')
-        return;
-    await gate.hooks.runPreWrite({ kind: 'file-write', sessionId, wsPath });
-    // Tracking stays core: record the (now-allowed) write's ontology touch.
-    // A blocked write never reaches this line, so it records nothing — same as
-    // before the hook split.
-    await gate.service.checkOperation(sessionId, wsPath, false, gate.kb.kbDirName);
-}
-/**
- * Session-level write-eligibility gate for write-capable tools that have no
- * single resolvable target path to check per-call — currently `execute_command`
- * (arbitrary shell). Such a tool cannot be path-confined, so we enforce the
- * boundary at the coarser session level: once the run has crossed into ≥2
- * ontologies (the point at which EVERY path-checked write is already refused),
- * we refuse the tool outright, so shell can't become a write path around the
- * boundary. A fresh or single-ontology session is still allowed; a residual gap
- * remains (a single-ontology session could shell-write a *different* ontology),
- * accepted because arbitrary shell cannot be path-confined and blocking all
- * shell after one KB read would gut its read-style diagnostic use (git/grep/ls).
- *
- * Skips when: the flag is off, the caller is not an agent, the caller is the
- * recovery bot, or there is no session id — there is no named path here to fail
- * closed on, and with no session there is no touched set to evaluate.
- *
- * Like {@link assertOntologyWriteAllowed}, the refusal itself is the
- * enterprise-registered `preWrite` hook's (it evaluates the touched set and
- * throws); core registers none, so shell is never refused in a core-only
- * deployment.
- */
-export async function assertShellAllowedWithinOntology(gate, ctx) {
-    if (!gate.enabled)
-        return;
-    if (!isAgentSource(ctx))
-        return;
-    if (ctx.user.email.toLowerCase() === gate.recoveryBotEmail)
-        return;
-    if (!ctx.sessionId)
-        return;
-    await gate.hooks.runPreWrite({ kind: 'shell', sessionId: ctx.sessionId });
-}
-//# sourceMappingURL=session-ontology.gate.js.map

package/dist/modules/workspace/session-ontology.gate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-ontology.gate.js","sourceRoot":"","sources":["../../../src/modules/workspace/session-ontology.gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAGvD,OAAO,EAAE,SAAS,EAAoB,MAAM,kCAAkC,CAAC;AAI/E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAe;IAC1C,IAAI,EAAE,QAAQ;IACd,WAAW,EACT,mVAAmV;CACtV,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GACjC,6mBAA6mB,CAAC;AAEhnB,iFAAiF;AACjF,MAAM,OAAO,yBAA0B,SAAQ,SAAS;IACtD,YAAY,OAAiB,EAAE,SAAiB,EAAE,MAA+C;QAC/F,MAAM,GAAG,GACP,MAAM,KAAK,gBAAgB;YACzB,CAAC,CAAC,kEAAkE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,6EAA6E,SAAS,IAAI;YAChL,CAAC,CAAC,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iDAAiD,SAAS,4CAA4C,SAAS,IAAI,CAAC;QAC/K,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,uFAAuF;AACvF,MAAM,OAAO,mBAAoB,SAAQ,SAAS;IAChD;QACE,KAAK,CACH,uQAAuQ,EACvQ,GAAG,CACJ,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAmBD,kGAAkG;AAClG,SAAS,aAAa,CAAC,GAAgB;IACrC,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,IAAyB,EAAE,GAAgB,EAAE,MAAc;IACtF,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IACjC,wEAAwE;IACxE,IAAI,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClF,yEAAyE;IACzE,8BAA8B;IAC9B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACvC,6EAA6E;IAC7E,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,gBAAgB;QAAE,OAAO,MAAM,CAAC;IAC1E,+EAA+E;IAC/E,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;IACpD,OAAO,GAAG,CAAC,SAAS,CAAC;AACvB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAyB,EAAE,GAAgB,EAAE,MAAc;IAClG,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO;IACjC,qEAAqE;IACrE,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,IAAyB,EACzB,GAAgB,EAChB,MAAc;IAEd,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO;IACjC,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,wEAAwE;IACxE,2EAA2E;IAC3E,yBAAyB;IACzB,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,IAAyB,EAAE,GAAgB;IAChG,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO;IAC1B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO;IAChC,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,gBAAgB;QAAE,OAAO;IACnE,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO;IAE3B,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;AAC5E,CAAC"}

package/dist/shared/kb-layout.d.ts

@@ -1,39 +0,0 @@
-import { type KbLayout, type Ontology } from '@bevel-software/platform-shared';
-/**
- * Resolve the named ontology a KB path belongs to, or `null` (neutral) when it
- * belongs to none.
- *
- * Classification is deliberately NARROWER than the kb-graph parser: the parser
- * discovers ontologies under every `ONTOLOGY_ROOTS` entry (`KnowledgeBase/`
- * AND `Data/`), but this function classifies ONLY `KnowledgeBase/` paths.
- * `Data/` ontologies are parsed into the graph yet are intentionally NOT
- * classified here, so the session-ontology gate treats `Data/` paths as
- * neutral — pipeline agents read knowledge and write data records in one
- * session (owner decision 2026-07-27; the cross-ontology boundary mechanism
- * itself may be redesigned). This divergence is on purpose, not drift.
- *
- * Within `KnowledgeBase/`, the shape matches the parser (`parser.ts`
- * `walkForOntologies`): an ontology is the directory that holds both a
- * `Knowledge/` and a `NodeTypes/` subfolder. That directory can sit at ANY
- * depth under `KnowledgeBase/`, so the ontology id is the path PREFIX up to
- * (but excluding) the first `Knowledge/` or `NodeTypes/` marker segment — as
- * long as that prefix is inside `KnowledgeBase/` and is not `KnowledgeBase/`
- * itself.
- *
- *   KnowledgeBase/Product/Knowledge/Foo.md            → "KnowledgeBase/Product"
- *   KnowledgeBase/IT Architecture/NodeTypes/T.md      → "KnowledgeBase/IT Architecture"
- *   KnowledgeBase/Group/Sub/Knowledge/x.md            → "KnowledgeBase/Group/Sub"
- *   KnowledgeBase/Knowledge/Foo.md                    → null (marker directly under KB root)
- *   Knowledge/Foo.md, Skills/x.md, access.md          → null (not under KnowledgeBase/)
- *   Data/Ops/Knowledge/x.md                           → null (Data/ is exempt — see above)
- *   KnowledgeBase/Product/Uploads/x.png               → null (no marker segment)
- *
- * Uses exact segment equality (never substring), so `KnowledgeBase/` and
- * `Knowledge-notes.md` are never treated as markers; space-safe; pure (no IO).
- *
- * @param path       repo-root-relative POSIX path (may carry a `kbDirName` prefix)
- * @param layout     the knowledge base's layout — names its `KnowledgeBase/` root
- * @param kbDirName  optional on-disk clone folder prefix to strip first
- */
-export declare function ontologyOf(path: string, layout: KbLayout, kbDirName?: string): Ontology;
-//# sourceMappingURL=kb-layout.d.ts.map

package/dist/shared/kb-layout.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kb-layout.d.ts","sourceRoot":"","sources":["../../src/shared/kb-layout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAkDjG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,QAAQ,CAevF"}

package/dist/shared/kb-layout.js

@@ -1,103 +0,0 @@
-import { ONTOLOGY_MARKERS } from '@bevel-software/platform-shared';
-/**
- * Resolve which named ontology a KB path belongs to — the backend-side
- * implementation of the layout contract whose constants/types live in
- * `@bevel-software/platform-shared` (`kb-layout.ts`). It is backend-only and consumed by
- * more than one domain module (the `workspace` read gate and the `workflow`
- * session-ontology service), so it lives in `backend/src/shared` rather than in
- * any single module — importable by both modules without crossing a module's
- * internal boundary. Note it does NOT mirror the kb-graph parser one-to-one:
- * see the `ontologyOf` docstring for the deliberate `Data/` exemption.
- *
- * Pure string handling — no IO, no DB.
- */
-/**
- * Split a path into repo-root-relative POSIX segments, dropping `./`,
- * leading/trailing slashes, and an optional `kbDirName` prefix (the on-disk
- * clone folder, e.g. `knowledge-base/`). Pure string handling — no IO.
- */
-function toSegments(path, kbDirName) {
-    // Collapse to canonical segments: backslashes → `/`, drop empty and `.`
-    // segments, resolve `..` against the accumulated prefix. Canonicalizing the
-    // inner segments (not just the ends) means equivalent paths like
-    // `KnowledgeBase/Product/../Product/Knowledge/x.md` and
-    // `KnowledgeBase/Product/Knowledge/x.md` resolve to the same ontology.
-    const collapse = (s) => {
-        const out = [];
-        for (const seg of s.replace(/\\/g, '/').split('/')) {
-            if (seg === '' || seg === '.')
-                continue;
-            if (seg === '..') {
-                // Pop a real segment; a leading `..` (nothing to pop) is kept so it can
-                // never alias into a sibling ontology.
-                if (out.length > 0 && out[out.length - 1] !== '..')
-                    out.pop();
-                else
-                    out.push('..');
-                continue;
-            }
-            out.push(seg);
-        }
-        return out;
-    };
-    let segs = collapse(path);
-    const prefixSegs = kbDirName ? collapse(kbDirName) : [];
-    if (prefixSegs.length > 0 && prefixSegs.every((s, i) => segs[i] === s)) {
-        segs = segs.slice(prefixSegs.length);
-    }
-    return segs;
-}
-/**
- * Resolve the named ontology a KB path belongs to, or `null` (neutral) when it
- * belongs to none.
- *
- * Classification is deliberately NARROWER than the kb-graph parser: the parser
- * discovers ontologies under every `ONTOLOGY_ROOTS` entry (`KnowledgeBase/`
- * AND `Data/`), but this function classifies ONLY `KnowledgeBase/` paths.
- * `Data/` ontologies are parsed into the graph yet are intentionally NOT
- * classified here, so the session-ontology gate treats `Data/` paths as
- * neutral — pipeline agents read knowledge and write data records in one
- * session (owner decision 2026-07-27; the cross-ontology boundary mechanism
- * itself may be redesigned). This divergence is on purpose, not drift.
- *
- * Within `KnowledgeBase/`, the shape matches the parser (`parser.ts`
- * `walkForOntologies`): an ontology is the directory that holds both a
- * `Knowledge/` and a `NodeTypes/` subfolder. That directory can sit at ANY
- * depth under `KnowledgeBase/`, so the ontology id is the path PREFIX up to
- * (but excluding) the first `Knowledge/` or `NodeTypes/` marker segment — as
- * long as that prefix is inside `KnowledgeBase/` and is not `KnowledgeBase/`
- * itself.
- *
- *   KnowledgeBase/Product/Knowledge/Foo.md            → "KnowledgeBase/Product"
- *   KnowledgeBase/IT Architecture/NodeTypes/T.md      → "KnowledgeBase/IT Architecture"
- *   KnowledgeBase/Group/Sub/Knowledge/x.md            → "KnowledgeBase/Group/Sub"
- *   KnowledgeBase/Knowledge/Foo.md                    → null (marker directly under KB root)
- *   Knowledge/Foo.md, Skills/x.md, access.md          → null (not under KnowledgeBase/)
- *   Data/Ops/Knowledge/x.md                           → null (Data/ is exempt — see above)
- *   KnowledgeBase/Product/Uploads/x.png               → null (no marker segment)
- *
- * Uses exact segment equality (never substring), so `KnowledgeBase/` and
- * `Knowledge-notes.md` are never treated as markers; space-safe; pure (no IO).
- *
- * @param path       repo-root-relative POSIX path (may carry a `kbDirName` prefix)
- * @param layout     the knowledge base's layout — names its `KnowledgeBase/` root
- * @param kbDirName  optional on-disk clone folder prefix to strip first
- */
-export function ontologyOf(path, layout, kbDirName) {
-    const segs = toSegments(path, kbDirName);
-    // Must live under the dedicated KnowledgeBase/ container, with at least one
-    // ontology-name segment and a marker after it (so length >= 3).
-    if (segs.length < 3 || segs[0] !== layout.knowledgeBaseDir)
-        return null;
-    // The ontology id is the prefix before the first marker segment. Require at
-    // least one name segment between `KnowledgeBase/` and the marker, so a marker
-    // sitting directly under `KnowledgeBase/` (`KnowledgeBase/Knowledge/...`) is
-    // neutral, matching the parser (it only discovers ontologies one level down).
-    for (let i = 1; i < segs.length; i++) {
-        if (ONTOLOGY_MARKERS.has(segs[i])) {
-            return i >= 2 ? segs.slice(0, i).join('/') : null;
-        }
-    }
-    return null;
-}
-//# sourceMappingURL=kb-layout.js.map

package/dist/shared/kb-layout.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"kb-layout.js","sourceRoot":"","sources":["../../src/shared/kb-layout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAgC,MAAM,iCAAiC,CAAC;AAEjG;;;;;;;;;;;GAWG;AAEH;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY,EAAE,SAAkB;IAClD,wEAAwE;IACxE,4EAA4E;IAC5E,iEAAiE;IACjE,wDAAwD;IACxD,uEAAuE;IACvE,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAY,EAAE;QACvC,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG;gBAAE,SAAS;YACxC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,wEAAwE;gBACxE,uCAAuC;gBACvC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI;oBAAE,GAAG,CAAC,GAAG,EAAE,CAAC;;oBACzD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,IAAI,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,MAAgB,EAAE,SAAkB;IAC3E,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACzC,4EAA4E;IAC5E,gEAAgE;IAChE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACxE,4EAA4E;IAC5E,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAC9E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/shared/kb-layout.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=kb-layout.test.d.ts.map

package/dist/shared/kb-layout.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kb-layout.test.d.ts","sourceRoot":"","sources":["../../src/shared/kb-layout.test.ts"],"names":[],"mappings":""}

package/dist/shared/kb-layout.test.js

@@ -1,75 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { DEFAULT_KB_LAYOUT } from '@bevel-software/platform-shared';
-import { ontologyOf } from './kb-layout.js';
-/** `ontologyOf` under the default layout, which is what these cases are written against. */
-const ont = (path, kbDirName) => ontologyOf(path, DEFAULT_KB_LAYOUT, kbDirName);
-describe('ontologyOf', () => {
-    it('classifies under the knowledge-base root the layout names, not the default one', () => {
-        const layout = { ...DEFAULT_KB_LAYOUT, knowledgeBaseDir: 'docs' };
-        expect(ontologyOf('docs/Product/Knowledge/Foo.md', layout)).toBe('docs/Product');
-        expect(ontologyOf('KnowledgeBase/Product/Knowledge/Foo.md', layout)).toBeNull();
-    });
-    it('resolves a named ontology under Knowledge', () => {
-        expect(ont('KnowledgeBase/Product/Knowledge/Foo.md')).toBe('KnowledgeBase/Product');
-    });
-    it('resolves a named ontology under NodeTypes', () => {
-        expect(ont('KnowledgeBase/Product/NodeTypes/Process.md')).toBe('KnowledgeBase/Product');
-    });
-    it('is space-safe in the ontology name', () => {
-        expect(ont('KnowledgeBase/IT Architecture/NodeTypes/ServiceCommitment.md')).toBe('KnowledgeBase/IT Architecture');
-    });
-    it('treats a nested ontology directory as the full prefix before the marker', () => {
-        expect(ont('KnowledgeBase/Plugin/Sub/Knowledge/x.md')).toBe('KnowledgeBase/Plugin/Sub');
-    });
-    it('returns null when the marker sits directly under KnowledgeBase/', () => {
-        expect(ont('KnowledgeBase/Knowledge/Foo.md')).toBeNull();
-        expect(ont('KnowledgeBase/NodeTypes/T.md')).toBeNull();
-    });
-    it('returns null for root-level Knowledge (not under KnowledgeBase/)', () => {
-        expect(ont('Knowledge/Foo.md')).toBeNull();
-    });
-    it('returns null for Data/ ontologies (deliberate session-ontology exemption)', () => {
-        // `Data/<X>` IS parsed into the graph (parser `ONTOLOGY_ROOTS`), but is
-        // intentionally NOT classified here so the session-ontology gate treats
-        // Data paths as neutral — pipeline agents read knowledge and write data
-        // in one session (owner decision 2026-07-27). See the `ontologyOf`
-        // docstring; this is not drift.
-        expect(ont('Data/Ops/Knowledge/x.md')).toBeNull();
-        expect(ont('Data/Ops/NodeTypes/Ticket.md')).toBeNull();
-        // KnowledgeBase paths still classify as before.
-        expect(ont('KnowledgeBase/Ops/Knowledge/x.md')).toBe('KnowledgeBase/Ops');
-    });
-    it('returns null for Plugins and root config (neutral)', () => {
-        expect(ont('Plugins/some-skill/SKILL.md')).toBeNull();
-        expect(ont('access.md')).toBeNull();
-        expect(ont('roles.yaml')).toBeNull();
-    });
-    it('returns null for an ontology path with no marker segment', () => {
-        expect(ont('KnowledgeBase/Product/Uploads/diagram.png')).toBeNull();
-    });
-    it('does not match substring lookalikes (segment equality)', () => {
-        expect(ont('KnowledgeBase/Product/Knowledge-notes.md')).toBeNull();
-        expect(ont('KnowledgeBase/Product/KnowledgeBase/x.md')).toBeNull();
-    });
-    it('strips a kbDirName prefix (normalized and un-normalized)', () => {
-        expect(ont('knowledge-base/KnowledgeBase/Product/Knowledge/Foo.md', 'knowledge-base')).toBe('KnowledgeBase/Product');
-        expect(ont('./knowledge-base/KnowledgeBase/GTM/NodeTypes/T.md', 'knowledge-base/')).toBe('KnowledgeBase/GTM');
-    });
-    it('normalizes backslashes and leading/trailing slashes', () => {
-        expect(ont('/KnowledgeBase/Product/Knowledge/Foo.md/')).toBe('KnowledgeBase/Product');
-        expect(ont('KnowledgeBase\\Product\\Knowledge\\Foo.md')).toBe('KnowledgeBase/Product');
-    });
-    it('canonicalizes inner . and .. segments to the same ontology', () => {
-        expect(ont('KnowledgeBase/Product/./Knowledge/Foo.md')).toBe('KnowledgeBase/Product');
-        expect(ont('KnowledgeBase/Product/Sub/../Knowledge/Foo.md')).toBe('KnowledgeBase/Product');
-        expect(ont('KnowledgeBase/Platform/../Product/Knowledge/Foo.md')).toBe('KnowledgeBase/Product');
-        // `..` also collapses inside the stripped kbDirName prefix.
-        expect(ont('knowledge-base/x/../KnowledgeBase/GTM/NodeTypes/T.md', 'knowledge-base')).toBe('KnowledgeBase/GTM');
-    });
-    it('returns null for empty or root paths', () => {
-        expect(ont('')).toBeNull();
-        expect(ont('KnowledgeBase')).toBeNull();
-        expect(ont('KnowledgeBase/Product')).toBeNull();
-    });
-});
-//# sourceMappingURL=kb-layout.test.js.map

package/dist/shared/kb-layout.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"kb-layout.test.js","sourceRoot":"","sources":["../../src/shared/kb-layout.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,4FAA4F;AAC5F,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,SAAkB,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;AAEjG,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,MAAM,GAAG,EAAE,GAAG,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAClE,MAAM,CAAC,UAAU,CAAC,+BAA+B,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACjF,MAAM,CAAC,UAAU,CAAC,wCAAwC,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC,IAAI,CAC9E,+BAA+B,CAChC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,wEAAwE;QACxE,wEAAwE;QACxE,wEAAwE;QACxE,mEAAmE;QACnE,gCAAgC;QAChC,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClD,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvD,gDAAgD;QAChD,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnE,MAAM,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,CAAC,uDAAuD,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CACzF,uBAAuB,CACxB,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,mDAAmD,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CACtF,mBAAmB,CACpB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACtF,MAAM,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACtF,MAAM,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC3F,MAAM,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAChG,4DAA4D;QAC5D,MAAM,CAAC,GAAG,CAAC,sDAAsD,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CACxF,mBAAmB,CACpB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/src/modules/workflow/__tests__/session-ontology.policy.test.ts

@@ -1,62 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { recordTouch, decideWrite } from '../session-ontology.policy.js';
-
-const PRODUCT = 'KnowledgeBase/Product';
-const PLATFORM = 'KnowledgeBase/Platform';
-const GTM = 'KnowledgeBase/GTM';
-
-describe('recordTouch', () => {
-  it('adds a named ontology to the set', () => {
-    expect([...recordTouch(new Set(), PRODUCT)]).toEqual([PRODUCT]);
-  });
-
-  it('adds nothing for a neutral touch', () => {
-    expect([...recordTouch(new Set([PRODUCT]), null)]).toEqual([PRODUCT]);
-  });
-
-  it('accumulates across ontologies', () => {
-    const a = recordTouch(new Set(), PRODUCT);
-    const b = recordTouch(a, PLATFORM);
-    expect(new Set(b)).toEqual(new Set([PRODUCT, PLATFORM]));
-  });
-
-  it('does not mutate the input set', () => {
-    const input = new Set([PRODUCT]);
-    recordTouch(input, PLATFORM);
-    expect([...input]).toEqual([PRODUCT]);
-  });
-});
-
-describe('decideWrite', () => {
-  it('allows a write to a neutral path regardless of touched set', () => {
-    expect(decideWrite(new Set([PRODUCT, PLATFORM]), null)).toEqual({ allow: true });
-  });
-
-  it('allows a write when the session has touched nothing yet', () => {
-    expect(decideWrite(new Set(), PRODUCT)).toEqual({ allow: true });
-  });
-
-  it('allows a write to the single ontology the session is confined to', () => {
-    expect(decideWrite(new Set([PRODUCT]), PRODUCT)).toEqual({ allow: true });
-  });
-
-  it('blocks a write to a different ontology when confined to one (different-ontology)', () => {
-    expect(decideWrite(new Set([PRODUCT]), PLATFORM)).toEqual({
-      allow: false,
-      reason: 'different-ontology',
-      touched: [PRODUCT],
-      attempted: PLATFORM,
-    });
-  });
-
-  it('blocks ALL writes once the session has touched two ontologies (multi-ontology)', () => {
-    // Reading across ontologies poisons writes — even a write back into Product.
-    expect(decideWrite(new Set([PRODUCT, PLATFORM]), PRODUCT)).toEqual({
-      allow: false,
-      reason: 'multi-ontology',
-      touched: [PLATFORM, PRODUCT],
-      attempted: PRODUCT,
-    });
-    expect(decideWrite(new Set([PRODUCT, PLATFORM]), GTM).allow).toBe(false);
-  });
-});