@equationalapplications/core-llm-wiki 4.14.0 → 4.14.1

package/dist/testing.js

@@ -29,6 +29,221 @@ var PrunePartialFailureError = class extends Error {
 };
 var HOOK_TIMEOUT_MARKER = /* @__PURE__ */ Symbol("WikiMemoryHookTimeout");
 
+// src/utils/pure.ts
+function parseJsonResponse(text) {
+  const firstBrace = text.indexOf("{");
+  const firstBracket = text.indexOf("[");
+  let start;
+  let openChar;
+  let closeChar;
+  const useBrace = firstBrace !== -1 && (firstBracket === -1 || firstBrace < firstBracket);
+  if (useBrace) {
+    start = firstBrace;
+    openChar = "{";
+    closeChar = "}";
+  } else if (firstBracket !== -1) {
+    start = firstBracket;
+    openChar = "[";
+    closeChar = "]";
+  } else {
+    throw new SyntaxError("No JSON object/array found in LLM response");
+  }
+  let depth = 0;
+  let inString = false;
+  let escape = false;
+  let end = -1;
+  for (let i = start; i < text.length; i++) {
+    const ch = text[i];
+    if (escape) {
+      escape = false;
+      continue;
+    }
+    if (ch === "\\" && inString) {
+      escape = true;
+      continue;
+    }
+    if (ch === '"') {
+      inString = !inString;
+      continue;
+    }
+    if (inString) continue;
+    if (ch === openChar) {
+      depth++;
+      continue;
+    }
+    if (ch === closeChar) {
+      depth--;
+      if (depth === 0) {
+        end = i;
+        break;
+      }
+    }
+  }
+  if (end === -1) throw new SyntaxError("No JSON object/array found in LLM response");
+  return JSON.parse(text.slice(start, end + 1));
+}
+function sanitizeRankerError(err, sanitizeRankerErrors) {
+  if (sanitizeRankerErrors === false) {
+    return err instanceof Error ? err : new Error(String(err));
+  }
+  const typeName = err instanceof Error ? err.constructor?.name ?? "Error" : typeof err;
+  const innerCause = err instanceof Error && err.cause !== void 0 ? new Error(`Caused by: ${err.cause?.constructor?.name ?? typeof err.cause}`) : void 0;
+  const sanitized = new Error(
+    `VectorRanker ${typeName} (message scrubbed for security)`,
+    innerCause ? { cause: innerCause } : void 0
+  );
+  sanitized.name = typeName;
+  return sanitized;
+}
+function safeSlice(value, start, end) {
+  const length = value.length;
+  let safeStart = start < 0 ? Math.max(length + start, 0) : Math.min(start, length);
+  let safeEnd = end === void 0 ? length : end < 0 ? Math.max(length + end, 0) : Math.min(end, length);
+  if (safeStart > safeEnd) {
+    [safeStart, safeEnd] = [safeEnd, safeStart];
+  }
+  if (safeStart > 0 && safeStart < length && value.charCodeAt(safeStart) >= 56320 && value.charCodeAt(safeStart) <= 57343 && value.charCodeAt(safeStart - 1) >= 55296 && value.charCodeAt(safeStart - 1) <= 56319) {
+    safeStart--;
+  }
+  if (safeEnd > 0 && safeEnd < length && value.charCodeAt(safeEnd - 1) >= 55296 && value.charCodeAt(safeEnd - 1) <= 56319 && value.charCodeAt(safeEnd) >= 56320 && value.charCodeAt(safeEnd) <= 57343) {
+    safeEnd--;
+  }
+  return value.slice(safeStart, safeEnd);
+}
+function chunkText(input, maxChunkLength, overlap) {
+  const text = input.trim();
+  if (text.length === 0) return { chunks: [], truncated: false };
+  if (!Number.isInteger(maxChunkLength) || maxChunkLength < 2) {
+    throw new Error("maxChunkLength must be an integer >= 2");
+  }
+  if (!Number.isInteger(overlap) || overlap < 0 || overlap >= maxChunkLength) {
+    throw new Error("overlap must be a non-negative integer < maxChunkLength");
+  }
+  const chunks = [];
+  let truncated = false;
+  let cursor = 0;
+  const halfMax = Math.floor(maxChunkLength / 2);
+  while (cursor < text.length) {
+    const remaining = text.length - cursor;
+    if (remaining <= maxChunkLength) {
+      chunks.push(safeSlice(text, cursor, text.length));
+      break;
+    }
+    const windowEnd = cursor + maxChunkLength;
+    const minSplit = cursor + halfMax;
+    let splitPoint = -1;
+    const paraIdx = text.lastIndexOf("\n\n", windowEnd);
+    if (paraIdx >= minSplit && paraIdx + 2 <= windowEnd) {
+      splitPoint = paraIdx + 2;
+    }
+    if (splitPoint === -1) {
+      let lastTerm = -1;
+      for (let i = minSplit; i < windowEnd - 1; i++) {
+        const ch = text[i];
+        if ((ch === "." || ch === "!" || ch === "?") && /\s/.test(text[i + 1])) {
+          lastTerm = i + 2;
+        }
+      }
+      if (lastTerm !== -1 && lastTerm <= windowEnd) splitPoint = lastTerm;
+    }
+    if (splitPoint === -1) {
+      for (let i = windowEnd - 1; i >= minSplit; i--) {
+        if (/\s/.test(text[i])) {
+          splitPoint = i + 1;
+          break;
+        }
+      }
+    }
+    if (splitPoint === -1) {
+      truncated = true;
+      splitPoint = windowEnd;
+    }
+    chunks.push(safeSlice(text, cursor, splitPoint));
+    const next = Math.max(splitPoint - overlap, cursor + 1);
+    cursor = next;
+  }
+  return { chunks, truncated };
+}
+async function withConcurrency(tasks, limit) {
+  const results = new Array(tasks.length);
+  let index = 0;
+  let failed = false;
+  let firstError;
+  async function worker() {
+    while (index < tasks.length && !failed) {
+      const i = index++;
+      try {
+        results[i] = await tasks[i]();
+      } catch (e) {
+        if (!failed) {
+          failed = true;
+          firstError = e;
+        }
+        return;
+      }
+    }
+  }
+  const workerCount = tasks.length === 0 ? 0 : Math.min(Math.max(limit, 1), tasks.length);
+  await Promise.allSettled(Array.from({ length: workerCount }, worker));
+  if (failed) throw firstError;
+  return results;
+}
+function clip(value, max) {
+  if (typeof value !== "string") return "";
+  const s = value.trim();
+  return s.length <= max ? s : safeSlice(s, 0, max).trimEnd();
+}
+function validateTags(tags) {
+  if (!Array.isArray(tags)) return [];
+  return tags.filter((t) => typeof t === "string").map((t) => t.trim().toLowerCase()).filter((t) => t.length > 0 && t.length <= 40).slice(0, 6);
+}
+function validateFact(fact) {
+  if (typeof fact?.title !== "string" || typeof fact?.body !== "string") return null;
+  const title = clip(fact.title, 80);
+  const body = clip(fact.body, 800);
+  if (!title || !body) return null;
+  let confidence = fact.confidence;
+  if (confidence !== "certain" && confidence !== "tentative") confidence = "inferred";
+  return {
+    ...fact,
+    title,
+    body,
+    confidence,
+    tags: validateTags(fact.tags)
+  };
+}
+function validateTask(task) {
+  if (typeof task?.description !== "string") return null;
+  const description = clip(task.description, 200);
+  if (!description) return null;
+  let priority = task.priority;
+  if (typeof priority !== "number" || !isFinite(priority)) priority = 0;
+  priority = Math.max(0, Math.min(10, Math.round(priority)));
+  return {
+    ...task,
+    description,
+    priority
+  };
+}
+function normalizeSourceRef(value) {
+  if (typeof value !== "string") return null;
+  const cleaned = value.replace(/[^A-Za-z0-9._\- ]/g, "").trim().slice(0, 255);
+  return cleaned.length > 0 ? cleaned : null;
+}
+function normalizeSourceHash(value) {
+  if (typeof value !== "string") return null;
+  return /^[0-9a-f]{64}$/i.test(value) ? value.toLowerCase() : null;
+}
+function titleTokens(title) {
+  return new Set(title.toLowerCase().replace(/[^a-z0-9\s]/g, "").split(/\s+/).filter((t) => t.length >= 3));
+}
+function jaccardScore(a, b) {
+  if (a.size === 0 && b.size === 0) return 0;
+  const intersection = new Set([...a].filter((x) => b.has(x)));
+  const union = /* @__PURE__ */ new Set([...a, ...b]);
+  return intersection.size / union.size;
+}
+
 // src/services/EmbeddingService.ts
 var EmbeddingService = class {
   constructor(db, options, entryRepo, metadataRepo) {
@@ -76,7 +291,7 @@ var EmbeddingService = class {
         tagsStr = fact.tags;
       }
     }
-    const text = `${fact.title} ${fact.body} ${tagsStr}`.trim();
+    const text = clip(`${fact.title} ${fact.body} ${tagsStr}`.trim(), 16e3);
     try {
       const vector = await embedFn(text);
       if (vector.length === 0 || !vector.every((v) => typeof v === "number" && isFinite(v))) {
@@ -155,6 +370,9 @@ var EmbeddingService = class {
 };
 
 // src/services/ImportExportService.ts
+var MAX_EMBEDDING_BLOB_BYTES = 32 * 1024;
+var IMPORT_TITLE_MAX = 500;
+var IMPORT_BODY_MAX = 8e3;
 var ImportExportService = class {
   constructor(db, entryRepo, taskRepo, eventRepo, metadataRepo, searchService, jobManager, embeddingService) {
     this.db = db;
@@ -236,6 +454,7 @@ var ImportExportService = class {
     const factsWithPreservedBlob = /* @__PURE__ */ new Map();
     const preservedBlobDims = /* @__PURE__ */ new Set();
     const softDeletedFactIds = [];
+    const clippedTextByFactId = /* @__PURE__ */ new Map();
     await this.db.withTransactionAsync(async (tx) => {
       if (!merge) {
         const deletedLiveFactIds = await this.entryRepo.findIdsBySource(
@@ -272,21 +491,32 @@ var ImportExportService = class {
         const rawBlobRaw = fact.embedding_blob;
         let rawBlob = null;
         if (rawBlobRaw instanceof Uint8Array) {
-          rawBlob = rawBlobRaw;
+          if (rawBlobRaw.byteLength <= MAX_EMBEDDING_BLOB_BYTES) {
+            rawBlob = rawBlobRaw;
+          }
         } else if (rawBlobRaw !== null && rawBlobRaw !== void 0 && typeof rawBlobRaw === "object") {
           const obj = rawBlobRaw;
           if (obj["type"] === "Buffer" && Array.isArray(obj["data"])) {
-            rawBlob = new Uint8Array(obj["data"]);
+            const data = obj["data"];
+            if (data.length <= MAX_EMBEDDING_BLOB_BYTES) {
+              rawBlob = new Uint8Array(data);
+            }
           } else if (!Array.isArray(rawBlobRaw)) {
             const entries = Object.keys(obj);
             if (entries.length > 0 && entries.every((k) => /^\d+$/.test(k))) {
               const len = entries.length;
-              rawBlob = new Uint8Array(len);
-              for (let i = 0; i < len; i++)
-                rawBlob[i] = obj[String(i)] ?? 0;
+              if (len <= MAX_EMBEDDING_BLOB_BYTES) {
+                rawBlob = new Uint8Array(len);
+                for (let i = 0; i < len; i++) {
+                  rawBlob[i] = obj[String(i)] ?? 0;
+                }
+              }
             }
           }
         }
+        if (rawBlob !== null && rawBlob.byteLength > MAX_EMBEDDING_BLOB_BYTES) {
+          rawBlob = null;
+        }
         let blobData = null;
         if (rawBlob !== null && rawBlob.byteLength > 0 && rawBlob.byteLength % 4 === 0) {
           const copy = new ArrayBuffer(rawBlob.byteLength);
@@ -316,11 +546,14 @@ var ImportExportService = class {
           }
           if (merge && safeUpdatedAt <= existing.updated_at) continue;
         }
+        const safeTitle = clip(String(fact.title ?? ""), IMPORT_TITLE_MAX);
+        const safeBody = clip(String(fact.body ?? ""), IMPORT_BODY_MAX);
+        clippedTextByFactId.set(fact.id, { title: safeTitle, body: safeBody });
         const factObj = {
           id: fact.id,
           entity_id: entityId,
-          title: fact.title,
-          body: fact.body,
+          title: safeTitle,
+          body: safeBody,
           tags: Array.isArray(fact.tags) ? fact.tags : [],
           confidence: fact.confidence,
           source_type: sourceType,
@@ -408,11 +641,12 @@ var ImportExportService = class {
     await this.searchService.sync(entityId);
     for (const fact of bundle.facts) {
       if (!fact.deleted_at && upsertedFactIds.has(fact.id) && !factsWithPreservedBlob.has(fact.id)) {
+        const clipped = clippedTextByFactId.get(fact.id);
         const embedded = await this.embeddingService.embedFact({
           id: fact.id,
           entity_id: entityId,
-          title: fact.title,
-          body: fact.body,
+          title: clipped?.title ?? fact.title,
+          body: clipped?.body ?? fact.body,
           tags: Array.isArray(fact.tags) || typeof fact.tags === "string" ? fact.tags : []
         });
         if (!embedded) {
@@ -512,7 +746,7 @@ var ImportExportService = class {
   }
   _warnCrossEntityCollision(type, id, existingEntityId, targetEntityId) {
     console.warn(
-      `[WikiMemory] importDump: ${type} id "${id}" already belongs to entity "${existingEntityId}"; skipping for entity "${targetEntityId}"`
+      `[WikiMemory] importDump: ${type} id ${JSON.stringify(id)} already belongs to entity ${JSON.stringify(existingEntityId)}; skipping for entity ${JSON.stringify(targetEntityId)}`
     );
   }
   _normalizeImportedSourceType(raw, ctx) {
@@ -544,221 +778,6 @@ After running the migration SQL, restart your application.`
   }
 };
 
-// src/utils/pure.ts
-function parseJsonResponse(text) {
-  const firstBrace = text.indexOf("{");
-  const firstBracket = text.indexOf("[");
-  let start;
-  let openChar;
-  let closeChar;
-  const useBrace = firstBrace !== -1 && (firstBracket === -1 || firstBrace < firstBracket);
-  if (useBrace) {
-    start = firstBrace;
-    openChar = "{";
-    closeChar = "}";
-  } else if (firstBracket !== -1) {
-    start = firstBracket;
-    openChar = "[";
-    closeChar = "]";
-  } else {
-    throw new SyntaxError("No JSON object/array found in LLM response");
-  }
-  let depth = 0;
-  let inString = false;
-  let escape = false;
-  let end = -1;
-  for (let i = start; i < text.length; i++) {
-    const ch = text[i];
-    if (escape) {
-      escape = false;
-      continue;
-    }
-    if (ch === "\\" && inString) {
-      escape = true;
-      continue;
-    }
-    if (ch === '"') {
-      inString = !inString;
-      continue;
-    }
-    if (inString) continue;
-    if (ch === openChar) {
-      depth++;
-      continue;
-    }
-    if (ch === closeChar) {
-      depth--;
-      if (depth === 0) {
-        end = i;
-        break;
-      }
-    }
-  }
-  if (end === -1) throw new SyntaxError("No JSON object/array found in LLM response");
-  return JSON.parse(text.slice(start, end + 1));
-}
-function sanitizeRankerError(err, sanitizeRankerErrors) {
-  if (sanitizeRankerErrors === false) {
-    return err instanceof Error ? err : new Error(String(err));
-  }
-  const typeName = err instanceof Error ? err.constructor?.name ?? "Error" : typeof err;
-  const innerCause = err instanceof Error && err.cause !== void 0 ? new Error(`Caused by: ${err.cause?.constructor?.name ?? typeof err.cause}`) : void 0;
-  const sanitized = new Error(
-    `VectorRanker ${typeName} (message scrubbed for security)`,
-    innerCause ? { cause: innerCause } : void 0
-  );
-  sanitized.name = typeName;
-  return sanitized;
-}
-function safeSlice(value, start, end) {
-  const length = value.length;
-  let safeStart = start < 0 ? Math.max(length + start, 0) : Math.min(start, length);
-  let safeEnd = end === void 0 ? length : end < 0 ? Math.max(length + end, 0) : Math.min(end, length);
-  if (safeStart > safeEnd) {
-    [safeStart, safeEnd] = [safeEnd, safeStart];
-  }
-  if (safeStart > 0 && safeStart < length && value.charCodeAt(safeStart) >= 56320 && value.charCodeAt(safeStart) <= 57343 && value.charCodeAt(safeStart - 1) >= 55296 && value.charCodeAt(safeStart - 1) <= 56319) {
-    safeStart--;
-  }
-  if (safeEnd > 0 && safeEnd < length && value.charCodeAt(safeEnd - 1) >= 55296 && value.charCodeAt(safeEnd - 1) <= 56319 && value.charCodeAt(safeEnd) >= 56320 && value.charCodeAt(safeEnd) <= 57343) {
-    safeEnd--;
-  }
-  return value.slice(safeStart, safeEnd);
-}
-function chunkText(input, maxChunkLength, overlap) {
-  const text = input.trim();
-  if (text.length === 0) return { chunks: [], truncated: false };
-  if (!Number.isInteger(maxChunkLength) || maxChunkLength < 2) {
-    throw new Error("maxChunkLength must be an integer >= 2");
-  }
-  if (!Number.isInteger(overlap) || overlap < 0 || overlap >= maxChunkLength) {
-    throw new Error("overlap must be a non-negative integer < maxChunkLength");
-  }
-  const chunks = [];
-  let truncated = false;
-  let cursor = 0;
-  const halfMax = Math.floor(maxChunkLength / 2);
-  while (cursor < text.length) {
-    const remaining = text.length - cursor;
-    if (remaining <= maxChunkLength) {
-      chunks.push(safeSlice(text, cursor, text.length));
-      break;
-    }
-    const windowEnd = cursor + maxChunkLength;
-    const minSplit = cursor + halfMax;
-    let splitPoint = -1;
-    const paraIdx = text.lastIndexOf("\n\n", windowEnd);
-    if (paraIdx >= minSplit && paraIdx + 2 <= windowEnd) {
-      splitPoint = paraIdx + 2;
-    }
-    if (splitPoint === -1) {
-      let lastTerm = -1;
-      for (let i = minSplit; i < windowEnd - 1; i++) {
-        const ch = text[i];
-        if ((ch === "." || ch === "!" || ch === "?") && /\s/.test(text[i + 1])) {
-          lastTerm = i + 2;
-        }
-      }
-      if (lastTerm !== -1 && lastTerm <= windowEnd) splitPoint = lastTerm;
-    }
-    if (splitPoint === -1) {
-      for (let i = windowEnd - 1; i >= minSplit; i--) {
-        if (/\s/.test(text[i])) {
-          splitPoint = i + 1;
-          break;
-        }
-      }
-    }
-    if (splitPoint === -1) {
-      truncated = true;
-      splitPoint = windowEnd;
-    }
-    chunks.push(safeSlice(text, cursor, splitPoint));
-    const next = Math.max(splitPoint - overlap, cursor + 1);
-    cursor = next;
-  }
-  return { chunks, truncated };
-}
-async function withConcurrency(tasks, limit) {
-  const results = new Array(tasks.length);
-  let index = 0;
-  let failed = false;
-  let firstError;
-  async function worker() {
-    while (index < tasks.length && !failed) {
-      const i = index++;
-      try {
-        results[i] = await tasks[i]();
-      } catch (e) {
-        if (!failed) {
-          failed = true;
-          firstError = e;
-        }
-        return;
-      }
-    }
-  }
-  const workerCount = tasks.length === 0 ? 0 : Math.min(Math.max(limit, 1), tasks.length);
-  await Promise.allSettled(Array.from({ length: workerCount }, worker));
-  if (failed) throw firstError;
-  return results;
-}
-function clip(value, max) {
-  if (typeof value !== "string") return "";
-  const s = value.trim();
-  return s.length <= max ? s : safeSlice(s, 0, max).trimEnd();
-}
-function validateTags(tags) {
-  if (!Array.isArray(tags)) return [];
-  return tags.filter((t) => typeof t === "string").map((t) => t.trim().toLowerCase()).filter((t) => t.length > 0 && t.length <= 40).slice(0, 6);
-}
-function validateFact(fact) {
-  if (typeof fact?.title !== "string" || typeof fact?.body !== "string") return null;
-  const title = clip(fact.title, 80);
-  const body = clip(fact.body, 800);
-  if (!title || !body) return null;
-  let confidence = fact.confidence;
-  if (confidence !== "certain" && confidence !== "tentative") confidence = "inferred";
-  return {
-    ...fact,
-    title,
-    body,
-    confidence,
-    tags: validateTags(fact.tags)
-  };
-}
-function validateTask(task) {
-  if (typeof task?.description !== "string") return null;
-  const description = clip(task.description, 200);
-  if (!description) return null;
-  let priority = task.priority;
-  if (typeof priority !== "number" || !isFinite(priority)) priority = 0;
-  priority = Math.max(0, Math.min(10, Math.round(priority)));
-  return {
-    ...task,
-    description,
-    priority
-  };
-}
-function normalizeSourceRef(value) {
-  if (typeof value !== "string") return null;
-  const cleaned = value.replace(/[^A-Za-z0-9._\- ]/g, "").trim().slice(0, 255);
-  return cleaned.length > 0 ? cleaned : null;
-}
-function normalizeSourceHash(value) {
-  if (typeof value !== "string") return null;
-  return /^[0-9a-f]{64}$/i.test(value) ? value.toLowerCase() : null;
-}
-function titleTokens(title) {
-  return new Set(title.toLowerCase().replace(/[^a-z0-9\s]/g, "").split(/\s+/).filter((t) => t.length >= 3));
-}
-function jaccardScore(a, b) {
-  if (a.size === 0 && b.size === 0) return 0;
-  const intersection = new Set([...a].filter((x) => b.has(x)));
-  const union = /* @__PURE__ */ new Set([...a, ...b]);
-  return intersection.size / union.size;
-}
-
 // src/utils/ids.ts
 function generateId(prefix = "") {
   if (typeof crypto !== "undefined" && typeof crypto.randomUUID === "function") {
@@ -769,7 +788,9 @@ function generateId(prefix = "") {
     crypto.getRandomValues(bytes);
     return prefix + Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("").substring(0, 24);
   }
-  return prefix + Math.random().toString(36).substring(2, 15) + Math.random().toString(36).substring(2, 15);
+  throw new Error(
+    "generateId: no cryptographically secure random source available (crypto.randomUUID and crypto.getRandomValues are both missing)."
+  );
 }
 
 // src/prompts.ts
@@ -2181,6 +2202,20 @@ var JobManager = class {
     this.activeMaintenanceJobs = /* @__PURE__ */ new Set();
     this.activeIngestJobs = /* @__PURE__ */ new Map();
     this.statusSubscribers = /* @__PURE__ */ new Map();
+    /**
+     * Lookup table for acquireLock/releaseLock's dynamic-dispatch branch.
+     * Excludes 'ingest' | 'global_reembed' | 'global_import', which those
+     * methods already handle via explicit if/else branches before reaching
+     * this table.
+     */
+    this.lockKeyFns = {
+      prune: (id) => this._pruneKey(id),
+      librarian: (id) => this._librarianKey(id),
+      heal: (id) => this._healKey(id),
+      reembed: (id) => this._reembedKey(id),
+      import: (id) => this._importKey(id),
+      forget: (id) => this._forgetKey(id)
+    };
   }
   _pruneKey(entityId) {
     return `${this.prefix}:${entityId}:prune`;
@@ -2330,9 +2365,7 @@ var JobManager = class {
     } else if (operation === "global_import") {
       this.activeMaintenanceJobs.add(this._globalImportKey());
     } else {
-      const keyFnName = `_${operation}Key`;
-      const keyFn = this[keyFnName];
-      this.activeMaintenanceJobs.add(keyFn.call(this, entityId));
+      this.activeMaintenanceJobs.add(this.lockKeyFns[operation](entityId));
     }
     this._notifyStatusSubscribers(entityId);
   }
@@ -2344,9 +2377,7 @@ var JobManager = class {
     } else if (operation === "global_import") {
       this.activeMaintenanceJobs.delete(this._globalImportKey());
     } else {
-      const keyFnName = `_${operation}Key`;
-      const keyFn = this[keyFnName];
-      this.activeMaintenanceJobs.delete(keyFn.call(this, entityId));
+      this.activeMaintenanceJobs.delete(this.lockKeyFns[operation](entityId));
     }
     this._notifyStatusSubscribers(entityId);
   }
@@ -2460,15 +2491,38 @@ var JobManager = class {
 
 // src/services/WriteService.ts
 var WriteService = class {
-  constructor(db, options, eventRepo, metadataRepo, jobManager, maintenanceService) {
+  constructor(db, options, entryRepo, eventRepo, metadataRepo, jobManager, maintenanceService) {
     this.db = db;
     this.options = options;
+    this.entryRepo = entryRepo;
     this.eventRepo = eventRepo;
     this.metadataRepo = metadataRepo;
     this.jobManager = jobManager;
     this.maintenanceService = maintenanceService;
   }
   async write(entityId, event) {
+    if (typeof entityId !== "string" || entityId.length === 0 || entityId.length > 200 || entityId.includes("\0")) {
+      throw new TypeError(
+        `Invalid entityId: must be a non-empty string at most 200 chars with no null bytes; got ${JSON.stringify(entityId)}.`
+      );
+    }
+    if (event === null || typeof event !== "object" || Array.isArray(event)) {
+      throw new TypeError("Invalid event: must be a non-null object.");
+    }
+    if (typeof event.summary !== "string") {
+      throw new TypeError("Invalid event.summary: must be a string.");
+    }
+    const summary = clip(event.summary, 4e3);
+    let relatedEntryId = null;
+    const rawRelatedEntryId = event.related_entry_id;
+    if (rawRelatedEntryId != null && rawRelatedEntryId !== "") {
+      if (typeof rawRelatedEntryId !== "string" || rawRelatedEntryId.length > 200 || rawRelatedEntryId.includes("\0")) {
+        relatedEntryId = null;
+      } else {
+        const existing = await this.entryRepo.findByIds([rawRelatedEntryId], [entityId]);
+        relatedEntryId = existing.length > 0 ? rawRelatedEntryId : null;
+      }
+    }
     const id = generateId("evt_");
     const now = Date.now();
     let eventType = event.event_type;
@@ -2479,8 +2533,8 @@ var WriteService = class {
       id,
       entity_id: entityId,
       event_type: eventType,
-      summary: event.summary,
-      related_entry_id: event.related_entry_id || null,
+      summary,
+      related_entry_id: relatedEntryId,
       created_at: now
     };
     let shouldRunLibrarian = false;