@oscharko-dev/keiko-server 0.2.0

package/dist/grounded-rerank.d.ts

@@ -0,0 +1,26 @@
+export declare const RRF_K = 60;
+export type RerankKind = "folder" | "connector";
+export interface RerankInput<P> {
+    readonly kind: RerankKind;
+    readonly redactedText: string;
+    readonly engineScore: number;
+    readonly sourceLabel: string;
+    readonly tieKey: string;
+    readonly payload: P;
+}
+export interface RerankBudget {
+    readonly maxCandidates: number;
+    readonly maxExcerptBytes: number;
+}
+export interface SelectedCandidate<P> {
+    readonly kind: RerankKind;
+    readonly redactedText: string;
+    readonly bytes: number;
+    readonly sourceLabel: string;
+    readonly engineRank: number;
+    readonly fusedScore: number;
+    readonly marker: number;
+    readonly payload: P;
+}
+export declare function rerankAndSelect<P>(inputs: readonly RerankInput<P>[], budget: RerankBudget): readonly SelectedCandidate<P>[];
+//# sourceMappingURL=grounded-rerank.d.ts.map

package/dist/grounded-rerank.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grounded-rerank.d.ts","sourceRoot":"","sources":["../src/grounded-rerank.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,KAAK,KAAK,CAAC;AAExB,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEhD,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;CACrB;AA4DD,wBAAgB,eAAe,CAAC,CAAC,EAC/B,MAAM,EAAE,SAAS,WAAW,CAAC,CAAC,CAAC,EAAE,EACjC,MAAM,EAAE,YAAY,GACnB,SAAS,iBAAiB,CAAC,CAAC,CAAC,EAAE,CA4BjC"}

package/dist/grounded-rerank.js

@@ -0,0 +1,72 @@
+// Reciprocal Rank Fusion (Cormack et al. 2009, k=60) over candidates from two retrieval engines
+// whose native scores are NOT comparable (folder lexical vs connector vector). Each engine's
+// candidates are ranked among themselves; RRF fuses by rank; a shared budget then selects globally
+// so neither engine structurally dominates. Deterministic. See ADR-0036.
+export const RRF_K = 60;
+// ─── Helpers ──────────────────────────────────────────────────────────────────
+function quantize(x) {
+    return Math.round(x * 1e6) / 1e6;
+}
+// Partition inputs by kind, rank within each kind, return merged ranked list.
+// Tie-break order within the merged sort:
+//   1. fusedScore DESC
+//   2. kind: "connector" before "folder" — anti-dominance at rank parity: a connector never loses
+//      a same-rank tie to a folder. This preserves equal representation when both engines produce
+//      identical top-k ranks.
+//   3. tieKey ASC — stable, deterministic across any input permutation.
+function buildRanked(inputs) {
+    const folders = inputs.filter((i) => i.kind === "folder");
+    const connectors = inputs.filter((i) => i.kind === "connector");
+    function rankGroup(group) {
+        const sorted = [...group].sort((a, b) => b.engineScore - a.engineScore || a.tieKey.localeCompare(b.tieKey));
+        return sorted.map((input, idx) => {
+            const engineRank = idx + 1;
+            return {
+                input,
+                engineRank,
+                fusedScore: quantize(1 / (RRF_K + engineRank)),
+                bytes: Buffer.byteLength(input.redactedText, "utf8"),
+            };
+        });
+    }
+    const ranked = [...rankGroup(folders), ...rankGroup(connectors)];
+    // Sort merged list: score DESC, then connector before folder, then tieKey ASC.
+    ranked.sort((a, b) => {
+        if (b.fusedScore !== a.fusedScore)
+            return b.fusedScore - a.fusedScore;
+        if (a.input.kind !== b.input.kind) {
+            // "connector" < "folder" lexicographically, but we want connector FIRST.
+            return a.input.kind === "connector" ? -1 : 1;
+        }
+        return a.input.tieKey.localeCompare(b.input.tieKey);
+    });
+    return ranked;
+}
+// ─── Public function ──────────────────────────────────────────────────────────
+export function rerankAndSelect(inputs, budget) {
+    if (inputs.length === 0)
+        return [];
+    const ranked = buildRanked(inputs);
+    const selected = [];
+    let runningBytes = 0;
+    for (const r of ranked) {
+        if (selected.length >= budget.maxCandidates)
+            break;
+        const fits = runningBytes + r.bytes <= budget.maxExcerptBytes;
+        // Floor: always keep the first candidate even if it alone exceeds the byte budget.
+        if (!fits && selected.length > 0)
+            continue;
+        runningBytes += r.bytes;
+        selected.push({
+            kind: r.input.kind,
+            redactedText: r.input.redactedText,
+            bytes: r.bytes,
+            sourceLabel: r.input.sourceLabel,
+            engineRank: r.engineRank,
+            fusedScore: r.fusedScore,
+            marker: selected.length + 1,
+            payload: r.input.payload,
+        });
+    }
+    return selected;
+}

package/dist/grounded-turn-registry.d.ts

@@ -0,0 +1,23 @@
+import type { ConnectedContextPack } from "@oscharko-dev/keiko-contracts/connected-context";
+export interface GroundedTurnRecord {
+    readonly assistantMessageId: string;
+    readonly chatId: string;
+    readonly workspaceRoot: string;
+    readonly evidenceRunId?: string | undefined;
+    readonly packs: readonly ConnectedContextPack[];
+}
+export interface GroundedTurnRegistry {
+    remember: (record: GroundedTurnRecord, nowMs?: () => number) => void;
+    lookup: (assistantMessageId: string, nowMs?: () => number) => GroundedTurnRecord | undefined;
+    clearConversation: (chatId: string) => void;
+    clearWorkspace: (workspaceRoot: string) => void;
+    clearAll: () => void;
+}
+export declare function createGroundedTurnRegistry(ttlMs?: number, maxEntries?: number): GroundedTurnRegistry;
+export declare const groundedTurnRegistry: GroundedTurnRegistry;
+export declare function rememberGroundedTurn(record: GroundedTurnRecord, nowMs?: () => number): void;
+export declare function lookupGroundedTurn(assistantMessageId: string, nowMs?: () => number): GroundedTurnRecord | undefined;
+export declare function clearGroundedTurnsForConversation(chatId: string): void;
+export declare function clearGroundedTurnsForWorkspace(workspaceRoot: string): void;
+export declare function clearAllGroundedTurns(): void;
+//# sourceMappingURL=grounded-turn-registry.d.ts.map

package/dist/grounded-turn-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grounded-turn-registry.d.ts","sourceRoot":"","sources":["../src/grounded-turn-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AAK5F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACjD;AA4BD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,CAAC,MAAM,EAAE,kBAAkB,EAAE,KAAK,CAAC,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;IACrE,MAAM,EAAE,CAAC,kBAAkB,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,MAAM,KAAK,kBAAkB,GAAG,SAAS,CAAC;IAC7F,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,cAAc,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,QAAQ,EAAE,MAAM,IAAI,CAAC;CACtB;AAyBD,wBAAgB,0BAA0B,CACxC,KAAK,SAAiB,EACtB,UAAU,SAAsB,GAC/B,oBAAoB,CA2CtB;AAED,eAAO,MAAM,oBAAoB,sBAA+B,CAAC;AAEjE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,EAAE,KAAK,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAE3F;AAED,wBAAgB,kBAAkB,CAChC,kBAAkB,EAAE,MAAM,EAC1B,KAAK,CAAC,EAAE,MAAM,MAAM,GACnB,kBAAkB,GAAG,SAAS,CAEhC;AAED,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEtE;AAED,wBAAgB,8BAA8B,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAE1E;AAED,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C"}

package/dist/grounded-turn-registry.js

@@ -0,0 +1,102 @@
+const DEFAULT_TTL_MS = 15 * 60_000;
+const DEFAULT_MAX_ENTRIES = 256;
+function packForHandoffRegistry(pack) {
+    return {
+        ...pack,
+        files: pack.files.map((file) => ({
+            ...file,
+            excerpts: file.excerpts.map((excerpt) => ({
+                ...excerpt,
+                content: "",
+                contentBytes: 0,
+            })),
+        })),
+    };
+}
+function recordForHandoffRegistry(record) {
+    return {
+        ...record,
+        packs: record.packs.map(packForHandoffRegistry),
+    };
+}
+function sweepExpired(entries, now) {
+    for (const [key, entry] of entries) {
+        if (entry.expiresAtMs <= now) {
+            entries.delete(key);
+        }
+    }
+}
+function evictOldest(entries, maxEntries) {
+    while (entries.size >= maxEntries) {
+        let oldest;
+        for (const entry of entries.values()) {
+            if (oldest === undefined || entry.touchedAtMs < oldest.touchedAtMs) {
+                oldest = entry;
+            }
+        }
+        if (oldest === undefined) {
+            return;
+        }
+        entries.delete(oldest.assistantMessageId);
+    }
+}
+export function createGroundedTurnRegistry(ttlMs = DEFAULT_TTL_MS, maxEntries = DEFAULT_MAX_ENTRIES) {
+    const entries = new Map();
+    return {
+        remember(record, nowMs = Date.now) {
+            const now = nowMs();
+            sweepExpired(entries, now);
+            evictOldest(entries, maxEntries);
+            const safeRecord = recordForHandoffRegistry(record);
+            entries.set(record.assistantMessageId, {
+                ...safeRecord,
+                touchedAtMs: now,
+                expiresAtMs: now + ttlMs,
+            });
+        },
+        lookup(assistantMessageId, nowMs = Date.now) {
+            const now = nowMs();
+            sweepExpired(entries, now);
+            const entry = entries.get(assistantMessageId);
+            if (entry === undefined) {
+                return undefined;
+            }
+            entry.touchedAtMs = now;
+            entry.expiresAtMs = now + ttlMs;
+            return entry;
+        },
+        clearConversation(chatId) {
+            for (const [key, entry] of entries) {
+                if (entry.chatId === chatId) {
+                    entries.delete(key);
+                }
+            }
+        },
+        clearWorkspace(workspaceRoot) {
+            for (const [key, entry] of entries) {
+                if (entry.workspaceRoot === workspaceRoot) {
+                    entries.delete(key);
+                }
+            }
+        },
+        clearAll() {
+            entries.clear();
+        },
+    };
+}
+export const groundedTurnRegistry = createGroundedTurnRegistry();
+export function rememberGroundedTurn(record, nowMs) {
+    groundedTurnRegistry.remember(record, nowMs);
+}
+export function lookupGroundedTurn(assistantMessageId, nowMs) {
+    return groundedTurnRegistry.lookup(assistantMessageId, nowMs);
+}
+export function clearGroundedTurnsForConversation(chatId) {
+    groundedTurnRegistry.clearConversation(chatId);
+}
+export function clearGroundedTurnsForWorkspace(workspaceRoot) {
+    groundedTurnRegistry.clearWorkspace(workspaceRoot);
+}
+export function clearAllGroundedTurns() {
+    groundedTurnRegistry.clearAll();
+}

package/dist/headers.d.ts

@@ -0,0 +1,3 @@
+import type { ServerResponse } from "node:http";
+export declare function applySecurityHeaders(res: ServerResponse, csp: string, isApiPath: boolean): void;
+//# sourceMappingURL=headers.d.ts.map

package/dist/headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../src/headers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAchD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI,CAQ/F"}

package/dist/headers.js

@@ -0,0 +1,22 @@
+// Security headers (ADR-0011 D5) applied to every BFF response. The CSP is precomputed once from
+// the static export's inline-script hashes (see csp.ts) and reused for all responses.
+// Headers set on every response regardless of route.
+const BASE_SECURITY_HEADERS = {
+    "X-Content-Type-Options": "nosniff",
+    "X-Frame-Options": "DENY",
+    "Referrer-Policy": "no-referrer",
+    "Cross-Origin-Opener-Policy": "same-origin",
+    "Cross-Origin-Resource-Policy": "same-origin",
+    "Permissions-Policy": "camera=(), geolocation=(), microphone=(), payment=(), usb=()",
+};
+// Applies the CSP and the base security headers, plus `Cache-Control: no-store` for API responses
+// (the contract requires it on every `/api/*` response; D5).
+export function applySecurityHeaders(res, csp, isApiPath) {
+    res.setHeader("Content-Security-Policy", csp);
+    for (const [name, value] of Object.entries(BASE_SECURITY_HEADERS)) {
+        res.setHeader(name, value);
+    }
+    if (isApiPath) {
+        res.setHeader("Cache-Control", "no-store");
+    }
+}

package/dist/host-check.d.ts

@@ -0,0 +1,3 @@
+import type { IncomingMessage } from "node:http";
+export declare function isAllowedHost(req: IncomingMessage, expectedPort: number): boolean;
+//# sourceMappingURL=host-check.d.ts.map

package/dist/host-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-check.d.ts","sourceRoot":"","sources":["../src/host-check.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AA+CjD,wBAAgB,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAWjF"}

package/dist/host-check.js

@@ -0,0 +1,58 @@
+// DNS-rebinding defense (ADR-0011 D5). The BFF binds 127.0.0.1 only and rejects any request whose
+// `Host` header (or `Origin`, when present) does not name the loopback interface on the bound port.
+// A rebinding attacker controls the victim's DNS but cannot forge the loopback host:port the
+// browser sends, so this check blocks cross-origin access to the local server.
+// Hostnames that legitimately resolve to the loopback interface.
+const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "[::1]", "::1"]);
+// Parses a `host:port` authority into its host (lowercased) and optional port. IPv6 literals are
+// kept in their bracketed form so they compare against LOOPBACK_HOSTS.
+function splitAuthority(authority) {
+    const trimmed = authority.trim().toLowerCase();
+    if (trimmed.startsWith("[")) {
+        const close = trimmed.indexOf("]");
+        const host = close === -1 ? trimmed : trimmed.slice(0, close + 1);
+        const rest = close === -1 ? "" : trimmed.slice(close + 1);
+        const port = rest.startsWith(":") ? rest.slice(1) : undefined;
+        return { host, port };
+    }
+    const colon = trimmed.lastIndexOf(":");
+    if (colon === -1) {
+        return { host: trimmed, port: undefined };
+    }
+    return { host: trimmed.slice(0, colon), port: trimmed.slice(colon + 1) };
+}
+function isLoopbackAuthority(authority, expectedPort) {
+    const { host, port } = splitAuthority(authority);
+    if (!LOOPBACK_HOSTS.has(host)) {
+        return false;
+    }
+    return port === String(expectedPort);
+}
+function originAuthority(origin) {
+    try {
+        const parsed = new URL(origin);
+        if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+            return undefined;
+        }
+        return parsed.host;
+    }
+    catch {
+        return undefined;
+    }
+}
+// A request is accepted only if its `Host` is a loopback authority on the bound port and, when an
+// `Origin` is present, that origin is also loopback on the bound port. Opaque `Origin: null` is
+// rejected because state-changing API routes are reachable from sandboxed/file origins otherwise.
+// A missing `Host` is rejected.
+export function isAllowedHost(req, expectedPort) {
+    const host = req.headers.host;
+    if (host === undefined || !isLoopbackAuthority(host, expectedPort)) {
+        return false;
+    }
+    const origin = req.headers.origin;
+    if (origin === undefined) {
+        return true;
+    }
+    const authority = originAuthority(origin);
+    return authority !== undefined && isLoopbackAuthority(authority, expectedPort);
+}

package/dist/index.d.ts

@@ -0,0 +1,26 @@
+export { createUiServer, DEFAULT_UI_PORT, UI_HOST, type UiServerDeps } from "./server.js";
+export { buildCspHeader, extractInlineScriptHashes } from "./csp.js";
+export { createLiveCspHeaderProvider, loadCspHeader } from "./load-csp.js";
+export { applySecurityHeaders } from "./headers.js";
+export { isAllowedHost } from "./host-check.js";
+export { resolveContainedPath, serveFile } from "./static.js";
+export { API_ROUTES, isApiPath, matchRoute, errorBody, STREAMING, type ApiError, type HandlerOutcome, type RouteContext, type RouteDefinition, type RouteHandler, type RouteMatch, type RouteResult, } from "./routes.js";
+export { buildUiHandlerDeps, buildRedactor, type UiHandlerDeps, type BuildHandlerDepsOptions, type Redactor, type ModelPortFactory, } from "./deps.js";
+export { createRunRegistry, ActiveRunLimitError, type RunRegistry, type RunRecord, type RunStatus, type AppliableSnapshot, } from "./runs.js";
+export { QueueEventSink, type StreamEvent, type SseWriter } from "./sink.js";
+export { parseRunRequest, type RunRequest, type RunKind } from "./run-request.js";
+export { startRun, applyRun, type StartRunResult } from "./run-engine.js";
+export { handleCreateRun, handleRunEvents, handleCancelRun, handleGetRun, handleApplyRun, } from "./run-handlers.js";
+export { persistWorkflowEvidence, persistExplainEvidence, type EvidencePersistContext, type RunIdentity, } from "./evidence.js";
+export { createInMemoryUiStore, createNodeUiStore, isProjectAvailable, resolveUiDbPath, runMigrations, SCHEMA_VERSION, UI_DB_DIRNAME, UI_DB_FILENAME, UiStoreError, validateProjectPath, type Chat, type ChatMessage, type ChatRole, type CreateChatOptions, type NewChatMessage, type Project, type UiStore, type UiStoreErrorCode, type UiStoreFactoryOptions, type UpdateChatPatch, type UpdateProjectPatch, type WorkflowStatus, } from "./store/index.js";
+export { handleListProjects, handleCreateProject, handleUpdateProject, handleDeleteProject, handleListChats, handleCreateChat, handleUpdateChat, handleDeleteChat, handleListMessages, handleCreateMessage, } from "./store-handlers.js";
+export { handleDeleteLocalKnowledgeCapsule, handleGetLocalKnowledgeCapsule, handleListLocalKnowledgeCapsules, handleReindexLocalKnowledgeCapsule, } from "./local-knowledge-handlers.js";
+export { createTerminalExecutionManager, buildTerminalPolicySummary, listDirectories, type TerminalDirectoryListing, type TerminalExecutionInput, type TerminalExecutionManager, type TerminalExecutionResult, type TerminalEventEmitter, type TerminalEventEnvelope, type TerminalEventKind, type TerminalPolicySummary, } from "./terminal.js";
+export { TerminalToolError, type TerminalErrorCode } from "./terminal-errors.js";
+export { runMemoryMaintenance, type MaintenanceCounts } from "./memory-maintenance-handlers.js";
+export { exportMemoryDiagnostics, type ExportMemoryDiagnosticsOptions, type MemoryDiagnostics, type MemoryScopeCount, type MemoryStatusHistogram, } from "./memory-diagnostics.js";
+export { createMemoryEmbedder, selectMemoryEmbeddingModelId, type MemoryEmbedder, } from "./memory-embedding.js";
+export { buildTerminalEvidenceEntry, appendTerminalEvidence, type TerminalEvidenceEntry, } from "./terminal-evidence.js";
+export { handleFilesContent, listFilesDirectories, readFilesContent, readFilesPreview, readFilesTree, writeFilesContent, type FilesContentResponse, type FilesDirectoryEntry, type FilesDirectoryListing, type FilesDirectoryRoot, type FilesEntryKind, type FilesPreviewResponse, type FilesTreeEntry, type FilesTreeResponse, } from "./files.js";
+export { handlePromptEnhancement, buildPromptEnhancementRecordInput, runPromptEnhancement, PromptEnhancementCancelledError, PromptEnhancementInputError, type RunPromptEnhancementDeps, } from "./promptEnhancer/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AACrE,OAAO,EAAE,2BAA2B,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EACL,UAAU,EACV,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,uBAAuB,EAC5B,KAAK,QAAQ,EACb,KAAK,gBAAgB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,iBAAiB,GACvB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,KAAK,UAAU,EAAE,KAAK,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,YAAY,EACZ,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,WAAW,GACjB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,cAAc,EACd,aAAa,EACb,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,KAAK,IAAI,EACT,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,OAAO,EACZ,KAAK,OAAO,EACZ,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,cAAc,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iCAAiC,EACjC,8BAA8B,EAC9B,gCAAgC,EAChC,kCAAkC,GACnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,eAAe,EACf,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,KAAK,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAChG,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,EACnC,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,GAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,KAAK,cAAc,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC;AAKpB,OAAO,EACL,uBAAuB,EACvB,iCAAiC,EACjC,oBAAoB,EACpB,+BAA+B,EAC/B,2BAA2B,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,2BAA2B,CAAC"}

package/dist/index.js

@@ -0,0 +1,33 @@
+// Public barrel for the local UI BFF runtime (ADR-0019 §"Target Package Topology"
+// row keiko-server). The browser tier stays presentation-only: model, filesystem,
+// PTY, and harness authority remain in the loopback Node process behind JSON, SSE,
+// and token-scoped WebSocket seams.
+export { createUiServer, DEFAULT_UI_PORT, UI_HOST } from "./server.js";
+export { buildCspHeader, extractInlineScriptHashes } from "./csp.js";
+export { createLiveCspHeaderProvider, loadCspHeader } from "./load-csp.js";
+export { applySecurityHeaders } from "./headers.js";
+export { isAllowedHost } from "./host-check.js";
+export { resolveContainedPath, serveFile } from "./static.js";
+export { API_ROUTES, isApiPath, matchRoute, errorBody, STREAMING, } from "./routes.js";
+export { buildUiHandlerDeps, buildRedactor, } from "./deps.js";
+export { createRunRegistry, ActiveRunLimitError, } from "./runs.js";
+export { QueueEventSink } from "./sink.js";
+export { parseRunRequest } from "./run-request.js";
+export { startRun, applyRun } from "./run-engine.js";
+export { handleCreateRun, handleRunEvents, handleCancelRun, handleGetRun, handleApplyRun, } from "./run-handlers.js";
+export { persistWorkflowEvidence, persistExplainEvidence, } from "./evidence.js";
+// ADR-0013 — UI-local SQLite persistence: ports, factories, and route handlers.
+export { createInMemoryUiStore, createNodeUiStore, isProjectAvailable, resolveUiDbPath, runMigrations, SCHEMA_VERSION, UI_DB_DIRNAME, UI_DB_FILENAME, UiStoreError, validateProjectPath, } from "./store/index.js";
+export { handleListProjects, handleCreateProject, handleUpdateProject, handleDeleteProject, handleListChats, handleCreateChat, handleUpdateChat, handleDeleteChat, handleListMessages, handleCreateMessage, } from "./store-handlers.js";
+export { handleDeleteLocalKnowledgeCapsule, handleGetLocalKnowledgeCapsule, handleListLocalKnowledgeCapsules, handleReindexLocalKnowledgeCapsule, } from "./local-knowledge-handlers.js";
+export { createTerminalExecutionManager, buildTerminalPolicySummary, listDirectories, } from "./terminal.js";
+export { TerminalToolError } from "./terminal-errors.js";
+export { runMemoryMaintenance } from "./memory-maintenance-handlers.js";
+export { exportMemoryDiagnostics, } from "./memory-diagnostics.js";
+export { createMemoryEmbedder, selectMemoryEmbeddingModelId, } from "./memory-embedding.js";
+export { buildTerminalEvidenceEntry, appendTerminalEvidence, } from "./terminal-evidence.js";
+export { handleFilesContent, listFilesDirectories, readFilesContent, readFilesPreview, readFilesTree, writeFilesContent, } from "./files.js";
+// Epic #1307 / Issue #1314 — Prompt Enhancer governed surface. The BFF route handler and the reusable,
+// deterministic orchestration the CLI command (`keiko prompt-enhancer`) drives so both surfaces produce
+// byte-identical enhancements (AC1). Routed through the Model Gateway; never dispatches a model.
+export { handlePromptEnhancement, buildPromptEnhancementRecordInput, runPromptEnhancement, PromptEnhancementCancelledError, PromptEnhancementInputError, } from "./promptEnhancer/index.js";

package/dist/load-csp.d.ts

@@ -0,0 +1,3 @@
+export declare function loadCspHeader(hashesFile: string): Promise<string>;
+export declare function createLiveCspHeaderProvider(hashesFile: string): () => Promise<string>;
+//# sourceMappingURL=load-csp.d.ts.map

package/dist/load-csp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-csp.d.ts","sourceRoot":"","sources":["../src/load-csp.ts"],"names":[],"mappings":"AA0EA,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CASvE;AAWD,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAiBrF"}

package/dist/load-csp.js

@@ -0,0 +1,100 @@
+import { readFile, readdir, stat } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { buildCspHeader, extractInlineScriptHashes } from "./csp.js";
+function parseHashes(raw) {
+    const parsed = JSON.parse(raw);
+    if (!Array.isArray(parsed)) {
+        return [];
+    }
+    return parsed.filter((entry) => typeof entry === "string");
+}
+async function collectHtmlFiles(staticRoot) {
+    let entries;
+    try {
+        const raw = await readdir(staticRoot, { withFileTypes: true });
+        entries = raw.map((entry) => ({
+            isDirectory: () => entry.isDirectory(),
+            name: entry.name,
+        }));
+    }
+    catch {
+        return [];
+    }
+    const files = [];
+    for (const entry of entries) {
+        const resolved = join(staticRoot, entry.name);
+        if (entry.isDirectory()) {
+            files.push(...(await collectHtmlFiles(resolved)));
+            continue;
+        }
+        if (entry.name.endsWith(".html")) {
+            files.push(resolved);
+        }
+    }
+    return files;
+}
+function normalizeHashes(raw) {
+    return [...raw].filter((value) => value !== "").sort();
+}
+function hashesMatch(left, right) {
+    if (left.length !== right.length)
+        return false;
+    for (let i = 0; i < left.length; i += 1) {
+        if (left[i] !== right[i])
+            return false;
+    }
+    return true;
+}
+async function loadHashesFromFile(hashesFile) {
+    try {
+        const raw = await readFile(hashesFile, "utf8");
+        return normalizeHashes(parseHashes(raw));
+    }
+    catch {
+        return [];
+    }
+}
+async function loadHashesFromExport(staticRoot) {
+    const htmlFiles = await collectHtmlFiles(staticRoot);
+    if (htmlFiles.length === 0) {
+        return [];
+    }
+    try {
+        const documents = await Promise.all(htmlFiles.map((file) => readFile(file, "utf8")));
+        return normalizeHashes(extractInlineScriptHashes(documents));
+    }
+    catch {
+        return [];
+    }
+}
+export async function loadCspHeader(hashesFile) {
+    const fileHashes = await loadHashesFromFile(hashesFile);
+    const staticRoot = join(dirname(hashesFile), "static");
+    const exportHashes = await loadHashesFromExport(staticRoot);
+    // If persisted hashes are stale or incompatible with current exported HTML,
+    // prefer derived hashes so startup can recover from stale artifacts.
+    const hashes = exportHashes.length > 0 && !hashesMatch(fileHashes, exportHashes) ? exportHashes : fileHashes;
+    return buildCspHeader(hashes);
+}
+function signatureFor(stats) {
+    return `${String(stats.mtimeMs)}:${String(stats.size)}`;
+}
+export function createLiveCspHeaderProvider(hashesFile) {
+    const cache = { signature: undefined, header: buildCspHeader([]) };
+    return async () => {
+        let signature;
+        try {
+            signature = signatureFor(await stat(hashesFile));
+        }
+        catch {
+            cache.signature = undefined;
+            cache.header = buildCspHeader([]);
+            return cache.header;
+        }
+        if (signature !== cache.signature) {
+            cache.signature = signature;
+            cache.header = await loadCspHeader(hashesFile);
+        }
+        return cache.header;
+    };
+}

package/dist/local-knowledge-grounded-qa.d.ts

@@ -0,0 +1,42 @@
+import { runGroundedAnswer, type AnswerGeneratorInput, type KnowledgeStore } from "@oscharko-dev/keiko-local-knowledge";
+import type { Chat, ChatLocalKnowledgeScope, LocalKnowledgeEvidenceCitation } from "@oscharko-dev/keiko-contracts/bff-wire";
+import type { KnowledgeCapsule, RetrievalReference } from "@oscharko-dev/keiko-contracts";
+import { type OpenAIEmbeddingAdapter } from "@oscharko-dev/keiko-model-gateway";
+import type { UiHandlerDeps } from "./deps.js";
+import type { RouteResult } from "./routes.js";
+export declare const DEFAULT_REFERENCE_BUDGET = 16;
+export declare const MAX_EXCERPT_CHARS = 900;
+export declare const MAX_PROMPT_REFERENCES = 16;
+export declare const LOCAL_KNOWLEDGE_NO_EVIDENCE_ANSWER = "Keine Evidenz im ausgew\u00E4hlten Wissensumfang gefunden.";
+export declare const LOCAL_KNOWLEDGE_SYSTEM_PROMPT: string;
+interface AskInput {
+    readonly chatId: string;
+    readonly content: string;
+    readonly modelId: string | undefined;
+}
+export interface SelectedLocalKnowledgeScope {
+    readonly capsules: readonly KnowledgeCapsule[];
+    readonly scopeKind: "capsule" | "capsule-set";
+    readonly scopeLabel: string;
+}
+export type LocalKnowledgeCitationSourceLookup = (reference: RetrievalReference) => string | undefined;
+type LabelRedactor = (value: string) => string;
+type AnswerCitation = AnswerGeneratorInput["references"][number]["citation"];
+export declare function openStoreForDeps(deps: UiHandlerDeps): {
+    readonly store: KnowledgeStore;
+    close(): void;
+};
+export declare function createEmbeddingAdapter(deps: UiHandlerDeps, capsules: readonly KnowledgeCapsule[]): OpenAIEmbeddingAdapter | RouteResult;
+export declare function selectedCapsulesForScope(scope: ChatLocalKnowledgeScope, store: KnowledgeStore): SelectedLocalKnowledgeScope | RouteResult;
+export declare function scopeStateFailure(selected: SelectedLocalKnowledgeScope): {
+    readonly reason: string;
+    readonly message: string;
+} | undefined;
+export declare function renderCitationLabel(citation: AnswerCitation, redactLabel?: LabelRedactor): string;
+export declare function buildSelectedScopeSourceLookup(store: KnowledgeStore, selected: SelectedLocalKnowledgeScope): LocalKnowledgeCitationSourceLookup;
+export declare function projectLocalKnowledgeCitation(reference: RetrievalReference, marker: string, sourceLookup?: LocalKnowledgeCitationSourceLookup, redactLabel?: LabelRedactor): LocalKnowledgeEvidenceCitation;
+export declare function enforcedNoEvidenceReason(result: Awaited<ReturnType<typeof runGroundedAnswer>>): string | undefined;
+export declare function buildLocalKnowledgeCitations(result: Awaited<ReturnType<typeof runGroundedAnswer>>, noEvidenceReason: string | undefined, sourceLookup?: LocalKnowledgeCitationSourceLookup, redactLabel?: LabelRedactor): readonly LocalKnowledgeEvidenceCitation[];
+export declare function handleLocalKnowledgeGroundedAsk(chat: Chat, input: AskInput, deps: UiHandlerDeps, signal: AbortSignal): Promise<RouteResult>;
+export {};
+//# sourceMappingURL=local-knowledge-grounded-qa.d.ts.map

package/dist/local-knowledge-grounded-qa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-knowledge-grounded-qa.d.ts","sourceRoot":"","sources":["../src/local-knowledge-grounded-qa.ts"],"names":[],"mappings":"AAGA,OAAO,EAQL,iBAAiB,EAEjB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACpB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,EACV,IAAI,EACJ,uBAAuB,EAIvB,8BAA8B,EAE/B,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EACV,gBAAgB,EAGhB,kBAAkB,EACnB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAOL,KAAK,sBAAsB,EAG5B,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI/C,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,kCAAkC,+DACU,CAAC;AAG1D,eAAO,MAAM,6BAA6B,QAM0D,CAAC;AAYrG,UAAU,QAAQ;IAChB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,aAAa,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,kCAAkC,GAAG,CAC/C,SAAS,EAAE,kBAAkB,KAC1B,MAAM,GAAG,SAAS,CAAC;AAExB,KAAK,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;AAC/C,KAAK,cAAc,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;AAqB7E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,aAAa,GAAG;IACrD,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,KAAK,IAAI,IAAI,CAAC;CACf,CAcA;AAmCD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,aAAa,EACnB,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GACpC,sBAAsB,GAAG,WAAW,CA0CtC;AAKD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,uBAAuB,EAC9B,KAAK,EAAE,cAAc,GACpB,2BAA2B,GAAG,WAAW,CAqB3C;AAaD,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,2BAA2B,GACpC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CA0BnE;AA8DD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,cAAc,EAAE,WAAW,CAAC,EAAE,aAAa,GAAG,MAAM,CAejG;AAeD,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,cAAc,EACrB,QAAQ,EAAE,2BAA2B,GACpC,kCAAkC,CAgBpC;AAED,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,kBAAkB,EAC7B,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,kCAAkC,EACjD,WAAW,CAAC,EAAE,aAAa,GAC1B,8BAA8B,CAgBhC;AAuRD,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,GACpD,MAAM,GAAG,SAAS,CAepB;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,EACrD,gBAAgB,EAAE,MAAM,GAAG,SAAS,EACpC,YAAY,CAAC,EAAE,kCAAkC,EACjD,WAAW,CAAC,EAAE,aAAa,GAC1B,SAAS,8BAA8B,EAAE,CAe3C;AAmLD,wBAAsB,+BAA+B,CACnD,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,QAAQ,EACf,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,CAAC,CAuCtB"}