@oscharko-dev/keiko 0.2.0-beta.2 → 0.2.0-beta.4

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runIngestion.js

@@ -25,12 +25,13 @@ function perSourceAtomBudget(total, sourceCount) {
         return total;
     return Math.max(1, Math.floor(total / sourceCount));
 }
-// Global per-run evidence byte budget. Each source kind (workspace / file / capsule) was previously
-// allowed ~192KB INDEPENDENTLY, so N large sources summed to N×192KB and blew the model prompt cap
-// (MAX_PROMPT_BYTES = 256KB) — failing the entire N+1 run with QI_PROMPT_TOO_LARGE (Epic #729
-// headline). The byte budget is now a single global pool split fairly across sources, mirroring the
-// atom-budget split, so the merged evidence text stays bounded regardless of N. A single source keeps
-// the full budget (identical to the prior single-source behaviour).
+// Global per-run evidence byte budget. Each source kind (workspace / file / capsule /
+// figma-snapshot) was previously allowed ~192KB INDEPENDENTLY, so N large sources summed to N×192KB
+// and blew the model prompt cap (MAX_PROMPT_BYTES = 256KB) — failing the entire N+1 run with
+// QI_PROMPT_TOO_LARGE (Epic #729 headline). The byte budget is now a single global pool split fairly
+// across sources, mirroring the atom-budget split, so the merged evidence text stays bounded
+// regardless of N. A single source keeps the full budget (identical to the prior single-source
+// behaviour). figma-snapshot uses the same split via figmaScreenDocs (mirrors processCapsuleDocs).
 const EVIDENCE_BUDGET_BYTES = 196_608;
 // Never starve a source below this many bytes — a tiny share is still usable context.
 const MIN_SOURCE_BUDGET_BYTES = 4_096;
@@ -53,9 +54,33 @@ export class QiIngestionError extends Error {
         this.name = "QiIngestionError";
     }
 }
+// Credential token shapes mirrored from keiko-contracts `fieldLooksUnsafe` so a connected
+// source's display label can never echo a secret back to the browser-surfaced envelope
+// (#277/#278 envelope display-surface invariant — the label is the only user-derived envelope
+// field; localRef/origin/integrityHash are server-built and hash-derived).
+const CREDENTIAL_LABEL_SHAPES = [
+    /AKIA[0-9A-Z]{12,}/gu,
+    /(?:ghp_|gho_|github_pat_)[A-Za-z0-9_]{20,}/gu,
+    /xox[baprs]-[A-Za-z0-9-]{10,}/gu,
+    /sk-[A-Za-z0-9]{16,}/gu,
+    /\bBearer\s+\S+/giu,
+    /-----BEGIN [A-Z ]*PRIVATE KEY-----/gu,
+];
 const sanitiseLabel = (label) => {
-    const trimmed = label.replace(/https?:\/\/\S+/giu, "").trim();
-    const safe = trimmed.length === 0 ? "Untitled source" : trimmed;
+    // Strip any URL authority — ANY scheme (http, file, s3, ftp, …), not just http(s) — plus the
+    // well-known credential token shapes, so a browser-supplied label never carries a URL or secret
+    // into the envelope display surface that is streamed back to the client (#277/#278).
+    let cleaned = label.replace(/[a-z][a-z0-9+.-]*:\/\/\S+/giu, " ");
+    for (const shape of CREDENTIAL_LABEL_SHAPES)
+        cleaned = cleaned.replace(shape, " ");
+    cleaned = cleaned.trim();
+    // Collapse an absolute POSIX / Windows-drive / UNC path label to its final segment so the
+    // display label never leaks the filesystem layout (the basename is the useful display token).
+    if (/^(?:\/|[A-Za-z]:[\\/]|\\\\)/u.test(cleaned)) {
+        const segments = cleaned.split(/[\\/]/u).filter((s) => s.length > 0);
+        cleaned = (segments[segments.length - 1] ?? "").trim();
+    }
+    const safe = cleaned.length === 0 ? "Untitled source" : cleaned;
     return safe.length > MAX_LABEL_CHARS ? `${safe.slice(0, MAX_LABEL_CHARS - 1)}…` : safe;
 };
 // Reject a source whose absolute path (any segment) names a denied credential location. isDenied
@@ -105,6 +130,7 @@ function ingestRequirements(source, index, registeredAt) {
 const WORKSPACE_BUDGET_BYTES = 196_608;
 const WORKSPACE_MAX_BYTES_PER_FILE = 16_384;
 const CODE_EXTENSION = /\.(?:ts|tsx|js|jsx|mjs|cjs|py|java|go|rb|rs|cs|cpp|cc|c|h|hpp|kt|swift|php|scala|sql)$/iu;
+const REQUIREMENT_TEXT_EXTENSION = /\.(?:md|markdown|txt|text|rst|adoc|asciidoc|org)$/iu;
 const atomKindForPath = (path) => CODE_EXTENSION.test(path) ? "code-fragment" : "document-excerpt";
 const workspaceAtom = (entry, envelopeId) => {
     // entry.excerpt is already redacted by keiko-workspace; prefix the path so the model can
@@ -127,6 +153,42 @@ const workspaceAtom = (entry, envelopeId) => {
     };
     return { atom, canonicalText };
 };
+const requirementAtomIdFor = (envelopeId, path, statement) => {
+    const digest = sha256Hex(`qi-atom-doc-req-v1|${String(envelopeId)}|${path}|${statement}`).slice(0, 32);
+    return QualityIntelligence.asQualityIntelligenceEvidenceAtomId(`qi-atom-${digest}`);
+};
+const stripRequirementDocumentStructure = (text) => text
+    .split(/\r?\n/u)
+    .filter((line) => !/^\s{0,3}#{1,6}\s+\S/u.test(line))
+    .join("\n");
+function documentRequirementAtoms(entry, envelopeId) {
+    if (!REQUIREMENT_TEXT_EXTENSION.test(entry.path))
+        return Object.freeze([]);
+    const split = QualityIntelligenceGeneration.splitRequirementsIntoAtoms(stripRequirementDocumentStructure(entry.excerpt), {
+        envelopeId,
+        maxAtoms: MAX_TOTAL_ATOMS,
+    });
+    if (split.length <= 1)
+        return Object.freeze([]);
+    return Object.freeze(split.map((requirement) => {
+        const canonicalText = `${entry.path}\n${requirement.canonicalText}`;
+        const atom = {
+            kind: "requirement",
+            id: requirementAtomIdFor(envelopeId, entry.path, requirement.canonicalText),
+            sourceEnvelopeId: envelopeId,
+            canonicalHashSha256Hex: sha256Hex(canonicalText),
+            redactionStatus: "redacted",
+            lifecycleStatus: "draft",
+        };
+        return Object.freeze({ atom: Object.freeze(atom), canonicalText });
+    }));
+}
+function atomsForWorkspaceEntry(entry, envelopeId) {
+    const requirementAtoms = documentRequirementAtoms(entry, envelopeId);
+    return requirementAtoms.length > 0
+        ? requirementAtoms
+        : Object.freeze([workspaceAtom(entry, envelopeId)]);
+}
 // Ingest a local folder by REUSING keiko-workspace traversal + redaction (no independent
 // repository traversal — Issue #278 stop condition). Each selected, already-redacted context
 // entry becomes one content-bearing atom under a single repository-context envelope.
@@ -167,7 +229,7 @@ function ingestWorkspace(source, index, registeredAt, byteBudget) {
         },
         localRef: stableLocalRef("workspace", pack.workspaceRoot),
     };
-    const atoms = pack.selected.map((entry) => workspaceAtom(entry, envelopeId));
+    const atoms = pack.selected.flatMap((entry) => atomsForWorkspaceEntry(entry, envelopeId));
     return { envelope, atoms };
 }
 // A single Fachkonzept document may use the full per-run workspace byte budget — it is the only
@@ -300,9 +362,7 @@ function ingestFile(source, index, registeredAt, byteBudget) {
         },
         localRef: stableLocalRef("file", absFile),
     };
-    const atoms = [
-        workspaceAtom({ path: content.relativePath, excerpt: boundedText }, envelopeId),
-    ];
+    const atoms = atomsForWorkspaceEntry({ path: content.relativePath, excerpt: boundedText }, envelopeId);
     return { envelope, atoms };
 }
 // A single capsule document may use the per-document byte budget; the whole capsule corpus is
@@ -485,7 +545,14 @@ function a11yItemsByScreen(parsed) {
 // items (#811) AND its accessibility test items (#812) — concatenated, neither replacing the other —
 // through the `extraItems` seam, then optionally with vision hints. The per-run byte budget bounds
 // the cumulative corpus so an oversized board never hard-fails on QI_PROMPT_TOO_LARGE.
-function figmaScreenDocs(record, vision) {
+// The byteBudget is the caller's fair share of the global evidence pool (Epic #729 N+1 split)
+// so a figma-snapshot source never consumes more than its fair slice alongside other sources.
+function figmaScreenDocs(record, vision, byteBudget) {
+    // Mirror processCapsuleDocs (:558-563): the per-run corpus budget is the smaller of the capsule's
+    // own ceiling and this source's fair share of the global evidence byte budget (Epic #729 N+1
+    // split). The per-document cap is likewise never larger than the per-run budget.
+    const perRunBudget = Math.min(CAPSULE_BUDGET_BYTES, byteBudget);
+    const perDocBudget = Math.min(CAPSULE_MAX_BYTES_PER_DOCUMENT, perRunBudget);
     const parsed = parseScreens(record);
     const navItems = navItemsByScreen(parsed, record.links ?? []);
     const a11yItems = a11yItemsByScreen(parsed);
@@ -495,18 +562,18 @@ function figmaScreenDocs(record, vision) {
         const extraItems = [...(navItems.get(ir.id) ?? []), ...(a11yItems.get(ir.id) ?? [])];
         const baseline = QualityIntelligenceFigma.deriveScreenTestBaseline(ir, extraItems);
         const augmented = visionAugmentedScreenText(baseline, row, vision);
-        const capped = truncateToUtf8Bytes(redact(augmented), CAPSULE_MAX_BYTES_PER_DOCUMENT);
+        const capped = truncateToUtf8Bytes(redact(augmented), perDocBudget);
         if (capped.trim().length === 0)
             continue;
         const bytes = utf8ByteLength(capped);
-        if (docs.length > 0 && totalBytes + bytes > CAPSULE_BUDGET_BYTES)
+        if (docs.length > 0 && totalBytes + bytes > perRunBudget)
             break;
         docs.push({ documentId: `${row.screenId} (${ir.name})`, text: capped });
         totalBytes += bytes;
     }
     return docs;
 }
-function ingestFigmaSnapshot(source, index, registeredAt, loader, vision) {
+function ingestFigmaSnapshot(source, index, registeredAt, loader, vision, byteBudget) {
     const label = sanitiseLabel(source.label);
     const record = loader(source.snapshotRunId);
     if (record === undefined) {
@@ -515,15 +582,19 @@ function ingestFigmaSnapshot(source, index, registeredAt, loader, vision) {
     if (record.screens.length === 0) {
         throw new QiIngestionError("QI_SOURCE_EMPTY", `Figma snapshot "${label}" has no screens.`);
     }
-    const docs = figmaScreenDocs(record, vision);
+    const docs = figmaScreenDocs(record, vision, byteBudget);
     if (docs.length === 0) {
         throw new QiIngestionError("QI_SOURCE_EMPTY", `Figma snapshot "${label}" produced no usable screen baseline.`);
     }
     const joinedText = docs.map((d) => d.text).join("\n");
     const envelopeId = envelopeIdFor(index, label, source.snapshotRunId);
+    // A stored Figma Snapshot is figma evidence, not repository context. Use the dedicated
+    // `figma-evidence` envelope kind (#278 AC2 "represented as an explicit connector-backed source"
+    // + AC4 citation/audit attribution) so the persisted envelope, source-mix priority, and any
+    // kind-grouped audit rollup classify it correctly instead of folding it into repo context.
     const envelope = {
         id: envelopeId,
-        kind: "repository-context",
+        kind: "figma-evidence",
         displayLabel: label,
         provenance: {
             origin: `figma-snapshot:${source.snapshotRunId}`,
@@ -557,7 +628,7 @@ function ingestOne(source, index, registeredAt, capsuleResolver, figmaSnapshotLo
             if (figmaSnapshotLoader === undefined) {
                 throw new QiIngestionError("QI_FIGMA_SNAPSHOT_UNAVAILABLE", "Figma-snapshot sources are unavailable: the evidence directory is not configured.");
             }
-            return ingestFigmaSnapshot(source, index, registeredAt, figmaSnapshotLoader, figmaVision);
+            return ingestFigmaSnapshot(source, index, registeredAt, figmaSnapshotLoader, figmaVision, byteBudget);
     }
 }
 /**

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runRoutes.d.ts

@@ -1,5 +1,8 @@
+import type { QualityIntelligenceRunStreamMessage } from "@oscharko-dev/keiko-contracts";
+import type { QualityIntelligence as QI } from "@oscharko-dev/keiko-contracts";
 import { type HandlerOutcome, type RouteContext, type RouteResult, type RouteDefinition } from "../routes.js";
-import type { UiHandlerDeps } from "../deps.js";
+import type { Redactor, UiHandlerDeps } from "../deps.js";
+export declare function toStreamEvent(event: QI.QualityIntelligenceRunEvent, redact: Redactor): QualityIntelligenceRunStreamMessage;
 export declare function handleStartQiRun(ctx: RouteContext, deps: UiHandlerDeps): Promise<HandlerOutcome>;
 export declare function handleCancelQiRun(ctx: RouteContext, _deps: UiHandlerDeps): RouteResult;
 export declare const QI_RUN_EXECUTION_ROUTE_GROUP: readonly RouteDefinition[];

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/runRoutes.ts"],"names":[],"mappings":"AAuBA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAmShD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,cAAc,CAAC,CAmBzB;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,GAAG,WAAW,CAStF;AAED,eAAO,MAAM,4BAA4B,EAAE,SAAS,eAAe,EAOlE,CAAC"}
+{"version":3,"file":"runRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/runRoutes.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAKV,mCAAmC,EAEpC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,mBAAmB,IAAI,EAAE,EAAE,MAAM,+BAA+B,CAAC;AAE/E,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AA8N1D,wBAAgB,aAAa,CAC3B,KAAK,EAAE,EAAE,CAAC,2BAA2B,EACrC,MAAM,EAAE,QAAQ,GACf,mCAAmC,CAgBrC;AAoED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,cAAc,CAAC,CAmBzB;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,GAAG,WAAW,CAStF;AAED,eAAO,MAAM,4BAA4B,EAAE,SAAS,eAAe,EAOlE,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runRoutes.js

@@ -180,7 +180,9 @@ async function parseStartBody(req) {
     }
     return validateRequest(parsed);
 }
-function toStreamEvent(event) {
+// Exported for unit testing of the reasonSummary redaction backstop (#279 AC3); not part of the
+// package public surface (the QI index re-exports only the route handlers, not this helper).
+export function toStreamEvent(event, redact) {
     const p = event.payload;
     return {
         type: "event",
@@ -189,9 +191,21 @@ function toStreamEvent(event) {
         ...("stageName" in p ? { stageName: p.stageName } : {}),
         ...("candidateId" in p ? { candidateId: String(p.candidateId) } : {}),
         ...("findingId" in p ? { findingId: String(p.findingId) } : {}),
-        ...("reasonSummary" in p ? { reasonSummary: p.reasonSummary } : {}),
+        // `reasonSummary` is the only free-text field on the QI event envelope. The workflow already
+        // produces a fail-closed, secret-free summary (see `safeReasonSummary`), but pass it through the
+        // live-payload redactor too so this SSE writer — the one QI surface with no other redaction —
+        // can never stream a credential/endpoint substring should a future code path widen the field
+        // (#279 AC3, defence-in-depth; mirrors the Conversation Center SSE redaction posture).
+        ...("reasonSummary" in p ? { reasonSummary: applyRedactor(redact, p.reasonSummary) } : {}),
     };
 }
+// Apply the live-payload redactor to a string field. The redactor is typed `(unknown) => unknown`
+// (it walks arbitrary structures); for a string input it returns the redacted string. Fall back to
+// the already-safe input on the impossible non-string return so the field type stays `string`.
+function applyRedactor(redact, value) {
+    const out = redact(value);
+    return typeof out === "string" ? out : value;
+}
 function classifyStartError(error) {
     if (error instanceof QiIngestionError || error instanceof QiGenerationError) {
         return { code: error.code, message: error.message };
@@ -229,7 +243,7 @@ async function streamRunExecution(deps, request, runId, registeredAt, signal, wr
                 if (event.payload.kind === "finding:recorded")
                     totals.findings += 1;
                 qiRunRegistry.updateTotals(runId, totals);
-                write(toStreamEvent(event));
+                write(toStreamEvent(event, deps.redactor));
             },
         });
         terminal = summary.status;

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/uiRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uiRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/uiRoutes.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAOhD,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAoLzC,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CA8CpF;AAMD,wBAAgB,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAmClF"}
+{"version":3,"file":"uiRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/uiRoutes.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAOhD,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAqMzC,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAkDpF;AAMD,wBAAgB,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAmClF"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/uiRoutes.js

@@ -96,6 +96,18 @@ function computeCoveragePercentage(coverageByAtom) {
     const covered = coverageByAtom.filter((r) => r.status === "covered").length;
     return (covered / coverageByAtom.length) * 100;
 }
+function projectDriftMetadata(manifest, candidateRows) {
+    const sourceFingerprintCount = manifest.sourceFingerprints?.length ?? 0;
+    const atomFingerprintCount = manifest.atomFingerprints?.length ?? 0;
+    const supported = sourceFingerprintCount > 0 && candidateRows.length > 0;
+    return {
+        status: supported ? "not-checked" : "unavailable",
+        sourceFingerprintCount,
+        atomFingerprintCount,
+        reCheckSupported: supported,
+        regenerateStaleSupported: supported,
+    };
+}
 function projectRunDetail(inputs) {
     const { manifest, candidateRows, reviewArtifact } = inputs;
     const findingRefs = manifest.findings.map((f) => ({
@@ -131,6 +143,7 @@ function projectRunDetail(inputs) {
         coveragePercentage: computeCoveragePercentage(coverageByAtom),
         coverageByAtom,
         qualityScore: manifest.qualityScore ?? null,
+        drift: projectDriftMetadata(manifest, candidateRows),
     };
 }
 function parseLimitParam(ctx) {
@@ -194,8 +207,12 @@ export function handleListQiRuns(ctx, deps) {
                     runs.push(summary);
             }
             catch {
-                // A single corrupt manifest must not prevent listing other runs.
-                // Skip and continue — the store's quarantine mechanism handles it.
+                // A single corrupt manifest must not prevent listing other runs: skip and continue. The
+                // store fails closed on a corrupt manifest (EvidenceReadError) so nothing unsafe is
+                // surfaced. Quarantine (`quarantineCorruptQualityIntelligenceManifest`) is a SEPARATE,
+                // explicitly-invoked maintenance step — it is intentionally NOT run from this read path
+                // (a GET must not rename files); its wiring is deferred with the retention orchestrator
+                // (Issue #274 follow-up).
             }
         }
         const body = { runs, limit, totalRunIds, truncated };

package/node_modules/@oscharko-dev/keiko-server/dist/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AA+H/C,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACrE;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,eAAO,MAAM,SAAS,eAAsB,CAAC;AAC7C,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,OAAO,SAAS,CAAC;AAE5D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAElD,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GAAG,CACzB,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,KAChB,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAE9C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAChC;AAUD,eAAO,MAAM,UAAU,EAAE,SAAS,eAAe,EAsRhD,CAAC;AA6BF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAKD,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,UAAU,GAAG,oBAAoB,GAAG,SAAS,CA2B/C;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,QAAQ,CAEjE;AAED,wBAAgB,YAAY,IAAI,QAAQ,CAEvC;AAED,wBAAgB,oBAAoB,IAAI,QAAQ,CAE/C"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAoI/C,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACrE;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,eAAO,MAAM,SAAS,eAAsB,CAAC;AAC7C,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,OAAO,SAAS,CAAC;AAE5D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAElD,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GAAG,CACzB,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,KAChB,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAE9C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAChC;AAUD,eAAO,MAAM,UAAU,EAAE,SAAS,eAAe,EAwRhD,CAAC;AA6BF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAKD,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,UAAU,GAAG,oBAAoB,GAAG,SAAS,CA2B/C;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,QAAQ,CAEjE;AAED,wBAAgB,YAAY,IAAI,QAAQ,CAEvC;AAED,wBAAgB,oBAAoB,IAAI,QAAQ,CAE/C"}

package/node_modules/@oscharko-dev/keiko-server/dist/routes.js

@@ -18,7 +18,7 @@ import { handleGroundedAsk } from "./grounded-qa.js";
 import { handleGroundedWorkflowHandoff } from "./grounded-handoff.js";
 import { handleGatewaySetup } from "./gateway-setup.js";
 import { handleCreateTerminalExecution, handleDeleteTerminalExecution, handleTerminalDirectories, handleTerminalEvents, handleTerminalPolicy, } from "./terminal-routes.js";
-import { handleFilesDirectories, handleFilesPreview, handleFilesTree } from "./files.js";
+import { handleFilesContent, handleFilesDirectories, handleFilesPreview, handleFilesTree, } from "./files.js";
 import { handleBrowserApplyScreenshot, handleBrowserContent, handleBrowserEvents, handleBrowserNavigate, handleBrowserScreenshot, handleBrowserStatus, handleCreateBrowserSession, handleDeleteBrowserSession, } from "./browser.js";
 import { handleCancelLocalKnowledgeCapsuleIndexing, handleConnectLocalKnowledgeCapsule, handleCreateLocalKnowledgeCapsule, handleCreateLocalKnowledgeCapsuleSet, handleDeleteLocalKnowledgeCapsule, handleDisconnectLocalKnowledgeCapsule, handleGetLocalKnowledgeCapsule, handleListLocalKnowledgeCapsules, handleListLocalKnowledgeCapsuleSets, handleReindexLocalKnowledgeCapsule, handleStartLocalKnowledgeCapsuleIndexing, handleUpdateLocalKnowledgeCapsule, } from "./local-knowledge-handlers.js";
 import { handleRelationshipCreate, handleRelationshipDelete, handleRelationshipDependencies, handleRelationshipEvents, handleRelationshipExplain, handleRelationshipGet, handleRelationshipHealth, handleRelationshipImpact, handleRelationshipList, handleRelationshipPatch, handleRelationshipValidate, } from "./relationship-handlers.js";
@@ -90,10 +90,12 @@ export const API_ROUTES = [
         handler: handleDeleteTerminalExecution,
     },
     { method: "GET", pattern: "/api/terminal/events", handler: handleTerminalEvents },
-    // Desktop files — read-only selected-root browser and preview control plane.
+    // Desktop files — selected-root browser, preview, and editor control plane.
     { method: "GET", pattern: "/api/files/directories", handler: handleFilesDirectories },
     { method: "GET", pattern: "/api/files/tree", handler: handleFilesTree },
     { method: "GET", pattern: "/api/files/preview", handler: handleFilesPreview },
+    { method: "GET", pattern: "/api/files/content", handler: handleFilesContent },
+    { method: "PATCH", pattern: "/api/files/content", handler: handleFilesContent },
     // Issue #198 audit fix — live capsule detail/health routes for the Local Knowledge UI.
     {
         method: "GET",

package/node_modules/@oscharko-dev/keiko-server/dist/run-engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-engine.d.ts","sourceRoot":"","sources":["../src/run-engine.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAqB7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAa,MAAM,WAAW,CAAC;AAC3E,OAAO,EAIL,KAAK,sBAAsB,EAE5B,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AASD,UAAU,aAAa;IACrB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAG/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,GAAG,SAAS,CAAC;CAC5E;AA2TD,wBAAgB,QAAQ,CACtB,GAAG,EAAE,aAAa,EAClB,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,EACzC,OAAO,GAAE,eAAoB,GAC5B,cAAc,CAoBhB;AAmGD,wBAAsB,QAAQ,CAC5B,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,GACxC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAMD,YAAY,EAAE,aAAa,EAAE,CAAC"}
+{"version":3,"file":"run-engine.d.ts","sourceRoot":"","sources":["../src/run-engine.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAqB7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAa,MAAM,WAAW,CAAC;AAC3E,OAAO,EAIL,KAAK,sBAAsB,EAE5B,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AASD,UAAU,aAAa;IACrB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAG/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,GAAG,SAAS,CAAC;CAC5E;AA2TD,wBAAgB,QAAQ,CACtB,GAAG,EAAE,aAAa,EAClB,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,EACzC,OAAO,GAAE,eAAoB,GAC5B,cAAc,CAoBhB;AA4GD,wBAAsB,QAAQ,CAC5B,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,GACxC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAMD,YAAY,EAAE,aAAa,EAAE,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/run-engine.js

@@ -337,7 +337,12 @@ function persistOutcome(ctx, identity, outcome) {
         return persistExplainEvidence(runIdentity, outcome.result, ctx.evidence);
     }
     if (ctx.request.kind === "verify") {
-        return persistVerifyEvidence(runIdentity, ctx.evidence);
+        return persistVerifyEvidence(runIdentity, ctx.evidence, ctx.request.governedHandoff === undefined
+            ? undefined
+            : buildGovernedHandoffEvidence({
+                request: ctx.request.governedHandoff,
+                sourceGroundedRunId: ctx.request.governedHandoffSourceGroundedRunId,
+            }));
     }
     return persistWorkflowEvidence(runIdentity, outcome.report, identity.sink.buffered(), ctx.evidence, ctx.request.governedHandoff === undefined
         ? undefined

package/node_modules/@oscharko-dev/keiko-server/dist/store/chats.d.ts

@@ -1,5 +1,5 @@
 import type { DatabaseSync } from "node:sqlite";
-import type { Chat, CreateChatOptions, UpdateChatPatch } from "./types.js";
+import type { Chat, CreateChatOptions, UpdateChatOptions, UpdateChatPatch } from "./types.js";
 export declare function listChats(db: DatabaseSync, projectPath: string): readonly Chat[];
 export declare function listChatsLimited(db: DatabaseSync, projectPath: string, limit: number): readonly Chat[];
 export declare function findChatById(db: DatabaseSync, id: string): Chat | undefined;
@@ -11,7 +11,7 @@ export declare function insertChat(db: DatabaseSync, args: {
     readonly opts: CreateChatOptions | undefined;
     readonly now: number;
 }): Chat;
-export declare function updateChat(db: DatabaseSync, id: string, patch: UpdateChatPatch, now: number): Chat;
+export declare function updateChat(db: DatabaseSync, id: string, patch: UpdateChatPatch, now: number, options?: UpdateChatOptions): Chat;
 export declare function deleteChat(db: DatabaseSync, id: string): void;
 export declare function touchChat(db: DatabaseSync, id: string, now: number): void;
 //# sourceMappingURL=chats.d.ts.map

package/node_modules/@oscharko-dev/keiko-server/dist/store/chats.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chats.d.ts","sourceRoot":"","sources":["../../src/store/chats.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAYhD,OAAO,KAAK,EACV,IAAI,EAGJ,iBAAiB,EACjB,eAAe,EAChB,MAAM,YAAY,CAAC;AA8UpB,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,IAAI,EAAE,CAEhF;AAED,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,YAAY,EAChB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,SAAS,IAAI,EAAE,CAOjB;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAG3E;AAED,wBAAgB,UAAU,CACxB,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE;IACJ,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,GACA,IAAI,CAkBN;AAmPD,wBAAgB,UAAU,CACxB,EAAE,EAAE,YAAY,EAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,eAAe,EACtB,GAAG,EAAE,MAAM,GACV,IAAI,CA2BN;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAG7D;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAGzE"}
+{"version":3,"file":"chats.d.ts","sourceRoot":"","sources":["../../src/store/chats.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAahD,OAAO,KAAK,EACV,IAAI,EAGJ,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EAChB,MAAM,YAAY,CAAC;AAyWpB,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,IAAI,EAAE,CAEhF;AAED,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,YAAY,EAChB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,SAAS,IAAI,EAAE,CAOjB;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAG3E;AAED,wBAAgB,UAAU,CACxB,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE;IACJ,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,GACA,IAAI,CAkBN;AAmTD,wBAAgB,UAAU,CACxB,EAAE,EAAE,YAAY,EAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,eAAe,EACtB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,iBAAiB,GAC1B,IAAI,CA4BN;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAG7D;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAGzE"}

package/node_modules/@oscharko-dev/keiko-server/dist/store/chats.js

@@ -1,7 +1,9 @@
 // ADR-0013 — chats CRUD scoped to a project. Parameterized SQL only.
 import { isAbsolute } from "node:path";
 import { SELECTED_SCOPE_KINDS, isValidScopePath, } from "@oscharko-dev/keiko-contracts/connected-context";
-import { DEFAULT_GROUNDING_LIMITS, MAX_CONNECTED_SOURCES, MAX_LOCAL_KNOWLEDGE_SOURCES, } from "@oscharko-dev/keiko-contracts/bff-wire";
+import { DEFAULT_GROUNDING_LIMITS, GROUNDING_LIMIT_CEILINGS, } from "@oscharko-dev/keiko-contracts/bff-wire";
+import { redact } from "@oscharko-dev/keiko-security";
+import { pathIsDenied } from "../files-deny.js";
 import { invalidRequest, notFound } from "./errors.js";
 const MAX_CONNECTED_SCOPE_PATHS = 50;
 const SELECTED_SCOPE_KIND_SET = new Set(SELECTED_SCOPE_KINDS);
@@ -49,6 +51,18 @@ function validateScopePathsForKind(kind, paths) {
     }
     return items;
 }
+function metadataIsSafe(value) {
+    const redacted = redact(value);
+    return typeof redacted !== "string" || redacted === value;
+}
+function assertMetadataSafe(value, label) {
+    if (!metadataIsSafe(value)) {
+        throw invalidRequest(`${label} must not contain credential-shaped metadata.`);
+    }
+}
+function allMetadataSafe(values) {
+    return values.every(metadataIsSafe);
+}
 // Epic #532 — the connected_scope_paths column now holds EITHER a single scope object (legacy)
 // OR a JSON array of scope objects (multi-source). The Issue #184 legacy form (a bare array of
 // path strings) is still tolerated as a single files scope. Disambiguation: an array whose first
@@ -62,8 +76,13 @@ function validateScopePathsForKind(kind, paths) {
 function decodeScopeRoot(raw) {
     if (raw === undefined)
         return { ok: true };
-    if (typeof raw === "string" && raw.length > 0 && isAbsolute(raw))
+    if (typeof raw === "string" &&
+        raw.length > 0 &&
+        isAbsolute(raw) &&
+        !pathIsDenied(raw) &&
+        metadataIsSafe(raw)) {
         return { ok: true, root: raw };
+    }
     return { ok: false };
 }
 function decodeSingleScopeObject(raw) {
@@ -72,6 +91,8 @@ function decodeSingleScopeObject(raw) {
     const relativePaths = validateScopePathsForKind(raw.kind, raw.relativePaths);
     if (relativePaths === undefined)
         return undefined;
+    if (!allMetadataSafe(relativePaths))
+        return undefined;
     const decodedRoot = decodeScopeRoot(raw.root);
     if (!decodedRoot.ok)
         return undefined;
@@ -88,10 +109,12 @@ function decodeSingleScopeObject(raw) {
 }
 function decodeLegacyFilesArray(parsed) {
     const relativePaths = validateScopePathsForKind("files", parsed);
-    return relativePaths === undefined ? undefined : { kind: "files", relativePaths };
+    if (relativePaths === undefined || !allMetadataSafe(relativePaths))
+        return undefined;
+    return { kind: "files", relativePaths };
 }
 function decodeScopeObjectArray(entries) {
-    if (entries.length > MAX_CONNECTED_SOURCES)
+    if (entries.length > GROUNDING_LIMIT_CEILINGS.maxConnectedSources)
         return undefined;
     const payloads = [];
     for (const entry of entries) {
@@ -180,8 +203,9 @@ function decodeLocalKnowledgeScopes(raw) {
     return single === undefined ? undefined : [single];
 }
 function decodeLocalKnowledgeScopeArray(entries) {
-    if (entries.length === 0 || entries.length > MAX_LOCAL_KNOWLEDGE_SOURCES)
+    if (entries.length === 0 || entries.length > GROUNDING_LIMIT_CEILINGS.maxLocalKnowledgeSources) {
         return undefined;
+    }
     const scopes = [];
     for (const entry of entries) {
         const decoded = decodeLocalKnowledgeScopeObject(entry);
@@ -326,9 +350,25 @@ function validateConnectedScopeShape(scope) {
     if (!Array.isArray(scope.relativePaths)) {
         throw invalidRequest("connectedScope.relativePaths must be an array.");
     }
-    if (validateScopePathsForKind(scope.kind, scope.relativePaths) === undefined) {
+    const relativePaths = validateScopePathsForKind(scope.kind, scope.relativePaths);
+    if (relativePaths === undefined) {
         throw invalidRequest("connectedScope.relativePaths must match connectedScope.kind and contain valid workspace-relative paths.");
     }
+    validateConnectedScopeTimestamp(scope);
+    validateConnectedScopeMetadata(relativePaths, scope.root);
+}
+function validateConnectedScopeMetadata(relativePaths, root) {
+    if (root !== undefined && pathIsDenied(root)) {
+        throw invalidRequest("connectedScope.root must not reference a deny-listed path.");
+    }
+    for (const relativePath of relativePaths) {
+        assertMetadataSafe(relativePath, "connectedScope.relativePaths");
+    }
+    if (root !== undefined) {
+        assertMetadataSafe(root, "connectedScope.root");
+    }
+}
+function validateConnectedScopeTimestamp(scope) {
     if (typeof scope.connectedAtMs !== "number" ||
         !Number.isInteger(scope.connectedAtMs) ||
         scope.connectedAtMs < 0) {
@@ -511,8 +551,44 @@ function localKnowledgeScopesUpdateParams(value) {
     }
     return { apply: 1, json: JSON.stringify(value.map(encodeLocalKnowledgeScopeObject)) };
 }
-export function updateChat(db, id, patch, now) {
-    validateChatPatch(patch);
+// Release 0.2.0 — combined source cap. "Up to 16 sources" is a TOTAL across both lists
+// (folders/files/repos in connectedScopes + knowledge connectors in localKnowledgeScopes),
+// mirroring the QI ingestion total cap (MAX_QI_SOURCES = 16) so "16 sources" means the same
+// thing everywhere. The cap is max(maxConnectedSources, maxLocalKnowledgeSources): never
+// smaller than either per-list limit, so each list's own cap stays reachable. Growth-only:
+// a pre-existing over-cap chat may shrink or hold its lists (no migration lock-out), but no
+// patch may grow the combined total past the cap.
+// Effective count after applying a resolved list patch: undefined = unchanged, null = cleared.
+function patchedCount(resolved, prev) {
+    if (resolved === undefined)
+        return prev;
+    return resolved === null ? 0 : resolved.length;
+}
+function combinedSourceCap(options) {
+    return Math.max(options?.maxConnectedSources ?? DEFAULT_GROUNDING_LIMITS.maxConnectedSources, options?.maxLocalKnowledgeSources ?? DEFAULT_GROUNDING_LIMITS.maxLocalKnowledgeSources);
+}
+function validateTotalSourceCap(db, id, patch, options) {
+    const nextConnected = resolveScopePatch(patch);
+    const nextLk = resolveLocalKnowledgeScopePatch(patch);
+    if (nextConnected === undefined && nextLk === undefined)
+        return;
+    const existing = findChatById(db, id);
+    if (existing === undefined)
+        return; // the UPDATE below raises notFound
+    const prevConnected = existing.connectedScopes ??
+        (existing.connectedScope !== undefined ? [existing.connectedScope] : []);
+    const prevLk = existing.localKnowledgeScopes ??
+        (existing.localKnowledgeScope !== undefined ? [existing.localKnowledgeScope] : []);
+    const total = patchedCount(nextConnected, prevConnected.length) + patchedCount(nextLk, prevLk.length);
+    const prevTotal = prevConnected.length + prevLk.length;
+    const cap = combinedSourceCap(options);
+    if (total > cap && total > prevTotal) {
+        throw invalidRequest(`A chat may connect at most ${String(cap)} sources in total (folders, files, repositories, and knowledge connectors combined).`);
+    }
+}
+export function updateChat(db, id, patch, now, options) {
+    validateChatPatch(patch, options);
+    validateTotalSourceCap(db, id, patch, options);
     if (patch.selectedModel !== undefined)
         validateSelectedModel(patch.selectedModel);
     const titleParam = patch.title ?? null;

package/node_modules/@oscharko-dev/keiko-server/dist/store/db.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/store/db.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,KAAK,EAMV,OAAO,EACP,qBAAqB,EAItB,MAAM,YAAY,CAAC;AAiCpB,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAM9E;AA6JD,eAAO,MAAM,qBAAqB,OAAQ,CAAC;AAa3C,wBAAgB,qBAAqB,CAAC,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAI3E;AAgCD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAkB/D;AAED,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAEhG;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAEvF"}
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/store/db.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,KAAK,EAMV,OAAO,EACP,qBAAqB,EAKtB,MAAM,YAAY,CAAC;AAiCpB,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAM9E;AA+JD,eAAO,MAAM,qBAAqB,OAAQ,CAAC;AAa3C,wBAAgB,qBAAqB,CAAC,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAI3E;AAgCD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAkB/D;AAED,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAEhG;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAEvF"}

package/node_modules/@oscharko-dev/keiko-server/dist/store/db.js

@@ -93,10 +93,12 @@ function buildStore(db, options) {
         deleteProject: (path) => {
             deleteProjectRecord(db, path);
         },
-        listChats: (projectPath, limit) => limit === undefined ? sqlListChats(db, projectPath) : sqlListChatsLimited(db, projectPath, limit),
+        listChats: (projectPath, limit) => limit === undefined
+            ? sqlListChats(db, projectPath)
+            : sqlListChatsLimited(db, projectPath, limit),
         findChatById: (id) => sqlFindChatById(db, id),
         createChat: (projectPath, title, selectedModel, opts) => createChatRecord(db, options, projectPath, title, selectedModel, opts),
-        updateChat: (id, patch) => sqlUpdateChat(db, id, patch, options.now()),
+        updateChat: (id, patch, updateOptions) => sqlUpdateChat(db, id, patch, options.now(), updateOptions),
         deleteChat: (id) => {
             sqlDeleteChat(db, id);
         },

package/node_modules/@oscharko-dev/keiko-server/dist/store/index.d.ts

@@ -1,4 +1,4 @@
-export type { Chat, ChatConnectedScope, ChatLocalKnowledgeScope, ChatMessage, ChatRole, CreateChatOptions, NewChatMessage, Project, UiStore, UiStoreFactoryOptions, UpdateChatMessagePatch, UpdateChatPatch, UpdateProjectPatch, WorkflowStatus, } from "./types.js";
+export type { Chat, ChatConnectedScope, ChatLocalKnowledgeScope, ChatMessage, ChatRole, CreateChatOptions, NewChatMessage, Project, UiStore, UiStoreFactoryOptions, UpdateChatOptions, UpdateChatMessagePatch, UpdateChatPatch, UpdateProjectPatch, WorkflowStatus, } from "./types.js";
 export { UiStoreError, type UiStoreErrorCode, invalidPath, invalidRequest, notFound, pathNotDirectory, pathNotFound, projectExists, } from "./errors.js";
 export { classifyPathShape, validateProjectPath, type PathShape, type ValidateProjectPathOptions, } from "./validation.js";
 export { assertUiDbOutsideProject, resolveUiDbPath, UI_DB_FILENAME, UI_DB_DIRNAME, } from "./paths.js";

package/node_modules/@oscharko-dev/keiko-server/dist/store/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/store/index.ts"],"names":[],"mappings":"AAEA,YAAY,EACV,IAAI,EACJ,kBAAkB,EAClB,uBAAuB,EACvB,WAAW,EACX,QAAQ,EACR,iBAAiB,EACjB,cAAc,EACd,OAAO,EACP,OAAO,EACP,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,YAAY,EACZ,KAAK,gBAAgB,EACrB,WAAW,EACX,cAAc,EACd,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,SAAS,EACd,KAAK,0BAA0B,GAChC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,cAAc,EACd,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/store/index.ts"],"names":[],"mappings":"AAEA,YAAY,EACV,IAAI,EACJ,kBAAkB,EAClB,uBAAuB,EACvB,WAAW,EACX,QAAQ,EACR,iBAAiB,EACjB,cAAc,EACd,OAAO,EACP,OAAO,EACP,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,YAAY,EACZ,KAAK,gBAAgB,EACrB,WAAW,EACX,cAAc,EACd,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,SAAS,EACd,KAAK,0BAA0B,GAChC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,cAAc,EACd,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,SAAS,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/store/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/store/paths.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,cAAc,gBAAgB,CAAC;AAC5C,eAAO,MAAM,aAAa,WAAW,CAAC;AAmDtC,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAChD,MAAM,CASR;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAahG"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/store/paths.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,cAAc,gBAAgB,CAAC;AAC5C,eAAO,MAAM,aAAa,WAAW,CAAC;AA4DtC,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAChD,MAAM,CASR;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAgBhG"}

package/node_modules/@oscharko-dev/keiko-server/dist/store/paths.js

@@ -11,6 +11,11 @@ function isInsideCurrentWorkingDirectory(path) {
     const resolved = resolve(path);
     return resolved === cwd || resolved.startsWith(`${cwd}${sep}`);
 }
+function isInsideRuntimeStateRoot(path, workspaceRoot) {
+    const runtimeRoot = resolve(workspaceRoot, UI_DB_DIRNAME);
+    const resolved = resolve(path);
+    return resolved === runtimeRoot || resolved.startsWith(`${runtimeRoot}${sep}`);
+}
 function hasSymlinkAncestor(path) {
     let current = dirname(path);
     const root = parse(current).root;
@@ -35,7 +40,8 @@ function resolveConfiguredPath(path, label) {
         throw invalidRequest(`${label} must be absolute.`);
     }
     const resolved = normalize(path);
-    if (isInsideCurrentWorkingDirectory(resolved)) {
+    if (isInsideCurrentWorkingDirectory(resolved) &&
+        !isInsideRuntimeStateRoot(resolved, process.cwd())) {
         throw invalidRequest(`${label} must not be inside the current workspace.`);
     }
     if (existsSync(resolved) && lstatSync(resolved).isSymbolicLink()) {
@@ -68,7 +74,8 @@ export function assertUiDbOutsideProject(uiDbPath, projectPath) {
     const resolvedDbPath = resolve(uiDbPath);
     const resolvedDbDir = dirname(resolvedDbPath);
     const resolvedProject = resolve(projectPath);
-    if (containsPath(resolvedProject, resolvedDbPath)) {
+    if (containsPath(resolvedProject, resolvedDbPath) &&
+        !isInsideRuntimeStateRoot(resolvedDbPath, resolvedProject)) {
         throw invalidRequest("UI database path must not be inside a selected project.");
     }
     if (containsPath(resolvedDbDir, resolvedProject)) {