@oscharko-dev/keiko 0.2.0-beta.3 → 0.2.0-beta.4

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runRoutes.d.ts

@@ -1,5 +1,8 @@
+import type { QualityIntelligenceRunStreamMessage } from "@oscharko-dev/keiko-contracts";
+import type { QualityIntelligence as QI } from "@oscharko-dev/keiko-contracts";
 import { type HandlerOutcome, type RouteContext, type RouteResult, type RouteDefinition } from "../routes.js";
-import type { UiHandlerDeps } from "../deps.js";
+import type { Redactor, UiHandlerDeps } from "../deps.js";
+export declare function toStreamEvent(event: QI.QualityIntelligenceRunEvent, redact: Redactor): QualityIntelligenceRunStreamMessage;
 export declare function handleStartQiRun(ctx: RouteContext, deps: UiHandlerDeps): Promise<HandlerOutcome>;
 export declare function handleCancelQiRun(ctx: RouteContext, _deps: UiHandlerDeps): RouteResult;
 export declare const QI_RUN_EXECUTION_ROUTE_GROUP: readonly RouteDefinition[];

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/runRoutes.ts"],"names":[],"mappings":"AAuBA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAmShD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,cAAc,CAAC,CAmBzB;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,GAAG,WAAW,CAStF;AAED,eAAO,MAAM,4BAA4B,EAAE,SAAS,eAAe,EAOlE,CAAC"}
+{"version":3,"file":"runRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/runRoutes.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAKV,mCAAmC,EAEpC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,mBAAmB,IAAI,EAAE,EAAE,MAAM,+BAA+B,CAAC;AAE/E,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AA8N1D,wBAAgB,aAAa,CAC3B,KAAK,EAAE,EAAE,CAAC,2BAA2B,EACrC,MAAM,EAAE,QAAQ,GACf,mCAAmC,CAgBrC;AAoED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,cAAc,CAAC,CAmBzB;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,GAAG,WAAW,CAStF;AAED,eAAO,MAAM,4BAA4B,EAAE,SAAS,eAAe,EAOlE,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runRoutes.js

@@ -180,7 +180,9 @@ async function parseStartBody(req) {
     }
     return validateRequest(parsed);
 }
-function toStreamEvent(event) {
+// Exported for unit testing of the reasonSummary redaction backstop (#279 AC3); not part of the
+// package public surface (the QI index re-exports only the route handlers, not this helper).
+export function toStreamEvent(event, redact) {
     const p = event.payload;
     return {
         type: "event",
@@ -189,9 +191,21 @@ function toStreamEvent(event) {
         ...("stageName" in p ? { stageName: p.stageName } : {}),
         ...("candidateId" in p ? { candidateId: String(p.candidateId) } : {}),
         ...("findingId" in p ? { findingId: String(p.findingId) } : {}),
-        ...("reasonSummary" in p ? { reasonSummary: p.reasonSummary } : {}),
+        // `reasonSummary` is the only free-text field on the QI event envelope. The workflow already
+        // produces a fail-closed, secret-free summary (see `safeReasonSummary`), but pass it through the
+        // live-payload redactor too so this SSE writer — the one QI surface with no other redaction —
+        // can never stream a credential/endpoint substring should a future code path widen the field
+        // (#279 AC3, defence-in-depth; mirrors the Conversation Center SSE redaction posture).
+        ...("reasonSummary" in p ? { reasonSummary: applyRedactor(redact, p.reasonSummary) } : {}),
     };
 }
+// Apply the live-payload redactor to a string field. The redactor is typed `(unknown) => unknown`
+// (it walks arbitrary structures); for a string input it returns the redacted string. Fall back to
+// the already-safe input on the impossible non-string return so the field type stays `string`.
+function applyRedactor(redact, value) {
+    const out = redact(value);
+    return typeof out === "string" ? out : value;
+}
 function classifyStartError(error) {
     if (error instanceof QiIngestionError || error instanceof QiGenerationError) {
         return { code: error.code, message: error.message };
@@ -229,7 +243,7 @@ async function streamRunExecution(deps, request, runId, registeredAt, signal, wr
                 if (event.payload.kind === "finding:recorded")
                     totals.findings += 1;
                 qiRunRegistry.updateTotals(runId, totals);
-                write(toStreamEvent(event));
+                write(toStreamEvent(event, deps.redactor));
             },
         });
         terminal = summary.status;

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/uiRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uiRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/uiRoutes.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAOhD,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAqMzC,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CA8CpF;AAMD,wBAAgB,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAmClF"}
+{"version":3,"file":"uiRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/uiRoutes.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAOhD,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAqMzC,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAkDpF;AAMD,wBAAgB,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAmClF"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/uiRoutes.js

@@ -207,8 +207,12 @@ export function handleListQiRuns(ctx, deps) {
                     runs.push(summary);
             }
             catch {
-                // A single corrupt manifest must not prevent listing other runs.
-                // Skip and continue — the store's quarantine mechanism handles it.
+                // A single corrupt manifest must not prevent listing other runs: skip and continue. The
+                // store fails closed on a corrupt manifest (EvidenceReadError) so nothing unsafe is
+                // surfaced. Quarantine (`quarantineCorruptQualityIntelligenceManifest`) is a SEPARATE,
+                // explicitly-invoked maintenance step — it is intentionally NOT run from this read path
+                // (a GET must not rename files); its wiring is deferred with the retention orchestrator
+                // (Issue #274 follow-up).
             }
         }
         const body = { runs, limit, totalRunIds, truncated };

package/node_modules/@oscharko-dev/keiko-server/dist/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AA+H/C,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACrE;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,eAAO,MAAM,SAAS,eAAsB,CAAC;AAC7C,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,OAAO,SAAS,CAAC;AAE5D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAElD,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GAAG,CACzB,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,KAChB,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAE9C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAChC;AAUD,eAAO,MAAM,UAAU,EAAE,SAAS,eAAe,EAsRhD,CAAC;AA6BF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAKD,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,UAAU,GAAG,oBAAoB,GAAG,SAAS,CA2B/C;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,QAAQ,CAEjE;AAED,wBAAgB,YAAY,IAAI,QAAQ,CAEvC;AAED,wBAAgB,oBAAoB,IAAI,QAAQ,CAE/C"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAoI/C,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACrE;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,eAAO,MAAM,SAAS,eAAsB,CAAC;AAC7C,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,OAAO,SAAS,CAAC;AAE5D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAElD,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GAAG,CACzB,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,KAChB,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAE9C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAChC;AAUD,eAAO,MAAM,UAAU,EAAE,SAAS,eAAe,EAwRhD,CAAC;AA6BF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAKD,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,UAAU,GAAG,oBAAoB,GAAG,SAAS,CA2B/C;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,QAAQ,CAEjE;AAED,wBAAgB,YAAY,IAAI,QAAQ,CAEvC;AAED,wBAAgB,oBAAoB,IAAI,QAAQ,CAE/C"}

package/node_modules/@oscharko-dev/keiko-server/dist/routes.js

@@ -18,7 +18,7 @@ import { handleGroundedAsk } from "./grounded-qa.js";
 import { handleGroundedWorkflowHandoff } from "./grounded-handoff.js";
 import { handleGatewaySetup } from "./gateway-setup.js";
 import { handleCreateTerminalExecution, handleDeleteTerminalExecution, handleTerminalDirectories, handleTerminalEvents, handleTerminalPolicy, } from "./terminal-routes.js";
-import { handleFilesDirectories, handleFilesPreview, handleFilesTree } from "./files.js";
+import { handleFilesContent, handleFilesDirectories, handleFilesPreview, handleFilesTree, } from "./files.js";
 import { handleBrowserApplyScreenshot, handleBrowserContent, handleBrowserEvents, handleBrowserNavigate, handleBrowserScreenshot, handleBrowserStatus, handleCreateBrowserSession, handleDeleteBrowserSession, } from "./browser.js";
 import { handleCancelLocalKnowledgeCapsuleIndexing, handleConnectLocalKnowledgeCapsule, handleCreateLocalKnowledgeCapsule, handleCreateLocalKnowledgeCapsuleSet, handleDeleteLocalKnowledgeCapsule, handleDisconnectLocalKnowledgeCapsule, handleGetLocalKnowledgeCapsule, handleListLocalKnowledgeCapsules, handleListLocalKnowledgeCapsuleSets, handleReindexLocalKnowledgeCapsule, handleStartLocalKnowledgeCapsuleIndexing, handleUpdateLocalKnowledgeCapsule, } from "./local-knowledge-handlers.js";
 import { handleRelationshipCreate, handleRelationshipDelete, handleRelationshipDependencies, handleRelationshipEvents, handleRelationshipExplain, handleRelationshipGet, handleRelationshipHealth, handleRelationshipImpact, handleRelationshipList, handleRelationshipPatch, handleRelationshipValidate, } from "./relationship-handlers.js";
@@ -90,10 +90,12 @@ export const API_ROUTES = [
         handler: handleDeleteTerminalExecution,
     },
     { method: "GET", pattern: "/api/terminal/events", handler: handleTerminalEvents },
-    // Desktop files — read-only selected-root browser and preview control plane.
+    // Desktop files — selected-root browser, preview, and editor control plane.
     { method: "GET", pattern: "/api/files/directories", handler: handleFilesDirectories },
     { method: "GET", pattern: "/api/files/tree", handler: handleFilesTree },
     { method: "GET", pattern: "/api/files/preview", handler: handleFilesPreview },
+    { method: "GET", pattern: "/api/files/content", handler: handleFilesContent },
+    { method: "PATCH", pattern: "/api/files/content", handler: handleFilesContent },
     // Issue #198 audit fix — live capsule detail/health routes for the Local Knowledge UI.
     {
         method: "GET",

package/node_modules/@oscharko-dev/keiko-server/dist/run-engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-engine.d.ts","sourceRoot":"","sources":["../src/run-engine.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAqB7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAa,MAAM,WAAW,CAAC;AAC3E,OAAO,EAIL,KAAK,sBAAsB,EAE5B,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AASD,UAAU,aAAa;IACrB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAG/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,GAAG,SAAS,CAAC;CAC5E;AA2TD,wBAAgB,QAAQ,CACtB,GAAG,EAAE,aAAa,EAClB,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,EACzC,OAAO,GAAE,eAAoB,GAC5B,cAAc,CAoBhB;AAmGD,wBAAsB,QAAQ,CAC5B,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,GACxC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAMD,YAAY,EAAE,aAAa,EAAE,CAAC"}
+{"version":3,"file":"run-engine.d.ts","sourceRoot":"","sources":["../src/run-engine.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAqB7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAa,MAAM,WAAW,CAAC;AAC3E,OAAO,EAIL,KAAK,sBAAsB,EAE5B,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AASD,UAAU,aAAa;IACrB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAG/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,GAAG,SAAS,CAAC;CAC5E;AA2TD,wBAAgB,QAAQ,CACtB,GAAG,EAAE,aAAa,EAClB,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,EACzC,OAAO,GAAE,eAAoB,GAC5B,cAAc,CAoBhB;AA4GD,wBAAsB,QAAQ,CAC5B,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,GACxC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAMD,YAAY,EAAE,aAAa,EAAE,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/run-engine.js

@@ -337,7 +337,12 @@ function persistOutcome(ctx, identity, outcome) {
         return persistExplainEvidence(runIdentity, outcome.result, ctx.evidence);
     }
     if (ctx.request.kind === "verify") {
-        return persistVerifyEvidence(runIdentity, ctx.evidence);
+        return persistVerifyEvidence(runIdentity, ctx.evidence, ctx.request.governedHandoff === undefined
+            ? undefined
+            : buildGovernedHandoffEvidence({
+                request: ctx.request.governedHandoff,
+                sourceGroundedRunId: ctx.request.governedHandoffSourceGroundedRunId,
+            }));
     }
     return persistWorkflowEvidence(runIdentity, outcome.report, identity.sink.buffered(), ctx.evidence, ctx.request.governedHandoff === undefined
         ? undefined

package/node_modules/@oscharko-dev/keiko-server/dist/store/chats.d.ts

@@ -1,5 +1,5 @@
 import type { DatabaseSync } from "node:sqlite";
-import type { Chat, CreateChatOptions, UpdateChatPatch } from "./types.js";
+import type { Chat, CreateChatOptions, UpdateChatOptions, UpdateChatPatch } from "./types.js";
 export declare function listChats(db: DatabaseSync, projectPath: string): readonly Chat[];
 export declare function listChatsLimited(db: DatabaseSync, projectPath: string, limit: number): readonly Chat[];
 export declare function findChatById(db: DatabaseSync, id: string): Chat | undefined;
@@ -11,7 +11,7 @@ export declare function insertChat(db: DatabaseSync, args: {
     readonly opts: CreateChatOptions | undefined;
     readonly now: number;
 }): Chat;
-export declare function updateChat(db: DatabaseSync, id: string, patch: UpdateChatPatch, now: number): Chat;
+export declare function updateChat(db: DatabaseSync, id: string, patch: UpdateChatPatch, now: number, options?: UpdateChatOptions): Chat;
 export declare function deleteChat(db: DatabaseSync, id: string): void;
 export declare function touchChat(db: DatabaseSync, id: string, now: number): void;
 //# sourceMappingURL=chats.d.ts.map

package/node_modules/@oscharko-dev/keiko-server/dist/store/chats.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chats.d.ts","sourceRoot":"","sources":["../../src/store/chats.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAYhD,OAAO,KAAK,EACV,IAAI,EAGJ,iBAAiB,EACjB,eAAe,EAChB,MAAM,YAAY,CAAC;AA8UpB,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,IAAI,EAAE,CAEhF;AAED,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,YAAY,EAChB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,SAAS,IAAI,EAAE,CAOjB;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAG3E;AAED,wBAAgB,UAAU,CACxB,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE;IACJ,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,GACA,IAAI,CAkBN;AAmPD,wBAAgB,UAAU,CACxB,EAAE,EAAE,YAAY,EAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,eAAe,EACtB,GAAG,EAAE,MAAM,GACV,IAAI,CA2BN;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAG7D;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAGzE"}
+{"version":3,"file":"chats.d.ts","sourceRoot":"","sources":["../../src/store/chats.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAahD,OAAO,KAAK,EACV,IAAI,EAGJ,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EAChB,MAAM,YAAY,CAAC;AAyWpB,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,IAAI,EAAE,CAEhF;AAED,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,YAAY,EAChB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,SAAS,IAAI,EAAE,CAOjB;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAG3E;AAED,wBAAgB,UAAU,CACxB,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE;IACJ,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,GACA,IAAI,CAkBN;AAmTD,wBAAgB,UAAU,CACxB,EAAE,EAAE,YAAY,EAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,eAAe,EACtB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,iBAAiB,GAC1B,IAAI,CA4BN;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAG7D;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAGzE"}

package/node_modules/@oscharko-dev/keiko-server/dist/store/chats.js

@@ -1,7 +1,9 @@
 // ADR-0013 — chats CRUD scoped to a project. Parameterized SQL only.
 import { isAbsolute } from "node:path";
 import { SELECTED_SCOPE_KINDS, isValidScopePath, } from "@oscharko-dev/keiko-contracts/connected-context";
-import { DEFAULT_GROUNDING_LIMITS, MAX_CONNECTED_SOURCES, MAX_LOCAL_KNOWLEDGE_SOURCES, } from "@oscharko-dev/keiko-contracts/bff-wire";
+import { DEFAULT_GROUNDING_LIMITS, GROUNDING_LIMIT_CEILINGS, } from "@oscharko-dev/keiko-contracts/bff-wire";
+import { redact } from "@oscharko-dev/keiko-security";
+import { pathIsDenied } from "../files-deny.js";
 import { invalidRequest, notFound } from "./errors.js";
 const MAX_CONNECTED_SCOPE_PATHS = 50;
 const SELECTED_SCOPE_KIND_SET = new Set(SELECTED_SCOPE_KINDS);
@@ -49,6 +51,18 @@ function validateScopePathsForKind(kind, paths) {
     }
     return items;
 }
+function metadataIsSafe(value) {
+    const redacted = redact(value);
+    return typeof redacted !== "string" || redacted === value;
+}
+function assertMetadataSafe(value, label) {
+    if (!metadataIsSafe(value)) {
+        throw invalidRequest(`${label} must not contain credential-shaped metadata.`);
+    }
+}
+function allMetadataSafe(values) {
+    return values.every(metadataIsSafe);
+}
 // Epic #532 — the connected_scope_paths column now holds EITHER a single scope object (legacy)
 // OR a JSON array of scope objects (multi-source). The Issue #184 legacy form (a bare array of
 // path strings) is still tolerated as a single files scope. Disambiguation: an array whose first
@@ -62,8 +76,13 @@ function validateScopePathsForKind(kind, paths) {
 function decodeScopeRoot(raw) {
     if (raw === undefined)
         return { ok: true };
-    if (typeof raw === "string" && raw.length > 0 && isAbsolute(raw))
+    if (typeof raw === "string" &&
+        raw.length > 0 &&
+        isAbsolute(raw) &&
+        !pathIsDenied(raw) &&
+        metadataIsSafe(raw)) {
         return { ok: true, root: raw };
+    }
     return { ok: false };
 }
 function decodeSingleScopeObject(raw) {
@@ -72,6 +91,8 @@ function decodeSingleScopeObject(raw) {
     const relativePaths = validateScopePathsForKind(raw.kind, raw.relativePaths);
     if (relativePaths === undefined)
         return undefined;
+    if (!allMetadataSafe(relativePaths))
+        return undefined;
     const decodedRoot = decodeScopeRoot(raw.root);
     if (!decodedRoot.ok)
         return undefined;
@@ -88,10 +109,12 @@ function decodeSingleScopeObject(raw) {
 }
 function decodeLegacyFilesArray(parsed) {
     const relativePaths = validateScopePathsForKind("files", parsed);
-    return relativePaths === undefined ? undefined : { kind: "files", relativePaths };
+    if (relativePaths === undefined || !allMetadataSafe(relativePaths))
+        return undefined;
+    return { kind: "files", relativePaths };
 }
 function decodeScopeObjectArray(entries) {
-    if (entries.length > MAX_CONNECTED_SOURCES)
+    if (entries.length > GROUNDING_LIMIT_CEILINGS.maxConnectedSources)
         return undefined;
     const payloads = [];
     for (const entry of entries) {
@@ -180,8 +203,9 @@ function decodeLocalKnowledgeScopes(raw) {
     return single === undefined ? undefined : [single];
 }
 function decodeLocalKnowledgeScopeArray(entries) {
-    if (entries.length === 0 || entries.length > MAX_LOCAL_KNOWLEDGE_SOURCES)
+    if (entries.length === 0 || entries.length > GROUNDING_LIMIT_CEILINGS.maxLocalKnowledgeSources) {
         return undefined;
+    }
     const scopes = [];
     for (const entry of entries) {
         const decoded = decodeLocalKnowledgeScopeObject(entry);
@@ -326,9 +350,25 @@ function validateConnectedScopeShape(scope) {
     if (!Array.isArray(scope.relativePaths)) {
         throw invalidRequest("connectedScope.relativePaths must be an array.");
     }
-    if (validateScopePathsForKind(scope.kind, scope.relativePaths) === undefined) {
+    const relativePaths = validateScopePathsForKind(scope.kind, scope.relativePaths);
+    if (relativePaths === undefined) {
         throw invalidRequest("connectedScope.relativePaths must match connectedScope.kind and contain valid workspace-relative paths.");
     }
+    validateConnectedScopeTimestamp(scope);
+    validateConnectedScopeMetadata(relativePaths, scope.root);
+}
+function validateConnectedScopeMetadata(relativePaths, root) {
+    if (root !== undefined && pathIsDenied(root)) {
+        throw invalidRequest("connectedScope.root must not reference a deny-listed path.");
+    }
+    for (const relativePath of relativePaths) {
+        assertMetadataSafe(relativePath, "connectedScope.relativePaths");
+    }
+    if (root !== undefined) {
+        assertMetadataSafe(root, "connectedScope.root");
+    }
+}
+function validateConnectedScopeTimestamp(scope) {
     if (typeof scope.connectedAtMs !== "number" ||
         !Number.isInteger(scope.connectedAtMs) ||
         scope.connectedAtMs < 0) {
@@ -511,8 +551,44 @@ function localKnowledgeScopesUpdateParams(value) {
     }
     return { apply: 1, json: JSON.stringify(value.map(encodeLocalKnowledgeScopeObject)) };
 }
-export function updateChat(db, id, patch, now) {
-    validateChatPatch(patch);
+// Release 0.2.0 — combined source cap. "Up to 16 sources" is a TOTAL across both lists
+// (folders/files/repos in connectedScopes + knowledge connectors in localKnowledgeScopes),
+// mirroring the QI ingestion total cap (MAX_QI_SOURCES = 16) so "16 sources" means the same
+// thing everywhere. The cap is max(maxConnectedSources, maxLocalKnowledgeSources): never
+// smaller than either per-list limit, so each list's own cap stays reachable. Growth-only:
+// a pre-existing over-cap chat may shrink or hold its lists (no migration lock-out), but no
+// patch may grow the combined total past the cap.
+// Effective count after applying a resolved list patch: undefined = unchanged, null = cleared.
+function patchedCount(resolved, prev) {
+    if (resolved === undefined)
+        return prev;
+    return resolved === null ? 0 : resolved.length;
+}
+function combinedSourceCap(options) {
+    return Math.max(options?.maxConnectedSources ?? DEFAULT_GROUNDING_LIMITS.maxConnectedSources, options?.maxLocalKnowledgeSources ?? DEFAULT_GROUNDING_LIMITS.maxLocalKnowledgeSources);
+}
+function validateTotalSourceCap(db, id, patch, options) {
+    const nextConnected = resolveScopePatch(patch);
+    const nextLk = resolveLocalKnowledgeScopePatch(patch);
+    if (nextConnected === undefined && nextLk === undefined)
+        return;
+    const existing = findChatById(db, id);
+    if (existing === undefined)
+        return; // the UPDATE below raises notFound
+    const prevConnected = existing.connectedScopes ??
+        (existing.connectedScope !== undefined ? [existing.connectedScope] : []);
+    const prevLk = existing.localKnowledgeScopes ??
+        (existing.localKnowledgeScope !== undefined ? [existing.localKnowledgeScope] : []);
+    const total = patchedCount(nextConnected, prevConnected.length) + patchedCount(nextLk, prevLk.length);
+    const prevTotal = prevConnected.length + prevLk.length;
+    const cap = combinedSourceCap(options);
+    if (total > cap && total > prevTotal) {
+        throw invalidRequest(`A chat may connect at most ${String(cap)} sources in total (folders, files, repositories, and knowledge connectors combined).`);
+    }
+}
+export function updateChat(db, id, patch, now, options) {
+    validateChatPatch(patch, options);
+    validateTotalSourceCap(db, id, patch, options);
     if (patch.selectedModel !== undefined)
         validateSelectedModel(patch.selectedModel);
     const titleParam = patch.title ?? null;

package/node_modules/@oscharko-dev/keiko-server/dist/store/db.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/store/db.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,KAAK,EAMV,OAAO,EACP,qBAAqB,EAItB,MAAM,YAAY,CAAC;AAiCpB,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAM9E;AA6JD,eAAO,MAAM,qBAAqB,OAAQ,CAAC;AAa3C,wBAAgB,qBAAqB,CAAC,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAI3E;AAgCD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAkB/D;AAED,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAEhG;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAEvF"}
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/store/db.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,KAAK,EAMV,OAAO,EACP,qBAAqB,EAKtB,MAAM,YAAY,CAAC;AAiCpB,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAM9E;AA+JD,eAAO,MAAM,qBAAqB,OAAQ,CAAC;AAa3C,wBAAgB,qBAAqB,CAAC,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAI3E;AAgCD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAkB/D;AAED,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAEhG;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAEvF"}

package/node_modules/@oscharko-dev/keiko-server/dist/store/db.js

@@ -93,10 +93,12 @@ function buildStore(db, options) {
         deleteProject: (path) => {
             deleteProjectRecord(db, path);
         },
-        listChats: (projectPath, limit) => limit === undefined ? sqlListChats(db, projectPath) : sqlListChatsLimited(db, projectPath, limit),
+        listChats: (projectPath, limit) => limit === undefined
+            ? sqlListChats(db, projectPath)
+            : sqlListChatsLimited(db, projectPath, limit),
         findChatById: (id) => sqlFindChatById(db, id),
         createChat: (projectPath, title, selectedModel, opts) => createChatRecord(db, options, projectPath, title, selectedModel, opts),
-        updateChat: (id, patch) => sqlUpdateChat(db, id, patch, options.now()),
+        updateChat: (id, patch, updateOptions) => sqlUpdateChat(db, id, patch, options.now(), updateOptions),
         deleteChat: (id) => {
             sqlDeleteChat(db, id);
         },

package/node_modules/@oscharko-dev/keiko-server/dist/store/index.d.ts

@@ -1,4 +1,4 @@
-export type { Chat, ChatConnectedScope, ChatLocalKnowledgeScope, ChatMessage, ChatRole, CreateChatOptions, NewChatMessage, Project, UiStore, UiStoreFactoryOptions, UpdateChatMessagePatch, UpdateChatPatch, UpdateProjectPatch, WorkflowStatus, } from "./types.js";
+export type { Chat, ChatConnectedScope, ChatLocalKnowledgeScope, ChatMessage, ChatRole, CreateChatOptions, NewChatMessage, Project, UiStore, UiStoreFactoryOptions, UpdateChatOptions, UpdateChatMessagePatch, UpdateChatPatch, UpdateProjectPatch, WorkflowStatus, } from "./types.js";
 export { UiStoreError, type UiStoreErrorCode, invalidPath, invalidRequest, notFound, pathNotDirectory, pathNotFound, projectExists, } from "./errors.js";
 export { classifyPathShape, validateProjectPath, type PathShape, type ValidateProjectPathOptions, } from "./validation.js";
 export { assertUiDbOutsideProject, resolveUiDbPath, UI_DB_FILENAME, UI_DB_DIRNAME, } from "./paths.js";

package/node_modules/@oscharko-dev/keiko-server/dist/store/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/store/index.ts"],"names":[],"mappings":"AAEA,YAAY,EACV,IAAI,EACJ,kBAAkB,EAClB,uBAAuB,EACvB,WAAW,EACX,QAAQ,EACR,iBAAiB,EACjB,cAAc,EACd,OAAO,EACP,OAAO,EACP,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,YAAY,EACZ,KAAK,gBAAgB,EACrB,WAAW,EACX,cAAc,EACd,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,SAAS,EACd,KAAK,0BAA0B,GAChC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,cAAc,EACd,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/store/index.ts"],"names":[],"mappings":"AAEA,YAAY,EACV,IAAI,EACJ,kBAAkB,EAClB,uBAAuB,EACvB,WAAW,EACX,QAAQ,EACR,iBAAiB,EACjB,cAAc,EACd,OAAO,EACP,OAAO,EACP,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,YAAY,EACZ,KAAK,gBAAgB,EACrB,WAAW,EACX,cAAc,EACd,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,SAAS,EACd,KAAK,0BAA0B,GAChC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,cAAc,EACd,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,SAAS,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/store/types.d.ts

@@ -8,7 +8,7 @@ export interface UiStore {
     readonly listChats: (projectPath: string, limit?: number) => readonly Chat[];
     readonly findChatById: (id: string) => Chat | undefined;
     readonly createChat: (projectPath: string, title: string, selectedModel: string, opts?: CreateChatOptions) => Chat;
-    readonly updateChat: (id: string, patch: UpdateChatPatch) => Chat;
+    readonly updateChat: (id: string, patch: UpdateChatPatch, options?: UpdateChatOptions) => Chat;
     readonly deleteChat: (id: string) => void;
     readonly listMessages: (chatId: string, limit?: number) => readonly ChatMessage[];
     readonly findMessageById: (id: string) => ChatMessage | undefined;
@@ -17,6 +17,10 @@ export interface UiStore {
     readonly updateMessage: (id: string, patch: UpdateChatMessagePatch) => ChatMessage;
     readonly close: () => void;
 }
+export interface UpdateChatOptions {
+    readonly maxConnectedSources?: number;
+    readonly maxLocalKnowledgeSources?: number;
+}
 export interface UiStoreFactoryOptions {
     readonly now?: () => number;
     readonly newId?: () => string;

package/node_modules/@oscharko-dev/keiko-server/dist/store/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/store/types.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,OAAO,EACP,IAAI,EACJ,kBAAkB,EAClB,uBAAuB,EACvB,QAAQ,EACR,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,sBAAsB,EACvB,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,OAAO,EACP,IAAI,EACJ,kBAAkB,EAClB,uBAAuB,EACvB,QAAQ,EACR,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,sBAAsB,GACvB,CAAC;AAEF,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,SAAS,OAAO,EAAE,CAAC;IAChD,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IACjE,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC;IAC7E,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAE/C,QAAQ,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,CAAC;IAC7E,QAAQ,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,UAAU,EAAE,CACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,iBAAiB,KACrB,IAAI,CAAC;IACV,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAClE,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAE1C,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,SAAS,WAAW,EAAE,CAAC;IAClF,QAAQ,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,WAAW,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,WAAW,CAAC;IAC7D,QAAQ,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,KAAK,SAAS,WAAW,EAAE,CAAC;IACzF,QAAQ,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,KAAK,WAAW,CAAC;IAEnF,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;CAC5B;AAID,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CACnD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/store/types.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,OAAO,EACP,IAAI,EACJ,kBAAkB,EAClB,uBAAuB,EACvB,QAAQ,EACR,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,sBAAsB,EACvB,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,OAAO,EACP,IAAI,EACJ,kBAAkB,EAClB,uBAAuB,EACvB,QAAQ,EACR,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,sBAAsB,GACvB,CAAC;AAEF,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,SAAS,OAAO,EAAE,CAAC;IAChD,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IACjE,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC;IAC7E,QAAQ,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAE/C,QAAQ,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,CAAC;IAC7E,QAAQ,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,UAAU,EAAE,CACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,iBAAiB,KACrB,IAAI,CAAC;IACV,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC/F,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAE1C,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,SAAS,WAAW,EAAE,CAAC;IAClF,QAAQ,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,WAAW,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,WAAW,CAAC;IAC7D,QAAQ,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,KAAK,SAAS,WAAW,EAAE,CAAC;IACzF,QAAQ,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,KAAK,WAAW,CAAC;IAEnF,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CAC5C;AAID,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CACnD"}

package/node_modules/@oscharko-dev/keiko-server/dist/store-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store-handlers.d.ts","sourceRoot":"","sources":["../src/store-handlers.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAuH/C,iBAAS,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAEpD;AAqMD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAGvF;AAMD,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAUtB;AAeD,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAQtB;AAMD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CASvF;AAgBD,wBAAgB,eAAe,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAYnF;AAMD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAetB;AA+XD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAoBtB;AAMD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAQpF;AAMD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAgBtF;AAMD,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAwBtB;AA6CD,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAWtB;AAuBD,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAgBtB;AAGD,OAAO,EAAE,cAAc,EAAE,CAAC"}
+{"version":3,"file":"store-handlers.d.ts","sourceRoot":"","sources":["../src/store-handlers.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAuH/C,iBAAS,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAEpD;AAmND,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAMvF;AAMD,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAatB;AAeD,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAQtB;AAMD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAcvF;AAgBD,wBAAgB,eAAe,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAYnF;AAMD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAetB;AA0bD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAuBtB;AAMD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAQpF;AAMD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAgBtF;AAMD,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAwBtB;AA6CD,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAWtB;AAuBD,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAgBtB;AAGD,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/store-handlers.js

@@ -94,6 +94,9 @@ function badRequest(code, message) {
 function notFoundResult(message) {
     return { status: 404, body: errorBody("not_found", message) };
 }
+function forbiddenResult(code, message) {
+    return { status: 403, body: errorBody(code, message) };
+}
 function payloadTooLarge() {
     return {
         status: 413,
@@ -235,6 +238,14 @@ function optionalBoundedQueryInteger(ctx, name, fallback, max) {
 function projectWithAvailability(p) {
     return { ...p, available: isProjectAvailable(p) };
 }
+function putPreferredProjectFirst(projects, preferredProjectPath) {
+    if (preferredProjectPath === undefined)
+        return projects;
+    const preferred = projects.find((project) => project.path === preferredProjectPath);
+    if (preferred === undefined)
+        return projects;
+    return [preferred, ...projects.filter((project) => project.path !== preferredProjectPath)];
+}
 function chatBelongsToProject(deps, projectPath, chatId) {
     return deps.store.findChatById(chatId)?.projectPath === projectPath;
 }
@@ -251,7 +262,7 @@ function messageBelongsToChat(deps, chatId, messageId) {
 // Route 13 — GET /api/projects
 // ──────────────────────────────────────────────────────────────────────────
 export function handleListProjects(_ctx, deps) {
-    const projects = deps.store.listProjects().map(projectWithAvailability);
+    const projects = putPreferredProjectFirst(deps.store.listProjects().map(projectWithAvailability), deps.preferredProjectPath);
     return { status: 200, body: { projects } };
 }
 // ──────────────────────────────────────────────────────────────────────────
@@ -263,6 +274,9 @@ export async function handleCreateProject(ctx, deps) {
         const path = requireString(body, "path");
         const name = optionalString(body, "name");
         const normalizedPath = validateProjectPath(path, { mustExist: true });
+        if (pathIsDenied(normalizedPath)) {
+            return forbiddenResult("DENIED", "The project path is excluded from Keiko's safe read surface.");
+        }
         assertUiDbOutsideProject(deps.uiDbPath, normalizedPath);
         const project = deps.store.createProject(normalizedPath, name);
         return { status: 201, body: { project: projectWithAvailability(project) } };
@@ -295,7 +309,12 @@ export function handleDeleteProject(ctx, deps) {
     return runHandlerSync(() => {
         const targetPath = requireQuery(ctx, "path");
         const normalizedPath = validateProjectPath(targetPath, { mustExist: false });
+        const deletedChats = deps.store.listChats(normalizedPath);
         deps.store.deleteProject(normalizedPath);
+        for (const chat of deletedChats) {
+            clearGroundedContextIndexesForConversation(chat.id);
+            clearGroundedTurnsForConversation(chat.id);
+        }
         clearGroundedContextIndexesForWorkspace(normalizedPath);
         clearGroundedTurnsForWorkspace(normalizedPath);
         return { status: 204, body: null };
@@ -405,6 +424,9 @@ function scopeTargetPath(realProjectRoot, relativePath) {
         return realProjectRoot;
     return resolve(realProjectRoot, ...relativePath.split("/").filter((part) => part.length > 0));
 }
+function scopeRelativePath(realProjectRoot, absolutePath) {
+    return relative(realProjectRoot, absolutePath).split("\\").join("/");
+}
 function assertScopePathMetadataSafe(deps, relativePath) {
     if (pathIsDenied(relativePath)) {
         throw new InvalidRequest("Connected scope is excluded from Keiko's safe read surface.");
@@ -427,6 +449,9 @@ function validateScopePathAccess(deps, realProjectRoot, kind, entry) {
     if (!isContainedPath(realProjectRoot, targetReal)) {
         throw new InvalidRequest("Connected scope path must stay inside the selected project.");
     }
+    if (pathIsDenied(scopeRelativePath(realProjectRoot, targetReal))) {
+        throw new InvalidRequest("Connected scope is excluded from Keiko's safe read surface.");
+    }
     let info;
     try {
         info = statSync(targetReal);
@@ -444,7 +469,7 @@ function validateScopePathAccess(deps, realProjectRoot, kind, entry) {
 function resolveRealRoot(rootInput, notAccessibleMessage) {
     const root = validateProjectPath(rootInput, { mustExist: true });
     try {
-        return realpathSync(root);
+        return { root, realRoot: realpathSync(root) };
     }
     catch {
         throw new InvalidRequest(notAccessibleMessage);
@@ -454,10 +479,10 @@ function resolveRealRoot(rootInput, notAccessibleMessage) {
 // (a folder outside the chat's project, so non-developers can connect any folder). Validate it like
 // a project root, then refuse credential/secret locations (deny-list) and credential-shaped path
 // metadata so home-directory browsing can never bind a secret folder as a grounded scope.
-function validateConnectedScopeRoot(deps, rootInput) {
-    const realRoot = resolveRealRoot(rootInput, "Connected scope root is not accessible.");
-    if (pathIsDenied(realRoot)) {
-        throw new InvalidRequest("Connected scope root is excluded from Keiko's safe read surface.");
+function validateAccessibleRoot(deps, rootInput, notAccessibleMessage, deniedMessage) {
+    const { root, realRoot } = resolveRealRoot(rootInput, notAccessibleMessage);
+    if (pathIsDenied(root) || pathIsDenied(realRoot)) {
+        throw new InvalidRequest(deniedMessage);
     }
     const redacted = deps.redactor(realRoot);
     if (typeof redacted === "string" && redacted !== realRoot) {
@@ -465,15 +490,23 @@ function validateConnectedScopeRoot(deps, rootInput) {
     }
     return realRoot;
 }
+function validateConnectedScopeRoot(deps, rootInput) {
+    return validateAccessibleRoot(deps, rootInput, "Connected scope root is not accessible.", "Connected scope root is excluded from Keiko's safe read surface.");
+}
+function validateFallbackProjectRoot(deps, projectPath) {
+    return validateAccessibleRoot(deps, projectPath, "Selected project is not accessible.", "Selected project is excluded from Keiko's safe read surface.");
+}
 function validateConnectedScopeAccess(deps, chat, scope) {
     const realRoot = scope.root !== undefined
         ? validateConnectedScopeRoot(deps, scope.root)
-        : resolveRealRoot(chat.projectPath, "Selected project is not accessible.");
-    if (scope.kind === "workspace-root")
-        return;
+        : validateFallbackProjectRoot(deps, chat.projectPath);
+    if (scope.kind === "workspace-root") {
+        return scope.root === undefined ? scope : { ...scope, root: realRoot };
+    }
     for (const entry of scope.relativePaths) {
         validateScopePathAccess(deps, realRoot, scope.kind, entry);
     }
+    return scope.root === undefined ? scope : { ...scope, root: realRoot };
 }
 function validateScopeConnectedAtMs(value) {
     if (typeof value !== "number" || !Number.isInteger(value) || value < 0) {
@@ -642,6 +675,23 @@ function scopesRequiringAccessValidation(patch) {
     }
     return [];
 }
+function canonicalizeConnectedScopePatch(deps, chat, patch) {
+    if (patch.connectedScopes !== undefined) {
+        return {
+            ...patch,
+            connectedScopes: patch.connectedScopes === null
+                ? null
+                : patch.connectedScopes.map((scope) => validateConnectedScopeAccess(deps, chat, scope)),
+        };
+    }
+    if (patch.connectedScope !== undefined && patch.connectedScope !== null) {
+        return {
+            ...patch,
+            connectedScope: validateConnectedScopeAccess(deps, chat, patch.connectedScope),
+        };
+    }
+    return patch;
+}
 // Epic #189 — the grounded index is invalidated when ANY grounding source changes: a connected
 // folder scope (#532) OR a local-knowledge connector scope. The hybrid path reads both.
 function patchTouchesGroundingScope(patch) {
@@ -656,16 +706,19 @@ export async function handleUpdateChat(ctx, deps) {
         const body = await readJsonObject(ctx.req);
         const patch = buildChatPatch(deps, body);
         const scopesToCheck = scopesRequiringAccessValidation(patch);
+        let safePatch = patch;
         if (scopesToCheck.length > 0) {
             const existing = findChatById(deps, id);
             if (existing === undefined)
                 return notFoundResult("Chat not found.");
-            for (const scope of scopesToCheck) {
-                validateConnectedScopeAccess(deps, existing, scope);
-            }
+            safePatch = canonicalizeConnectedScopePatch(deps, existing, patch);
         }
-        const chat = deps.store.updateChat(id, patch);
-        if (patchTouchesGroundingScope(patch) || patch.status === "closed") {
+        const limits = currentGroundingLimits(deps);
+        const chat = deps.store.updateChat(id, safePatch, {
+            maxConnectedSources: limits.maxConnectedSources,
+            maxLocalKnowledgeSources: limits.maxLocalKnowledgeSources,
+        });
+        if (patchTouchesGroundingScope(safePatch) || safePatch.status === "closed") {
             clearGroundedContextIndexesForConversation(id);
             clearGroundedTurnsForConversation(id);
         }

package/node_modules/@oscharko-dev/keiko-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oscharko-dev/keiko-server",
-  "version": "0.2.0-beta.3",
+  "version": "0.2.0-beta.4",
   "private": true,
   "type": "module",
   "license": "Apache-2.0",
@@ -15,7 +15,7 @@
   },
   "scripts": {
     "build": "tsc -b tsconfig.json",
-    "typecheck": "tsc -b tsconfig.json --noEmit",
+    "typecheck": "tsc -b tsconfig.json",
     "test": "vitest run"
   },
   "files": [