@sanqianx/project-knowledge 4.7.0 → 4.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (192) hide show
  1. package/.agents/plugins/marketplace.json +17 -17
  2. package/.claude-plugin/marketplace.json +1 -1
  3. package/CHANGELOG.md +817 -799
  4. package/README.md +48 -36
  5. package/_modules/knowledge-engine/README.md +88 -0
  6. package/_modules/knowledge-engine/package.json +38 -0
  7. package/_modules/knowledge-engine/src/analysis-contract.js +25 -0
  8. package/_modules/knowledge-engine/src/analysis-worker.js +54 -0
  9. package/_modules/knowledge-engine/src/bin.js +52 -0
  10. package/_modules/knowledge-engine/src/bridge-client.js +24 -0
  11. package/_modules/knowledge-engine/src/coordinator.js +255 -0
  12. package/_modules/knowledge-engine/src/headless-analyzer.js +75 -0
  13. package/_modules/knowledge-engine/src/memories.js +85 -0
  14. package/_modules/knowledge-engine/src/migration.js +88 -0
  15. package/_modules/knowledge-engine/src/retrieval.js +116 -0
  16. package/_modules/knowledge-engine/src/runtime/README.md +7 -0
  17. package/_modules/knowledge-engine/src/runtime/atomic-file.js +204 -0
  18. package/_modules/knowledge-engine/src/runtime/automation-config.js +140 -0
  19. package/_modules/knowledge-engine/src/runtime/commit-conversation-binder.js +249 -0
  20. package/_modules/knowledge-engine/src/runtime/commit-processing-ledger.js +26 -0
  21. package/_modules/knowledge-engine/src/runtime/commit-prompt.js +202 -0
  22. package/_modules/knowledge-engine/src/runtime/commit-reconciler.js +432 -0
  23. package/_modules/knowledge-engine/src/runtime/content-hash.js +4 -0
  24. package/_modules/knowledge-engine/src/runtime/contracts.js +279 -0
  25. package/_modules/knowledge-engine/src/runtime/conversation-exclusions.js +204 -0
  26. package/_modules/knowledge-engine/src/runtime/conversation-store.js +387 -0
  27. package/_modules/knowledge-engine/src/runtime/evidence-bundle.js +228 -0
  28. package/_modules/knowledge-engine/src/runtime/git-runner.js +62 -0
  29. package/_modules/knowledge-engine/src/runtime/knowledge-promotion.js +444 -0
  30. package/_modules/knowledge-engine/src/runtime/knowledge-retrieval-service.js +402 -0
  31. package/_modules/knowledge-engine/src/runtime/layout.js +44 -0
  32. package/_modules/knowledge-engine/src/runtime/markdown-knowledge-indexer.js +230 -0
  33. package/_modules/knowledge-engine/src/runtime/scanner.js +298 -0
  34. package/_modules/knowledge-engine/src/server.js +155 -0
  35. package/_modules/knowledge-engine/src/store.js +239 -0
  36. package/_modules/knowledge-engine/ui/app.css +172 -0
  37. package/_modules/knowledge-engine/ui/app.js +297 -0
  38. package/_modules/knowledge-engine/ui/index.html +95 -0
  39. package/_site/README.md +30 -30
  40. package/_site/_test/ai-profile-resolver-test.js +137 -137
  41. package/_site/_test/automation-queue-test.js +14 -14
  42. package/_site/_test/automation-ui-test.js +40 -40
  43. package/_site/_test/background-task-registry-test.js +43 -43
  44. package/_site/_test/baseline-schema-test.js +91 -91
  45. package/_site/_test/chat-claudecodeui-match-test.js +92 -92
  46. package/_site/_test/claude-executable-discovery-test.js +62 -62
  47. package/_site/_test/claude-workbench-test.js +170 -170
  48. package/_site/_test/codex-conversation-projection-test.js +2 -1
  49. package/_site/_test/commit-conversation-binding-test.js +95 -95
  50. package/_site/_test/commit-evidence-test.js +110 -110
  51. package/_site/_test/conversation-api-test.js +109 -109
  52. package/_site/_test/conversation-store-test.js +136 -136
  53. package/_site/_test/data-dir-migration-test.js +57 -57
  54. package/_site/_test/desktop-browser-compat-test.js +28 -28
  55. package/_site/_test/desktop-hook-runtime-regression-test.js +204 -204
  56. package/_site/_test/explicit-commit-processor-test.js +37 -37
  57. package/_site/_test/fixtures/make-git-repos.js +12 -1
  58. package/_site/_test/folder-picker-output-test.js +19 -19
  59. package/_site/_test/full-integration-e2e-test.js +165 -165
  60. package/_site/_test/git-validation-test.js +2 -2
  61. package/_site/_test/hook-runtime-endpoint-test.js +88 -88
  62. package/_site/_test/hook-status-repair-api-test.js +152 -152
  63. package/_site/_test/hook-trigger-test.js +85 -85
  64. package/_site/_test/import-preflight-api-test.js +234 -233
  65. package/_site/_test/index-writer-concurrency-test.js +135 -135
  66. package/_site/_test/integration-adapters-test.js +171 -171
  67. package/_site/_test/integration-surface-coverage-test.js +164 -164
  68. package/_site/_test/knowledge-language-control-test.js +170 -170
  69. package/_site/_test/knowledge-promotion-recovery-test.js +260 -260
  70. package/_site/_test/knowledge-query-test.js +54 -54
  71. package/_site/_test/knowledge-retrieval-service-test.js +77 -77
  72. package/_site/_test/knowledge-storage-startup-test.js +52 -52
  73. package/_site/_test/knowledge-store-logs-supervision-test.js +89 -89
  74. package/_site/_test/legacy-forward-compat-test.js +257 -257
  75. package/_site/_test/legacy-project-upgrade-e2e-test.js +363 -363
  76. package/_site/_test/logging-api-test.js +89 -89
  77. package/_site/_test/logging-sse-no-gap-test.js +88 -88
  78. package/_site/_test/logging-ui-test.js +106 -104
  79. package/_site/_test/markdown-delta-overlay-test.js +85 -85
  80. package/_site/_test/markdown-maintenance-api-test.js +75 -75
  81. package/_site/_test/mcp-server-test.js +149 -149
  82. package/_site/_test/module-artifact-integrity-test.js +27 -0
  83. package/_site/_test/module-boundary-test.js +30 -0
  84. package/_site/_test/module-bridge-eventbridge-test.js +7 -0
  85. package/_site/_test/module-model-configuration-test.js +43 -0
  86. package/_site/_test/module-process-lifecycle-test.js +24 -0
  87. package/_site/_test/module-stream-proxy-test.js +34 -0
  88. package/_site/_test/non-release-ci-test.js +34 -34
  89. package/_site/_test/offline-boundary-isolation-test.js +32 -32
  90. package/_site/_test/p0-data-migration-characterization-test.js +37 -37
  91. package/_site/_test/p0-e2e-gate-test.js +347 -347
  92. package/_site/_test/packaged-ui-smoke-test.js +11 -9
  93. package/_site/_test/path-consistency-test.js +151 -151
  94. package/_site/_test/pending-sweep-test.js +9 -9
  95. package/_site/_test/post-commit-automation-test.js +87 -87
  96. package/_site/_test/product-diagnostics-ui-test.js +75 -0
  97. package/_site/_test/product-import-ui-test.js +92 -0
  98. package/_site/_test/project-delete-recovery-test.js +64 -64
  99. package/_site/_test/project-goal-editor-test.js +144 -144
  100. package/_site/_test/project-layout-v2-migration-test.js +127 -127
  101. package/_site/_test/project-lifecycle-transaction-test.js +106 -106
  102. package/_site/_test/prompt-settings-test.js +115 -115
  103. package/_site/_test/protected-architecture-gate-test.js +122 -122
  104. package/_site/_test/refactor-characterization-test.js +36 -36
  105. package/_site/_test/release-version-sync-test.js +1 -1
  106. package/_site/_test/requirement-recorder-test.js +173 -173
  107. package/_site/_test/run-all-tests.js +159 -156
  108. package/_site/_test/server-runtime-migration-safety-test.js +27 -27
  109. package/_site/_test/shared-contracts-test.js +58 -58
  110. package/_site/_test/startup-analysis-disabled-test.js +10 -10
  111. package/_site/_test/storage-foundation-test.js +78 -78
  112. package/_site/_test/structured-logger-test.js +101 -101
  113. package/_site/_test/tracking-start-test.js +108 -108
  114. package/_site/_test/v4122-upgrade-data-contract-test.js +56 -56
  115. package/_site/_test/workbench-permission-test.js +117 -117
  116. package/_site/_test/workspace-ui-contract-test.js +28 -43
  117. package/_site/lib/ai-profile-resolver.js +78 -78
  118. package/_site/lib/ai-workspace.js +101 -101
  119. package/_site/lib/automation-config.js +140 -140
  120. package/_site/lib/bridge-adapter.js +1 -0
  121. package/_site/lib/bridge-consumer-service.js +402 -402
  122. package/_site/lib/claude-cli-runner.js +1510 -1510
  123. package/_site/lib/commit-conversation-binder.js +234 -234
  124. package/_site/lib/commit-processing-ledger.js +27 -27
  125. package/_site/lib/commit-prompt.js +202 -202
  126. package/_site/lib/commit-reconciler.js +406 -406
  127. package/_site/lib/contracts.js +284 -279
  128. package/_site/lib/conversation-query-service.js +144 -144
  129. package/_site/lib/conversation-store.js +385 -385
  130. package/_site/lib/data-dir.js +74 -74
  131. package/_site/lib/data-state-classifier.js +40 -40
  132. package/_site/lib/engine-cutover.js +97 -0
  133. package/_site/lib/evidence-bundle.js +228 -228
  134. package/_site/lib/folder-picker-output.js +21 -21
  135. package/_site/lib/git-runner.js +62 -62
  136. package/_site/lib/github-team-store.js +1172 -1172
  137. package/_site/lib/hook-manager.js +203 -202
  138. package/_site/lib/index-service.js +173 -173
  139. package/_site/lib/integration-installer.js +907 -907
  140. package/_site/lib/kb-framework.js +176 -176
  141. package/_site/lib/kb-validator.js +124 -124
  142. package/_site/lib/knowledge-promotion.js +435 -435
  143. package/_site/lib/knowledge-retrieval-service.js +401 -401
  144. package/_site/lib/knowledge-tool-runtime.js +359 -359
  145. package/_site/lib/legacy-data-manifest.js +26 -26
  146. package/_site/lib/llm-client.js +161 -161
  147. package/_site/lib/markdown-knowledge-indexer.js +230 -230
  148. package/_site/lib/migration-service.js +442 -442
  149. package/_site/lib/module-bridge.js +198 -33
  150. package/_site/lib/post-commit-automation.js +87 -87
  151. package/_site/lib/project-lifecycle-service.js +519 -497
  152. package/_site/lib/project-store.js +268 -262
  153. package/_site/lib/requirement-recorder.js +278 -278
  154. package/_site/lib/runtime-endpoint.js +155 -155
  155. package/_site/lib/scanner.js +298 -298
  156. package/_site/lib/server-app.js +1590 -1520
  157. package/_site/lib/settings-store.js +133 -113
  158. package/_site/lib/storage-layout.js +162 -162
  159. package/_site/lib/structured-logger.js +574 -574
  160. package/_site/scripts/folder-picker.ps1 +156 -156
  161. package/_site/scripts/hook-trigger.js +157 -156
  162. package/_site/scripts/install-module-candidates.js +69 -0
  163. package/_site/scripts/pack-module-candidates.js +72 -0
  164. package/_site/scripts/sync-release-version.js +2 -2
  165. package/_site/scripts/vendor-modules.js +47 -0
  166. package/_site/scripts/verify-module-runtime.js +45 -0
  167. package/_site/scripts/verify-product-runtime.js +34 -0
  168. package/bin/project-knowledge-mcp.js +194 -194
  169. package/docs/README.zh-CN.md +34 -25
  170. package/docs/project-registry-schema.md +22 -22
  171. package/docs/testing-strategy.md +33 -33
  172. package/module-runtime-manifest.json +220 -0
  173. package/package.json +13 -9
  174. package/plugins/project-knowledge/.claude-plugin/plugin.json +1 -1
  175. package/plugins/project-knowledge/.codex-plugin/plugin.json +1 -1
  176. package/plugins/project-knowledge/.mcp.json +1 -1
  177. package/plugins/project-knowledge/opencode/project-knowledge.md +3 -3
  178. package/plugins/project-knowledge/skills/project-knowledge/SKILL.md +28 -28
  179. package/templates/project-readme.md +34 -34
  180. package/ui/favicon.svg +38 -38
  181. package/ui/index.html +51 -149
  182. package/ui/product.css +9 -0
  183. package/ui/product.js +386 -0
  184. package/vendor-manifest.json +46 -0
  185. package/_site/_test/import-ui-flow-test.js +0 -171
  186. package/_site/_test/project-control-panel-task14-test.js +0 -63
  187. package/_site/_test/task15-20-ui-flow-test.js +0 -148
  188. package/_site/_test/ui-i18n-toggle-test.js +0 -114
  189. package/_site/_test/ui-smoke-test.js +0 -73
  190. package/ui/app.css +0 -58
  191. package/ui/app.js +0 -607
  192. package/ui/i18n.js +0 -146
@@ -1,110 +1,110 @@
1
- // Run: node _site/_test/commit-evidence-test.js
2
-
3
- const assert = require('assert');
4
- const fs = require('fs');
5
- const os = require('os');
6
- const path = require('path');
7
- const { spawnSync } = require('child_process');
8
- const { CommitScanner, TrustedGitReader, EMPTY_TREE_SHA, sha256 } = require('../lib/scanner');
9
-
10
- const temp = fs.mkdtempSync(path.join(os.tmpdir(), `kb-commit-evidence-${process.pid}-`));
11
- const repo = path.join(temp, 'repo');
12
-
13
- function git(args) {
14
- const result = spawnSync('git', ['-C', repo, ...args], { encoding: 'utf8', windowsHide: true, maxBuffer: 16 * 1024 * 1024 });
15
- if (result.status !== 0) throw new Error(result.stderr || `git ${args.join(' ')} failed`);
16
- return String(result.stdout || '').trim();
17
- }
18
-
19
- function gitRaw(args) {
20
- const result = spawnSync('git', ['-C', repo, ...args], { encoding: 'utf8', windowsHide: true, maxBuffer: 16 * 1024 * 1024 });
21
- if (result.status !== 0) throw new Error(result.stderr || `git ${args.join(' ')} failed`);
22
- return String(result.stdout || '');
23
- }
24
-
25
- function commitFile(name, content, message) {
26
- fs.mkdirSync(path.dirname(path.join(repo, name)), { recursive: true });
27
- fs.writeFileSync(path.join(repo, name), content);
28
- git(['add', name]);
29
- git(['commit', '-m', message]);
30
- return git(['rev-parse', 'HEAD']);
31
- }
32
-
33
- (async () => {
34
- fs.mkdirSync(repo, { recursive: true });
35
- git(['init', '--initial-branch=main']);
36
- git(['config', 'user.email', 'evidence@example.test']);
37
- git(['config', 'user.name', 'Evidence Test']);
38
- const rootCommit = commitFile('src/root.txt', 'root\n', 'root commit');
39
- const binaryCommit = commitFile('assets/sample.bin', Buffer.from([0, 1, 2, 3, 255]), 'add binary');
40
-
41
- git(['checkout', '-b', 'feature']);
42
- const featureCommit = commitFile('src/feature.txt', 'feature\n', 'feature side');
43
- git(['checkout', 'main']);
44
- const mainCommit = commitFile('src/main.txt', 'main\n', 'main side');
45
- git(['merge', '--no-ff', 'feature', '-m', 'merge feature']);
46
- const mergeCommit = git(['rev-parse', 'HEAD']);
47
-
48
- const scanner = new CommitScanner({ batchSize: 2 });
49
- const firstBatch = await scanner.scan({ repoPath: repo }, {
50
- trackingMode: 'normal', trackingStartCommit: rootCommit, lastAnalyzedCommit: null,
51
- });
52
- assert.strictEqual(firstBatch.status, 'ok');
53
- assert.strictEqual(firstBatch.commits.length, 2, 'batch limit should return a bounded first page');
54
- assert(firstBatch.continuation && firstBatch.continuation.remaining === 2, 'continuation must expose remaining work');
55
- const all = await new TrustedGitReader().listCommits(repo, rootCommit, mergeCommit);
56
- assert.deepStrictEqual(all, [binaryCommit, mainCommit, featureCommit, mergeCommit], 'reverse topo order must include both branch commits and the merge commit');
57
-
58
- const rootEvidence = await scanner.collectEvidence({ repoPath: repo }, rootCommit, { branch: 'main' });
59
- assert.strictEqual(rootEvidence.patchMode, 'root-empty-tree');
60
- assert.strictEqual(rootEvidence.patchBase, EMPTY_TREE_SHA);
61
- assert(rootEvidence.patch.includes('src/root.txt'), 'root evidence must contain a real empty-tree patch');
62
-
63
- const binaryEvidence = await scanner.collectEvidence({ repoPath: repo }, binaryCommit, { branch: 'main' });
64
- assert(binaryEvidence.files.some(file => file.path === 'assets/sample.bin' && file.binary), 'name-status manifest should identify binary files');
65
- assert(binaryEvidence.patch.includes('GIT binary patch'), 'binary patch evidence should be preserved');
66
-
67
- const mergeEvidence = await scanner.collectEvidence({ repoPath: repo }, mergeCommit, { branch: 'main' });
68
- assert.strictEqual(mergeEvidence.parents.length, 2, 'merge metadata should include every parent');
69
- assert.strictEqual(mergeEvidence.patchMode, 'merge-first-parent');
70
- assert.strictEqual(mergeEvidence.patchBase, mainCommit, 'merge patch must compare against the first parent');
71
- assert(mergeEvidence.patch.includes('src/feature.txt'), 'first-parent merge patch should show the introduced feature side');
72
-
73
- git(['mv', 'src/root.txt', 'src/renamed.txt']);
74
- git(['commit', '-m', 'rename root evidence']);
75
- const renameCommit = git(['rev-parse', 'HEAD']);
76
- const renameEvidence = await scanner.collectEvidence({ repoPath: repo }, renameCommit, { branch: 'main' });
77
- assert(renameEvidence.files.some(file => file.oldPath === 'src/root.txt' && file.path === 'src/renamed.txt'), 'rename evidence must retain old and new paths');
78
-
79
- const largeContent = Array.from({ length: 42000 }, (_, index) => `${String(index).padStart(6, '0')} ${'exact-evidence-'.repeat(5)}\n`).join('');
80
- const largeCommit = commitFile('src/large.txt', largeContent, 'large exact evidence');
81
- const evidenceRoot = path.join(temp, 'run', 'input', 'evidence');
82
- const largeReader = new TrustedGitReader({ maxPatchBytes: 2 * 1024 * 1024, maxChunkBytes: 128 * 1024 });
83
- const large = await largeReader.collectEvidence(repo, largeCommit, { branch: 'main', evidenceRoot });
84
- assert(large.patchBytes > 2 * 1024 * 1024, 'fixture must cross the production inline threshold');
85
- assert.strictEqual(large.patch, null, 'large patch should be referenced by exact chunks instead of prompt inline text');
86
- assert.strictEqual(large.patchChunked, true);
87
- assert.strictEqual(large.patchOmitted, false, 'exact chunk evidence must not be represented as omitted');
88
- assert(large.evidenceBundle.chunkCount > 1, 'large patch should be split into ordered chunks');
89
- const manifest = largeReader.verifyEvidence(large);
90
- assert.deepStrictEqual(manifest.chunks.map(chunk => chunk.sequence), manifest.chunks.map((_, index) => index + 1));
91
- assert(manifest.chunks.every(chunk => chunk.sha256.startsWith('sha256:') && chunk.bytes > 0 && chunk.sourcePaths.includes('src/large.txt')));
92
- const reconstructed = manifest.chunks.map(chunk => fs.readFileSync(path.join(evidenceRoot, ...chunk.path.split('/')))).join('');
93
- const exactGitPatch = gitRaw(['diff', '--no-ext-diff', '--binary', '--find-renames', '--unified=3', renameCommit, largeCommit]);
94
- assert.strictEqual(Buffer.byteLength(reconstructed), Buffer.byteLength(exactGitPatch));
95
- assert.strictEqual(sha256(reconstructed), large.patchHash, 'ordered chunks must exactly reconstruct the full Git diff hash');
96
-
97
- const corruptPath = path.join(evidenceRoot, ...manifest.chunks[0].path.split('/'));
98
- fs.appendFileSync(corruptPath, 'corrupt');
99
- assert.throws(() => largeReader.verifyEvidence(large), error => error.code === 'EVIDENCE_INTEGRITY_FAILED', 'corrupt chunks must fail with a typed evidence error');
100
-
101
- const missingRootReader = new TrustedGitReader({ maxPatchBytes: 8 });
102
- await assert.rejects(missingRootReader.collectEvidence(repo, mergeCommit, { branch: 'main' }), error => error.code === 'EVIDENCE_INTEGRITY_FAILED');
103
-
104
- console.log('commit-evidence-test PASS');
105
- })().catch(error => {
106
- console.error(error.stack || error.message);
107
- process.exitCode = 1;
108
- }).finally(() => {
109
- fs.rmSync(temp, { recursive: true, force: true });
110
- });
1
+ // Run: node _site/_test/commit-evidence-test.js
2
+
3
+ const assert = require('assert');
4
+ const fs = require('fs');
5
+ const os = require('os');
6
+ const path = require('path');
7
+ const { spawnSync } = require('child_process');
8
+ const { CommitScanner, TrustedGitReader, EMPTY_TREE_SHA, sha256 } = require('../lib/scanner');
9
+
10
+ const temp = fs.mkdtempSync(path.join(os.tmpdir(), `kb-commit-evidence-${process.pid}-`));
11
+ const repo = path.join(temp, 'repo');
12
+
13
+ function git(args) {
14
+ const result = spawnSync('git', ['-C', repo, ...args], { encoding: 'utf8', windowsHide: true, maxBuffer: 16 * 1024 * 1024 });
15
+ if (result.status !== 0) throw new Error(result.stderr || `git ${args.join(' ')} failed`);
16
+ return String(result.stdout || '').trim();
17
+ }
18
+
19
+ function gitRaw(args) {
20
+ const result = spawnSync('git', ['-C', repo, ...args], { encoding: 'utf8', windowsHide: true, maxBuffer: 16 * 1024 * 1024 });
21
+ if (result.status !== 0) throw new Error(result.stderr || `git ${args.join(' ')} failed`);
22
+ return String(result.stdout || '');
23
+ }
24
+
25
+ function commitFile(name, content, message) {
26
+ fs.mkdirSync(path.dirname(path.join(repo, name)), { recursive: true });
27
+ fs.writeFileSync(path.join(repo, name), content);
28
+ git(['add', name]);
29
+ git(['commit', '-m', message]);
30
+ return git(['rev-parse', 'HEAD']);
31
+ }
32
+
33
+ (async () => {
34
+ fs.mkdirSync(repo, { recursive: true });
35
+ git(['init', '--initial-branch=main']);
36
+ git(['config', 'user.email', 'evidence@example.test']);
37
+ git(['config', 'user.name', 'Evidence Test']);
38
+ const rootCommit = commitFile('src/root.txt', 'root\n', 'root commit');
39
+ const binaryCommit = commitFile('assets/sample.bin', Buffer.from([0, 1, 2, 3, 255]), 'add binary');
40
+
41
+ git(['checkout', '-b', 'feature']);
42
+ const featureCommit = commitFile('src/feature.txt', 'feature\n', 'feature side');
43
+ git(['checkout', 'main']);
44
+ const mainCommit = commitFile('src/main.txt', 'main\n', 'main side');
45
+ git(['merge', '--no-ff', 'feature', '-m', 'merge feature']);
46
+ const mergeCommit = git(['rev-parse', 'HEAD']);
47
+
48
+ const scanner = new CommitScanner({ batchSize: 2 });
49
+ const firstBatch = await scanner.scan({ repoPath: repo }, {
50
+ trackingMode: 'normal', trackingStartCommit: rootCommit, lastAnalyzedCommit: null,
51
+ });
52
+ assert.strictEqual(firstBatch.status, 'ok');
53
+ assert.strictEqual(firstBatch.commits.length, 2, 'batch limit should return a bounded first page');
54
+ assert(firstBatch.continuation && firstBatch.continuation.remaining === 2, 'continuation must expose remaining work');
55
+ const all = await new TrustedGitReader().listCommits(repo, rootCommit, mergeCommit);
56
+ assert.deepStrictEqual(all, [binaryCommit, mainCommit, featureCommit, mergeCommit], 'reverse topo order must include both branch commits and the merge commit');
57
+
58
+ const rootEvidence = await scanner.collectEvidence({ repoPath: repo }, rootCommit, { branch: 'main' });
59
+ assert.strictEqual(rootEvidence.patchMode, 'root-empty-tree');
60
+ assert.strictEqual(rootEvidence.patchBase, EMPTY_TREE_SHA);
61
+ assert(rootEvidence.patch.includes('src/root.txt'), 'root evidence must contain a real empty-tree patch');
62
+
63
+ const binaryEvidence = await scanner.collectEvidence({ repoPath: repo }, binaryCommit, { branch: 'main' });
64
+ assert(binaryEvidence.files.some(file => file.path === 'assets/sample.bin' && file.binary), 'name-status manifest should identify binary files');
65
+ assert(binaryEvidence.patch.includes('GIT binary patch'), 'binary patch evidence should be preserved');
66
+
67
+ const mergeEvidence = await scanner.collectEvidence({ repoPath: repo }, mergeCommit, { branch: 'main' });
68
+ assert.strictEqual(mergeEvidence.parents.length, 2, 'merge metadata should include every parent');
69
+ assert.strictEqual(mergeEvidence.patchMode, 'merge-first-parent');
70
+ assert.strictEqual(mergeEvidence.patchBase, mainCommit, 'merge patch must compare against the first parent');
71
+ assert(mergeEvidence.patch.includes('src/feature.txt'), 'first-parent merge patch should show the introduced feature side');
72
+
73
+ git(['mv', 'src/root.txt', 'src/renamed.txt']);
74
+ git(['commit', '-m', 'rename root evidence']);
75
+ const renameCommit = git(['rev-parse', 'HEAD']);
76
+ const renameEvidence = await scanner.collectEvidence({ repoPath: repo }, renameCommit, { branch: 'main' });
77
+ assert(renameEvidence.files.some(file => file.oldPath === 'src/root.txt' && file.path === 'src/renamed.txt'), 'rename evidence must retain old and new paths');
78
+
79
+ const largeContent = Array.from({ length: 42000 }, (_, index) => `${String(index).padStart(6, '0')} ${'exact-evidence-'.repeat(5)}\n`).join('');
80
+ const largeCommit = commitFile('src/large.txt', largeContent, 'large exact evidence');
81
+ const evidenceRoot = path.join(temp, 'run', 'input', 'evidence');
82
+ const largeReader = new TrustedGitReader({ maxPatchBytes: 2 * 1024 * 1024, maxChunkBytes: 128 * 1024 });
83
+ const large = await largeReader.collectEvidence(repo, largeCommit, { branch: 'main', evidenceRoot });
84
+ assert(large.patchBytes > 2 * 1024 * 1024, 'fixture must cross the production inline threshold');
85
+ assert.strictEqual(large.patch, null, 'large patch should be referenced by exact chunks instead of prompt inline text');
86
+ assert.strictEqual(large.patchChunked, true);
87
+ assert.strictEqual(large.patchOmitted, false, 'exact chunk evidence must not be represented as omitted');
88
+ assert(large.evidenceBundle.chunkCount > 1, 'large patch should be split into ordered chunks');
89
+ const manifest = largeReader.verifyEvidence(large);
90
+ assert.deepStrictEqual(manifest.chunks.map(chunk => chunk.sequence), manifest.chunks.map((_, index) => index + 1));
91
+ assert(manifest.chunks.every(chunk => chunk.sha256.startsWith('sha256:') && chunk.bytes > 0 && chunk.sourcePaths.includes('src/large.txt')));
92
+ const reconstructed = manifest.chunks.map(chunk => fs.readFileSync(path.join(evidenceRoot, ...chunk.path.split('/')))).join('');
93
+ const exactGitPatch = gitRaw(['diff', '--no-ext-diff', '--binary', '--find-renames', '--unified=3', renameCommit, largeCommit]);
94
+ assert.strictEqual(Buffer.byteLength(reconstructed), Buffer.byteLength(exactGitPatch));
95
+ assert.strictEqual(sha256(reconstructed), large.patchHash, 'ordered chunks must exactly reconstruct the full Git diff hash');
96
+
97
+ const corruptPath = path.join(evidenceRoot, ...manifest.chunks[0].path.split('/'));
98
+ fs.appendFileSync(corruptPath, 'corrupt');
99
+ assert.throws(() => largeReader.verifyEvidence(large), error => error.code === 'EVIDENCE_INTEGRITY_FAILED', 'corrupt chunks must fail with a typed evidence error');
100
+
101
+ const missingRootReader = new TrustedGitReader({ maxPatchBytes: 8 });
102
+ await assert.rejects(missingRootReader.collectEvidence(repo, mergeCommit, { branch: 'main' }), error => error.code === 'EVIDENCE_INTEGRITY_FAILED');
103
+
104
+ console.log('commit-evidence-test PASS');
105
+ })().catch(error => {
106
+ console.error(error.stack || error.message);
107
+ process.exitCode = 1;
108
+ }).finally(() => {
109
+ fs.rmSync(temp, { recursive: true, force: true });
110
+ });
@@ -1,119 +1,119 @@
1
- const assert = require('assert');
2
- const fs = require('fs');
3
- const os = require('os');
4
- const path = require('path');
5
- const { spawnServer } = require('./helpers/spawn-server');
6
- const { StorageLayout } = require('../lib/storage-layout');
7
- const { SettingsStore } = require('../lib/settings-store');
8
- const { ProjectRegistryStore } = require('../lib/project-registry-store');
9
- const { ProjectStore } = require('../lib/project-store');
10
- const { ConversationStore } = require('../lib/conversation-store');
11
- const { localDate } = require('../lib/conversation-query-service');
12
-
13
- const ROOT = path.resolve(__dirname, '..', '..');
14
- const PORT = 8250 + (process.pid % 300);
15
- const BASE = `http://127.0.0.1:${PORT}`;
16
-
17
- async function waitForServer() {
18
- for (let attempt = 0; attempt < 100; attempt += 1) {
19
- try { if ((await fetch(`${BASE}/api/health`)).ok) return; } catch {}
20
- await new Promise(resolve => setTimeout(resolve, 100));
21
- }
22
- throw new Error('server did not start');
23
- }
24
-
25
- (async () => {
26
- const dataDir = fs.mkdtempSync(path.join(os.tmpdir(), 'pk-conversation-api-'));
27
- const layout = new StorageLayout({ dataDir });
28
- const settings = new SettingsStore({ layout });
29
- const registry = new ProjectRegistryStore({ layout });
30
- const projects = new ProjectStore({ layout });
31
- await settings.initialize({ knowledge: { rootPath: path.join(dataDir, 'knowledge') } });
32
- await registry.initialize();
33
- const projectId = 'project-conversation-api';
34
- const repoPath = path.join(dataDir, 'repo');
35
- const knowledgePath = path.join(dataDir, 'knowledge', projectId);
36
- fs.mkdirSync(repoPath, { recursive: true });
37
- fs.mkdirSync(knowledgePath, { recursive: true });
38
- await projects.create(projectId, {
39
- displayName: 'Conversation API', storageName: 'conversation-api', repoPath, knowledgePath,
40
- }, { conversationBaselineCursor: 0, conversation: { lastConsumedCursor: 0, captureStatus: 'captured' } });
41
- await registry.add(projectId, { displayNameSnapshot: 'Conversation API' });
42
- const store = new ConversationStore({ layout, projectStore: projects });
43
- const repoIdentity = { repoId: 'conversation-api-repo' };
44
- const unsafePrompt = '<script>alert("conversation-body")</script> Keep this as plain text.';
45
- async function append(eventId, sequence, turnId, role, content, capturedAt) {
46
- return (await store.appendEvent(projectId, {
47
- eventId, sequence, source: 'codex', eventType: role === 'user' ? 'user_prompt' : 'assistant_response', role, content,
48
- sessionId: 'session-api', turnId, repoIdentity, projectPath: repoPath, branch: 'main', headAtCapture: '0'.repeat(40),
49
- capturedAt, identityConfidence: 'high', captureStatus: 'captured',
50
- })).event;
51
- }
52
- const r1 = await append('r1', 1, 'turn-1', 'user', unsafePrompt, '2026-08-18T01:00:00.000Z');
53
- const a1 = await append('a1', 2, 'turn-1', 'assistant', 'Rendered only as plain assistant text.', '2026-08-18T01:01:00.000Z');
54
- const r2 = await append('r2', 3, 'turn-2', 'user', 'Second prompt.', '2026-08-18T02:00:00.000Z');
1
+ const assert = require('assert');
2
+ const fs = require('fs');
3
+ const os = require('os');
4
+ const path = require('path');
5
+ const { spawnServer } = require('./helpers/spawn-server');
6
+ const { StorageLayout } = require('../lib/storage-layout');
7
+ const { SettingsStore } = require('../lib/settings-store');
8
+ const { ProjectRegistryStore } = require('../lib/project-registry-store');
9
+ const { ProjectStore } = require('../lib/project-store');
10
+ const { ConversationStore } = require('../lib/conversation-store');
11
+ const { localDate } = require('../lib/conversation-query-service');
12
+
13
+ const ROOT = path.resolve(__dirname, '..', '..');
14
+ const PORT = 8250 + (process.pid % 300);
15
+ const BASE = `http://127.0.0.1:${PORT}`;
16
+
17
+ async function waitForServer() {
18
+ for (let attempt = 0; attempt < 100; attempt += 1) {
19
+ try { if ((await fetch(`${BASE}/api/health`)).ok) return; } catch {}
20
+ await new Promise(resolve => setTimeout(resolve, 100));
21
+ }
22
+ throw new Error('server did not start');
23
+ }
24
+
25
+ (async () => {
26
+ const dataDir = fs.mkdtempSync(path.join(os.tmpdir(), 'pk-conversation-api-'));
27
+ const layout = new StorageLayout({ dataDir });
28
+ const settings = new SettingsStore({ layout });
29
+ const registry = new ProjectRegistryStore({ layout });
30
+ const projects = new ProjectStore({ layout });
31
+ await settings.initialize({ knowledge: { rootPath: path.join(dataDir, 'knowledge') } });
32
+ await registry.initialize();
33
+ const projectId = 'project-conversation-api';
34
+ const repoPath = path.join(dataDir, 'repo');
35
+ const knowledgePath = path.join(dataDir, 'knowledge', projectId);
36
+ fs.mkdirSync(repoPath, { recursive: true });
37
+ fs.mkdirSync(knowledgePath, { recursive: true });
38
+ await projects.create(projectId, {
39
+ displayName: 'Conversation API', storageName: 'conversation-api', repoPath, knowledgePath,
40
+ }, { conversationBaselineCursor: 0, conversation: { lastConsumedCursor: 0, captureStatus: 'captured' } });
41
+ await registry.add(projectId, { displayNameSnapshot: 'Conversation API' });
42
+ const store = new ConversationStore({ layout, projectStore: projects });
43
+ const repoIdentity = { repoId: 'conversation-api-repo' };
44
+ const unsafePrompt = '<script>alert("conversation-body")</script> Keep this as plain text.';
45
+ async function append(eventId, sequence, turnId, role, content, capturedAt) {
46
+ return (await store.appendEvent(projectId, {
47
+ eventId, sequence, source: 'codex', eventType: role === 'user' ? 'user_prompt' : 'assistant_response', role, content,
48
+ sessionId: 'session-api', turnId, repoIdentity, projectPath: repoPath, branch: 'main', headAtCapture: '0'.repeat(40),
49
+ capturedAt, identityConfidence: 'high', captureStatus: 'captured',
50
+ })).event;
51
+ }
52
+ const r1 = await append('r1', 1, 'turn-1', 'user', unsafePrompt, '2026-08-18T01:00:00.000Z');
53
+ const a1 = await append('a1', 2, 'turn-1', 'assistant', 'Rendered only as plain assistant text.', '2026-08-18T01:01:00.000Z');
54
+ const r2 = await append('r2', 3, 'turn-2', 'user', 'Second prompt.', '2026-08-18T02:00:00.000Z');
55
55
  const a2 = await append('a2', 4, 'turn-2', 'assistant', 'Second reply.', '2026-08-18T02:01:00.000Z');
56
56
  await append('r3', 5, 'turn-3', 'user', 'Third prompt.', '2026-08-18T03:00:00.000Z');
57
- await append('r4', 6, 'turn-other-date', 'user', 'Other date prompt.', '2026-08-19T03:00:00.000Z');
58
- const projectEvent = event => ({ eventId: event.eventId, sequence: event.sequence, content: event.content, contentHash: event.contentHash, capturedAt: event.capturedAt });
57
+ await append('r4', 6, 'turn-other-date', 'user', 'Other date prompt.', '2026-08-19T03:00:00.000Z');
58
+ const projectEvent = event => ({ eventId: event.eventId, sequence: event.sequence, content: event.content, contentHash: event.contentHash, capturedAt: event.capturedAt });
59
59
  store.writeSnapshot(projectId, {
60
- commitSha: '1'.repeat(40), repoIdentity, parentSha: null, boundaryStartCursor: 0, boundaryEndCursor: 2, status: 'available',
61
- turns: [{ turnId: 'turn-1', source: 'codex', sessionId: 'session-api', bindingKind: 'direct', userEvents: [projectEvent(r1)], assistantEvents: [projectEvent(a1)] }],
60
+ commitSha: '1'.repeat(40), repoIdentity, parentSha: null, boundaryStartCursor: 0, boundaryEndCursor: 2, status: 'available',
61
+ turns: [{ turnId: 'turn-1', source: 'codex', sessionId: 'session-api', bindingKind: 'direct', userEvents: [projectEvent(r1)], assistantEvents: [projectEvent(a1)] }],
62
62
  });
63
63
  store.writeSnapshot(projectId, {
64
64
  commitSha: '3'.repeat(40), repoIdentity, parentSha: '2'.repeat(40), boundaryStartCursor: 5, boundaryEndCursor: 5, status: 'available',
65
65
  turns: [{ turnId: 'turn-2', source: 'codex', sessionId: 'session-api', bindingKind: 'shared-spanning', userEvents: [projectEvent(r2)], assistantEvents: [projectEvent(a2)] }],
66
66
  });
67
- store.writeSnapshot(projectId, {
68
- commitSha: '2'.repeat(40), repoIdentity, parentSha: '1'.repeat(40), boundaryStartCursor: 2, boundaryEndCursor: 4, status: 'available',
69
- turns: [{ turnId: 'turn-2', source: 'codex', sessionId: 'session-api', bindingKind: 'shared-spanning', userEvents: [projectEvent(r2)], assistantEvents: [projectEvent(a2)] }],
70
- });
71
-
72
- const spawned = spawnServer({ root: ROOT, port: PORT, dataDir, tag: 'conversation-api', extraEnv: { KB_SKIP_MIGRATION: '1' } });
73
- try {
74
- await waitForServer();
75
- let response = await fetch(`${BASE}/api/conversations/projects`);
76
- let body = await response.json();
77
- assert.strictEqual(response.status, 200);
78
- assert.deepStrictEqual(body.projects.map(project => project.projectId), [projectId]);
79
- assert.strictEqual(Object.hasOwn(body.projects[0], 'repoPath'), false, 'project picker payload must not expose raw repository paths');
80
-
81
- const date = localDate(r1.capturedAt);
82
- response = await fetch(`${BASE}/api/conversations/turns?projectId=${projectId}&date=${date}&limit=2`);
83
- body = await response.json();
84
- assert.strictEqual(response.status, 200, JSON.stringify(body));
85
- assert.strictEqual(body.turns.length, 2);
86
- assert(body.nextCursor && body.hasMore);
87
- const firstPage = body.turns;
88
- response = await fetch(`${BASE}/api/conversations/turns?projectId=${projectId}&date=${date}&limit=2&cursor=${encodeURIComponent(body.nextCursor)}`);
89
- const secondPage = await response.json();
90
- assert.strictEqual(secondPage.turns.length, 1);
91
- const allTurns = [...firstPage, ...secondPage.turns];
92
- const turn1 = allTurns.find(turn => turn.turnId === 'turn-1');
93
- const turn2 = allTurns.find(turn => turn.turnId === 'turn-2');
94
- const turn3 = allTurns.find(turn => turn.turnId === 'turn-3');
95
- assert.strictEqual(turn1.userPrompt, unsafePrompt, 'conversation body should remain exact business data');
96
- assert.strictEqual(turn1.renderAs, 'plain-text', 'payload must instruct hosts to avoid HTML interpretation');
97
- assert.strictEqual(turn1.annotation.status, 'committed');
98
- assert.strictEqual(turn1.annotation.commits[0].shortSha, '1111111');
67
+ store.writeSnapshot(projectId, {
68
+ commitSha: '2'.repeat(40), repoIdentity, parentSha: '1'.repeat(40), boundaryStartCursor: 2, boundaryEndCursor: 4, status: 'available',
69
+ turns: [{ turnId: 'turn-2', source: 'codex', sessionId: 'session-api', bindingKind: 'shared-spanning', userEvents: [projectEvent(r2)], assistantEvents: [projectEvent(a2)] }],
70
+ });
71
+
72
+ const spawned = spawnServer({ root: ROOT, port: PORT, dataDir, tag: 'conversation-api', extraEnv: { KB_SKIP_MIGRATION: '1' } });
73
+ try {
74
+ await waitForServer();
75
+ let response = await fetch(`${BASE}/api/conversations/projects`);
76
+ let body = await response.json();
77
+ assert.strictEqual(response.status, 200);
78
+ assert.deepStrictEqual(body.projects.map(project => project.projectId), [projectId]);
79
+ assert.strictEqual(Object.hasOwn(body.projects[0], 'repoPath'), false, 'project picker payload must not expose raw repository paths');
80
+
81
+ const date = localDate(r1.capturedAt);
82
+ response = await fetch(`${BASE}/api/conversations/turns?projectId=${projectId}&date=${date}&limit=2`);
83
+ body = await response.json();
84
+ assert.strictEqual(response.status, 200, JSON.stringify(body));
85
+ assert.strictEqual(body.turns.length, 2);
86
+ assert(body.nextCursor && body.hasMore);
87
+ const firstPage = body.turns;
88
+ response = await fetch(`${BASE}/api/conversations/turns?projectId=${projectId}&date=${date}&limit=2&cursor=${encodeURIComponent(body.nextCursor)}`);
89
+ const secondPage = await response.json();
90
+ assert.strictEqual(secondPage.turns.length, 1);
91
+ const allTurns = [...firstPage, ...secondPage.turns];
92
+ const turn1 = allTurns.find(turn => turn.turnId === 'turn-1');
93
+ const turn2 = allTurns.find(turn => turn.turnId === 'turn-2');
94
+ const turn3 = allTurns.find(turn => turn.turnId === 'turn-3');
95
+ assert.strictEqual(turn1.userPrompt, unsafePrompt, 'conversation body should remain exact business data');
96
+ assert.strictEqual(turn1.renderAs, 'plain-text', 'payload must instruct hosts to avoid HTML interpretation');
97
+ assert.strictEqual(turn1.annotation.status, 'committed');
98
+ assert.strictEqual(turn1.annotation.commits[0].shortSha, '1111111');
99
99
  assert.strictEqual(turn2.annotation.status, 'associated');
100
100
  assert.deepStrictEqual(turn2.annotation.commits.map(commit => commit.shortSha), ['2222222'], 'stale shared-spanning annotations after the next user turn are hidden');
101
- assert.strictEqual(turn3.annotation.status, 'uncommitted');
102
- assert(allTurns.every(turn => turn.date === date));
103
-
104
- response = await fetch(`${BASE}/api/conversations/turns?projectId=${projectId}&date=2026-08-19&cursor=${encodeURIComponent(body.nextCursor)}`);
105
- assert.strictEqual(response.status, 409, 'cursor must be bound to one project/date query');
106
- response = await fetch(`${BASE}/api/conversations/sessions?projectId=${projectId}`);
107
- assert.strictEqual(response.status, 404, 'default product API must not expose source/session diagnostic routes');
108
-
109
- response = await fetch(`${BASE}/api/logs/export`);
110
- const exportedLogs = await response.text();
111
- assert(!exportedLogs.includes('conversation-body'), 'conversation content must never leak into structured logs or export');
112
- console.log('conversation-api-test PASS');
113
- } finally {
114
- await spawned.cleanup();
115
- }
116
- })().catch(error => {
117
- console.error(error.stack || error.message);
118
- process.exitCode = 1;
119
- });
101
+ assert.strictEqual(turn3.annotation.status, 'uncommitted');
102
+ assert(allTurns.every(turn => turn.date === date));
103
+
104
+ response = await fetch(`${BASE}/api/conversations/turns?projectId=${projectId}&date=2026-08-19&cursor=${encodeURIComponent(body.nextCursor)}`);
105
+ assert.strictEqual(response.status, 409, 'cursor must be bound to one project/date query');
106
+ response = await fetch(`${BASE}/api/conversations/sessions?projectId=${projectId}`);
107
+ assert.strictEqual(response.status, 404, 'default product API must not expose source/session diagnostic routes');
108
+
109
+ response = await fetch(`${BASE}/api/logs/export`);
110
+ const exportedLogs = await response.text();
111
+ assert(!exportedLogs.includes('conversation-body'), 'conversation content must never leak into structured logs or export');
112
+ console.log('conversation-api-test PASS');
113
+ } finally {
114
+ await spawned.cleanup();
115
+ }
116
+ })().catch(error => {
117
+ console.error(error.stack || error.message);
118
+ process.exitCode = 1;
119
+ });