@sanqianx/project-knowledge 4.7.0 → 4.8.0

package/_site/_test/knowledge-retrieval-service-test.js

@@ -1,77 +1,77 @@
-const assert = require('assert');
-const fs = require('fs');
-const os = require('os');
-const path = require('path');
-const { StorageLayout } = require('../lib/storage-layout');
-const { ProjectRegistryStore } = require('../lib/project-registry-store');
-const { ProjectStore } = require('../lib/project-store');
-const { KnowledgeRetrievalService } = require('../lib/knowledge-retrieval-service');
-
-(async () => {
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'pk-retrieval-'));
-  const layout = new StorageLayout({ dataDir: path.join(root, 'data') });
-  const registry = new ProjectRegistryStore({ layout });
-  const projects = new ProjectStore({ layout });
-  await registry.initialize();
-
-  async function addProject(projectId, relatedProjectIds = []) {
-    const knowledgePath = path.join(root, 'knowledge', projectId);
-    fs.mkdirSync(path.join(knowledgePath, 'modules'), { recursive: true });
-    await projects.create(projectId, {
-      displayName: projectId,
-      storageName: projectId,
-      repoPath: path.join(root, 'repos', projectId),
-      knowledgePath,
-      relatedProjectIds,
-    }, { index: { dirty: true, generation: 9 } });
-    await registry.add(projectId, { displayNameSnapshot: projectId });
-    return knowledgePath;
-  }
-
-  const primary = await addProject('project-primary', ['project-related']);
-  const related = await addProject('project-related');
-  const secret = await addProject('project-secret');
-  for (let index = 0; index < 146; index += 1) {
-    fs.writeFileSync(path.join(primary, 'modules', `distractor-${String(index).padStart(3, '0')}.md`), `# Distractor ${index}\n\nRefresh credential lifecycle notes repeated for semantic distraction.\n`, 'utf8');
-  }
-  fs.writeFileSync(path.join(primary, 'modules', 'zzzz-token-rotation.md'), `---\ntags: [auth]\nsourcePaths: [src/security/token-rotation.js]\nroutes: [/api/tokens]\nsymbols: [TokenRotator]\n---\n# Rotation invariants\n\nThe rotation invariant is authoritative.\n`, 'utf8');
-  fs.writeFileSync(path.join(primary, 'modules', 'symbol-only.md'), `---\nsymbols: [SessionEpoch]\n---\n# Epoch contract\n\nEpoch invalidation behavior.\n`, 'utf8');
-  fs.writeFileSync(path.join(primary, 'modules', 'route-only.md'), `---\nroutes: [/v2/device-sessions]\n---\n# Device route\n\nDevice session route behavior.\n`, 'utf8');
-  fs.writeFileSync(path.join(primary, 'modules', 'tag-only.md'), `---\ntags: [credential-audit]\n---\n# Audit tag\n\nAudit behavior.\n`, 'utf8');
-  fs.writeFileSync(path.join(related, 'modules', 'related-rotation.md'), `---\nsourcePaths: [src/security/token-rotation.js]\n---\n# Related rotation\n\nRelated project evidence.\n`, 'utf8');
-  fs.writeFileSync(path.join(secret, 'modules', 'secret-rotation.md'), `---\nsourcePaths: [src/security/token-rotation.js]\n---\n# Secret rotation\n\nThis project is outside the explicit scope.\n`, 'utf8');
-
-  const service = new KnowledgeRetrievalService({ layout, registryStore: registry, projectStore: projects });
-  const snapshot = {
-    turns: [{
-      userEvents: [{ content: 'Implement the refresh credential lifecycle and preserve credential-audit behavior.' }],
-      assistantEvents: [{ content: 'A secondary hint mentions device sessions.' }],
-    }],
-  };
-  const evidence = {
-    commitSha: 'a'.repeat(40),
-    subject: 'update TokenRotator SessionEpoch /v2/device-sessions',
-    files: [{ status: 'M', path: 'src/security/token-rotation.js' }],
-  };
-  const first = await service.retrieveForCommit({ projectId: 'project-primary', conversationSnapshot: snapshot, commitEvidence: evidence, contextBudget: 64 * 1024 });
-  const second = await service.retrieveForCommit({ projectId: 'project-primary', conversationSnapshot: snapshot, commitEvidence: evidence, contextBudget: 64 * 1024 });
-  assert.strictEqual(first.manifestHash, second.manifestHash, 'deterministic inputs must produce a stable retrieval manifest hash');
-  assert.strictEqual(first.manifest.backend, 'missing', 'missing index must use the safe current-Markdown fallback');
-  assert(first.manifest.currentChunkCount >= 150, 'fixture must exercise a 100-200 document knowledge base');
-  assert.strictEqual(first.entries[0].path, 'modules/zzzz-token-rotation.md', 'exact changed-path metadata must outrank high-semantic distractors and filename order');
-  assert(first.entries[0].selectionSignals.some(signal => signal.startsWith('exact-source-path:')));
-  assert(first.entries.some(entry => entry.path === 'modules/symbol-only.md' && entry.selectionSignals.some(signal => signal.startsWith('structured:'))), 'symbol metadata must participate in recall/rerank');
-  assert(first.entries.some(entry => entry.path === 'modules/route-only.md' && entry.selectionSignals.some(signal => signal.startsWith('structured:'))), 'route metadata must participate in recall/rerank');
-  assert(first.entries.some(entry => entry.path === 'modules/tag-only.md' && entry.selectionSignals.some(signal => signal.startsWith('structured:'))), 'tag metadata must participate in recall/rerank');
-  assert(first.entries.some(entry => entry.projectId === 'project-related'), 'explicit related project scope should be eligible at lower weight');
-  assert(first.entries.every(entry => entry.projectId !== 'project-secret'), 'unrelated projects must never enter the candidate set');
-  assert(first.manifest.selected.every(item => item.documentHash && item.contentHash && item.selectionSignals.length));
-
-  const searched = await service.search({ projectId: 'project-primary', query: 'TokenRotator', limit: 5 });
-  assert.strictEqual(searched.results[0].entry_id, 'modules/zzzz-token-rotation.md');
-  assert(searched.results.every(result => result.scope_project_id !== 'project-secret'));
-  console.log('knowledge-retrieval-service-test PASS');
-})().catch(error => {
-  console.error(error.stack || error.message);
-  process.exitCode = 1;
-});
+const assert = require('assert');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { StorageLayout } = require('../lib/storage-layout');
+const { ProjectRegistryStore } = require('../lib/project-registry-store');
+const { ProjectStore } = require('../lib/project-store');
+const { KnowledgeRetrievalService } = require('../lib/knowledge-retrieval-service');
+
+(async () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'pk-retrieval-'));
+  const layout = new StorageLayout({ dataDir: path.join(root, 'data') });
+  const registry = new ProjectRegistryStore({ layout });
+  const projects = new ProjectStore({ layout });
+  await registry.initialize();
+
+  async function addProject(projectId, relatedProjectIds = []) {
+    const knowledgePath = path.join(root, 'knowledge', projectId);
+    fs.mkdirSync(path.join(knowledgePath, 'modules'), { recursive: true });
+    await projects.create(projectId, {
+      displayName: projectId,
+      storageName: projectId,
+      repoPath: path.join(root, 'repos', projectId),
+      knowledgePath,
+      relatedProjectIds,
+    }, { index: { dirty: true, generation: 9 } });
+    await registry.add(projectId, { displayNameSnapshot: projectId });
+    return knowledgePath;
+  }
+
+  const primary = await addProject('project-primary', ['project-related']);
+  const related = await addProject('project-related');
+  const secret = await addProject('project-secret');
+  for (let index = 0; index < 146; index += 1) {
+    fs.writeFileSync(path.join(primary, 'modules', `distractor-${String(index).padStart(3, '0')}.md`), `# Distractor ${index}\n\nRefresh credential lifecycle notes repeated for semantic distraction.\n`, 'utf8');
+  }
+  fs.writeFileSync(path.join(primary, 'modules', 'zzzz-token-rotation.md'), `---\ntags: [auth]\nsourcePaths: [src/security/token-rotation.js]\nroutes: [/api/tokens]\nsymbols: [TokenRotator]\n---\n# Rotation invariants\n\nThe rotation invariant is authoritative.\n`, 'utf8');
+  fs.writeFileSync(path.join(primary, 'modules', 'symbol-only.md'), `---\nsymbols: [SessionEpoch]\n---\n# Epoch contract\n\nEpoch invalidation behavior.\n`, 'utf8');
+  fs.writeFileSync(path.join(primary, 'modules', 'route-only.md'), `---\nroutes: [/v2/device-sessions]\n---\n# Device route\n\nDevice session route behavior.\n`, 'utf8');
+  fs.writeFileSync(path.join(primary, 'modules', 'tag-only.md'), `---\ntags: [credential-audit]\n---\n# Audit tag\n\nAudit behavior.\n`, 'utf8');
+  fs.writeFileSync(path.join(related, 'modules', 'related-rotation.md'), `---\nsourcePaths: [src/security/token-rotation.js]\n---\n# Related rotation\n\nRelated project evidence.\n`, 'utf8');
+  fs.writeFileSync(path.join(secret, 'modules', 'secret-rotation.md'), `---\nsourcePaths: [src/security/token-rotation.js]\n---\n# Secret rotation\n\nThis project is outside the explicit scope.\n`, 'utf8');
+
+  const service = new KnowledgeRetrievalService({ layout, registryStore: registry, projectStore: projects });
+  const snapshot = {
+    turns: [{
+      userEvents: [{ content: 'Implement the refresh credential lifecycle and preserve credential-audit behavior.' }],
+      assistantEvents: [{ content: 'A secondary hint mentions device sessions.' }],
+    }],
+  };
+  const evidence = {
+    commitSha: 'a'.repeat(40),
+    subject: 'update TokenRotator SessionEpoch /v2/device-sessions',
+    files: [{ status: 'M', path: 'src/security/token-rotation.js' }],
+  };
+  const first = await service.retrieveForCommit({ projectId: 'project-primary', conversationSnapshot: snapshot, commitEvidence: evidence, contextBudget: 64 * 1024 });
+  const second = await service.retrieveForCommit({ projectId: 'project-primary', conversationSnapshot: snapshot, commitEvidence: evidence, contextBudget: 64 * 1024 });
+  assert.strictEqual(first.manifestHash, second.manifestHash, 'deterministic inputs must produce a stable retrieval manifest hash');
+  assert.strictEqual(first.manifest.backend, 'missing', 'missing index must use the safe current-Markdown fallback');
+  assert(first.manifest.currentChunkCount >= 150, 'fixture must exercise a 100-200 document knowledge base');
+  assert.strictEqual(first.entries[0].path, 'modules/zzzz-token-rotation.md', 'exact changed-path metadata must outrank high-semantic distractors and filename order');
+  assert(first.entries[0].selectionSignals.some(signal => signal.startsWith('exact-source-path:')));
+  assert(first.entries.some(entry => entry.path === 'modules/symbol-only.md' && entry.selectionSignals.some(signal => signal.startsWith('structured:'))), 'symbol metadata must participate in recall/rerank');
+  assert(first.entries.some(entry => entry.path === 'modules/route-only.md' && entry.selectionSignals.some(signal => signal.startsWith('structured:'))), 'route metadata must participate in recall/rerank');
+  assert(first.entries.some(entry => entry.path === 'modules/tag-only.md' && entry.selectionSignals.some(signal => signal.startsWith('structured:'))), 'tag metadata must participate in recall/rerank');
+  assert(first.entries.some(entry => entry.projectId === 'project-related'), 'explicit related project scope should be eligible at lower weight');
+  assert(first.entries.every(entry => entry.projectId !== 'project-secret'), 'unrelated projects must never enter the candidate set');
+  assert(first.manifest.selected.every(item => item.documentHash && item.contentHash && item.selectionSignals.length));
+
+  const searched = await service.search({ projectId: 'project-primary', query: 'TokenRotator', limit: 5 });
+  assert.strictEqual(searched.results[0].entry_id, 'modules/zzzz-token-rotation.md');
+  assert(searched.results.every(result => result.scope_project_id !== 'project-secret'));
+  console.log('knowledge-retrieval-service-test PASS');
+})().catch(error => {
+  console.error(error.stack || error.message);
+  process.exitCode = 1;
+});

package/_site/_test/knowledge-storage-startup-test.js

@@ -1,52 +1,52 @@
-const assert = require('assert');
-const fs = require('fs');
-const os = require('os');
-const path = require('path');
-const { StorageLayout } = require('../lib/storage-layout');
-const { SettingsStore } = require('../lib/settings-store');
-const { ProjectRegistryStore } = require('../lib/project-registry-store');
-const { KnowledgeDatabase } = require('../lib/knowledge-db');
-const { EMBEDDING_DIMENSIONS } = require('../lib/knowledge-schema');
-const { spawnServer } = require('./helpers/spawn-server');
-
-const ROOT = path.resolve(__dirname, '..', '..');
-const PORT = 7931;
-const BASE_URL = `http://127.0.0.1:${PORT}`;
-
-async function get(route) {
-  const response = await fetch(`${BASE_URL}${route}`);
-  return { response, body: await response.json() };
-}
-
-(async () => {
-  const dataDir = fs.mkdtempSync(path.join(os.tmpdir(), 'knowledge-storage-startup-v2-'));
-  const layout = new StorageLayout({ dataDir });
-  const configuredRoot = path.join(dataDir, 'selected-knowledge-root');
-  const settings = new SettingsStore({ layout });
-  await settings.initialize({ knowledge: { rootPath: configuredRoot } });
-  await new ProjectRegistryStore({ layout }).initialize();
-  const internalIndex = layout.getIndexPath();
-  const database = new KnowledgeDatabase({ dbPath: internalIndex });
-  const vector = new Array(EMBEDDING_DIMENSIONS).fill(0);
-  vector[4] = 1;
-  await database.replaceEntry('project:legacy', 'GOAL.md', [{ chunkOrder: 0, title: 'Legacy', chunkText: 'Fixed internal derived row.', vector }]);
-  await database.close();
-  const spawned = spawnServer({ root: ROOT, port: PORT, dataDir, tag: 'knowledge-storage-startup', extraEnv: { KB_EMBEDDING_FAKE: '1' } });
-  try {
-    let health;
-    for (let attempt = 0; attempt < 100; attempt += 1) {
-      try { health = await get('/api/health'); if (health.response.ok) break; } catch {}
-      await new Promise(resolve => setTimeout(resolve, 100));
-    }
-    assert(health && health.response.ok, 'server did not start');
-    const publicSettings = await get('/api/settings');
-    assert.strictEqual(publicSettings.body.settings.knowledge.rootPath, path.resolve(configuredRoot));
-    const maintenance = await get('/api/knowledge/maintenance');
-    assert.strictEqual(maintenance.body.indexPath, internalIndex);
-    assert(fs.existsSync(internalIndex), 'the derived index must remain under the internal data directory');
-    assert(!fs.existsSync(path.join(configuredRoot, '.project-knowledge')), 'the user knowledge root must not receive internal runtime data');
-    console.log('knowledge-storage-startup-test: PASS');
-  } finally {
-    spawned.child.kill();
-  }
-})().catch(error => { console.error(error); process.exitCode = 1; });
+const assert = require('assert');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { StorageLayout } = require('../lib/storage-layout');
+const { SettingsStore } = require('../lib/settings-store');
+const { ProjectRegistryStore } = require('../lib/project-registry-store');
+const { KnowledgeDatabase } = require('../lib/knowledge-db');
+const { EMBEDDING_DIMENSIONS } = require('../lib/knowledge-schema');
+const { spawnServer } = require('./helpers/spawn-server');
+
+const ROOT = path.resolve(__dirname, '..', '..');
+const PORT = 7931;
+const BASE_URL = `http://127.0.0.1:${PORT}`;
+
+async function get(route) {
+  const response = await fetch(`${BASE_URL}${route}`);
+  return { response, body: await response.json() };
+}
+
+(async () => {
+  const dataDir = fs.mkdtempSync(path.join(os.tmpdir(), 'knowledge-storage-startup-v2-'));
+  const layout = new StorageLayout({ dataDir });
+  const configuredRoot = path.join(dataDir, 'selected-knowledge-root');
+  const settings = new SettingsStore({ layout });
+  await settings.initialize({ knowledge: { rootPath: configuredRoot } });
+  await new ProjectRegistryStore({ layout }).initialize();
+  const internalIndex = layout.getIndexPath();
+  const database = new KnowledgeDatabase({ dbPath: internalIndex });
+  const vector = new Array(EMBEDDING_DIMENSIONS).fill(0);
+  vector[4] = 1;
+  await database.replaceEntry('project:legacy', 'GOAL.md', [{ chunkOrder: 0, title: 'Legacy', chunkText: 'Fixed internal derived row.', vector }]);
+  await database.close();
+  const spawned = spawnServer({ root: ROOT, port: PORT, dataDir, tag: 'knowledge-storage-startup', extraEnv: { KB_EMBEDDING_FAKE: '1' } });
+  try {
+    let health;
+    for (let attempt = 0; attempt < 100; attempt += 1) {
+      try { health = await get('/api/health'); if (health.response.ok) break; } catch {}
+      await new Promise(resolve => setTimeout(resolve, 100));
+    }
+    assert(health && health.response.ok, 'server did not start');
+    const publicSettings = await get('/api/settings');
+    assert.strictEqual(publicSettings.body.settings.knowledge.rootPath, path.resolve(configuredRoot));
+    const maintenance = await get('/api/knowledge/maintenance');
+    assert.strictEqual(maintenance.body.indexPath, internalIndex);
+    assert(fs.existsSync(internalIndex), 'the derived index must remain under the internal data directory');
+    assert(!fs.existsSync(path.join(configuredRoot, '.project-knowledge')), 'the user knowledge root must not receive internal runtime data');
+    console.log('knowledge-storage-startup-test: PASS');
+  } finally {
+    spawned.child.kill();
+  }
+})().catch(error => { console.error(error); process.exitCode = 1; });

package/_site/_test/knowledge-store-logs-supervision-test.js

@@ -1,89 +1,89 @@
-const assert = require('assert');
-const fs = require('fs');
-const os = require('os');
-const path = require('path');
-const { spawnServer } = require('./helpers/spawn-server');
-const { makeRepo } = require('./fixtures/make-git-repos');
-
-const ROOT = path.resolve(__dirname, '..', '..');
-const PORT = Number(process.env.KB_TASK_012_013_TEST_PORT || 7814);
-const BASE_URL = `http://127.0.0.1:${PORT}`;
-const DATA_DIR = fs.mkdtempSync(path.join(os.tmpdir(), `kb-store-logs-v2-${process.pid}-`));
-
-async function waitForServer() {
-  for (let attempt = 0; attempt < 100; attempt += 1) {
-    try { if ((await fetch(`${BASE_URL}/api/health`)).ok) return; } catch {}
-    await new Promise(resolve => setTimeout(resolve, 100));
-  }
-  throw new Error('server did not start');
-}
-
-async function json(method, route, body) {
-  const response = await fetch(`${BASE_URL}${route}`, {
-    method,
-    headers: body ? { 'Content-Type': 'application/json' } : undefined,
-    body: body ? JSON.stringify(body) : undefined,
-  });
-  const text = await response.text();
-  return { response, body: text ? JSON.parse(text) : {} };
-}
-
-(async () => {
-  const repoOne = makeRepo({ kind: 'multi-commit' });
-  const repoTwo = makeRepo({ kind: 'one-commit' });
-  const spawned = spawnServer({ root: ROOT, port: PORT, dataDir: DATA_DIR, tag: 'knowledge-store-logs-v2', extraEnv: { KB_EMBEDDING_FAKE: '1' } });
-  let output = '';
-  spawned.child.stdout.on('data', chunk => { output += chunk; });
-  spawned.child.stderr.on('data', chunk => { output += chunk; });
-  try {
-    await waitForServer();
-    const rootOne = path.join(DATA_DIR, 'knowledge-one');
-    let result = await json('PATCH', '/api/settings', { knowledge: { rootPath: rootOne } });
-    assert(result.response.ok, JSON.stringify(result.body));
-    result = await json('POST', '/api/projects/import', { projectId: 'store-project-one', localPath: repoOne.path, displayName: 'Store one' });
-    assert.strictEqual(result.response.status, 201, JSON.stringify(result.body));
-    const fixedPath = result.body.config.knowledgePath;
-    assert(path.resolve(fixedPath).startsWith(`${path.resolve(rootOne)}${path.sep}`));
-    assert.deepStrictEqual(fs.readdirSync(fixedPath), [], 'import must not generate TODO or initialization knowledge');
-
-    const rootTwo = path.join(DATA_DIR, 'knowledge-two');
-    result = await json('PATCH', '/api/settings', { knowledge: { rootPath: rootTwo } });
-    assert(result.response.ok);
-    result = await json('POST', '/api/projects/import', { projectId: 'store-project-two', localPath: repoTwo.path, displayName: 'Store two' });
-    assert.strictEqual(result.response.status, 201, JSON.stringify(result.body));
-    assert(path.resolve(result.body.config.knowledgePath).startsWith(`${path.resolve(rootTwo)}${path.sep}`));
-    result = await json('GET', '/api/projects/store-project-one');
-    assert.strictEqual(result.body.project.config.knowledgePath, fixedPath, 'global root changes affect only future imports');
-
-    result = await json('PATCH', '/api/settings', { logging: { levels: ['trace', 'debug', 'info', 'warn', 'error', 'fatal'] } });
-    assert.strictEqual(result.response.status, 409, 'logging capture policy must not be a mutable product setting');
-    const publicSettings = await json('GET', '/api/settings');
-    assert.strictEqual(Object.prototype.hasOwnProperty.call(publicSettings.body.settings.logging, 'retentionDays'), false);
-    result = await json('PATCH', '/api/settings', { logging: { retentionDays: 0 } });
-    assert.strictEqual(result.response.status, 409, 'automatic retention settings must be removed');
-    result = await json('PATCH', '/api/settings', { logging: { rootPath: path.join(DATA_DIR, 'external-logs') } });
-    assert.strictEqual(result.response.status, 409, 'logging root must not be configurable');
-    assert(!fs.existsSync(path.join(DATA_DIR, 'external-logs')));
-
-    result = await json('GET', '/api/logs?levels=info,error&pageSize=100');
-    assert(result.response.ok, JSON.stringify(result.body));
-    assert(result.body.entries.some(log => log.event === 'project.import.completed' && log.projectId === 'store-project-one'));
-    assert(result.body.health && ['ok', 'degraded'].includes(result.body.health.status));
-    const state = await json('GET', '/api/state');
-    const one = state.body.projects.find(project => project.projectId === 'store-project-one');
-    assert(one && one.state.trackingStartCommit, 'v2 state should expose the import tracking baseline');
-    assert.strictEqual(one.state.analysis.status, 'idle');
-    assert.strictEqual(one.state.hook.managedVersion, 2);
-
-    result = await json('POST', '/api/knowledge-store/migrate', { execute: false });
-    assert.strictEqual(result.response.status, 404, 'the old storage relocation API must remain removed');
-    console.log('TASK-012/TASK-013 knowledge store, logs, supervision test passed');
-  } catch (error) {
-    if (output) process.stderr.write(output);
-    throw error;
-  } finally {
-    spawned.child.kill();
-    repoOne.cleanup();
-    repoTwo.cleanup();
-  }
-})().catch(error => { console.error(error); process.exitCode = 1; });
+const assert = require('assert');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { spawnServer } = require('./helpers/spawn-server');
+const { makeRepo } = require('./fixtures/make-git-repos');
+
+const ROOT = path.resolve(__dirname, '..', '..');
+const PORT = Number(process.env.KB_TASK_012_013_TEST_PORT || 7814);
+const BASE_URL = `http://127.0.0.1:${PORT}`;
+const DATA_DIR = fs.mkdtempSync(path.join(os.tmpdir(), `kb-store-logs-v2-${process.pid}-`));
+
+async function waitForServer() {
+  for (let attempt = 0; attempt < 100; attempt += 1) {
+    try { if ((await fetch(`${BASE_URL}/api/health`)).ok) return; } catch {}
+    await new Promise(resolve => setTimeout(resolve, 100));
+  }
+  throw new Error('server did not start');
+}
+
+async function json(method, route, body) {
+  const response = await fetch(`${BASE_URL}${route}`, {
+    method,
+    headers: body ? { 'Content-Type': 'application/json' } : undefined,
+    body: body ? JSON.stringify(body) : undefined,
+  });
+  const text = await response.text();
+  return { response, body: text ? JSON.parse(text) : {} };
+}
+
+(async () => {
+  const repoOne = makeRepo({ kind: 'multi-commit' });
+  const repoTwo = makeRepo({ kind: 'one-commit' });
+  const spawned = spawnServer({ root: ROOT, port: PORT, dataDir: DATA_DIR, tag: 'knowledge-store-logs-v2', extraEnv: { KB_EMBEDDING_FAKE: '1' } });
+  let output = '';
+  spawned.child.stdout.on('data', chunk => { output += chunk; });
+  spawned.child.stderr.on('data', chunk => { output += chunk; });
+  try {
+    await waitForServer();
+    const rootOne = path.join(DATA_DIR, 'knowledge-one');
+    let result = await json('PATCH', '/api/settings', { knowledge: { rootPath: rootOne } });
+    assert(result.response.ok, JSON.stringify(result.body));
+    result = await json('POST', '/api/projects/import', { projectId: 'store-project-one', localPath: repoOne.path, displayName: 'Store one' });
+    assert.strictEqual(result.response.status, 201, JSON.stringify(result.body));
+    const fixedPath = result.body.config.knowledgePath;
+    assert(path.resolve(fixedPath).startsWith(`${path.resolve(rootOne)}${path.sep}`));
+    assert.deepStrictEqual(fs.readdirSync(fixedPath), [], 'import must not generate TODO or initialization knowledge');
+
+    const rootTwo = path.join(DATA_DIR, 'knowledge-two');
+    result = await json('PATCH', '/api/settings', { knowledge: { rootPath: rootTwo } });
+    assert(result.response.ok);
+    result = await json('POST', '/api/projects/import', { projectId: 'store-project-two', localPath: repoTwo.path, displayName: 'Store two' });
+    assert.strictEqual(result.response.status, 201, JSON.stringify(result.body));
+    assert(path.resolve(result.body.config.knowledgePath).startsWith(`${path.resolve(rootTwo)}${path.sep}`));
+    result = await json('GET', '/api/projects/store-project-one');
+    assert.strictEqual(result.body.project.config.knowledgePath, fixedPath, 'global root changes affect only future imports');
+
+    result = await json('PATCH', '/api/settings', { logging: { levels: ['trace', 'debug', 'info', 'warn', 'error', 'fatal'] } });
+    assert.strictEqual(result.response.status, 409, 'logging capture policy must not be a mutable product setting');
+    const publicSettings = await json('GET', '/api/settings');
+    assert.strictEqual(Object.prototype.hasOwnProperty.call(publicSettings.body.settings.logging, 'retentionDays'), false);
+    result = await json('PATCH', '/api/settings', { logging: { retentionDays: 0 } });
+    assert.strictEqual(result.response.status, 409, 'automatic retention settings must be removed');
+    result = await json('PATCH', '/api/settings', { logging: { rootPath: path.join(DATA_DIR, 'external-logs') } });
+    assert.strictEqual(result.response.status, 409, 'logging root must not be configurable');
+    assert(!fs.existsSync(path.join(DATA_DIR, 'external-logs')));
+
+    result = await json('GET', '/api/logs?levels=info,error&pageSize=100');
+    assert(result.response.ok, JSON.stringify(result.body));
+    assert(result.body.entries.some(log => log.event === 'project.import.completed' && log.projectId === 'store-project-one'));
+    assert(result.body.health && ['ok', 'degraded'].includes(result.body.health.status));
+    const state = await json('GET', '/api/state');
+    const one = state.body.projects.find(project => project.projectId === 'store-project-one');
+    assert(one && one.state.trackingStartCommit, 'v2 state should expose the import tracking baseline');
+    assert.strictEqual(one.state.analysis.status, 'idle');
+    assert.strictEqual(one.state.hook.managedVersion, 2);
+
+    result = await json('POST', '/api/knowledge-store/migrate', { execute: false });
+    assert.strictEqual(result.response.status, 404, 'the old storage relocation API must remain removed');
+    console.log('TASK-012/TASK-013 knowledge store, logs, supervision test passed');
+  } catch (error) {
+    if (output) process.stderr.write(output);
+    throw error;
+  } finally {
+    spawned.child.kill();
+    repoOne.cleanup();
+    repoTwo.cleanup();
+  }
+})().catch(error => { console.error(error); process.exitCode = 1; });