@sanqianx/project-knowledge 4.7.0 → 5.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (196) hide show
  1. package/.agents/plugins/marketplace.json +17 -17
  2. package/.claude-plugin/marketplace.json +1 -1
  3. package/CHANGELOG.md +836 -799
  4. package/README.md +58 -41
  5. package/_modules/knowledge-engine/README.md +91 -0
  6. package/_modules/knowledge-engine/package.json +38 -0
  7. package/_modules/knowledge-engine/src/analysis-contract.js +25 -0
  8. package/_modules/knowledge-engine/src/analysis-worker.js +54 -0
  9. package/_modules/knowledge-engine/src/bin.js +52 -0
  10. package/_modules/knowledge-engine/src/bridge-client.js +24 -0
  11. package/_modules/knowledge-engine/src/coordinator.js +263 -0
  12. package/_modules/knowledge-engine/src/headless-analyzer.js +75 -0
  13. package/_modules/knowledge-engine/src/memories.js +85 -0
  14. package/_modules/knowledge-engine/src/retrieval.js +116 -0
  15. package/_modules/knowledge-engine/src/runtime/README.md +7 -0
  16. package/_modules/knowledge-engine/src/runtime/atomic-file.js +204 -0
  17. package/_modules/knowledge-engine/src/runtime/automation-config.js +140 -0
  18. package/_modules/knowledge-engine/src/runtime/commit-conversation-binder.js +249 -0
  19. package/_modules/knowledge-engine/src/runtime/commit-processing-ledger.js +26 -0
  20. package/_modules/knowledge-engine/src/runtime/commit-prompt.js +202 -0
  21. package/_modules/knowledge-engine/src/runtime/commit-reconciler.js +432 -0
  22. package/_modules/knowledge-engine/src/runtime/content-hash.js +4 -0
  23. package/_modules/knowledge-engine/src/runtime/contracts.js +279 -0
  24. package/_modules/knowledge-engine/src/runtime/conversation-exclusions.js +204 -0
  25. package/_modules/knowledge-engine/src/runtime/conversation-store.js +387 -0
  26. package/_modules/knowledge-engine/src/runtime/evidence-bundle.js +228 -0
  27. package/_modules/knowledge-engine/src/runtime/git-runner.js +62 -0
  28. package/_modules/knowledge-engine/src/runtime/knowledge-promotion.js +444 -0
  29. package/_modules/knowledge-engine/src/runtime/knowledge-retrieval-service.js +402 -0
  30. package/_modules/knowledge-engine/src/runtime/layout.js +44 -0
  31. package/_modules/knowledge-engine/src/runtime/markdown-knowledge-indexer.js +230 -0
  32. package/_modules/knowledge-engine/src/runtime/scanner.js +298 -0
  33. package/_modules/knowledge-engine/src/server.js +154 -0
  34. package/_modules/knowledge-engine/src/store.js +236 -0
  35. package/_modules/knowledge-engine/ui/app.css +172 -0
  36. package/_modules/knowledge-engine/ui/app.js +297 -0
  37. package/_modules/knowledge-engine/ui/index.html +95 -0
  38. package/_site/README.md +30 -30
  39. package/_site/_test/ai-profile-resolver-test.js +137 -137
  40. package/_site/_test/automation-queue-test.js +14 -14
  41. package/_site/_test/automation-ui-test.js +40 -40
  42. package/_site/_test/background-task-registry-test.js +43 -43
  43. package/_site/_test/baseline-schema-test.js +91 -91
  44. package/_site/_test/chat-claudecodeui-match-test.js +92 -92
  45. package/_site/_test/claude-executable-discovery-test.js +62 -62
  46. package/_site/_test/claude-workbench-test.js +170 -170
  47. package/_site/_test/codex-conversation-projection-test.js +2 -1
  48. package/_site/_test/commit-conversation-binding-test.js +95 -95
  49. package/_site/_test/commit-evidence-test.js +110 -110
  50. package/_site/_test/conversation-api-test.js +109 -109
  51. package/_site/_test/conversation-store-test.js +136 -136
  52. package/_site/_test/desktop-browser-compat-test.js +28 -28
  53. package/_site/_test/desktop-hook-runtime-regression-test.js +204 -204
  54. package/_site/_test/explicit-commit-processor-test.js +37 -37
  55. package/_site/_test/fixtures/make-git-repos.js +12 -1
  56. package/_site/_test/folder-picker-output-test.js +19 -19
  57. package/_site/_test/fresh-hook-reimport-test.js +53 -0
  58. package/_site/_test/fresh-product-data-test.js +42 -0
  59. package/_site/_test/full-integration-e2e-test.js +165 -165
  60. package/_site/_test/git-validation-test.js +2 -2
  61. package/_site/_test/hook-runtime-endpoint-test.js +88 -88
  62. package/_site/_test/hook-status-repair-api-test.js +152 -152
  63. package/_site/_test/hook-trigger-test.js +85 -85
  64. package/_site/_test/import-preflight-api-test.js +234 -233
  65. package/_site/_test/index-writer-concurrency-test.js +135 -135
  66. package/_site/_test/integration-adapters-test.js +171 -171
  67. package/_site/_test/integration-surface-coverage-test.js +164 -164
  68. package/_site/_test/knowledge-language-control-test.js +170 -170
  69. package/_site/_test/knowledge-promotion-recovery-test.js +260 -260
  70. package/_site/_test/knowledge-query-test.js +54 -54
  71. package/_site/_test/knowledge-retrieval-service-test.js +77 -77
  72. package/_site/_test/knowledge-storage-startup-test.js +52 -52
  73. package/_site/_test/knowledge-store-logs-supervision-test.js +89 -89
  74. package/_site/_test/logging-api-test.js +89 -89
  75. package/_site/_test/logging-sse-no-gap-test.js +88 -88
  76. package/_site/_test/logging-ui-test.js +106 -104
  77. package/_site/_test/markdown-delta-overlay-test.js +85 -85
  78. package/_site/_test/markdown-maintenance-api-test.js +75 -75
  79. package/_site/_test/mcp-server-test.js +149 -149
  80. package/_site/_test/module-artifact-integrity-test.js +27 -0
  81. package/_site/_test/module-boundary-test.js +30 -0
  82. package/_site/_test/module-bridge-eventbridge-test.js +7 -0
  83. package/_site/_test/module-model-configuration-test.js +44 -0
  84. package/_site/_test/module-process-lifecycle-test.js +24 -0
  85. package/_site/_test/module-stream-proxy-test.js +34 -0
  86. package/_site/_test/non-release-ci-test.js +34 -34
  87. package/_site/_test/offline-boundary-isolation-test.js +32 -32
  88. package/_site/_test/packaged-ui-smoke-test.js +11 -9
  89. package/_site/_test/path-consistency-test.js +151 -151
  90. package/_site/_test/pending-sweep-test.js +9 -9
  91. package/_site/_test/post-commit-automation-test.js +87 -87
  92. package/_site/_test/product-diagnostics-ui-test.js +75 -0
  93. package/_site/_test/product-import-ui-test.js +92 -0
  94. package/_site/_test/project-delete-recovery-test.js +64 -64
  95. package/_site/_test/project-goal-editor-test.js +144 -144
  96. package/_site/_test/project-lifecycle-transaction-test.js +106 -106
  97. package/_site/_test/prompt-settings-test.js +115 -115
  98. package/_site/_test/protected-architecture-gate-test.js +122 -122
  99. package/_site/_test/refactor-characterization-test.js +36 -36
  100. package/_site/_test/release-version-sync-test.js +1 -1
  101. package/_site/_test/requirement-recorder-test.js +173 -173
  102. package/_site/_test/run-all-tests.js +159 -156
  103. package/_site/_test/shared-contracts-test.js +58 -58
  104. package/_site/_test/startup-analysis-disabled-test.js +10 -10
  105. package/_site/_test/storage-foundation-test.js +78 -78
  106. package/_site/_test/structured-logger-test.js +101 -101
  107. package/_site/_test/tracking-start-test.js +109 -108
  108. package/_site/_test/workbench-permission-test.js +117 -117
  109. package/_site/_test/workspace-ui-contract-test.js +28 -43
  110. package/_site/lib/ai-profile-resolver.js +78 -78
  111. package/_site/lib/ai-workspace.js +101 -101
  112. package/_site/lib/automation-config.js +140 -140
  113. package/_site/lib/bridge-adapter.js +1 -0
  114. package/_site/lib/bridge-consumer-service.js +402 -402
  115. package/_site/lib/claude-cli-runner.js +1510 -1510
  116. package/_site/lib/commit-conversation-binder.js +234 -234
  117. package/_site/lib/commit-processing-ledger.js +27 -27
  118. package/_site/lib/commit-prompt.js +202 -202
  119. package/_site/lib/commit-reconciler.js +406 -406
  120. package/_site/lib/contracts.js +284 -279
  121. package/_site/lib/conversation-query-service.js +144 -144
  122. package/_site/lib/conversation-store.js +385 -385
  123. package/_site/lib/data-dir.js +6 -74
  124. package/_site/lib/engine-connection.js +67 -0
  125. package/_site/lib/evidence-bundle.js +228 -228
  126. package/_site/lib/folder-picker-output.js +21 -21
  127. package/_site/lib/git-runner.js +62 -62
  128. package/_site/lib/github-team-store.js +1172 -1172
  129. package/_site/lib/hook-manager.js +203 -202
  130. package/_site/lib/index-service.js +173 -173
  131. package/_site/lib/integration-installer.js +908 -907
  132. package/_site/lib/kb-framework.js +176 -176
  133. package/_site/lib/kb-validator.js +124 -124
  134. package/_site/lib/knowledge-promotion.js +435 -435
  135. package/_site/lib/knowledge-retrieval-service.js +401 -401
  136. package/_site/lib/knowledge-tool-runtime.js +359 -359
  137. package/_site/lib/llm-client.js +161 -161
  138. package/_site/lib/markdown-knowledge-indexer.js +230 -230
  139. package/_site/lib/module-bridge.js +191 -36
  140. package/_site/lib/post-commit-automation.js +87 -87
  141. package/_site/lib/product-data.js +24 -0
  142. package/_site/lib/project-lifecycle-service.js +535 -497
  143. package/_site/lib/project-store.js +268 -262
  144. package/_site/lib/requirement-recorder.js +278 -278
  145. package/_site/lib/runtime-endpoint.js +155 -155
  146. package/_site/lib/scanner.js +298 -298
  147. package/_site/lib/server-app.js +1579 -1520
  148. package/_site/lib/settings-store.js +133 -113
  149. package/_site/lib/storage-layout.js +162 -162
  150. package/_site/lib/structured-logger.js +574 -574
  151. package/_site/scripts/folder-picker.ps1 +156 -156
  152. package/_site/scripts/hook-trigger.js +157 -156
  153. package/_site/scripts/install-module-candidates.js +69 -0
  154. package/_site/scripts/pack-module-candidates.js +72 -0
  155. package/_site/scripts/sync-release-version.js +2 -2
  156. package/_site/scripts/vendor-modules.js +47 -0
  157. package/_site/scripts/verify-module-runtime.js +45 -0
  158. package/_site/scripts/verify-product-runtime.js +34 -0
  159. package/bin/project-knowledge-mcp.js +194 -194
  160. package/docs/README.zh-CN.md +42 -29
  161. package/docs/fresh-v5-start.md +28 -0
  162. package/docs/project-registry-schema.md +22 -22
  163. package/docs/testing-strategy.md +33 -33
  164. package/module-runtime-manifest.json +220 -0
  165. package/package.json +14 -9
  166. package/plugins/project-knowledge/.claude-plugin/plugin.json +1 -1
  167. package/plugins/project-knowledge/.codex-plugin/plugin.json +1 -1
  168. package/plugins/project-knowledge/.mcp.json +1 -1
  169. package/plugins/project-knowledge/opencode/project-knowledge.md +3 -3
  170. package/plugins/project-knowledge/skills/project-knowledge/SKILL.md +28 -28
  171. package/templates/project-readme.md +34 -34
  172. package/ui/favicon.svg +38 -38
  173. package/ui/index.html +52 -149
  174. package/ui/product.css +9 -0
  175. package/ui/product.js +412 -0
  176. package/vendor-manifest.json +45 -0
  177. package/_site/_test/data-dir-migration-test.js +0 -77
  178. package/_site/_test/import-ui-flow-test.js +0 -171
  179. package/_site/_test/knowledge-migration-test.js +0 -75
  180. package/_site/_test/legacy-forward-compat-test.js +0 -257
  181. package/_site/_test/legacy-project-upgrade-e2e-test.js +0 -363
  182. package/_site/_test/p0-data-migration-characterization-test.js +0 -37
  183. package/_site/_test/p0-e2e-gate-test.js +0 -347
  184. package/_site/_test/project-control-panel-task14-test.js +0 -63
  185. package/_site/_test/project-layout-v2-migration-test.js +0 -127
  186. package/_site/_test/server-runtime-migration-safety-test.js +0 -27
  187. package/_site/_test/task15-20-ui-flow-test.js +0 -148
  188. package/_site/_test/ui-i18n-toggle-test.js +0 -114
  189. package/_site/_test/ui-smoke-test.js +0 -73
  190. package/_site/_test/v4122-upgrade-data-contract-test.js +0 -56
  191. package/_site/lib/data-state-classifier.js +0 -40
  192. package/_site/lib/legacy-data-manifest.js +0 -26
  193. package/_site/lib/migration-service.js +0 -442
  194. package/ui/app.css +0 -58
  195. package/ui/app.js +0 -607
  196. package/ui/i18n.js +0 -146
@@ -1,110 +1,110 @@
1
- // Run: node _site/_test/commit-evidence-test.js
2
-
3
- const assert = require('assert');
4
- const fs = require('fs');
5
- const os = require('os');
6
- const path = require('path');
7
- const { spawnSync } = require('child_process');
8
- const { CommitScanner, TrustedGitReader, EMPTY_TREE_SHA, sha256 } = require('../lib/scanner');
9
-
10
- const temp = fs.mkdtempSync(path.join(os.tmpdir(), `kb-commit-evidence-${process.pid}-`));
11
- const repo = path.join(temp, 'repo');
12
-
13
- function git(args) {
14
- const result = spawnSync('git', ['-C', repo, ...args], { encoding: 'utf8', windowsHide: true, maxBuffer: 16 * 1024 * 1024 });
15
- if (result.status !== 0) throw new Error(result.stderr || `git ${args.join(' ')} failed`);
16
- return String(result.stdout || '').trim();
17
- }
18
-
19
- function gitRaw(args) {
20
- const result = spawnSync('git', ['-C', repo, ...args], { encoding: 'utf8', windowsHide: true, maxBuffer: 16 * 1024 * 1024 });
21
- if (result.status !== 0) throw new Error(result.stderr || `git ${args.join(' ')} failed`);
22
- return String(result.stdout || '');
23
- }
24
-
25
- function commitFile(name, content, message) {
26
- fs.mkdirSync(path.dirname(path.join(repo, name)), { recursive: true });
27
- fs.writeFileSync(path.join(repo, name), content);
28
- git(['add', name]);
29
- git(['commit', '-m', message]);
30
- return git(['rev-parse', 'HEAD']);
31
- }
32
-
33
- (async () => {
34
- fs.mkdirSync(repo, { recursive: true });
35
- git(['init', '--initial-branch=main']);
36
- git(['config', 'user.email', 'evidence@example.test']);
37
- git(['config', 'user.name', 'Evidence Test']);
38
- const rootCommit = commitFile('src/root.txt', 'root\n', 'root commit');
39
- const binaryCommit = commitFile('assets/sample.bin', Buffer.from([0, 1, 2, 3, 255]), 'add binary');
40
-
41
- git(['checkout', '-b', 'feature']);
42
- const featureCommit = commitFile('src/feature.txt', 'feature\n', 'feature side');
43
- git(['checkout', 'main']);
44
- const mainCommit = commitFile('src/main.txt', 'main\n', 'main side');
45
- git(['merge', '--no-ff', 'feature', '-m', 'merge feature']);
46
- const mergeCommit = git(['rev-parse', 'HEAD']);
47
-
48
- const scanner = new CommitScanner({ batchSize: 2 });
49
- const firstBatch = await scanner.scan({ repoPath: repo }, {
50
- trackingMode: 'normal', trackingStartCommit: rootCommit, lastAnalyzedCommit: null,
51
- });
52
- assert.strictEqual(firstBatch.status, 'ok');
53
- assert.strictEqual(firstBatch.commits.length, 2, 'batch limit should return a bounded first page');
54
- assert(firstBatch.continuation && firstBatch.continuation.remaining === 2, 'continuation must expose remaining work');
55
- const all = await new TrustedGitReader().listCommits(repo, rootCommit, mergeCommit);
56
- assert.deepStrictEqual(all, [binaryCommit, mainCommit, featureCommit, mergeCommit], 'reverse topo order must include both branch commits and the merge commit');
57
-
58
- const rootEvidence = await scanner.collectEvidence({ repoPath: repo }, rootCommit, { branch: 'main' });
59
- assert.strictEqual(rootEvidence.patchMode, 'root-empty-tree');
60
- assert.strictEqual(rootEvidence.patchBase, EMPTY_TREE_SHA);
61
- assert(rootEvidence.patch.includes('src/root.txt'), 'root evidence must contain a real empty-tree patch');
62
-
63
- const binaryEvidence = await scanner.collectEvidence({ repoPath: repo }, binaryCommit, { branch: 'main' });
64
- assert(binaryEvidence.files.some(file => file.path === 'assets/sample.bin' && file.binary), 'name-status manifest should identify binary files');
65
- assert(binaryEvidence.patch.includes('GIT binary patch'), 'binary patch evidence should be preserved');
66
-
67
- const mergeEvidence = await scanner.collectEvidence({ repoPath: repo }, mergeCommit, { branch: 'main' });
68
- assert.strictEqual(mergeEvidence.parents.length, 2, 'merge metadata should include every parent');
69
- assert.strictEqual(mergeEvidence.patchMode, 'merge-first-parent');
70
- assert.strictEqual(mergeEvidence.patchBase, mainCommit, 'merge patch must compare against the first parent');
71
- assert(mergeEvidence.patch.includes('src/feature.txt'), 'first-parent merge patch should show the introduced feature side');
72
-
73
- git(['mv', 'src/root.txt', 'src/renamed.txt']);
74
- git(['commit', '-m', 'rename root evidence']);
75
- const renameCommit = git(['rev-parse', 'HEAD']);
76
- const renameEvidence = await scanner.collectEvidence({ repoPath: repo }, renameCommit, { branch: 'main' });
77
- assert(renameEvidence.files.some(file => file.oldPath === 'src/root.txt' && file.path === 'src/renamed.txt'), 'rename evidence must retain old and new paths');
78
-
79
- const largeContent = Array.from({ length: 42000 }, (_, index) => `${String(index).padStart(6, '0')} ${'exact-evidence-'.repeat(5)}\n`).join('');
80
- const largeCommit = commitFile('src/large.txt', largeContent, 'large exact evidence');
81
- const evidenceRoot = path.join(temp, 'run', 'input', 'evidence');
82
- const largeReader = new TrustedGitReader({ maxPatchBytes: 2 * 1024 * 1024, maxChunkBytes: 128 * 1024 });
83
- const large = await largeReader.collectEvidence(repo, largeCommit, { branch: 'main', evidenceRoot });
84
- assert(large.patchBytes > 2 * 1024 * 1024, 'fixture must cross the production inline threshold');
85
- assert.strictEqual(large.patch, null, 'large patch should be referenced by exact chunks instead of prompt inline text');
86
- assert.strictEqual(large.patchChunked, true);
87
- assert.strictEqual(large.patchOmitted, false, 'exact chunk evidence must not be represented as omitted');
88
- assert(large.evidenceBundle.chunkCount > 1, 'large patch should be split into ordered chunks');
89
- const manifest = largeReader.verifyEvidence(large);
90
- assert.deepStrictEqual(manifest.chunks.map(chunk => chunk.sequence), manifest.chunks.map((_, index) => index + 1));
91
- assert(manifest.chunks.every(chunk => chunk.sha256.startsWith('sha256:') && chunk.bytes > 0 && chunk.sourcePaths.includes('src/large.txt')));
92
- const reconstructed = manifest.chunks.map(chunk => fs.readFileSync(path.join(evidenceRoot, ...chunk.path.split('/')))).join('');
93
- const exactGitPatch = gitRaw(['diff', '--no-ext-diff', '--binary', '--find-renames', '--unified=3', renameCommit, largeCommit]);
94
- assert.strictEqual(Buffer.byteLength(reconstructed), Buffer.byteLength(exactGitPatch));
95
- assert.strictEqual(sha256(reconstructed), large.patchHash, 'ordered chunks must exactly reconstruct the full Git diff hash');
96
-
97
- const corruptPath = path.join(evidenceRoot, ...manifest.chunks[0].path.split('/'));
98
- fs.appendFileSync(corruptPath, 'corrupt');
99
- assert.throws(() => largeReader.verifyEvidence(large), error => error.code === 'EVIDENCE_INTEGRITY_FAILED', 'corrupt chunks must fail with a typed evidence error');
100
-
101
- const missingRootReader = new TrustedGitReader({ maxPatchBytes: 8 });
102
- await assert.rejects(missingRootReader.collectEvidence(repo, mergeCommit, { branch: 'main' }), error => error.code === 'EVIDENCE_INTEGRITY_FAILED');
103
-
104
- console.log('commit-evidence-test PASS');
105
- })().catch(error => {
106
- console.error(error.stack || error.message);
107
- process.exitCode = 1;
108
- }).finally(() => {
109
- fs.rmSync(temp, { recursive: true, force: true });
110
- });
1
+ // Run: node _site/_test/commit-evidence-test.js
2
+
3
+ const assert = require('assert');
4
+ const fs = require('fs');
5
+ const os = require('os');
6
+ const path = require('path');
7
+ const { spawnSync } = require('child_process');
8
+ const { CommitScanner, TrustedGitReader, EMPTY_TREE_SHA, sha256 } = require('../lib/scanner');
9
+
10
+ const temp = fs.mkdtempSync(path.join(os.tmpdir(), `kb-commit-evidence-${process.pid}-`));
11
+ const repo = path.join(temp, 'repo');
12
+
13
+ function git(args) {
14
+ const result = spawnSync('git', ['-C', repo, ...args], { encoding: 'utf8', windowsHide: true, maxBuffer: 16 * 1024 * 1024 });
15
+ if (result.status !== 0) throw new Error(result.stderr || `git ${args.join(' ')} failed`);
16
+ return String(result.stdout || '').trim();
17
+ }
18
+
19
+ function gitRaw(args) {
20
+ const result = spawnSync('git', ['-C', repo, ...args], { encoding: 'utf8', windowsHide: true, maxBuffer: 16 * 1024 * 1024 });
21
+ if (result.status !== 0) throw new Error(result.stderr || `git ${args.join(' ')} failed`);
22
+ return String(result.stdout || '');
23
+ }
24
+
25
+ function commitFile(name, content, message) {
26
+ fs.mkdirSync(path.dirname(path.join(repo, name)), { recursive: true });
27
+ fs.writeFileSync(path.join(repo, name), content);
28
+ git(['add', name]);
29
+ git(['commit', '-m', message]);
30
+ return git(['rev-parse', 'HEAD']);
31
+ }
32
+
33
+ (async () => {
34
+ fs.mkdirSync(repo, { recursive: true });
35
+ git(['init', '--initial-branch=main']);
36
+ git(['config', 'user.email', 'evidence@example.test']);
37
+ git(['config', 'user.name', 'Evidence Test']);
38
+ const rootCommit = commitFile('src/root.txt', 'root\n', 'root commit');
39
+ const binaryCommit = commitFile('assets/sample.bin', Buffer.from([0, 1, 2, 3, 255]), 'add binary');
40
+
41
+ git(['checkout', '-b', 'feature']);
42
+ const featureCommit = commitFile('src/feature.txt', 'feature\n', 'feature side');
43
+ git(['checkout', 'main']);
44
+ const mainCommit = commitFile('src/main.txt', 'main\n', 'main side');
45
+ git(['merge', '--no-ff', 'feature', '-m', 'merge feature']);
46
+ const mergeCommit = git(['rev-parse', 'HEAD']);
47
+
48
+ const scanner = new CommitScanner({ batchSize: 2 });
49
+ const firstBatch = await scanner.scan({ repoPath: repo }, {
50
+ trackingMode: 'normal', trackingStartCommit: rootCommit, lastAnalyzedCommit: null,
51
+ });
52
+ assert.strictEqual(firstBatch.status, 'ok');
53
+ assert.strictEqual(firstBatch.commits.length, 2, 'batch limit should return a bounded first page');
54
+ assert(firstBatch.continuation && firstBatch.continuation.remaining === 2, 'continuation must expose remaining work');
55
+ const all = await new TrustedGitReader().listCommits(repo, rootCommit, mergeCommit);
56
+ assert.deepStrictEqual(all, [binaryCommit, mainCommit, featureCommit, mergeCommit], 'reverse topo order must include both branch commits and the merge commit');
57
+
58
+ const rootEvidence = await scanner.collectEvidence({ repoPath: repo }, rootCommit, { branch: 'main' });
59
+ assert.strictEqual(rootEvidence.patchMode, 'root-empty-tree');
60
+ assert.strictEqual(rootEvidence.patchBase, EMPTY_TREE_SHA);
61
+ assert(rootEvidence.patch.includes('src/root.txt'), 'root evidence must contain a real empty-tree patch');
62
+
63
+ const binaryEvidence = await scanner.collectEvidence({ repoPath: repo }, binaryCommit, { branch: 'main' });
64
+ assert(binaryEvidence.files.some(file => file.path === 'assets/sample.bin' && file.binary), 'name-status manifest should identify binary files');
65
+ assert(binaryEvidence.patch.includes('GIT binary patch'), 'binary patch evidence should be preserved');
66
+
67
+ const mergeEvidence = await scanner.collectEvidence({ repoPath: repo }, mergeCommit, { branch: 'main' });
68
+ assert.strictEqual(mergeEvidence.parents.length, 2, 'merge metadata should include every parent');
69
+ assert.strictEqual(mergeEvidence.patchMode, 'merge-first-parent');
70
+ assert.strictEqual(mergeEvidence.patchBase, mainCommit, 'merge patch must compare against the first parent');
71
+ assert(mergeEvidence.patch.includes('src/feature.txt'), 'first-parent merge patch should show the introduced feature side');
72
+
73
+ git(['mv', 'src/root.txt', 'src/renamed.txt']);
74
+ git(['commit', '-m', 'rename root evidence']);
75
+ const renameCommit = git(['rev-parse', 'HEAD']);
76
+ const renameEvidence = await scanner.collectEvidence({ repoPath: repo }, renameCommit, { branch: 'main' });
77
+ assert(renameEvidence.files.some(file => file.oldPath === 'src/root.txt' && file.path === 'src/renamed.txt'), 'rename evidence must retain old and new paths');
78
+
79
+ const largeContent = Array.from({ length: 42000 }, (_, index) => `${String(index).padStart(6, '0')} ${'exact-evidence-'.repeat(5)}\n`).join('');
80
+ const largeCommit = commitFile('src/large.txt', largeContent, 'large exact evidence');
81
+ const evidenceRoot = path.join(temp, 'run', 'input', 'evidence');
82
+ const largeReader = new TrustedGitReader({ maxPatchBytes: 2 * 1024 * 1024, maxChunkBytes: 128 * 1024 });
83
+ const large = await largeReader.collectEvidence(repo, largeCommit, { branch: 'main', evidenceRoot });
84
+ assert(large.patchBytes > 2 * 1024 * 1024, 'fixture must cross the production inline threshold');
85
+ assert.strictEqual(large.patch, null, 'large patch should be referenced by exact chunks instead of prompt inline text');
86
+ assert.strictEqual(large.patchChunked, true);
87
+ assert.strictEqual(large.patchOmitted, false, 'exact chunk evidence must not be represented as omitted');
88
+ assert(large.evidenceBundle.chunkCount > 1, 'large patch should be split into ordered chunks');
89
+ const manifest = largeReader.verifyEvidence(large);
90
+ assert.deepStrictEqual(manifest.chunks.map(chunk => chunk.sequence), manifest.chunks.map((_, index) => index + 1));
91
+ assert(manifest.chunks.every(chunk => chunk.sha256.startsWith('sha256:') && chunk.bytes > 0 && chunk.sourcePaths.includes('src/large.txt')));
92
+ const reconstructed = manifest.chunks.map(chunk => fs.readFileSync(path.join(evidenceRoot, ...chunk.path.split('/')))).join('');
93
+ const exactGitPatch = gitRaw(['diff', '--no-ext-diff', '--binary', '--find-renames', '--unified=3', renameCommit, largeCommit]);
94
+ assert.strictEqual(Buffer.byteLength(reconstructed), Buffer.byteLength(exactGitPatch));
95
+ assert.strictEqual(sha256(reconstructed), large.patchHash, 'ordered chunks must exactly reconstruct the full Git diff hash');
96
+
97
+ const corruptPath = path.join(evidenceRoot, ...manifest.chunks[0].path.split('/'));
98
+ fs.appendFileSync(corruptPath, 'corrupt');
99
+ assert.throws(() => largeReader.verifyEvidence(large), error => error.code === 'EVIDENCE_INTEGRITY_FAILED', 'corrupt chunks must fail with a typed evidence error');
100
+
101
+ const missingRootReader = new TrustedGitReader({ maxPatchBytes: 8 });
102
+ await assert.rejects(missingRootReader.collectEvidence(repo, mergeCommit, { branch: 'main' }), error => error.code === 'EVIDENCE_INTEGRITY_FAILED');
103
+
104
+ console.log('commit-evidence-test PASS');
105
+ })().catch(error => {
106
+ console.error(error.stack || error.message);
107
+ process.exitCode = 1;
108
+ }).finally(() => {
109
+ fs.rmSync(temp, { recursive: true, force: true });
110
+ });
@@ -1,119 +1,119 @@
1
- const assert = require('assert');
2
- const fs = require('fs');
3
- const os = require('os');
4
- const path = require('path');
5
- const { spawnServer } = require('./helpers/spawn-server');
6
- const { StorageLayout } = require('../lib/storage-layout');
7
- const { SettingsStore } = require('../lib/settings-store');
8
- const { ProjectRegistryStore } = require('../lib/project-registry-store');
9
- const { ProjectStore } = require('../lib/project-store');
10
- const { ConversationStore } = require('../lib/conversation-store');
11
- const { localDate } = require('../lib/conversation-query-service');
12
-
13
- const ROOT = path.resolve(__dirname, '..', '..');
14
- const PORT = 8250 + (process.pid % 300);
15
- const BASE = `http://127.0.0.1:${PORT}`;
16
-
17
- async function waitForServer() {
18
- for (let attempt = 0; attempt < 100; attempt += 1) {
19
- try { if ((await fetch(`${BASE}/api/health`)).ok) return; } catch {}
20
- await new Promise(resolve => setTimeout(resolve, 100));
21
- }
22
- throw new Error('server did not start');
23
- }
24
-
25
- (async () => {
26
- const dataDir = fs.mkdtempSync(path.join(os.tmpdir(), 'pk-conversation-api-'));
27
- const layout = new StorageLayout({ dataDir });
28
- const settings = new SettingsStore({ layout });
29
- const registry = new ProjectRegistryStore({ layout });
30
- const projects = new ProjectStore({ layout });
31
- await settings.initialize({ knowledge: { rootPath: path.join(dataDir, 'knowledge') } });
32
- await registry.initialize();
33
- const projectId = 'project-conversation-api';
34
- const repoPath = path.join(dataDir, 'repo');
35
- const knowledgePath = path.join(dataDir, 'knowledge', projectId);
36
- fs.mkdirSync(repoPath, { recursive: true });
37
- fs.mkdirSync(knowledgePath, { recursive: true });
38
- await projects.create(projectId, {
39
- displayName: 'Conversation API', storageName: 'conversation-api', repoPath, knowledgePath,
40
- }, { conversationBaselineCursor: 0, conversation: { lastConsumedCursor: 0, captureStatus: 'captured' } });
41
- await registry.add(projectId, { displayNameSnapshot: 'Conversation API' });
42
- const store = new ConversationStore({ layout, projectStore: projects });
43
- const repoIdentity = { repoId: 'conversation-api-repo' };
44
- const unsafePrompt = '<script>alert("conversation-body")</script> Keep this as plain text.';
45
- async function append(eventId, sequence, turnId, role, content, capturedAt) {
46
- return (await store.appendEvent(projectId, {
47
- eventId, sequence, source: 'codex', eventType: role === 'user' ? 'user_prompt' : 'assistant_response', role, content,
48
- sessionId: 'session-api', turnId, repoIdentity, projectPath: repoPath, branch: 'main', headAtCapture: '0'.repeat(40),
49
- capturedAt, identityConfidence: 'high', captureStatus: 'captured',
50
- })).event;
51
- }
52
- const r1 = await append('r1', 1, 'turn-1', 'user', unsafePrompt, '2026-08-18T01:00:00.000Z');
53
- const a1 = await append('a1', 2, 'turn-1', 'assistant', 'Rendered only as plain assistant text.', '2026-08-18T01:01:00.000Z');
54
- const r2 = await append('r2', 3, 'turn-2', 'user', 'Second prompt.', '2026-08-18T02:00:00.000Z');
1
+ const assert = require('assert');
2
+ const fs = require('fs');
3
+ const os = require('os');
4
+ const path = require('path');
5
+ const { spawnServer } = require('./helpers/spawn-server');
6
+ const { StorageLayout } = require('../lib/storage-layout');
7
+ const { SettingsStore } = require('../lib/settings-store');
8
+ const { ProjectRegistryStore } = require('../lib/project-registry-store');
9
+ const { ProjectStore } = require('../lib/project-store');
10
+ const { ConversationStore } = require('../lib/conversation-store');
11
+ const { localDate } = require('../lib/conversation-query-service');
12
+
13
+ const ROOT = path.resolve(__dirname, '..', '..');
14
+ const PORT = 8250 + (process.pid % 300);
15
+ const BASE = `http://127.0.0.1:${PORT}`;
16
+
17
+ async function waitForServer() {
18
+ for (let attempt = 0; attempt < 100; attempt += 1) {
19
+ try { if ((await fetch(`${BASE}/api/health`)).ok) return; } catch {}
20
+ await new Promise(resolve => setTimeout(resolve, 100));
21
+ }
22
+ throw new Error('server did not start');
23
+ }
24
+
25
+ (async () => {
26
+ const dataDir = fs.mkdtempSync(path.join(os.tmpdir(), 'pk-conversation-api-'));
27
+ const layout = new StorageLayout({ dataDir });
28
+ const settings = new SettingsStore({ layout });
29
+ const registry = new ProjectRegistryStore({ layout });
30
+ const projects = new ProjectStore({ layout });
31
+ await settings.initialize({ knowledge: { rootPath: path.join(dataDir, 'knowledge') } });
32
+ await registry.initialize();
33
+ const projectId = 'project-conversation-api';
34
+ const repoPath = path.join(dataDir, 'repo');
35
+ const knowledgePath = path.join(dataDir, 'knowledge', projectId);
36
+ fs.mkdirSync(repoPath, { recursive: true });
37
+ fs.mkdirSync(knowledgePath, { recursive: true });
38
+ await projects.create(projectId, {
39
+ displayName: 'Conversation API', storageName: 'conversation-api', repoPath, knowledgePath,
40
+ }, { conversationBaselineCursor: 0, conversation: { lastConsumedCursor: 0, captureStatus: 'captured' } });
41
+ await registry.add(projectId, { displayNameSnapshot: 'Conversation API' });
42
+ const store = new ConversationStore({ layout, projectStore: projects });
43
+ const repoIdentity = { repoId: 'conversation-api-repo' };
44
+ const unsafePrompt = '<script>alert("conversation-body")</script> Keep this as plain text.';
45
+ async function append(eventId, sequence, turnId, role, content, capturedAt) {
46
+ return (await store.appendEvent(projectId, {
47
+ eventId, sequence, source: 'codex', eventType: role === 'user' ? 'user_prompt' : 'assistant_response', role, content,
48
+ sessionId: 'session-api', turnId, repoIdentity, projectPath: repoPath, branch: 'main', headAtCapture: '0'.repeat(40),
49
+ capturedAt, identityConfidence: 'high', captureStatus: 'captured',
50
+ })).event;
51
+ }
52
+ const r1 = await append('r1', 1, 'turn-1', 'user', unsafePrompt, '2026-08-18T01:00:00.000Z');
53
+ const a1 = await append('a1', 2, 'turn-1', 'assistant', 'Rendered only as plain assistant text.', '2026-08-18T01:01:00.000Z');
54
+ const r2 = await append('r2', 3, 'turn-2', 'user', 'Second prompt.', '2026-08-18T02:00:00.000Z');
55
55
  const a2 = await append('a2', 4, 'turn-2', 'assistant', 'Second reply.', '2026-08-18T02:01:00.000Z');
56
56
  await append('r3', 5, 'turn-3', 'user', 'Third prompt.', '2026-08-18T03:00:00.000Z');
57
- await append('r4', 6, 'turn-other-date', 'user', 'Other date prompt.', '2026-08-19T03:00:00.000Z');
58
- const projectEvent = event => ({ eventId: event.eventId, sequence: event.sequence, content: event.content, contentHash: event.contentHash, capturedAt: event.capturedAt });
57
+ await append('r4', 6, 'turn-other-date', 'user', 'Other date prompt.', '2026-08-19T03:00:00.000Z');
58
+ const projectEvent = event => ({ eventId: event.eventId, sequence: event.sequence, content: event.content, contentHash: event.contentHash, capturedAt: event.capturedAt });
59
59
  store.writeSnapshot(projectId, {
60
- commitSha: '1'.repeat(40), repoIdentity, parentSha: null, boundaryStartCursor: 0, boundaryEndCursor: 2, status: 'available',
61
- turns: [{ turnId: 'turn-1', source: 'codex', sessionId: 'session-api', bindingKind: 'direct', userEvents: [projectEvent(r1)], assistantEvents: [projectEvent(a1)] }],
60
+ commitSha: '1'.repeat(40), repoIdentity, parentSha: null, boundaryStartCursor: 0, boundaryEndCursor: 2, status: 'available',
61
+ turns: [{ turnId: 'turn-1', source: 'codex', sessionId: 'session-api', bindingKind: 'direct', userEvents: [projectEvent(r1)], assistantEvents: [projectEvent(a1)] }],
62
62
  });
63
63
  store.writeSnapshot(projectId, {
64
64
  commitSha: '3'.repeat(40), repoIdentity, parentSha: '2'.repeat(40), boundaryStartCursor: 5, boundaryEndCursor: 5, status: 'available',
65
65
  turns: [{ turnId: 'turn-2', source: 'codex', sessionId: 'session-api', bindingKind: 'shared-spanning', userEvents: [projectEvent(r2)], assistantEvents: [projectEvent(a2)] }],
66
66
  });
67
- store.writeSnapshot(projectId, {
68
- commitSha: '2'.repeat(40), repoIdentity, parentSha: '1'.repeat(40), boundaryStartCursor: 2, boundaryEndCursor: 4, status: 'available',
69
- turns: [{ turnId: 'turn-2', source: 'codex', sessionId: 'session-api', bindingKind: 'shared-spanning', userEvents: [projectEvent(r2)], assistantEvents: [projectEvent(a2)] }],
70
- });
71
-
72
- const spawned = spawnServer({ root: ROOT, port: PORT, dataDir, tag: 'conversation-api', extraEnv: { KB_SKIP_MIGRATION: '1' } });
73
- try {
74
- await waitForServer();
75
- let response = await fetch(`${BASE}/api/conversations/projects`);
76
- let body = await response.json();
77
- assert.strictEqual(response.status, 200);
78
- assert.deepStrictEqual(body.projects.map(project => project.projectId), [projectId]);
79
- assert.strictEqual(Object.hasOwn(body.projects[0], 'repoPath'), false, 'project picker payload must not expose raw repository paths');
80
-
81
- const date = localDate(r1.capturedAt);
82
- response = await fetch(`${BASE}/api/conversations/turns?projectId=${projectId}&date=${date}&limit=2`);
83
- body = await response.json();
84
- assert.strictEqual(response.status, 200, JSON.stringify(body));
85
- assert.strictEqual(body.turns.length, 2);
86
- assert(body.nextCursor && body.hasMore);
87
- const firstPage = body.turns;
88
- response = await fetch(`${BASE}/api/conversations/turns?projectId=${projectId}&date=${date}&limit=2&cursor=${encodeURIComponent(body.nextCursor)}`);
89
- const secondPage = await response.json();
90
- assert.strictEqual(secondPage.turns.length, 1);
91
- const allTurns = [...firstPage, ...secondPage.turns];
92
- const turn1 = allTurns.find(turn => turn.turnId === 'turn-1');
93
- const turn2 = allTurns.find(turn => turn.turnId === 'turn-2');
94
- const turn3 = allTurns.find(turn => turn.turnId === 'turn-3');
95
- assert.strictEqual(turn1.userPrompt, unsafePrompt, 'conversation body should remain exact business data');
96
- assert.strictEqual(turn1.renderAs, 'plain-text', 'payload must instruct hosts to avoid HTML interpretation');
97
- assert.strictEqual(turn1.annotation.status, 'committed');
98
- assert.strictEqual(turn1.annotation.commits[0].shortSha, '1111111');
67
+ store.writeSnapshot(projectId, {
68
+ commitSha: '2'.repeat(40), repoIdentity, parentSha: '1'.repeat(40), boundaryStartCursor: 2, boundaryEndCursor: 4, status: 'available',
69
+ turns: [{ turnId: 'turn-2', source: 'codex', sessionId: 'session-api', bindingKind: 'shared-spanning', userEvents: [projectEvent(r2)], assistantEvents: [projectEvent(a2)] }],
70
+ });
71
+
72
+ const spawned = spawnServer({ root: ROOT, port: PORT, dataDir, tag: 'conversation-api', extraEnv: { KB_SKIP_MIGRATION: '1' } });
73
+ try {
74
+ await waitForServer();
75
+ let response = await fetch(`${BASE}/api/conversations/projects`);
76
+ let body = await response.json();
77
+ assert.strictEqual(response.status, 200);
78
+ assert.deepStrictEqual(body.projects.map(project => project.projectId), [projectId]);
79
+ assert.strictEqual(Object.hasOwn(body.projects[0], 'repoPath'), false, 'project picker payload must not expose raw repository paths');
80
+
81
+ const date = localDate(r1.capturedAt);
82
+ response = await fetch(`${BASE}/api/conversations/turns?projectId=${projectId}&date=${date}&limit=2`);
83
+ body = await response.json();
84
+ assert.strictEqual(response.status, 200, JSON.stringify(body));
85
+ assert.strictEqual(body.turns.length, 2);
86
+ assert(body.nextCursor && body.hasMore);
87
+ const firstPage = body.turns;
88
+ response = await fetch(`${BASE}/api/conversations/turns?projectId=${projectId}&date=${date}&limit=2&cursor=${encodeURIComponent(body.nextCursor)}`);
89
+ const secondPage = await response.json();
90
+ assert.strictEqual(secondPage.turns.length, 1);
91
+ const allTurns = [...firstPage, ...secondPage.turns];
92
+ const turn1 = allTurns.find(turn => turn.turnId === 'turn-1');
93
+ const turn2 = allTurns.find(turn => turn.turnId === 'turn-2');
94
+ const turn3 = allTurns.find(turn => turn.turnId === 'turn-3');
95
+ assert.strictEqual(turn1.userPrompt, unsafePrompt, 'conversation body should remain exact business data');
96
+ assert.strictEqual(turn1.renderAs, 'plain-text', 'payload must instruct hosts to avoid HTML interpretation');
97
+ assert.strictEqual(turn1.annotation.status, 'committed');
98
+ assert.strictEqual(turn1.annotation.commits[0].shortSha, '1111111');
99
99
  assert.strictEqual(turn2.annotation.status, 'associated');
100
100
  assert.deepStrictEqual(turn2.annotation.commits.map(commit => commit.shortSha), ['2222222'], 'stale shared-spanning annotations after the next user turn are hidden');
101
- assert.strictEqual(turn3.annotation.status, 'uncommitted');
102
- assert(allTurns.every(turn => turn.date === date));
103
-
104
- response = await fetch(`${BASE}/api/conversations/turns?projectId=${projectId}&date=2026-08-19&cursor=${encodeURIComponent(body.nextCursor)}`);
105
- assert.strictEqual(response.status, 409, 'cursor must be bound to one project/date query');
106
- response = await fetch(`${BASE}/api/conversations/sessions?projectId=${projectId}`);
107
- assert.strictEqual(response.status, 404, 'default product API must not expose source/session diagnostic routes');
108
-
109
- response = await fetch(`${BASE}/api/logs/export`);
110
- const exportedLogs = await response.text();
111
- assert(!exportedLogs.includes('conversation-body'), 'conversation content must never leak into structured logs or export');
112
- console.log('conversation-api-test PASS');
113
- } finally {
114
- await spawned.cleanup();
115
- }
116
- })().catch(error => {
117
- console.error(error.stack || error.message);
118
- process.exitCode = 1;
119
- });
101
+ assert.strictEqual(turn3.annotation.status, 'uncommitted');
102
+ assert(allTurns.every(turn => turn.date === date));
103
+
104
+ response = await fetch(`${BASE}/api/conversations/turns?projectId=${projectId}&date=2026-08-19&cursor=${encodeURIComponent(body.nextCursor)}`);
105
+ assert.strictEqual(response.status, 409, 'cursor must be bound to one project/date query');
106
+ response = await fetch(`${BASE}/api/conversations/sessions?projectId=${projectId}`);
107
+ assert.strictEqual(response.status, 404, 'default product API must not expose source/session diagnostic routes');
108
+
109
+ response = await fetch(`${BASE}/api/logs/export`);
110
+ const exportedLogs = await response.text();
111
+ assert(!exportedLogs.includes('conversation-body'), 'conversation content must never leak into structured logs or export');
112
+ console.log('conversation-api-test PASS');
113
+ } finally {
114
+ await spawned.cleanup();
115
+ }
116
+ })().catch(error => {
117
+ console.error(error.stack || error.message);
118
+ process.exitCode = 1;
119
+ });