@sanqianx/project-knowledge 4.7.0 → 5.0.0

package/_site/_test/fresh-product-data-test.js

@@ -0,0 +1,42 @@
+const assert = require('assert/strict');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { initializeProductData, DATA_SCHEMA } = require('../lib/product-data');
+const { resolveDataDirPath } = require('../lib/data-dir');
+const { connectEngine } = require('../lib/engine-connection');
+
+(async () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'kb-fresh-product-'));
+  assert.equal(resolveDataDirPath({ dataDir: '', homeDir: root }), path.join(root, '.project-knowledge-v5'));
+  const old = path.join(root, 'old'); fs.mkdirSync(old);
+  const bytes = JSON.stringify({ projects: ['old-project'], activeClaim: 'old-claim' });
+  fs.writeFileSync(path.join(old, 'projects.json'), bytes);
+  assert.throws(() => initializeProductData(old), { code: 'SCHEMA_UNSUPPORTED' });
+  assert.equal(fs.readFileSync(path.join(old, 'projects.json'), 'utf8'), bytes);
+  const fresh = path.join(root, 'fresh'); initializeProductData(fresh); initializeProductData(fresh);
+  assert.equal(JSON.parse(fs.readFileSync(path.join(fresh, 'product-data.json'))).schema, DATA_SCHEMA);
+  const paths = [];
+  let activationStatus = 403;
+  const logs = [];
+  const runtime = {
+    analysisOwner: 'engine', registryStore: { listIds: () => [] }, logger: { warn: async (...args) => logs.push(args) },
+    moduleBridge: { engineUrl: 'http://engine.invalid', runtimeToken: 'private-local-token', syncEngineConfiguration: async () => {}, _fetch: async url => {
+      paths.push(url);
+      if (url.endsWith('/api/health')) return { ok: true, status: 200, json: async () => ({ name: 'knowledge-engine', version: '0.2.0', dataSchemaVersion: 3 }) };
+      if (url.endsWith('/api/runtime-auth')) return { ok: true, status: 200 };
+      return { ok: activationStatus === 200, status: activationStatus };
+    } },
+  };
+  await connectEngine(runtime);
+  assert.equal(runtime.ownership.ready, false);
+  assert.equal(runtime.ownership.error.code, 'RUNTIME_AUTH_REQUIRED');
+  assert.equal(runtime.ownership.error.step, 'engine-activation');
+  assert.ok(!JSON.stringify(logs).includes('private-local-token'));
+  assert.ok(paths.every(url => !url.includes('migrate')));
+  await connectEngine(runtime);
+  assert.equal(logs.length, 1, 'identical connection failures are not repeatedly logged');
+  activationStatus = 200; await connectEngine(runtime);
+  assert.deepEqual(runtime.ownership, { owner: 'engine', ready: true });
+  console.log('PASS fresh data isolation, legacy rejection, precise connection failure, recovery without migration');
+})().catch(error => { console.error(error); process.exitCode = 1; });

package/_site/_test/full-integration-e2e-test.js

@@ -1,165 +1,165 @@
-const assert = require('assert');
-const fs = require('fs');
-const os = require('os');
-const path = require('path');
-const { spawnSync } = require('child_process');
-const { spawnServer } = require('./helpers/spawn-server');
-const { StorageLayout } = require('../lib/storage-layout');
-const { ProjectRegistryStore } = require('../lib/project-registry-store');
-const { ProjectStore } = require('../lib/project-store');
-const { RequirementRecorder } = require('../lib/requirement-recorder');
-
-const ROOT = path.resolve(__dirname, '..', '..');
-const PORT = Number(process.env.KB_FULL_E2E_PORT || 7942);
-const BASE_URL = `http://127.0.0.1:${PORT}`;
-const TEMP = fs.mkdtempSync(path.join(os.tmpdir(), `project-knowledge-e2e-${process.pid}-`));
-const DATA_DIR = path.join(TEMP, 'data');
-const REPO = path.join(TEMP, 'repo with 空格');
-const PROJECT_ID = 'project-full-e2e';
-// Git commits fire the managed hook -> hook-trigger -> Bridge journal.
-// Keep that journal inside the test sandbox, never the developer's home.
-const BRIDGE_HOME = path.join(TEMP, 'bridge-home');
-
-function git(args, allowFailure = false) {
-  const result = spawnSync('git', ['-C', REPO, ...args], {
-    encoding: 'utf8', windowsHide: true,
-    env: { ...process.env, KB_DATA_DIR: DATA_DIR, KB_SITE_PORT: String(PORT), AI_CODING_EVENT_BRIDGE_HOME: BRIDGE_HOME },
-  });
-  if (!allowFailure) assert.strictEqual(result.status, 0, result.stderr || result.stdout);
-  return { status: result.status, stdout: String(result.stdout || '').trim(), stderr: String(result.stderr || '').trim() };
-}
-
-function commit(name, content) {
-  fs.writeFileSync(path.join(REPO, `${name}.txt`), `${content}\n`, 'utf8');
-  git(['add', `${name}.txt`]);
-  git(['commit', '-m', name]);
-  return git(['rev-parse', 'HEAD']).stdout;
-}
-
-async function json(method, route, body) {
-  const response = await fetch(`${BASE_URL}${route}`, {
-    method,
-    headers: body ? { 'Content-Type': 'application/json' } : undefined,
-    body: body ? JSON.stringify(body) : undefined,
-  });
-  const text = await response.text();
-  return { response, body: text ? JSON.parse(text) : {} };
-}
-
-async function start() {
-  const spawned = spawnServer({
-    root: ROOT, port: PORT, dataDir: DATA_DIR, tag: 'full-e2e',
-    extraEnv: {
-      KB_AUTOMATION_FAKE_CLAUDE: '1', KB_EMBEDDING_FAKE: '1', KB_MAINTENANCE_INTERVAL_MS: '600000',
-      AI_CODING_EVENT_BRIDGE_HOME: BRIDGE_HOME,
-    },
-  });
-  let output = '';
-  spawned.child.stdout.on('data', chunk => { output += chunk; });
-  spawned.child.stderr.on('data', chunk => { output += chunk; });
-  for (let attempt = 0; attempt < 150; attempt += 1) {
-    try { if ((await fetch(`${BASE_URL}/api/health`)).ok) return { ...spawned, output: () => output }; } catch {}
-    if (spawned.child.exitCode != null) throw new Error(`server exited during startup (${spawned.child.exitCode})\n${output}`);
-    await new Promise(resolve => setTimeout(resolve, 100));
-  }
-  throw new Error(`server did not start\n${output}`);
-}
-
-async function stop(spawned) {
-  if (!spawned || spawned.child.exitCode != null) return;
-  const exited = new Promise(resolve => spawned.child.once('exit', resolve));
-  spawned.child.kill();
-  await Promise.race([exited, new Promise(resolve => setTimeout(resolve, 5000))]);
-}
-
-async function waitForState(predicate, label) {
-  let last;
-  for (let attempt = 0; attempt < 250; attempt += 1) {
-    const result = await json('GET', `/api/projects/${PROJECT_ID}`);
-    if (result.response.ok) {
-      last = result.body.project.state;
-      if (predicate(last)) return last;
-    }
-    await new Promise(resolve => setTimeout(resolve, 100));
-  }
-  throw new Error(`${label} timed out: ${JSON.stringify(last)}`);
-}
-
-(async () => {
-  let server;
-  fs.mkdirSync(REPO, { recursive: true });
-  git(['init', '--initial-branch=main']);
-  git(['config', 'user.name', 'Full E2E']);
-  git(['config', 'user.email', 'e2e@example.test']);
-  commit('baseline', 'baseline before import');
-  try {
-    server = await start();
-    let result = await json('PATCH', '/api/settings', { knowledge: { rootPath: path.join(TEMP, '用户知识') } });
-    assert(result.response.ok, JSON.stringify(result.body));
-    result = await json('PUT', '/api/ai-profiles', {
-      schema: 'ai-profiles/v1',
-      defaultProfileId: 'fake-profile',
-      profiles: [{ id: 'fake-profile', name: 'Fake', enabled: true, vendor: 'anthropic', model: 'fake', apiKeyUpdate: { mode: 'replace', value: 'fake-key-for-test' } }],
-    });
-    assert(result.response.ok, JSON.stringify(result.body));
-    result = await json('POST', '/api/projects/import', {
-      projectId: PROJECT_ID, localPath: REPO, displayName: 'Full E2E', aiProfileId: 'fake-profile', knowledgeLanguage: 'en-US',
-    });
-    assert.strictEqual(result.response.status, 201, `${JSON.stringify(result.body)}\n${server.output()}`);
-    const knowledgePath = result.body.config.knowledgePath;
-    assert.deepStrictEqual(fs.readdirSync(knowledgePath), [], 'import must not run AI or generate knowledge');
-    assert.strictEqual(result.body.state.lastAnalyzedCommit, null);
-    assert.strictEqual(result.body.project.state.hook.managedVersion, 2);
-
-    const layout = new StorageLayout({ dataDir: DATA_DIR });
-    const recorder = new RequirementRecorder({
-      layout,
-      registryStore: new ProjectRegistryStore({ layout }),
-      projectStore: new ProjectStore({ layout }),
-    });
-    const requirement = await recorder.recordRequirement({
-      projectId: PROJECT_ID, repoPath: REPO, client: 'codex', sessionId: 'full-e2e-session',
-      text: 'Record the actual post-commit behavior and keep Markdown as the source of truth.',
-    });
-    assert(requirement.id && fs.existsSync(layout.getProjectConversationEventsPath(PROJECT_ID)));
-    assert.strictEqual(fs.existsSync(layout.getProjectRequirementsPath(PROJECT_ID)), false);
-
-    const onlineCommit = commit('online-change', 'online hook evidence');
-    let state = await waitForState(current => current.lastAnalyzedCommit === onlineCommit && current.index.dirty === false, 'online Hook reconciliation');
-    assert.strictEqual(state.analysis.activeClaim, null);
-    assert(fs.existsSync(path.join(knowledgePath, 'changes', `${onlineCommit.slice(0, 12)}.md`)));
-    result = await json('POST', '/api/knowledge/search', { projectId: PROJECT_ID, query: onlineCommit.slice(0, 12), limit: 5 });
-    assert(result.response.ok && result.body.results.length > 0, JSON.stringify(result.body));
-
-    result = await json('GET', `/api/logs?projectId=${PROJECT_ID}&pageSize=500`);
-    const onlineEvents = result.body.entries.map(entry => entry.event);
-    for (const event of ['reconcile.claim_prepared', 'knowledge.promotion_completed', 'reconcile.commit_completed', 'index.project_applied']) {
-      assert(onlineEvents.includes(event), `missing online operation event: ${event}`);
-    }
-    assert.strictEqual(result.body.entries.filter(entry => entry.event === 'reconcile.claim_prepared' && entry.commitSha === onlineCommit).length, 1, 'Hook/startup overlap must not duplicate one Commit');
-
-    await stop(server);
-    server = null;
-    const offlineOne = commit('offline-one', 'first offline change');
-    const offlineTwo = commit('offline-two', 'second offline change');
-    assert.notStrictEqual(offlineOne, offlineTwo);
-    server = await start();
-    await new Promise(resolve => setTimeout(resolve, 500));
-    result = await json('GET', `/api/projects/${PROJECT_ID}`);
-    state = result.body.project.state;
-    assert.strictEqual(state.lastAnalyzedCommit, onlineCommit, 'restart must not analyze offline commits');
-    assert.strictEqual(fs.existsSync(path.join(knowledgePath, 'changes', `${offlineOne.slice(0, 12)}.md`)), false);
-    assert.strictEqual(fs.existsSync(path.join(knowledgePath, 'changes', `${offlineTwo.slice(0, 12)}.md`)), false);
-    const onlineAfterRestart = commit('online-after-restart', 'explicit hook after offline commits');
-    state = await waitForState(current => current.lastAnalyzedCommit === onlineAfterRestart && current.index.dirty === false, 'explicit online Hook after restart');
-    assert.strictEqual(state.analysis.activeClaim, null);
-    assert(fs.existsSync(path.join(knowledgePath, 'changes', `${onlineAfterRestart.slice(0, 12)}.md`)));
-    result = await json('GET', `/api/logs?projectId=${PROJECT_ID}&pageSize=500`);
-    assert.strictEqual(result.body.entries.filter(entry => entry.event === 'reconcile.commit_completed' && entry.commitSha === offlineOne).length, 0);
-    assert.strictEqual(result.body.entries.filter(entry => entry.event === 'reconcile.commit_completed' && entry.commitSha === offlineTwo).length, 0);
-    assert.strictEqual(result.body.entries.filter(entry => entry.event === 'reconcile.commit_completed' && entry.commitSha === onlineAfterRestart).length, 1);
-    console.log('full-integration-e2e-test PASS');
-  } finally {
-    await stop(server);
-  }
-})().catch(error => { console.error(error.stack || error); process.exitCode = 1; });
+const assert = require('assert');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { spawnSync } = require('child_process');
+const { spawnServer } = require('./helpers/spawn-server');
+const { StorageLayout } = require('../lib/storage-layout');
+const { ProjectRegistryStore } = require('../lib/project-registry-store');
+const { ProjectStore } = require('../lib/project-store');
+const { RequirementRecorder } = require('../lib/requirement-recorder');
+
+const ROOT = path.resolve(__dirname, '..', '..');
+const PORT = Number(process.env.KB_FULL_E2E_PORT || 7942);
+const BASE_URL = `http://127.0.0.1:${PORT}`;
+const TEMP = fs.mkdtempSync(path.join(os.tmpdir(), `project-knowledge-e2e-${process.pid}-`));
+const DATA_DIR = path.join(TEMP, 'data');
+const REPO = path.join(TEMP, 'repo with 空格');
+const PROJECT_ID = 'project-full-e2e';
+// Git commits fire the managed hook -> hook-trigger -> Bridge journal.
+// Keep that journal inside the test sandbox, never the developer's home.
+const BRIDGE_HOME = path.join(TEMP, 'bridge-home');
+
+function git(args, allowFailure = false) {
+  const result = spawnSync('git', ['-C', REPO, ...args], {
+    encoding: 'utf8', windowsHide: true,
+    env: { ...process.env, KB_DATA_DIR: DATA_DIR, KB_SITE_PORT: String(PORT), AI_CODING_EVENT_BRIDGE_HOME: BRIDGE_HOME },
+  });
+  if (!allowFailure) assert.strictEqual(result.status, 0, result.stderr || result.stdout);
+  return { status: result.status, stdout: String(result.stdout || '').trim(), stderr: String(result.stderr || '').trim() };
+}
+
+function commit(name, content) {
+  fs.writeFileSync(path.join(REPO, `${name}.txt`), `${content}\n`, 'utf8');
+  git(['add', `${name}.txt`]);
+  git(['commit', '-m', name]);
+  return git(['rev-parse', 'HEAD']).stdout;
+}
+
+async function json(method, route, body) {
+  const response = await fetch(`${BASE_URL}${route}`, {
+    method,
+    headers: body ? { 'Content-Type': 'application/json' } : undefined,
+    body: body ? JSON.stringify(body) : undefined,
+  });
+  const text = await response.text();
+  return { response, body: text ? JSON.parse(text) : {} };
+}
+
+async function start() {
+  const spawned = spawnServer({
+    root: ROOT, port: PORT, dataDir: DATA_DIR, tag: 'full-e2e',
+    extraEnv: {
+      KB_AUTOMATION_FAKE_CLAUDE: '1', KB_EMBEDDING_FAKE: '1', KB_MAINTENANCE_INTERVAL_MS: '600000',
+      AI_CODING_EVENT_BRIDGE_HOME: BRIDGE_HOME,
+    },
+  });
+  let output = '';
+  spawned.child.stdout.on('data', chunk => { output += chunk; });
+  spawned.child.stderr.on('data', chunk => { output += chunk; });
+  for (let attempt = 0; attempt < 150; attempt += 1) {
+    try { if ((await fetch(`${BASE_URL}/api/health`)).ok) return { ...spawned, output: () => output }; } catch {}
+    if (spawned.child.exitCode != null) throw new Error(`server exited during startup (${spawned.child.exitCode})\n${output}`);
+    await new Promise(resolve => setTimeout(resolve, 100));
+  }
+  throw new Error(`server did not start\n${output}`);
+}
+
+async function stop(spawned) {
+  if (!spawned || spawned.child.exitCode != null) return;
+  const exited = new Promise(resolve => spawned.child.once('exit', resolve));
+  spawned.child.kill();
+  await Promise.race([exited, new Promise(resolve => setTimeout(resolve, 5000))]);
+}
+
+async function waitForState(predicate, label) {
+  let last;
+  for (let attempt = 0; attempt < 250; attempt += 1) {
+    const result = await json('GET', `/api/projects/${PROJECT_ID}`);
+    if (result.response.ok) {
+      last = result.body.project.state;
+      if (predicate(last)) return last;
+    }
+    await new Promise(resolve => setTimeout(resolve, 100));
+  }
+  throw new Error(`${label} timed out: ${JSON.stringify(last)}`);
+}
+
+(async () => {
+  let server;
+  fs.mkdirSync(REPO, { recursive: true });
+  git(['init', '--initial-branch=main']);
+  git(['config', 'user.name', 'Full E2E']);
+  git(['config', 'user.email', 'e2e@example.test']);
+  commit('baseline', 'baseline before import');
+  try {
+    server = await start();
+    let result = await json('PATCH', '/api/settings', { knowledge: { rootPath: path.join(TEMP, '用户知识') } });
+    assert(result.response.ok, JSON.stringify(result.body));
+    result = await json('PUT', '/api/ai-profiles', {
+      schema: 'ai-profiles/v1',
+      defaultProfileId: 'fake-profile',
+      profiles: [{ id: 'fake-profile', name: 'Fake', enabled: true, vendor: 'anthropic', model: 'fake', apiKeyUpdate: { mode: 'replace', value: 'fake-key-for-test' } }],
+    });
+    assert(result.response.ok, JSON.stringify(result.body));
+    result = await json('POST', '/api/projects/import', {
+      projectId: PROJECT_ID, localPath: REPO, displayName: 'Full E2E', aiProfileId: 'fake-profile', knowledgeLanguage: 'en-US',
+    });
+    assert.strictEqual(result.response.status, 201, `${JSON.stringify(result.body)}\n${server.output()}`);
+    const knowledgePath = result.body.config.knowledgePath;
+    assert.deepStrictEqual(fs.readdirSync(knowledgePath), [], 'import must not run AI or generate knowledge');
+    assert.strictEqual(result.body.state.lastAnalyzedCommit, null);
+    assert.strictEqual(result.body.project.state.hook.managedVersion, 2);
+
+    const layout = new StorageLayout({ dataDir: DATA_DIR });
+    const recorder = new RequirementRecorder({
+      layout,
+      registryStore: new ProjectRegistryStore({ layout }),
+      projectStore: new ProjectStore({ layout }),
+    });
+    const requirement = await recorder.recordRequirement({
+      projectId: PROJECT_ID, repoPath: REPO, client: 'codex', sessionId: 'full-e2e-session',
+      text: 'Record the actual post-commit behavior and keep Markdown as the source of truth.',
+    });
+    assert(requirement.id && fs.existsSync(layout.getProjectConversationEventsPath(PROJECT_ID)));
+    assert.strictEqual(fs.existsSync(layout.getProjectRequirementsPath(PROJECT_ID)), false);
+
+    const onlineCommit = commit('online-change', 'online hook evidence');
+    let state = await waitForState(current => current.lastAnalyzedCommit === onlineCommit && current.index.dirty === false, 'online Hook reconciliation');
+    assert.strictEqual(state.analysis.activeClaim, null);
+    assert(fs.existsSync(path.join(knowledgePath, 'changes', `${onlineCommit.slice(0, 12)}.md`)));
+    result = await json('POST', '/api/knowledge/search', { projectId: PROJECT_ID, query: onlineCommit.slice(0, 12), limit: 5 });
+    assert(result.response.ok && result.body.results.length > 0, JSON.stringify(result.body));
+
+    result = await json('GET', `/api/logs?projectId=${PROJECT_ID}&pageSize=500`);
+    const onlineEvents = result.body.entries.map(entry => entry.event);
+    for (const event of ['reconcile.claim_prepared', 'knowledge.promotion_completed', 'reconcile.commit_completed', 'index.project_applied']) {
+      assert(onlineEvents.includes(event), `missing online operation event: ${event}`);
+    }
+    assert.strictEqual(result.body.entries.filter(entry => entry.event === 'reconcile.claim_prepared' && entry.commitSha === onlineCommit).length, 1, 'Hook/startup overlap must not duplicate one Commit');
+
+    await stop(server);
+    server = null;
+    const offlineOne = commit('offline-one', 'first offline change');
+    const offlineTwo = commit('offline-two', 'second offline change');
+    assert.notStrictEqual(offlineOne, offlineTwo);
+    server = await start();
+    await new Promise(resolve => setTimeout(resolve, 500));
+    result = await json('GET', `/api/projects/${PROJECT_ID}`);
+    state = result.body.project.state;
+    assert.strictEqual(state.lastAnalyzedCommit, onlineCommit, 'restart must not analyze offline commits');
+    assert.strictEqual(fs.existsSync(path.join(knowledgePath, 'changes', `${offlineOne.slice(0, 12)}.md`)), false);
+    assert.strictEqual(fs.existsSync(path.join(knowledgePath, 'changes', `${offlineTwo.slice(0, 12)}.md`)), false);
+    const onlineAfterRestart = commit('online-after-restart', 'explicit hook after offline commits');
+    state = await waitForState(current => current.lastAnalyzedCommit === onlineAfterRestart && current.index.dirty === false, 'explicit online Hook after restart');
+    assert.strictEqual(state.analysis.activeClaim, null);
+    assert(fs.existsSync(path.join(knowledgePath, 'changes', `${onlineAfterRestart.slice(0, 12)}.md`)));
+    result = await json('GET', `/api/logs?projectId=${PROJECT_ID}&pageSize=500`);
+    assert.strictEqual(result.body.entries.filter(entry => entry.event === 'reconcile.commit_completed' && entry.commitSha === offlineOne).length, 0);
+    assert.strictEqual(result.body.entries.filter(entry => entry.event === 'reconcile.commit_completed' && entry.commitSha === offlineTwo).length, 0);
+    assert.strictEqual(result.body.entries.filter(entry => entry.event === 'reconcile.commit_completed' && entry.commitSha === onlineAfterRestart).length, 1);
+    console.log('full-integration-e2e-test PASS');
+  } finally {
+    await stop(server);
+  }
+})().catch(error => { console.error(error.stack || error); process.exitCode = 1; });

package/_site/_test/git-validation-test.js

@@ -32,7 +32,7 @@ async function json(method, route, body) {
 
 (async () => {
   const repo = makeRepo({ kind: 'one-commit' });
-  const spawned = spawnServer({ root: ROOT, port: PORT, dataDir: DATA_DIR, tag: 'git-validation' });
+  const spawned = spawnServer({ root: ROOT, port: PORT, dataDir: DATA_DIR, tag: 'git-validation', extraEnv: { KB_AUTOMATION_FAKE_CLAUDE: '1' } });
   let output = '';
   spawned.child.stdout.on('data', chunk => { output += chunk; });
   spawned.child.stderr.on('data', chunk => { output += chunk; });
@@ -75,7 +75,7 @@ async function json(method, route, body) {
     if (output) process.stderr.write(output);
     throw error;
   } finally {
-    spawned.child.kill();
+    await spawned.cleanup();
     repo.cleanup();
   }
 })().catch(error => { console.error(error); process.exitCode = 1; });

package/_site/_test/hook-runtime-endpoint-test.js

@@ -1,88 +1,88 @@
-// Run: node _site/_test/hook-runtime-endpoint-test.js
-
-const fs = require('fs');
-const http = require('http');
-const os = require('os');
-const path = require('path');
-const { spawn, spawnSync } = require('child_process');
-const { writeEndpoint } = require('../lib/runtime-endpoint');
-
-const ROOT = path.resolve(__dirname, '..', '..');
-const TRIGGER = path.join(ROOT, '_site', 'scripts', 'hook-trigger.js');
-const dataDir = fs.mkdtempSync(path.join(os.tmpdir(), `kb-hook-runtime-${process.pid}-`));
-const repo = fs.mkdtempSync(path.join(os.tmpdir(), `kb-hook-runtime-repo-${process.pid}-`));
-
-function assert(condition, message) {
-  if (!condition) throw new Error(message);
-}
-
-function git(args) {
-  return spawnSync('git', ['-C', repo, ...args], { encoding: 'utf-8', windowsHide: true });
-}
-
-(async () => {
-  git(['init']);
-  fs.writeFileSync(path.join(repo, 'README.md'), '# runtime endpoint\n', 'utf-8');
-  git(['config', 'user.email', 'runtime@example.test']);
-  git(['config', 'user.name', 'Runtime Test']);
-  git(['add', 'README.md']);
-  git(['commit', '-m', 'test']);
-
-  let received = null;
-  const server = http.createServer((req, res) => {
-    let body = '';
-    req.setEncoding('utf-8');
-    req.on('data', chunk => { body += chunk; });
-    req.on('end', () => {
-      received = { method: req.method, url: req.url, body: JSON.parse(body) };
-      res.writeHead(200, { 'Content-Type': 'application/json' });
-      res.end('{}');
-    });
-  });
-  await new Promise((resolve, reject) => {
-    server.once('error', reject);
-    server.listen(0, '127.0.0.1', resolve);
-  });
-  const port = server.address().port;
-  writeEndpoint(dataDir, { pid: process.pid, host: '127.0.0.1', port, mode: 'desktop' });
-  const bridgeJournal = path.join(dataDir, 'bridge-journal.jsonl');
-  const bridgeModule = path.join(dataDir, 'bridge-fixture.cjs');
-  fs.writeFileSync(bridgeModule, `const fs = require('fs');\nmodule.exports = {\n  appendCommitBoundary(input) {\n    fs.appendFileSync(process.env.BRIDGE_TEST_JOURNAL, JSON.stringify(input) + '\\n');\n    return { sequence: 17, bridgeCursorAtCommit: 17, openTurnIdsAtCommit: ['turn-runtime'] };\n  }\n};\n`);
-
-  const child = spawn(process.execPath, [
-    TRIGGER,
-    '--project-id', 'project-runtime',
-    '--repo-root', repo,
-    '--host', '127.0.0.1',
-    '--port', '1',
-  ], {
-    cwd: ROOT,
-    windowsHide: true,
-    stdio: 'pipe',
-    env: { ...process.env, KB_DATA_DIR: dataDir, AI_CODING_EVENT_BRIDGE_MODULE: bridgeModule, BRIDGE_TEST_JOURNAL: bridgeJournal },
-  });
-  const exitCode = await new Promise(resolve => child.once('exit', resolve));
-  assert(exitCode === 0, `hook trigger should exit 0, got ${exitCode}`);
-  assert(received, 'hook trigger should use the live runtime endpoint instead of fallback port 1');
-  assert(received.method === 'POST' && received.url === '/api/hooks/post-commit', 'unexpected hook request');
-  assert(received.body.schema === 'hook-event/v2', 'hook request should use the v2 event schema');
-  assert(received.body.projectId === 'project-runtime', 'hook request should contain the stable project id');
-  assert(path.resolve(received.body.repoRoot) === path.resolve(repo), 'hook request should contain the runtime repo root');
-  assert(received.body.head, 'hook request should contain the current head');
-  assert(received.body.branch, 'hook request should contain the current branch');
-  assert(received.body.operationId && received.body.operationId.startsWith('op-'), 'Hook boundary operation id should propagate to notification');
-  assert(received.body.boundary && received.body.boundary.status === 'captured', 'Hook must append the Bridge boundary before notifying the server');
-  assert(received.body.boundary.boundary.bridgeCursorAtCommit === 17, 'Hook must forward the atomic Bridge cursor receipt');
-  const durableBoundary = JSON.parse(fs.readFileSync(bridgeJournal, 'utf8').trim());
-  assert(durableBoundary.commitSha === received.body.head, 'durable Bridge boundary and Hook payload must reference the same commit');
-
-  await new Promise(resolve => server.close(resolve));
-  fs.rmSync(dataDir, { recursive: true, force: true });
-  fs.rmSync(repo, { recursive: true, force: true });
-  console.log('hook-runtime-endpoint-test PASS');
-})().catch(error => {
-  console.error(error && error.stack || error);
-  fs.rmSync(dataDir, { recursive: true, force: true });
-  fs.rmSync(repo, { recursive: true, force: true });
-  process.exit(1);
-});
+// Run: node _site/_test/hook-runtime-endpoint-test.js
+
+const fs = require('fs');
+const http = require('http');
+const os = require('os');
+const path = require('path');
+const { spawn, spawnSync } = require('child_process');
+const { writeEndpoint } = require('../lib/runtime-endpoint');
+
+const ROOT = path.resolve(__dirname, '..', '..');
+const TRIGGER = path.join(ROOT, '_site', 'scripts', 'hook-trigger.js');
+const dataDir = fs.mkdtempSync(path.join(os.tmpdir(), `kb-hook-runtime-${process.pid}-`));
+const repo = fs.mkdtempSync(path.join(os.tmpdir(), `kb-hook-runtime-repo-${process.pid}-`));
+
+function assert(condition, message) {
+  if (!condition) throw new Error(message);
+}
+
+function git(args) {
+  return spawnSync('git', ['-C', repo, ...args], { encoding: 'utf-8', windowsHide: true });
+}
+
+(async () => {
+  git(['init']);
+  fs.writeFileSync(path.join(repo, 'README.md'), '# runtime endpoint\n', 'utf-8');
+  git(['config', 'user.email', 'runtime@example.test']);
+  git(['config', 'user.name', 'Runtime Test']);
+  git(['add', 'README.md']);
+  git(['commit', '-m', 'test']);
+
+  let received = null;
+  const server = http.createServer((req, res) => {
+    let body = '';
+    req.setEncoding('utf-8');
+    req.on('data', chunk => { body += chunk; });
+    req.on('end', () => {
+      received = { method: req.method, url: req.url, body: JSON.parse(body) };
+      res.writeHead(200, { 'Content-Type': 'application/json' });
+      res.end('{}');
+    });
+  });
+  await new Promise((resolve, reject) => {
+    server.once('error', reject);
+    server.listen(0, '127.0.0.1', resolve);
+  });
+  const port = server.address().port;
+  writeEndpoint(dataDir, { pid: process.pid, host: '127.0.0.1', port, mode: 'desktop' });
+  const bridgeJournal = path.join(dataDir, 'bridge-journal.jsonl');
+  const bridgeModule = path.join(dataDir, 'bridge-fixture.cjs');
+  fs.writeFileSync(bridgeModule, `const fs = require('fs');\nmodule.exports = {\n  appendCommitBoundary(input) {\n    fs.appendFileSync(process.env.BRIDGE_TEST_JOURNAL, JSON.stringify(input) + '\\n');\n    return { sequence: 17, bridgeCursorAtCommit: 17, openTurnIdsAtCommit: ['turn-runtime'] };\n  }\n};\n`);
+
+  const child = spawn(process.execPath, [
+    TRIGGER,
+    '--project-id', 'project-runtime',
+    '--repo-root', repo,
+    '--host', '127.0.0.1',
+    '--port', '1',
+  ], {
+    cwd: ROOT,
+    windowsHide: true,
+    stdio: 'pipe',
+    env: { ...process.env, KB_DATA_DIR: dataDir, AI_CODING_EVENT_BRIDGE_MODULE: bridgeModule, BRIDGE_TEST_JOURNAL: bridgeJournal },
+  });
+  const exitCode = await new Promise(resolve => child.once('exit', resolve));
+  assert(exitCode === 0, `hook trigger should exit 0, got ${exitCode}`);
+  assert(received, 'hook trigger should use the live runtime endpoint instead of fallback port 1');
+  assert(received.method === 'POST' && received.url === '/api/hooks/post-commit', 'unexpected hook request');
+  assert(received.body.schema === 'hook-event/v2', 'hook request should use the v2 event schema');
+  assert(received.body.projectId === 'project-runtime', 'hook request should contain the stable project id');
+  assert(path.resolve(received.body.repoRoot) === path.resolve(repo), 'hook request should contain the runtime repo root');
+  assert(received.body.head, 'hook request should contain the current head');
+  assert(received.body.branch, 'hook request should contain the current branch');
+  assert(received.body.operationId && received.body.operationId.startsWith('op-'), 'Hook boundary operation id should propagate to notification');
+  assert(received.body.boundary && received.body.boundary.status === 'captured', 'Hook must append the Bridge boundary before notifying the server');
+  assert(received.body.boundary.boundary.bridgeCursorAtCommit === 17, 'Hook must forward the atomic Bridge cursor receipt');
+  const durableBoundary = JSON.parse(fs.readFileSync(bridgeJournal, 'utf8').trim());
+  assert(durableBoundary.commitSha === received.body.head, 'durable Bridge boundary and Hook payload must reference the same commit');
+
+  await new Promise(resolve => server.close(resolve));
+  fs.rmSync(dataDir, { recursive: true, force: true });
+  fs.rmSync(repo, { recursive: true, force: true });
+  console.log('hook-runtime-endpoint-test PASS');
+})().catch(error => {
+  console.error(error && error.stack || error);
+  fs.rmSync(dataDir, { recursive: true, force: true });
+  fs.rmSync(repo, { recursive: true, force: true });
+  process.exit(1);
+});